$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: 5AUHW946CR5FkKx/i1K0BUSGEOQw1s0bpk5uamAh+Rc= Subject key identifier: 9B:59:0B:A8:46:F9:0A:D2:84:64:FA:49:C6:0C:2B:A7:85:A8:57:18 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 68037A6F19DA385A61CF740C3A8A46F60DF39134 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 0288 Signing time: Mon 20 Oct 2025 21:41:52 +0000 Manifest this update: Mon 20 Oct 2025 21:36:52 +0000 Manifest next update: Fri 24 Oct 2025 03:41:52 +0000 Files and hashes: 1: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: BAp/OrGAMuXFs2YRwy62Q2l1n6NelJS2tLSjvDN1qlo=) 2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) 3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:03:7a:6f:19:da:38:5a:61:cf:74:0c:3a:8a:46:f6:0d:f3:91:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Oct 20 21:36:52 2025 GMT Not After : Oct 24 03:41:52 2025 GMT Subject: CN=9B590BA846F90AD28464FA49C60C2BA785A85718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:91:44:df:6a:1c:47:e5:5b:e1:28:d2:53:32: 41:a1:b2:c9:bb:fb:38:02:b4:44:1e:1e:fc:c4:a2: cb:c9:b2:ea:88:f6:4f:6e:83:3d:59:fa:8b:68:0d: 9b:52:cf:6d:d4:d2:0d:18:98:2d:b4:d7:09:5e:7e: 12:99:85:26:9c:c2:c1:92:56:35:43:fb:9c:0c:31: ae:5b:09:e9:41:f8:59:51:86:c7:52:3f:e3:88:95: 87:00:2e:95:5c:72:51:c1:5d:a9:47:43:13:e6:97: 4c:4f:15:7b:25:68:43:d8:af:2e:a9:7e:6f:f9:fe: 3e:1f:d3:1e:4e:9b:bf:e9:a2:c5:1d:f3:51:ec:0c: 5d:45:ea:91:03:7a:49:57:e5:f6:b9:31:aa:0a:01: c8:3f:af:8e:5c:8b:32:a5:4d:99:97:06:15:14:ce: b1:6a:04:d4:1c:13:db:ef:2c:53:00:2f:04:db:36: d9:0e:a5:f0:54:e0:e1:50:0d:78:d8:9c:25:4e:1d: 21:fa:b0:c9:50:af:55:b0:6f:46:7a:1a:f8:97:13: 6b:36:e9:a0:af:31:1d:06:60:42:88:49:bd:ee:72: 4c:fd:44:32:7f:7a:b6:ab:ef:1c:48:08:f1:e5:c9: 34:6a:cf:33:dd:dc:7f:ad:fc:d9:db:11:d4:0e:ad: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:0B:A8:46:F9:0A:D2:84:64:FA:49:C6:0C:2B:A7:85:A8:57:18 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:74:b4:27:a4:27:b7:02:53:d5:8f:cc:46:b3:8e:59:e3:dc: f1:a2:78:ff:6c:c9:39:be:50:67:81:ab:67:a0:1c:a4:69:9b: 22:89:60:8b:b5:cb:db:4e:90:c7:f4:5e:2a:71:ba:fc:47:a8: ae:36:cc:ba:d8:de:b0:3f:86:aa:b8:d5:de:b5:8a:e0:9a:af: 0d:d0:28:69:93:9f:c1:56:99:d7:f2:89:91:b1:25:4c:a4:a6: bc:fd:45:47:34:87:33:d7:02:63:6d:83:8c:66:7c:15:58:25: e0:6f:f4:7c:f4:51:3c:db:b4:e8:2b:14:dc:57:e6:23:b4:5f: c7:4a:98:de:64:87:6e:c2:53:cc:a9:6e:d7:e2:00:af:05:0d: 93:10:99:c1:a1:96:e7:d2:58:c8:b3:3b:14:af:bd:e6:3a:67: 32:27:f6:a2:ae:ee:18:e0:e0:97:56:d2:49:e5:51:6b:16:dc: 48:9f:94:cc:c4:97:a3:b2:45:12:1f:36:b5:83:39:55:b1:c4: b7:cc:d8:2f:06:6a:46:1f:70:29:0f:7b:57:a6:ce:7a:5d:ab: e1:cc:6d:ee:8b:2e:d7:bf:55:2b:2f:a1:d6:c1:48:e9:a9:32: d1:08:26:2a:9b:f3:9b:fb:0e:13:68:a5:fc:53:1a:f1:b3:76: 88:c1:3a:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAN6bxnaOFphz3QMOopG9g3zkTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTEwMjAyMTM2NTJaFw0yNTEwMjQwMzQxNTJaMDMxMTAvBgNV BAMTKDlCNTkwQkE4NDZGOTBBRDI4NDY0RkE0OUM2MEMyQkE3ODVBODU3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxkUTfahxH5VvhKNJTMkGhssm7 +zgCtEQeHvzEosvJsuqI9k9ugz1Z+otoDZtSz23U0g0YmC201wlefhKZhSacwsGS VjVD+5wMMa5bCelB+FlRhsdSP+OIlYcALpVcclHBXalHQxPml0xPFXslaEPYry6p fm/5/j4f0x5Om7/posUd81HsDF1F6pEDeklX5fa5MaoKAcg/r45cizKlTZmXBhUU zrFqBNQcE9vvLFMALwTbNtkOpfBU4OFQDXjYnCVOHSH6sMlQr1Wwb0Z6GviXE2s2 6aCvMR0GYEKISb3uckz9RDJ/erar7xxICPHlyTRqzzPd3H+t/NnbEdQOrZuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1kLqEb5CtKEZPpJxgwrp4WoVxgwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKl0tCekJ7cCU9WPzEazjlnj3PGieP9syTm+ UGeBq2egHKRpmyKJYIu1y9tOkMf0XipxuvxHqK42zLrY3rA/hqq41d61iuCarw3Q KGmTn8FWmdfyiZGxJUykprz9RUc0hzPXAmNtg4xmfBVYJeBv9Hz0UTzbtOgrFNxX 5iO0X8dKmN5kh27CU8ypbtfiAK8FDZMQmcGhlufSWMizOxSvveY6ZzIn9qKu7hjg 4JdW0knlUWsW3EiflMzEl6OyRRIfNrWDOVWxxLfM2C8GakYfcCkPe1emznpdq+HM be6LLte/VSsvodbBSOmpMtEIJiqb85v7DhNopfxTGvGzdojBOrQ= -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:56 2025 by rpki-client