$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: W+HQIJ5BvtY9CiQUmSIbeeCnzXtEoghrd8eZLeSjJlA= Subject key identifier: 73:11:3D:EF:6D:1B:F8:61:62:1C:86:56:45:BF:F7:19:C4:34:3A:56 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 25C09DF87ECC74E60B9D1BB724E73FE7688F2782 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 026D Signing time: Sat 23 Aug 2025 00:01:49 +0000 Manifest this update: Fri 22 Aug 2025 23:56:49 +0000 Manifest next update: Tue 26 Aug 2025 11:06:49 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=) 2: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: dlMFd4u8seu0L2YILNVOfreX2ygcCXY26QomW+H8jXQ=) 3: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=) 4: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c0:9d:f8:7e:cc:74:e6:0b:9d:1b:b7:24:e7:3f:e7:68:8f:27:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Aug 22 23:56:49 2025 GMT Not After : Aug 26 11:06:49 2025 GMT Subject: CN=73113DEF6D1BF861621C865645BFF719C4343A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:ed:9f:ca:a1:a0:62:f6:b7:2a:f4:07:a2: 47:97:d5:82:74:17:d4:3a:2f:7f:e4:39:7e:e5:c3: fa:ba:e6:98:3e:d4:40:32:09:c0:59:49:22:57:9b: 07:88:1b:b6:ec:68:cc:df:a9:62:c9:86:75:24:f5: fc:35:2d:db:de:ca:d3:4b:88:a4:39:22:8b:6f:23: 25:38:63:c4:35:56:3e:1c:0e:11:6e:d2:2e:db:16: a9:f8:d6:d0:e7:be:86:64:39:f5:5f:5c:32:59:89: 7d:0d:18:5c:99:e0:fe:16:67:ba:0f:ff:11:c2:ac: 0c:d3:ea:62:1b:cd:9a:82:7f:65:88:28:d0:6c:6e: 73:78:45:a0:3b:b6:da:bd:44:58:2a:36:fe:9a:a3: 29:d8:36:4a:c2:d8:42:8c:03:1c:6e:1b:c2:2d:64: ac:a5:cd:63:fa:f7:a2:78:6a:91:f3:54:a6:f6:71: 36:ba:66:b4:bf:03:77:cc:6a:ab:56:6a:80:5d:3b: 6d:99:fd:bd:91:2b:1b:78:0c:26:d1:7c:0a:5d:c6: d3:60:bb:06:b7:9e:cf:fe:9a:b8:13:8a:d8:8c:d2: b7:ad:58:91:51:34:2b:a4:e7:16:41:c6:b9:65:22: 73:67:d0:85:5c:e8:51:c8:de:7c:49:00:80:34:fa: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:11:3D:EF:6D:1B:F8:61:62:1C:86:56:45:BF:F7:19:C4:34:3A:56 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:03:59:e4:5b:77:00:f1:ee:6a:95:82:2a:c9:82:d2:af:13: 90:38:71:49:f6:20:ac:27:89:82:9f:97:19:df:a7:d1:a4:5a: db:9e:dd:45:36:6c:30:fc:f2:c0:6b:5e:d5:99:43:7d:57:fe: e5:8f:29:c9:5b:49:e2:4e:a4:28:fa:c3:5d:71:94:58:d6:43: 48:a1:ba:79:cb:e7:84:b9:f2:3f:bb:06:c2:06:da:ca:8d:72: a0:9a:e6:8c:df:6f:f7:d8:aa:91:99:c5:ed:be:fe:0e:05:f9: 44:a2:27:2a:f8:ed:72:92:a1:98:75:42:12:97:77:57:33:27: ba:4f:09:05:a8:1b:9e:3f:25:01:e6:9b:42:fb:b8:95:6d:34: 18:8f:4e:dd:1a:f1:1f:10:c2:f8:10:df:c2:1b:45:eb:90:3e: ad:79:0e:40:8e:52:07:a1:11:96:42:b4:92:ae:0a:bb:93:65: 59:fe:d2:f4:c5:ad:62:64:0c:2f:d7:73:d1:fa:f8:5d:d5:5e: bd:b2:cd:e8:0c:a8:c7:1b:4a:2d:95:0a:b3:41:63:92:b5:99: 4c:ee:38:f8:ed:0f:0c:d4:34:64:00:c4:a1:be:cb:d4:5d:0a: 14:a3:8d:0c:29:fd:3d:0a:61:d4:f6:29:63:5b:76:21:02:87: c7:1a:5b:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcCd+H7MdOYLnRu3JOc/52iPJ4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTA4MjIyMzU2NDlaFw0yNTA4MjYxMTA2NDlaMDMxMTAvBgNV BAMTKDczMTEzREVGNkQxQkY4NjE2MjFDODY1NjQ1QkZGNzE5QzQzNDNBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vu2fyqGgYva3KvQHokeX1YJ0 F9Q6L3/kOX7lw/q65pg+1EAyCcBZSSJXmweIG7bsaMzfqWLJhnUk9fw1LdveytNL iKQ5IotvIyU4Y8Q1Vj4cDhFu0i7bFqn41tDnvoZkOfVfXDJZiX0NGFyZ4P4WZ7oP /xHCrAzT6mIbzZqCf2WIKNBsbnN4RaA7ttq9RFgqNv6aoynYNkrC2EKMAxxuG8It ZKylzWP696J4apHzVKb2cTa6ZrS/A3fMaqtWaoBdO22Z/b2RKxt4DCbRfApdxtNg uwa3ns/+mrgTitiM0retWJFRNCuk5xZBxrllInNn0IVc6FHI3nxJAIA0+rkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxE9720b+GFiHIZWRb/3GcQ0OlYwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGADWeRbdwDx7mqVgirJgtKvE5A4cUn2IKwn iYKflxnfp9GkWtue3UU2bDD88sBrXtWZQ31X/uWPKclbSeJOpCj6w11xlFjWQ0ih unnL54S58j+7BsIG2sqNcqCa5ozfb/fYqpGZxe2+/g4F+USiJyr47XKSoZh1QhKX d1czJ7pPCQWoG54/JQHmm0L7uJVtNBiPTt0a8R8QwvgQ38IbReuQPq15DkCOUgeh EZZCtJKuCruTZVn+0vTFrWJkDC/Xc9H6+F3VXr2yzegMqMcbSi2VCrNBY5K1mUzu OPjtDwzUNGQAxKG+y9RdChSjjQwp/T0KYdT2KWNbdiECh8caW5Y= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:46 2025 by rpki-client