$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: zvhBETJScl7IgonIiGaqYXKbMTC3aeFaEOhzf8J8C84= Subject key identifier: 93:F7:42:94:3B:DF:83:2A:B4:00:B3:8A:26:25:26:50:70:7C:27:99 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 10193AD5122E624F9F789104434114B0DC0FA1F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 036C Signing time: Fri 22 Aug 2025 23:51:21 +0000 Manifest this update: Fri 22 Aug 2025 23:46:21 +0000 Manifest next update: Tue 26 Aug 2025 01:39:21 +0000 Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: 0Lulmdu6EsL2l7VWT4Xlnbe5F3ODAhr5HqokCyu4od0=) 2: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) 3: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:19:3a:d5:12:2e:62:4f:9f:78:91:04:43:41:14:b0:dc:0f:a1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Aug 22 23:46:21 2025 GMT Not After : Aug 26 01:39:21 2025 GMT Subject: CN=93F742943BDF832AB400B38A26252650707C2799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:cc:07:47:00:89:3a:db:43:02:c4:b6:87: b1:ae:21:95:ba:2c:e9:61:82:99:78:2f:d8:7c:74: 17:e6:f1:4c:d3:6f:fa:c8:1b:ac:42:b5:97:1c:95: 08:6a:4e:26:3e:67:38:f4:b2:31:f7:14:9a:d1:14: 31:2f:52:d8:c1:33:42:6a:9d:8d:92:74:5c:94:7f: 62:9b:72:46:6e:c9:40:be:c5:6f:2f:03:cf:f9:b7: 9e:20:c7:06:a8:40:39:7d:7f:3e:8d:c3:84:f9:50: 90:10:92:18:02:30:16:5d:42:4f:cd:ee:1e:1a:1a: 07:ff:b2:10:e3:f0:94:46:48:e0:15:64:13:b7:97: e1:aa:99:e7:d0:d2:25:13:ea:00:61:44:ea:76:c0: a6:f2:6c:26:49:fb:6b:d9:51:51:46:41:9b:d1:03: 52:d5:6a:3a:a9:98:29:4f:de:8e:e5:74:7b:2f:6c: a3:3c:3f:b3:fc:99:86:50:3b:4f:18:c0:f1:ed:0f: 9c:b5:86:16:07:9a:93:1b:46:e1:32:c0:a9:04:df: ce:fb:5b:e6:e2:67:fa:c7:6c:bf:e6:1b:bd:bd:18: ca:33:06:28:2f:35:b4:01:bf:af:a5:5f:7d:9f:95: 37:3f:05:fe:d4:10:21:f0:12:e0:27:89:40:bd:5e: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F7:42:94:3B:DF:83:2A:B4:00:B3:8A:26:25:26:50:70:7C:27:99 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:67:a1:f9:10:43:4f:8d:cf:85:ed:a8:17:6a:66:3c:4a:32: 96:cc:05:f6:26:7f:c5:67:5c:55:7a:e8:fa:3c:c4:c0:85:5f: e1:cd:b8:bc:5a:64:48:b6:99:59:93:ca:ad:98:c0:2e:3e:64: 6e:91:ff:ee:27:5c:b6:44:f4:0b:61:62:ef:04:12:41:1e:4d: da:ce:6b:80:e2:b8:f7:33:ba:1a:33:75:f0:5e:3b:ce:10:54: e8:6f:47:3e:b0:bb:d3:54:5f:7f:db:97:ee:da:fd:54:c1:e5: 63:9e:7a:2e:e5:bc:09:0d:af:70:a5:fc:84:a1:0e:12:6b:cb: 07:ae:72:d7:ca:70:5d:e9:68:05:8b:10:ce:e0:fa:04:b2:68: 74:f1:50:de:6d:f1:89:e4:3d:47:74:4e:58:6e:77:02:5d:13: 33:02:eb:b7:7c:2e:0f:3b:29:41:11:df:b5:22:89:13:68:e5: 08:2f:40:d9:51:d0:7c:90:ed:9e:75:73:3f:5e:95:63:76:e7: c0:c2:0b:10:e0:2e:df:73:de:c8:f5:90:ed:61:d8:ae:06:20: fb:e5:7a:bd:4c:c0:0f:b6:f7:e2:4e:f9:d5:ee:c4:96:64:3a: 1e:e7:7e:c4:82:cd:e6:3d:33:7d:5f:6d:bf:66:b5:80:22:c1: 46:35:92:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBk61RIuYk+feJEEQ0EUsNwPofMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTA4MjIyMzQ2MjFaFw0yNTA4MjYwMTM5MjFaMDMxMTAvBgNV BAMTKDkzRjc0Mjk0M0JERjgzMkFCNDAwQjM4QTI2MjUyNjUwNzA3QzI3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EcwHRwCJOttDAsS2h7GuIZW6 LOlhgpl4L9h8dBfm8UzTb/rIG6xCtZcclQhqTiY+Zzj0sjH3FJrRFDEvUtjBM0Jq nY2SdFyUf2KbckZuyUC+xW8vA8/5t54gxwaoQDl9fz6Nw4T5UJAQkhgCMBZdQk/N 7h4aGgf/shDj8JRGSOAVZBO3l+GqmefQ0iUT6gBhROp2wKbybCZJ+2vZUVFGQZvR A1LVajqpmClP3o7ldHsvbKM8P7P8mYZQO08YwPHtD5y1hhYHmpMbRuEywKkE3877 W+biZ/rHbL/mG729GMozBigvNbQBv6+lX32flTc/Bf7UECHwEuAniUC9XngfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/dClDvfgyq0ALOKJiUmUHB8J5kwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxnofkQQ0+Nz4XtqBdqZjxKMpbMBfYmf8Vn XFV66Po8xMCFX+HNuLxaZEi2mVmTyq2YwC4+ZG6R/+4nXLZE9AthYu8EEkEeTdrO a4DiuPczuhozdfBeO84QVOhvRz6wu9NUX3/bl+7a/VTB5WOeei7lvAkNr3Cl/ISh DhJryweuctfKcF3paAWLEM7g+gSyaHTxUN5t8YnkPUd0TlhudwJdEzMC67d8Lg87 KUER37UiiRNo5QgvQNlR0HyQ7Z51cz9elWN258DCCxDgLt9z3sj1kO1h2K4GIPvl er1MwA+29+JO+dXuxJZkOh7nfsSCzeY9M31fbb9mtYAiwUY1kjY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:40:29 2025 by rpki-client