$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: wsid5W6CUAEM35j0l8Xial+gLc5Xp0q3NTuKSALOjn8= Subject key identifier: B6:1D:B1:0E:6A:BC:30:D4:ED:4B:9B:5E:44:00:84:06:D1:3B:6C:D7 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 490A0FFD71152D2EB15B5FE7E617CD9EDCE25666 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 04FF Signing time: Fri 22 Aug 2025 08:11:48 +0000 Manifest this update: Fri 22 Aug 2025 08:06:48 +0000 Manifest next update: Mon 25 Aug 2025 19:03:48 +0000 Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) 2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 3: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: rPVjGKWUgtQer3x07iI8UR8jAisjeRuYmkB5DEwUwPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0a:0f:fd:71:15:2d:2e:b1:5b:5f:e7:e6:17:cd:9e:dc:e2:56:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Aug 22 08:06:48 2025 GMT Not After : Aug 25 19:03:48 2025 GMT Subject: CN=B61DB10E6ABC30D4ED4B9B5E44008406D13B6CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ae:45:69:23:25:54:cb:0e:d9:23:25:85:d4: 4e:e0:85:f0:72:f1:12:f0:90:76:27:b5:57:0a:49: a3:f6:18:29:df:1e:71:99:b4:25:66:c7:e2:8e:c4: 9d:e4:3c:0d:39:74:39:54:9f:a0:5a:50:f9:a9:ca: 3e:a8:3d:1c:93:70:ee:9c:d2:bd:c9:a0:7a:13:04: d5:88:cf:b1:f0:4c:38:bd:ac:da:f6:89:ea:cd:d0: d1:d6:97:4b:7a:96:0c:3e:0b:0a:8f:24:f9:06:36: 6d:b9:b1:42:67:45:4f:61:df:46:e1:c2:26:f3:af: 09:4b:e5:ce:4e:41:7f:c2:aa:a1:a9:81:c8:d8:e1: df:15:ab:38:24:ac:61:e1:9e:ee:c1:cf:99:22:4d: 26:98:8e:7d:7b:2a:66:c7:32:36:1a:87:51:48:12: 0c:5f:26:fe:a4:8c:50:38:3b:c3:06:fe:37:53:a5: 12:c7:67:1d:ab:0f:f9:67:77:5f:8f:fd:c6:2a:70: 54:05:a0:f8:c8:fb:8f:11:b2:8b:81:91:20:fc:9e: 24:95:34:0a:1b:28:a6:a1:e3:a8:aa:13:94:f4:e5: 37:2a:22:56:4a:7f:37:5d:ed:ef:b7:6c:03:ce:cf: 45:49:0f:0a:57:96:cf:1e:c7:28:34:92:68:a0:89: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:B1:0E:6A:BC:30:D4:ED:4B:9B:5E:44:00:84:06:D1:3B:6C:D7 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7e:1b:78:6d:0b:eb:47:74:2b:ba:7c:ab:83:99:96:d1:97: db:ca:11:07:cd:e6:53:4b:c3:34:f0:25:e8:b3:d7:78:17:53: 25:98:c2:d6:5d:9a:cc:ca:7d:b1:92:89:13:a9:be:cc:74:2b: 4d:34:fd:1c:76:8a:8c:34:d6:41:fd:2b:99:21:29:48:16:8c: 2c:d9:19:f1:2b:5e:4b:18:be:0d:35:c2:68:12:c7:53:8f:bd: 48:8b:5c:e4:a2:89:dc:9e:00:2a:46:11:74:83:a6:87:52:0d: 5b:ab:77:4b:d4:3d:33:19:ef:3f:ed:3e:a1:8b:9e:27:03:a4: 6d:ce:c7:74:85:a3:b1:f1:b5:71:55:b8:7c:ae:4f:c3:5d:c4: a2:44:e4:dc:8f:5b:55:ad:34:93:14:c4:be:fe:f6:b3:67:f8: 19:7f:28:15:e0:0e:98:56:a0:aa:2c:9a:c8:08:83:1b:32:e8: 91:4a:e9:5c:ab:6e:60:14:78:69:b3:e9:3c:75:17:ab:dc:ee: b3:db:62:1a:14:36:c9:3e:c0:12:05:1c:8e:76:4b:4b:4c:df: 11:62:c1:d4:d5:ba:d4:48:90:97:00:dc:87:84:7f:fa:9e:ca: c2:e2:be:ac:b3:99:1a:50:b9:e5:50:dd:f3:c6:bc:4c:4c:59: 64:a5:02:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQoP/XEVLS6xW1/n5hfNntziVmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTA4MjIwODA2NDhaFw0yNTA4MjUxOTAzNDhaMDMxMTAvBgNV BAMTKEI2MURCMTBFNkFCQzMwRDRFRDRCOUI1RTQ0MDA4NDA2RDEzQjZDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrkVpIyVUyw7ZIyWF1E7ghfBy 8RLwkHYntVcKSaP2GCnfHnGZtCVmx+KOxJ3kPA05dDlUn6BaUPmpyj6oPRyTcO6c 0r3JoHoTBNWIz7HwTDi9rNr2ierN0NHWl0t6lgw+CwqPJPkGNm25sUJnRU9h30bh wibzrwlL5c5OQX/CqqGpgcjY4d8VqzgkrGHhnu7Bz5kiTSaYjn17KmbHMjYah1FI EgxfJv6kjFA4O8MG/jdTpRLHZx2rD/lnd1+P/cYqcFQFoPjI+48RsouBkSD8niSV NAobKKah46iqE5T05TcqIlZKfzdd7e+3bAPOz0VJDwpXls8exyg0kmigiXHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUth2xDmq8MNTtS5teRACEBtE7bNcwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB+G3htC+tHdCu6fKuDmZbRl9vKEQfN5lNL wzTwJeiz13gXUyWYwtZdmszKfbGSiROpvsx0K000/Rx2iow01kH9K5khKUgWjCzZ GfErXksYvg01wmgSx1OPvUiLXOSiidyeACpGEXSDpodSDVurd0vUPTMZ7z/tPqGL nicDpG3Ox3SFo7HxtXFVuHyuT8NdxKJE5NyPW1WtNJMUxL7+9rNn+Bl/KBXgDphW oKosmsgIgxsy6JFK6VyrbmAUeGmz6Tx1F6vc7rPbYhoUNsk+wBIFHI52S0tM3xFi wdTVutRIkJcA3IeEf/qeysLivqyzmRpQueVQ3fPGvExMWWSlAm8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:40 2025 by rpki-client