$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: GfOhVflQ/vB6ji9+2JM6TtqVA/kFIULD976z4V4Q+vY= Subject key identifier: 9E:08:01:43:92:38:80:F2:8B:A2:D1:3A:AB:3D:BC:1E:BF:63:78:EC Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 1EF57F3A3E145440AF351C343E9E0E2C2BA85CB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: BD Signing time: Mon 30 Jun 2025 20:30:44 +0000 Manifest this update: Mon 30 Jun 2025 20:25:44 +0000 Manifest next update: Fri 04 Jul 2025 01:44:44 +0000 Files and hashes: 1: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 2: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: F1h9dl1ZyjiAUj1xmFvbDBGC/6aFpd1MHd9UKEJb8mw=) 3: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) 4: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) 5: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) 6: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 01:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f5:7f:3a:3e:14:54:40:af:35:1c:34:3e:9e:0e:2c:2b:a8:5c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Jun 30 20:25:44 2025 GMT Not After : Jul 4 01:44:44 2025 GMT Subject: CN=9E080143923880F28BA2D13AAB3DBC1EBF6378EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:31:bb:d6:ab:3b:c9:a8:d6:82:48:07:71: 1b:00:5e:97:dc:61:b4:b7:4f:4f:76:d7:42:e1:c4: 1a:11:b1:d7:b3:e9:5f:fd:32:09:b9:3b:27:e1:81: 16:e2:5b:69:d1:df:1b:f6:3e:d7:68:38:36:2b:d2: 0d:e3:78:52:1b:7b:1c:1a:ad:64:78:aa:ea:e7:42: 9a:88:84:9a:61:fd:36:aa:fc:03:2e:6f:15:af:b4: e7:43:5d:6c:ef:8b:1c:dc:89:1a:d9:d0:60:8e:c5: 49:5c:50:8c:9e:aa:fe:cd:0b:cd:7a:06:1e:78:e6: 84:3b:e1:58:02:7c:84:aa:e8:32:93:94:cc:a3:d0: 5a:ea:3d:df:f2:3f:48:94:4f:cf:d3:c5:58:03:dc: 6e:c5:95:0b:d0:f7:75:00:ce:40:66:8e:2b:29:e5: 09:31:44:9e:4d:0f:2c:c0:de:b8:db:60:70:2a:b5: dd:65:c4:83:63:46:ec:4d:98:ce:19:1d:60:eb:4a: 58:9e:6d:17:85:49:70:f7:ab:09:cd:3b:71:53:e9: 6d:d2:a6:3c:af:81:a5:a2:fe:4d:5f:9e:74:c8:14: 86:2c:5f:9e:ca:8c:29:cb:c6:f8:49:a4:89:7d:6f: 79:62:aa:9c:1a:e9:84:cf:36:14:40:17:21:39:7a: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:08:01:43:92:38:80:F2:8B:A2:D1:3A:AB:3D:BC:1E:BF:63:78:EC X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5a:17:94:14:48:71:eb:41:02:a2:70:73:ac:0b:a1:26:c9: 26:50:66:b4:28:0e:80:1c:7e:a0:ce:75:1c:e1:8a:72:9e:28: 8c:35:4a:54:99:ba:56:a2:1b:41:18:35:65:ab:47:e4:5c:f2: 3f:97:90:e4:dc:bc:15:43:09:8e:a2:0a:89:4a:43:90:b4:a1: 4c:45:f0:a8:4c:18:fe:e1:7d:09:e5:55:5c:58:fa:74:73:d2: e8:e9:03:4e:12:b2:28:15:55:df:10:0e:2e:e7:ba:c9:dd:81: 1d:c5:95:be:44:9c:b6:b0:3a:19:cf:bc:f8:b6:e4:37:61:09: 79:52:2d:58:ac:9f:bd:49:cc:35:0d:d4:c3:f4:6b:38:47:0d: 1c:d4:7a:07:d8:e1:82:45:f9:3b:f9:31:ea:89:67:e6:86:bd: 80:7b:24:2b:0c:93:86:a4:51:06:2f:88:d4:01:3d:7a:42:f2: af:ae:39:ce:30:8a:bf:49:da:64:45:67:1c:33:e9:f6:71:f2: 43:c2:c2:6f:77:05:66:40:12:ab:16:aa:0a:1f:e5:28:bb:f6: 87:cb:eb:f4:cc:0b:d8:29:11:26:80:6c:4e:0b:92:02:03:47: a6:69:d2:4d:ef:69:69:9c:5c:3d:88:fd:4e:c4:4d:7b:77:94: 22:38:1a:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvV/Oj4UVECvNRw0Pp4OLCuoXLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNTA2MzAyMDI1NDRaFw0yNTA3MDQwMTQ0NDRaMDMxMTAvBgNV BAMTKDlFMDgwMTQzOTIzODgwRjI4QkEyRDEzQUFCM0RCQzFFQkY2Mzc4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+DG71qs7yajWgkgHcRsAXpfc YbS3T09210LhxBoRsdez6V/9Mgm5OyfhgRbiW2nR3xv2PtdoODYr0g3jeFIbexwa rWR4qurnQpqIhJph/Taq/AMubxWvtOdDXWzvixzciRrZ0GCOxUlcUIyeqv7NC816 Bh545oQ74VgCfISq6DKTlMyj0FrqPd/yP0iUT8/TxVgD3G7FlQvQ93UAzkBmjisp 5QkxRJ5NDyzA3rjbYHAqtd1lxINjRuxNmM4ZHWDrSliebReFSXD3qwnNO3FT6W3S pjyvgaWi/k1fnnTIFIYsX57KjCnLxvhJpIl9b3liqpwa6YTPNhRAFyE5eu89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnggBQ5I4gPKLotE6qz28Hr9jeOwwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFaF5QUSHHrQQKicHOsC6EmySZQZrQoDoAc fqDOdRzhinKeKIw1SlSZulaiG0EYNWWrR+Rc8j+XkOTcvBVDCY6iColKQ5C0oUxF 8KhMGP7hfQnlVVxY+nRz0ujpA04SsigVVd8QDi7nusndgR3Flb5EnLawOhnPvPi2 5DdhCXlSLVisn71JzDUN1MP0azhHDRzUegfY4YJF+Tv5MeqJZ+aGvYB7JCsMk4ak UQYviNQBPXpC8q+uOc4wir9J2mRFZxwz6fZx8kPCwm93BWZAEqsWqgof5Si79ofL 6/TMC9gpESaAbE4LkgIDR6Zp0k3vaWmcXD2I/U7ETXt3lCI4Gos= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:31 2025 by rpki-client