$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: IyoCtjrKJ2ruxS9GecMD0vMiHBLPw0PTZUSZOoe6WsI= Subject key identifier: 62:7C:94:10:A1:A4:C6:90:4B:C0:28:E2:FA:82:0E:6F:EB:F1:43:85 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 57E22BA113AE2F863AD479C18C62D9BEC2FC5710 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 0255 Signing time: Sun 29 Jun 2025 16:31:47 +0000 Manifest this update: Sun 29 Jun 2025 16:26:47 +0000 Manifest next update: Thu 03 Jul 2025 01:59:47 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=) 2: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=) 3: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: E0eu/eHuA1fVhN55zwgFjTLg+E59iCtWDhzJzXE3vmU=) 4: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e2:2b:a1:13:ae:2f:86:3a:d4:79:c1:8c:62:d9:be:c2:fc:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Jun 29 16:26:47 2025 GMT Not After : Jul 3 01:59:47 2025 GMT Subject: CN=627C9410A1A4C6904BC028E2FA820E6FEBF14385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:1c:30:7f:1f:46:29:9e:e1:1f:b3:0f:88: df:01:0b:d1:35:c1:9f:de:a7:4e:6c:fb:4f:a3:16: d6:8a:44:be:b3:69:64:65:02:02:2c:2c:a9:f4:9b: bd:e1:f8:cb:8a:b6:53:5a:db:02:94:a1:c9:35:5e: 63:c2:76:4f:5f:fd:92:07:36:d2:85:85:a7:12:3f: 29:1f:e9:aa:86:df:7b:8e:87:23:4b:5d:a9:01:d4: d3:59:98:cb:1a:56:82:52:46:09:a6:59:45:fa:c2: ed:ba:43:c8:e5:23:46:29:c8:c3:f2:7d:91:f6:0c: 12:a0:23:9d:5b:1a:4e:16:08:79:bb:ab:b6:82:e1: 88:48:c4:08:97:e7:a0:54:d1:9f:ae:87:9b:8b:12: 1f:25:b7:94:ac:b8:cc:38:54:1c:77:1f:54:45:c3: db:4c:50:32:fd:30:8d:dc:96:1d:6d:1b:80:ec:77: a3:58:1d:b2:66:c9:9d:08:29:a2:c4:b0:b0:f9:e9: 52:26:72:3e:e3:e7:25:a7:c0:de:f7:7a:59:1d:a4: 2c:d2:31:91:60:c9:48:f1:83:3f:50:c8:09:4a:8c: 25:76:c2:1c:b8:93:1c:93:df:09:9b:b1:dc:23:77: 8d:c4:ef:b4:0d:4a:b4:8e:d8:dc:bc:37:02:1a:9c: c9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7C:94:10:A1:A4:C6:90:4B:C0:28:E2:FA:82:0E:6F:EB:F1:43:85 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f3:56:2e:d6:0b:62:c1:20:24:e3:1a:c9:f8:0d:a5:36:70: 58:8a:20:f8:04:3d:6e:72:bd:4e:b6:a7:d1:32:9c:aa:fc:a8: a5:77:8f:0b:a1:7f:78:01:ab:60:c6:df:6a:0e:03:57:9d:74: 53:f2:6e:9b:bf:f2:03:2e:2d:75:81:04:df:71:69:f0:f4:49: a3:42:5e:75:57:d8:45:e8:62:63:ae:44:a2:d1:fa:00:b1:6e: 36:15:fd:9e:59:9a:75:0e:e5:91:c5:bb:8f:bf:d1:aa:aa:13: d9:d5:55:28:d4:d9:ca:e2:05:af:cd:72:d7:22:b3:e5:1c:01: e0:e6:e4:e8:c0:1b:ca:18:14:74:7a:7f:83:21:c5:5d:9f:f6: 67:83:1f:3f:e6:35:20:19:7a:fe:c5:74:e7:0e:04:88:76:6c: 65:1a:db:79:64:6e:8a:c6:4d:42:2f:69:02:7b:35:0e:a1:0f: ff:40:f0:0a:51:8b:6f:39:9d:9f:63:76:6e:a6:d6:e4:99:41: d5:b4:eb:3c:fe:c5:35:aa:1e:4f:70:5d:03:ec:c8:c9:d8:3a: 34:16:e5:f4:ab:84:3a:a2:22:19:58:7e:18:2a:cb:8c:47:9a: 6f:ca:8a:5f:07:56:80:f1:41:60:f2:cb:26:f3:56:3f:df:09: b2:ed:20:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+IroROuL4Y61HnBjGLZvsL8VxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTA2MjkxNjI2NDdaFw0yNTA3MDMwMTU5NDdaMDMxMTAvBgNV BAMTKDYyN0M5NDEwQTFBNEM2OTA0QkMwMjhFMkZBODIwRTZGRUJGMTQzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdRwwfx9GKZ7hH7MPiN8BC9E1 wZ/ep05s+0+jFtaKRL6zaWRlAgIsLKn0m73h+MuKtlNa2wKUock1XmPCdk9f/ZIH NtKFhacSPykf6aqG33uOhyNLXakB1NNZmMsaVoJSRgmmWUX6wu26Q8jlI0YpyMPy fZH2DBKgI51bGk4WCHm7q7aC4YhIxAiX56BU0Z+uh5uLEh8lt5SsuMw4VBx3H1RF w9tMUDL9MI3clh1tG4Dsd6NYHbJmyZ0IKaLEsLD56VImcj7j5yWnwN73elkdpCzS MZFgyUjxgz9QyAlKjCV2why4kxyT3wmbsdwjd43E77QNSrSO2Ny8NwIanMkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYnyUEKGkxpBLwCji+oIOb+vxQ4UwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTzVi7WC2LBICTjGsn4DaU2cFiKIPgEPW5y vU62p9EynKr8qKV3jwuhf3gBq2DG32oOA1eddFPybpu/8gMuLXWBBN9xafD0SaNC XnVX2EXoYmOuRKLR+gCxbjYV/Z5ZmnUO5ZHFu4+/0aqqE9nVVSjU2criBa/Nctci s+UcAeDm5OjAG8oYFHR6f4MhxV2f9meDHz/mNSAZev7FdOcOBIh2bGUa23lkborG TUIvaQJ7NQ6hD/9A8ApRi285nZ9jdm6m1uSZQdW06zz+xTWqHk9wXQPsyMnYOjQW 5fSrhDqiIhlYfhgqy4xHmm/Kil8HVoDxQWDyyybzVj/fCbLtIAg= -----END CERTIFICATE-----Generated at Tue Jul 1 10:32:09 2025 by rpki-client