$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: KL9lP3Q4AptdWe9SsB3StlmqQ+rOnfkYe85saCObCY4= Subject key identifier: AD:C1:67:67:11:EE:16:0C:84:61:BE:39:CD:A8:95:7A:2B:A3:A0:75 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 2C72C8D4B6D0B405D4866BF82E01E87CE0538F31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 0386 Signing time: Mon 20 Oct 2025 04:31:22 +0000 Manifest this update: Mon 20 Oct 2025 04:26:22 +0000 Manifest next update: Thu 23 Oct 2025 16:26:22 +0000 Files and hashes: 1: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) 2: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: BTzSFnNZguC02fC4hc8XCZsqbrHzF3VG95AN/lzww0M=) 3: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 16:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:72:c8:d4:b6:d0:b4:05:d4:86:6b:f8:2e:01:e8:7c:e0:53:8f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Oct 20 04:26:22 2025 GMT Not After : Oct 23 16:26:22 2025 GMT Subject: CN=ADC1676711EE160C8461BE39CDA8957A2BA3A075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:7f:21:bf:78:b8:ad:17:f0:c4:0c:4a:e8: b6:c1:ab:e4:90:96:26:b9:5c:77:50:1e:a1:e2:6c: ad:ac:08:dd:48:84:0e:78:7a:f3:c4:2c:31:f7:db: 71:87:7a:96:e3:ea:6d:d7:d0:19:24:0e:ae:d6:8d: 33:6b:8c:a7:ba:ba:34:a6:05:eb:61:27:42:0d:d2: b8:9e:a8:30:5a:c6:7e:ec:7e:75:17:a3:11:ec:f7: 23:c9:1f:a2:b8:59:7d:85:94:9a:e3:32:bb:8b:34: 49:8e:c1:be:6b:2c:5a:75:c5:3e:4b:d4:44:af:80: 45:9d:65:c8:7a:34:4b:27:5c:21:18:25:9a:7b:be: 1e:18:4a:1b:40:ef:1e:28:a2:ab:54:60:59:cc:33: 92:ec:1d:57:fe:81:1f:da:00:2f:73:bd:27:cc:d2: f4:92:34:f5:3c:3b:09:fb:ca:fc:be:15:be:b8:38: 20:f0:b1:b6:7b:1c:9b:23:0b:79:f2:87:52:e2:a5: 5e:92:61:15:19:a9:3a:31:34:3f:22:b0:34:af:d2: 7d:ce:5a:b6:14:b6:a4:7b:56:53:e0:5b:57:11:ac: b9:b6:ba:8b:8f:cd:f7:4b:f8:66:44:b5:bd:27:ac: a3:c9:7a:a3:90:b0:46:f9:2b:da:2c:3a:a2:ec:cf: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C1:67:67:11:EE:16:0C:84:61:BE:39:CD:A8:95:7A:2B:A3:A0:75 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:8e:bc:5f:47:a5:19:35:ea:dc:90:46:75:e9:ad:66:df:53: 8b:b8:63:19:b7:83:80:a6:87:f6:24:34:4f:24:c6:53:0c:75: 70:55:1b:53:47:67:62:95:dd:41:ee:e2:c9:86:f7:42:98:75: 0f:6f:6c:3d:4d:28:1f:99:48:93:3d:84:1b:93:7e:f0:4a:b3: ec:7d:04:64:cf:bc:2f:63:96:c6:2a:e1:b5:ff:68:7a:f0:3c: b6:71:26:cf:76:96:b8:d1:a2:c0:4e:09:ba:3b:44:4a:21:46: 4f:e3:62:22:ad:56:8b:ab:59:e2:62:bb:e7:48:ce:bb:a1:54: 04:d6:31:dc:d3:3d:0a:3c:3a:a3:72:a8:c1:f7:1e:ee:dc:99: db:ba:19:e1:5d:a0:42:f9:9d:5d:1a:ff:d9:de:1b:5b:9f:e0: e9:f6:3b:2c:d4:43:94:d5:66:ef:38:80:4b:6d:e8:af:d1:0d: 8d:57:c5:ad:4b:0a:98:41:a9:a9:dc:22:85:dc:99:ee:a8:17: ed:b8:bc:3d:c4:e2:1b:24:e6:2f:c3:82:2e:14:c1:62:e1:2f: 7c:9d:5f:ed:1d:04:d9:69:60:7f:80:c9:50:c2:99:26:7e:8a: ce:ad:11:8e:82:05:5c:1a:98:df:71:7b:56:84:f5:8a:10:8c: 5e:ab:2a:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHLI1LbQtAXUhmv4LgHofOBTjzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTEwMjAwNDI2MjJaFw0yNTEwMjMxNjI2MjJaMDMxMTAvBgNV BAMTKEFEQzE2NzY3MTFFRTE2MEM4NDYxQkUzOUNEQTg5NTdBMkJBM0EwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnB38hv3i4rRfwxAxK6LbBq+SQ lia5XHdQHqHibK2sCN1IhA54evPELDH323GHepbj6m3X0BkkDq7WjTNrjKe6ujSm BethJ0IN0rieqDBaxn7sfnUXoxHs9yPJH6K4WX2FlJrjMruLNEmOwb5rLFp1xT5L 1ESvgEWdZch6NEsnXCEYJZp7vh4YShtA7x4ooqtUYFnMM5LsHVf+gR/aAC9zvSfM 0vSSNPU8Own7yvy+Fb64OCDwsbZ7HJsjC3nyh1LipV6SYRUZqToxND8isDSv0n3O WrYUtqR7VlPgW1cRrLm2uouPzfdL+GZEtb0nrKPJeqOQsEb5K9osOqLsz/NzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrcFnZxHuFgyEYb45zaiVeiujoHUwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmOvF9HpRk16tyQRnXprWbfU4u4Yxm3g4Cm h/YkNE8kxlMMdXBVG1NHZ2KV3UHu4smG90KYdQ9vbD1NKB+ZSJM9hBuTfvBKs+x9 BGTPvC9jlsYq4bX/aHrwPLZxJs92lrjRosBOCbo7REohRk/jYiKtVourWeJiu+dI zruhVATWMdzTPQo8OqNyqMH3Hu7cmdu6GeFdoEL5nV0a/9neG1uf4On2OyzUQ5TV Zu84gEtt6K/RDY1Xxa1LCphBqancIoXcme6oF+24vD3E4hsk5i/Dgi4UwWLhL3yd X+0dBNlpYH+AyVDCmSZ+is6tEY6CBVwamN9xe1aE9YoQjF6rKqI= -----END CERTIFICATE-----Generated at Tue Oct 21 03:04:49 2025 by rpki-client