$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: ABENFWebyX/SKzJAIeLmICyubm9WOy2YeCoD6Nt89m8= Subject key identifier: 0B:3C:CE:46:8F:C6:08:AC:39:11:92:1C:BD:8C:3A:91:DB:C7:F2:16 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 469FD26BD11E09E344C977BE6C3CFCA1845E9080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 023F Signing time: Sun 11 May 2025 03:21:47 +0000 Manifest this update: Sun 11 May 2025 03:16:47 +0000 Manifest next update: Wed 14 May 2025 14:14:47 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=) 2: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=) 3: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: 3TXVSSU+zD8T/vjCB8XSKP1SQMcLjapiDSf6TsQnW7U=) 4: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9f:d2:6b:d1:1e:09:e3:44:c9:77:be:6c:3c:fc:a1:84:5e:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: May 11 03:16:47 2025 GMT Not After : May 14 14:14:47 2025 GMT Subject: CN=0B3CCE468FC608AC3911921CBD8C3A91DBC7F216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:ad:05:e8:06:99:b2:b7:54:88:c9:65:d8: ed:64:16:3e:11:29:f9:c7:4e:f6:0e:15:80:83:94: 71:38:9a:f9:36:03:2b:57:d2:8c:49:5f:d2:30:d7: 22:59:1f:9c:81:c0:99:45:96:68:e8:05:b0:c6:02: 13:bf:36:b0:3e:b6:ce:54:b6:a7:bc:fd:74:a4:5e: ec:5f:d1:da:2b:77:9f:a4:5f:34:98:fd:34:f2:3b: db:9e:4e:fd:80:18:2d:65:f1:89:12:98:02:52:fb: dd:20:68:fc:12:b6:62:8e:08:96:50:a4:e9:45:fd: a3:2d:eb:2f:71:d2:b3:61:46:8c:10:11:79:38:cb: bb:2b:e6:2e:43:c5:bc:25:aa:d4:c4:7c:18:04:95: e4:4b:a5:d7:f0:1d:12:4d:24:ba:71:c3:37:88:f8: 01:c9:9e:ef:ba:2e:e4:45:eb:3c:d0:fe:a0:c1:10: 8b:5c:47:fd:b0:d7:9e:9f:81:86:c6:41:9a:8d:5a: 20:d1:a4:8e:e4:9f:9f:cc:97:7d:7a:3e:33:1d:10: fd:33:ec:e3:94:8b:55:1c:57:3a:a3:ba:ec:17:88: 60:08:02:5e:c2:46:d7:5f:0b:b3:52:ef:01:74:1a: f3:9d:80:e3:a0:c4:39:2b:ce:75:03:67:02:2f:3e: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3C:CE:46:8F:C6:08:AC:39:11:92:1C:BD:8C:3A:91:DB:C7:F2:16 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:35:ca:9e:6e:55:b1:08:42:e2:34:cb:e0:98:07:9c:39:48: f3:95:10:1f:31:9f:99:be:c5:58:b8:d6:b4:e9:2d:67:5d:71: 08:af:fb:f5:7e:2e:d4:a4:d9:e3:44:ae:19:e0:ed:5d:07:2d: 7f:48:77:3a:45:f2:df:86:79:73:88:74:5b:6a:5b:3a:20:0f: 5d:a0:97:11:99:2e:de:0c:d5:08:9e:5a:5b:70:b5:d5:44:e6: da:bc:7d:4a:46:d0:38:72:a5:e8:3e:1f:8c:c1:e9:cb:8e:86: e8:d9:be:51:8b:64:23:eb:e0:17:9a:f9:37:e9:87:ec:3e:a3: 87:62:26:f7:0c:63:aa:0d:97:e0:dc:3d:e1:ac:89:e7:be:1c: 51:4e:ef:df:a6:d4:90:e1:34:8b:17:ea:eb:0a:78:49:a6:e2: e8:00:6e:99:66:fc:58:b3:0c:c6:9c:fd:f2:16:b8:fa:a6:04: 6d:50:76:c8:72:80:73:71:dd:12:98:84:cd:4b:a5:20:64:52: 54:82:d9:8b:11:7a:88:bd:cd:06:0b:2c:34:55:49:23:d2:7b: 5c:0a:af:ab:df:0d:ce:0e:8e:41:80:12:3e:e7:89:b1:cd:d8: 81:92:eb:21:4e:30:94:d7:f1:08:25:11:d5:43:d3:21:6a:54: 67:5d:4f:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURp/Sa9EeCeNEyXe+bDz8oYRekIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTA1MTEwMzE2NDdaFw0yNTA1MTQxNDE0NDdaMDMxMTAvBgNV BAMTKDBCM0NDRTQ2OEZDNjA4QUMzOTExOTIxQ0JEOEMzQTkxREJDN0YyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/160F6AaZsrdUiMll2O1kFj4R KfnHTvYOFYCDlHE4mvk2AytX0oxJX9Iw1yJZH5yBwJlFlmjoBbDGAhO/NrA+ts5U tqe8/XSkXuxf0dord5+kXzSY/TTyO9ueTv2AGC1l8YkSmAJS+90gaPwStmKOCJZQ pOlF/aMt6y9x0rNhRowQEXk4y7sr5i5DxbwlqtTEfBgEleRLpdfwHRJNJLpxwzeI +AHJnu+6LuRF6zzQ/qDBEItcR/2w156fgYbGQZqNWiDRpI7kn5/Ml316PjMdEP0z 7OOUi1UcVzqjuuwXiGAIAl7CRtdfC7NS7wF0GvOdgOOgxDkrznUDZwIvPrbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzzORo/GCKw5EZIcvYw6kdvH8hYwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk1yp5uVbEIQuI0y+CYB5w5SPOVEB8xn5m+ xVi41rTpLWddcQiv+/V+LtSk2eNErhng7V0HLX9IdzpF8t+GeXOIdFtqWzogD12g lxGZLt4M1QieWltwtdVE5tq8fUpG0Dhypeg+H4zB6cuOhujZvlGLZCPr4Bea+Tfp h+w+o4diJvcMY6oNl+DcPeGsiee+HFFO79+m1JDhNIsX6usKeEmm4ugAbplm/Fiz DMac/fIWuPqmBG1QdshygHNx3RKYhM1LpSBkUlSC2YsReoi9zQYLLDRVSSPSe1wK r6vfDc4OjkGAEj7nibHN2IGS6yFOMJTX8QglEdVD0yFqVGddT2k= -----END CERTIFICATE-----Generated at Sun May 11 11:59:10 2025 by rpki-client