$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: d9TPIO3i97yyLeHED08JIAwW4yFofTSkoIFhkMxyG0k= Subject key identifier: 0B:3D:99:EA:CE:57:DE:91:B2:FE:37:AF:4B:FA:4B:17:A2:BD:3B:16 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 38FBC7CDFE500DA6544BCB016C40AC77A542EC7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 032B Signing time: Sat 23 Aug 2025 01:41:45 +0000 Manifest this update: Sat 23 Aug 2025 01:36:45 +0000 Manifest next update: Tue 26 Aug 2025 04:13:45 +0000 Files and hashes: 1: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: EYcnl9KsFwV3wPtr/OaGPDSrlFfEh1CMpnobPi893oo=) 2: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 3: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fb:c7:cd:fe:50:0d:a6:54:4b:cb:01:6c:40:ac:77:a5:42:ec:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Aug 23 01:36:45 2025 GMT Not After : Aug 26 04:13:45 2025 GMT Subject: CN=0B3D99EACE57DE91B2FE37AF4BFA4B17A2BD3B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1c:27:d7:c5:b2:62:99:bc:4d:99:7f:b4:90: c9:9f:9a:0e:92:4c:76:3c:5e:4d:11:33:87:a9:fc: 3a:68:ee:7f:47:36:93:29:1a:b5:fc:80:c0:77:78: a8:e6:af:c5:95:33:d4:3d:17:0f:97:6c:a0:f0:0c: 2c:aa:13:e8:ab:b6:cd:d3:b9:69:04:7a:f6:65:e7: a8:8b:84:c4:b4:5e:cf:61:7d:33:a0:62:27:78:a0: fa:f9:0c:2a:a4:13:9a:ed:ba:0a:d3:06:59:c2:72: 40:19:01:93:0f:b3:46:c6:b9:04:9b:9f:87:1d:31: d0:35:ec:fe:65:9e:fa:50:fa:3b:36:1e:af:ec:21: 1c:53:0f:62:1b:73:cf:59:b8:68:04:17:3f:3a:5c: a5:9b:74:b2:f2:16:02:3d:ad:e8:f1:26:2c:39:c2: 68:fe:4d:1d:ad:0c:54:d4:b9:fd:21:ea:82:68:50: e2:27:95:c9:4a:69:d9:69:18:15:99:e1:bf:28:7b: 0b:84:9b:67:d0:c6:58:bb:d2:c2:a2:74:3e:9b:40: 9c:70:2d:90:62:c3:6c:bc:24:97:71:ed:a7:fe:40: b5:dd:45:07:94:66:1a:c2:72:33:5d:73:b8:41:3c: ff:75:2b:be:a5:7d:40:0b:e1:04:69:54:93:67:0f: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3D:99:EA:CE:57:DE:91:B2:FE:37:AF:4B:FA:4B:17:A2:BD:3B:16 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:21:99:e9:62:92:cc:af:1d:98:b9:55:50:53:19:73:3c: cb:a1:de:28:c9:99:c9:f6:f5:bc:70:88:fb:0c:78:8d:d9:31: f8:09:57:1a:68:f1:2d:f7:27:12:71:00:f8:97:0f:95:be:6f: c7:14:02:6a:97:6a:6f:ea:de:c7:aa:71:46:e7:40:3a:40:a7: 50:65:10:21:be:16:76:6e:65:4c:85:7a:46:4c:73:45:60:19: b6:ec:24:59:5d:ac:d5:76:f8:e7:62:08:1d:d0:be:cf:2c:97: f6:94:22:87:c8:b7:7b:77:d5:07:70:ed:69:ec:51:cb:af:b7: ce:3f:05:41:fd:a1:7b:9c:fc:ab:b7:48:8f:d8:4e:53:20:84: 3e:24:26:41:d3:22:e4:4c:12:3d:11:13:5d:39:b5:86:a5:8c: 93:59:0c:df:44:0e:12:bc:7c:2e:60:48:12:cc:ef:94:ff:ce: a6:3c:f2:3f:7a:0b:16:28:3c:19:35:ef:36:5e:49:06:15:bc: 5f:3b:35:8b:05:9b:ad:7c:e4:fc:ff:a7:4b:d3:00:4d:76:36: a3:30:46:69:93:03:01:ce:c5:c4:3f:dc:4e:99:79:87:25:60: aa:1e:83:9c:e5:ad:b4:3e:45:1f:32:d8:16:12:ab:48:d1:4c: a4:ce:c5:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPvHzf5QDaZUS8sBbECsd6VC7HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTA4MjMwMTM2NDVaFw0yNTA4MjYwNDEzNDVaMDMxMTAvBgNV BAMTKDBCM0Q5OUVBQ0U1N0RFOTFCMkZFMzdBRjRCRkE0QjE3QTJCRDNCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHCfXxbJimbxNmX+0kMmfmg6S THY8Xk0RM4ep/Dpo7n9HNpMpGrX8gMB3eKjmr8WVM9Q9Fw+XbKDwDCyqE+irts3T uWkEevZl56iLhMS0Xs9hfTOgYid4oPr5DCqkE5rtugrTBlnCckAZAZMPs0bGuQSb n4cdMdA17P5lnvpQ+js2Hq/sIRxTD2Ibc89ZuGgEFz86XKWbdLLyFgI9rejxJiw5 wmj+TR2tDFTUuf0h6oJoUOInlclKadlpGBWZ4b8oewuEm2fQxli70sKidD6bQJxw LZBiw2y8JJdx7af+QLXdRQeUZhrCcjNdc7hBPP91K76lfUAL4QRpVJNnD86LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCz2Z6s5X3pGy/jevS/pLF6K9OxYwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExzIZnpYpLMrx2YuVVQUxlzPMuh3ijJmcn2 9bxwiPsMeI3ZMfgJVxpo8S33JxJxAPiXD5W+b8cUAmqXam/q3seqcUbnQDpAp1Bl ECG+FnZuZUyFekZMc0VgGbbsJFldrNV2+OdiCB3Qvs8sl/aUIofIt3t31Qdw7Wns Ucuvt84/BUH9oXuc/Ku3SI/YTlMghD4kJkHTIuRMEj0RE105tYaljJNZDN9EDhK8 fC5gSBLM75T/zqY88j96CxYoPBk17zZeSQYVvF87NYsFm6185Pz/p0vTAE12NqMw RmmTAwHOxcQ/3E6ZeYclYKoeg5zlrbQ+RR8y2BYSq0jRTKTOxSc= -----END CERTIFICATE-----Generated at Sun Aug 24 00:25:40 2025 by rpki-client