$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: TPaqapIftQ/+YMwbhdOLBPIfVMWCkrTaNJ4XrJaWCwE= Subject key identifier: D5:F0:08:F0:7E:AF:27:FF:65:72:C9:61:22:64:20:94:AA:EC:E6:B0 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 646244BBB74508DC109E6BFB369551FE7BF200D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 0345 Signing time: Mon 20 Oct 2025 00:11:40 +0000 Manifest this update: Mon 20 Oct 2025 00:06:40 +0000 Manifest next update: Thu 23 Oct 2025 11:19:40 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) 2: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 3: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: ki/Ymk7Y7YcSzdvVzgm1UbJzGNVU6D+K+mWOyAPGWC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:62:44:bb:b7:45:08:dc:10:9e:6b:fb:36:95:51:fe:7b:f2:00:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Oct 20 00:06:40 2025 GMT Not After : Oct 23 11:19:40 2025 GMT Subject: CN=D5F008F07EAF27FF6572C96122642094AAECE6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:c7:32:c6:b0:67:13:c0:c3:e6:0d:f2:71: 00:70:b2:92:4b:29:f7:99:58:1c:97:22:7f:95:f1: 7e:ee:0a:39:88:c0:d3:f9:af:b1:7a:5e:3c:93:e2: 59:57:57:c4:f9:64:d8:8f:e2:34:00:90:d2:bd:22: ef:8a:e1:a3:21:2f:f5:ae:4e:72:f1:12:f8:64:18: cc:56:39:f4:27:a4:70:e8:00:ef:d1:14:a1:4f:24: d7:34:21:5f:ba:b3:82:32:47:4c:05:8b:dc:f2:23: e4:16:c2:1f:5c:a8:5c:f0:63:40:5c:40:52:4b:b2: b2:41:ba:fe:0b:eb:81:ed:db:dd:06:a0:ac:c8:c8: cf:00:85:47:d7:b8:32:2d:5e:1a:8b:71:f9:46:5e: 61:d3:c0:23:9e:3d:0d:f2:9a:5f:06:d5:43:26:3d: a8:c3:35:76:f9:30:7a:01:77:e5:94:43:34:c1:3a: a0:51:b2:d2:ec:82:1b:86:61:3a:55:4d:2a:95:47: 3a:c2:1c:c4:ee:d1:3a:09:2f:4b:c1:c9:24:1f:1a: 62:c4:7b:69:52:82:4a:a8:ea:0b:8f:c0:6e:5a:34: 1a:58:43:62:d5:b8:ff:f1:6e:cb:08:80:21:e4:8b: 67:a2:79:e4:1e:d0:43:bb:03:12:24:37:01:84:87: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F0:08:F0:7E:AF:27:FF:65:72:C9:61:22:64:20:94:AA:EC:E6:B0 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ad:3f:5c:87:5d:74:4e:34:10:3b:b0:b1:e8:41:73:f9:1b: 4d:6d:a0:64:9d:e4:b4:f6:34:d1:d1:7d:ba:a8:79:25:26:c1: 36:f6:4d:ad:f7:30:27:fd:06:ae:39:2d:ed:2e:d5:e6:e4:ec: a9:79:7e:f4:d7:61:49:42:d6:0b:a4:7c:74:8a:da:19:7d:da: d0:97:de:d4:10:b6:d3:ca:30:d1:c0:62:26:79:4e:19:03:ee: a6:98:7d:dd:4b:cb:b6:80:d3:99:37:eb:d8:59:e9:4c:e7:87: e9:29:2c:fa:77:15:89:3e:7c:d4:91:2c:6b:f7:1d:29:2c:5e: 24:77:5e:d8:c2:4d:29:ac:82:67:24:ac:b6:ec:30:78:3e:19: 21:39:82:1e:04:83:7a:89:6b:9f:1c:91:50:f3:ed:95:f9:34: db:14:48:c6:5c:37:5d:eb:87:57:59:9e:9e:6d:e0:db:20:2b: 29:3c:0e:d5:91:55:c8:c0:43:08:9a:9d:23:50:44:fa:f3:1a: 73:a1:fd:2d:8d:73:dc:ca:0f:6a:8f:f3:0a:c0:f2:8c:5d:ee: 67:97:f4:16:13:ab:c5:44:45:0e:9e:1a:76:11:e2:5b:f6:fe: e9:5f:09:0d:3d:a3:7c:98:af:88:38:d1:64:7b:f2:7f:14:e1: f9:98:8e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGJEu7dFCNwQnmv7NpVR/nvyANIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTEwMjAwMDA2NDBaFw0yNTEwMjMxMTE5NDBaMDMxMTAvBgNV BAMTKEQ1RjAwOEYwN0VBRjI3RkY2NTcyQzk2MTIyNjQyMDk0QUFFQ0U2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/McyxrBnE8DD5g3ycQBwspJL KfeZWByXIn+V8X7uCjmIwNP5r7F6XjyT4llXV8T5ZNiP4jQAkNK9Iu+K4aMhL/Wu TnLxEvhkGMxWOfQnpHDoAO/RFKFPJNc0IV+6s4IyR0wFi9zyI+QWwh9cqFzwY0Bc QFJLsrJBuv4L64Ht290GoKzIyM8AhUfXuDItXhqLcflGXmHTwCOePQ3yml8G1UMm PajDNXb5MHoBd+WUQzTBOqBRstLsghuGYTpVTSqVRzrCHMTu0ToJL0vBySQfGmLE e2lSgkqo6guPwG5aNBpYQ2LVuP/xbssIgCHki2eieeQe0EO7AxIkNwGEhyfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fAI8H6vJ/9lcslhImQglKrs5rAwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGtP1yHXXRONBA7sLHoQXP5G01toGSd5LT2 NNHRfbqoeSUmwTb2Ta33MCf9Bq45Le0u1ebk7Kl5fvTXYUlC1gukfHSK2hl92tCX 3tQQttPKMNHAYiZ5ThkD7qaYfd1Ly7aA05k369hZ6Uznh+kpLPp3FYk+fNSRLGv3 HSksXiR3XtjCTSmsgmckrLbsMHg+GSE5gh4Eg3qJa58ckVDz7ZX5NNsUSMZcN13r h1dZnp5t4NsgKyk8DtWRVcjAQwianSNQRPrzGnOh/S2Nc9zKD2qP8wrA8oxd7meX 9BYTq8VERQ6eGnYR4lv2/ulfCQ09o3yYr4g40WR78n8U4fmYjhc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:00 2025 by rpki-client