$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: l4Zhzo7dXkq6MVtSc4Fs84X/jkv/TDor39vooFYq76w= Subject key identifier: C5:09:F3:56:C1:5A:3F:3A:46:24:B4:0C:27:6D:1E:CC:12:A6:B8:36 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 2CCFDDC942908478F96D3AAEC828E273F7451788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 04E6 Signing time: Sat 28 Jun 2025 20:31:47 +0000 Manifest this update: Sat 28 Jun 2025 20:26:47 +0000 Manifest next update: Wed 02 Jul 2025 08:19:47 +0000 Files and hashes: 1: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 2: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: 5ti87jji6yUH4XcACBgY/LAgZNMuG9b5sNoj2+hOWb8=) 3: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: uCvkpi9HolkTKU1xLo49+EhyF4G4kHCLMfW3P8bndvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cf:dd:c9:42:90:84:78:f9:6d:3a:ae:c8:28:e2:73:f7:45:17:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Jun 28 20:26:47 2025 GMT Not After : Jul 2 08:19:47 2025 GMT Subject: CN=C509F356C15A3F3A4624B40C276D1ECC12A6B836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:6d:c1:a2:53:1b:8f:cd:70:9a:1a:be:45: fc:41:e8:a7:ed:7f:14:7a:74:f4:a4:56:97:83:ab: 04:cd:7e:f2:13:07:f4:0a:ba:d6:77:c1:5c:9c:dd: 87:eb:73:8b:9b:ab:a7:28:21:29:69:74:cc:e6:42: db:b4:e3:42:e1:60:f5:af:d6:63:f1:15:03:bd:73: 98:6b:46:08:06:27:20:54:36:94:de:4d:36:e2:46: 34:55:23:e1:f4:a6:ae:f1:91:a5:80:aa:ec:21:8a: e4:96:8b:57:fc:52:6e:0d:dc:a4:71:cd:66:f5:c0: 54:fd:de:0e:ad:ef:4f:f1:57:01:db:e9:de:d0:8b: 90:59:fe:66:75:e4:e3:9d:6e:bc:74:6c:d3:e1:bc: 54:5a:af:53:09:99:c8:88:51:ce:fb:d0:93:81:82: ba:b5:41:39:b4:18:e2:39:13:2f:8b:2f:00:99:d5: e9:1a:94:0f:29:a1:df:51:87:39:f7:77:84:59:cd: 19:83:84:67:e8:5a:e3:70:66:e2:72:d3:f5:1d:d1: 57:58:95:3e:fe:a4:88:1d:97:53:8b:89:02:04:57: 92:aa:71:e6:bf:77:32:03:bd:c3:80:22:ad:94:8e: f8:b8:14:c1:57:01:c6:1e:7f:76:7a:48:cb:38:f8: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:F3:56:C1:5A:3F:3A:46:24:B4:0C:27:6D:1E:CC:12:A6:B8:36 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:14:6e:2c:cf:f8:8c:c7:2b:d0:fb:f9:f2:5c:37:87:f5:b6: dc:f5:d0:e9:fd:0d:59:48:89:ce:8e:03:81:e5:9e:08:e1:58: 3d:a5:78:1b:ae:1a:47:98:ce:b3:ae:fc:b7:0e:7f:42:14:85: 17:0d:11:f9:e4:9b:10:8e:2f:32:39:9d:df:08:4c:d8:99:3e: 9e:0d:65:ba:6c:e2:c2:d4:a6:04:a5:70:0f:3b:a5:ac:26:95: 87:0c:74:a2:1f:99:6d:51:b1:6b:3f:ac:d8:0d:13:78:b8:57: 3a:50:45:43:a2:4a:34:f3:39:14:e6:72:63:43:aa:3e:61:14: 68:b0:b7:16:7b:9f:49:aa:19:10:5b:1e:88:4d:91:36:d4:7f: 28:47:64:cd:ab:6c:41:25:70:3d:c5:e1:65:10:e2:00:e4:e7: f6:ed:11:14:2a:1a:b4:90:86:0b:31:ad:e8:a9:24:f1:87:51: 5a:1b:85:34:aa:7e:9d:9c:5a:db:7a:a1:dd:88:b9:d8:b4:a9: 02:01:46:d5:8c:5e:6b:42:1f:85:82:e3:dc:d6:ea:9b:5a:3e: 19:2b:da:9f:18:69:2a:5a:1e:36:09:e7:40:f1:6b:db:ac:78: 4e:f1:ca:27:78:6c:4c:a9:b2:85:57:eb:e0:be:3e:20:3d:26: ad:e6:b6:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULM/dyUKQhHj5bTquyCjic/dFF4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTA2MjgyMDI2NDdaFw0yNTA3MDIwODE5NDdaMDMxMTAvBgNV BAMTKEM1MDlGMzU2QzE1QTNGM0E0NjI0QjQwQzI3NkQxRUNDMTJBNkI4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaW3BolMbj81wmhq+RfxB6Kft fxR6dPSkVpeDqwTNfvITB/QKutZ3wVyc3Yfrc4ubq6coISlpdMzmQtu040LhYPWv 1mPxFQO9c5hrRggGJyBUNpTeTTbiRjRVI+H0pq7xkaWAquwhiuSWi1f8Um4N3KRx zWb1wFT93g6t70/xVwHb6d7Qi5BZ/mZ15OOdbrx0bNPhvFRar1MJmciIUc770JOB grq1QTm0GOI5Ey+LLwCZ1ekalA8pod9Rhzn3d4RZzRmDhGfoWuNwZuJy0/Ud0VdY lT7+pIgdl1OLiQIEV5Kqcea/dzIDvcOAIq2Ujvi4FMFXAcYef3Z6SMs4+JuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQnzVsFaPzpGJLQMJ20ezBKmuDYwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0UbizP+IzHK9D7+fJcN4f1ttz10On9DVlI ic6OA4HlngjhWD2leBuuGkeYzrOu/LcOf0IUhRcNEfnkmxCOLzI5nd8ITNiZPp4N Zbps4sLUpgSlcA87pawmlYcMdKIfmW1RsWs/rNgNE3i4VzpQRUOiSjTzORTmcmND qj5hFGiwtxZ7n0mqGRBbHohNkTbUfyhHZM2rbEElcD3F4WUQ4gDk5/btERQqGrSQ hgsxreipJPGHUVobhTSqfp2cWtt6od2Iudi0qQIBRtWMXmtCH4WC49zW6ptaPhkr 2p8YaSpaHjYJ50Dxa9useE7xyid4bEypsoVX6+C+PiA9Jq3mtmg= -----END CERTIFICATE-----Generated at Mon Jun 30 19:45:20 2025 by rpki-client