$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: UjVuNlGxCSjzvx3VaeI2t0uHW9uL7QS95PLTOXyu17Q= Subject key identifier: 42:97:1B:54:46:CD:C9:AC:2E:00:A8:71:FA:46:5D:A0:6E:4E:36:87 Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 28CCFE3064C86AC59E5F75B27C08D68A772A7FF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: D4 Signing time: Thu 21 Aug 2025 09:40:44 +0000 Manifest this update: Thu 21 Aug 2025 09:35:44 +0000 Manifest next update: Sun 24 Aug 2025 09:43:44 +0000 Files and hashes: 1: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) 2: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) 3: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: EjpLXryjsQXTNEbOA5eXd5tF1OOyV65Z608ytwFr5Wg=) 4: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 5: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) 6: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 09:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cc:fe:30:64:c8:6a:c5:9e:5f:75:b2:7c:08:d6:8a:77:2a:7f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Aug 21 09:35:44 2025 GMT Not After : Aug 24 09:43:44 2025 GMT Subject: CN=42971B5446CDC9AC2E00A871FA465DA06E4E3687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:34:8c:87:f8:9c:a0:c7:da:6f:9b:c1:53: f1:d9:62:90:73:a5:ac:a4:ff:db:50:2f:45:45:81: 55:22:7f:65:a5:f5:28:19:4e:65:51:75:95:1e:7e: 8f:2f:c9:1b:bc:66:14:8a:e0:fc:3e:e3:d8:fa:7d: 11:23:74:f8:8c:d8:c5:dd:65:ad:4b:b3:3e:b5:40: 0b:ae:71:b7:d1:a8:90:07:5f:05:9f:ab:bd:68:72: da:9b:f3:e4:88:32:51:8e:9d:1e:1d:26:a9:e8:61: f3:74:d1:6e:00:f6:a7:bf:74:bc:1b:f8:17:ae:7f: cf:6c:75:b2:e0:10:1b:d5:7e:96:18:10:87:67:bb: 19:d9:f6:69:10:14:b4:ac:b2:70:a6:18:55:64:bc: 4c:ee:05:a0:40:61:01:46:fa:7b:44:a9:9c:e7:77: 9d:ff:4d:a5:cb:8a:0d:7b:ea:06:ff:1c:44:41:81: 76:de:32:39:4e:50:31:dc:b9:ae:a0:5a:28:c0:5c: 26:2b:70:9b:da:42:69:45:95:52:f6:36:79:8e:e4: e2:8e:21:04:fb:b0:71:e1:84:83:6d:07:36:ba:8e: 24:3f:2b:d6:cf:ee:f6:4f:cd:54:5a:7c:bf:c5:5f: ef:7c:60:a8:11:bd:fa:b7:e2:14:4d:b9:0e:cc:2f: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:97:1B:54:46:CD:C9:AC:2E:00:A8:71:FA:46:5D:A0:6E:4E:36:87 X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:cb:9c:f9:12:77:ff:b7:14:84:00:67:d5:5a:0f:3a:67:6f: 8d:22:8b:e8:c7:14:cc:b1:6e:6d:8e:f4:2e:14:18:8a:a1:8d: 0a:87:39:0c:e5:87:65:2c:e1:6d:5e:8d:04:41:f4:43:97:17: 85:9f:47:fc:87:bb:7d:f6:5c:ab:83:05:da:4f:5d:c2:c6:a9: db:d7:8f:fe:78:b3:33:fe:95:0e:9c:94:31:20:e4:98:5a:26: 39:9a:9a:64:04:4b:44:b0:f5:69:8d:2a:54:a6:7d:14:93:17: 15:49:ed:d4:5e:85:d8:d0:5b:bd:1f:ee:bc:d7:81:d2:48:be: 22:42:b9:4c:fe:85:69:f8:33:44:23:3c:dd:1b:6a:59:d1:21: 21:d5:4d:f2:cb:19:88:51:cf:6d:05:8e:88:8f:62:6d:ff:02: 3a:09:90:82:d7:87:2a:c3:a0:16:ea:be:6e:e3:44:af:d2:15: fb:2a:9c:af:19:92:7f:71:bb:aa:29:a4:6a:e5:7c:0d:a0:2a: f6:2e:ea:eb:7b:11:04:13:4c:e2:ff:95:1c:1c:72:8b:97:6c: ff:57:37:5a:ac:7a:a1:b6:82:f9:b3:43:72:f0:c7:18:4d:f9: c0:af:76:e4:f9:39:a0:a2:ae:a0:1f:5b:bd:4d:76:b6:5b:a4: 1a:60:e5:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMz+MGTIasWeX3WyfAjWincqf/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNTA4MjEwOTM1NDRaFw0yNTA4MjQwOTQzNDRaMDMxMTAvBgNV BAMTKDQyOTcxQjU0NDZDREM5QUMyRTAwQTg3MUZBNDY1REEwNkU0RTM2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdiDSMh/icoMfab5vBU/HZYpBz payk/9tQL0VFgVUif2Wl9SgZTmVRdZUefo8vyRu8ZhSK4Pw+49j6fREjdPiM2MXd Za1Lsz61QAuucbfRqJAHXwWfq71octqb8+SIMlGOnR4dJqnoYfN00W4A9qe/dLwb +Beuf89sdbLgEBvVfpYYEIdnuxnZ9mkQFLSssnCmGFVkvEzuBaBAYQFG+ntEqZzn d53/TaXLig176gb/HERBgXbeMjlOUDHcua6gWijAXCYrcJvaQmlFlVL2NnmO5OKO IQT7sHHhhINtBza6jiQ/K9bP7vZPzVRafL/FX+98YKgRvfq34hRNuQ7ML5N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpcbVEbNyawuAKhx+kZdoG5ONocwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELLnPkSd/+3FIQAZ9VaDzpnb40ii+jHFMyx bm2O9C4UGIqhjQqHOQzlh2Us4W1ejQRB9EOXF4WfR/yHu332XKuDBdpPXcLGqdvX j/54szP+lQ6clDEg5JhaJjmammQES0Sw9WmNKlSmfRSTFxVJ7dRehdjQW70f7rzX gdJIviJCuUz+hWn4M0QjPN0balnRISHVTfLLGYhRz20FjoiPYm3/AjoJkILXhyrD oBbqvm7jRK/SFfsqnK8Zkn9xu6oppGrlfA2gKvYu6ut7EQQTTOL/lRwccouXbP9X N1qseqG2gvmzQ3LwxxhN+cCvduT5OaCirqAfW71NdrZbpBpg5Zw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:03 2025 by rpki-client