$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: Nj8BpVoTgCFh/lNPo2tWoZeP7cM37lsJ63i22K+bcLU= Subject key identifier: F6:5B:87:1C:C4:5C:B4:24:B4:F3:33:54:70:7E:48:DE:2D:B0:BC:CD Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 652B22FDB1CD374FB1974E94F52CBE0785590A6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 0312 Signing time: Sat 28 Jun 2025 12:01:38 +0000 Manifest this update: Sat 28 Jun 2025 11:56:38 +0000 Manifest next update: Tue 01 Jul 2025 12:06:38 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 2: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) 3: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: BuVdKtrHJABcSd6KqCIEOGCQzu7wuEu6XNdjQSsDn8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2b:22:fd:b1:cd:37:4f:b1:97:4e:94:f5:2c:be:07:85:59:0a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Jun 28 11:56:38 2025 GMT Not After : Jul 1 12:06:38 2025 GMT Subject: CN=F65B871CC45CB424B4F33354707E48DE2DB0BCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:10:83:8a:04:69:9d:34:79:68:b4:20:62: 87:e9:d6:86:34:17:54:27:bc:5b:bd:99:66:c1:11: f4:5d:7f:a2:f0:28:d7:1c:81:f3:3f:ae:8b:ce:3e: 1d:4e:f0:ed:1e:ed:49:47:2e:de:e9:7f:e2:ce:f4: 2d:08:4f:46:81:1f:55:70:37:70:3b:fa:be:71:92: 7d:c4:f8:7f:f6:52:55:1b:d5:63:df:3e:7a:21:f6: 84:6a:47:79:b3:53:ae:e0:04:db:bf:c5:6a:7d:01: 86:49:56:00:cd:cf:20:ce:e4:b4:eb:0a:42:f3:ef: 0c:5d:d5:1b:0e:04:bf:45:6d:5d:0d:92:84:d9:68: b6:0a:15:96:63:27:af:6d:02:8a:28:75:d0:dd:23: e2:d8:f1:6a:bf:39:23:eb:71:ae:b9:20:35:a1:7c: 33:9e:5f:c9:fa:7a:9a:5d:b5:84:df:1f:ff:e5:2e: ba:8a:79:06:2b:a7:5c:e4:45:c0:ec:b3:9b:b7:24: 52:54:87:0a:ca:a5:51:7d:9c:da:ab:bb:2a:d6:80: ad:58:8e:6d:60:54:da:7e:b9:8d:8b:78:94:95:22: 14:9b:80:cd:25:0c:c7:b8:1f:23:18:04:46:5e:da: 64:09:c2:97:53:06:77:d5:b3:f7:80:ac:dd:9b:af: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:87:1C:C4:5C:B4:24:B4:F3:33:54:70:7E:48:DE:2D:B0:BC:CD X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a4:15:43:f5:7f:09:59:2d:51:23:08:3f:b1:20:ef:15:65: 68:9e:1c:31:74:43:44:a4:51:6c:f4:36:f7:9a:4b:71:b9:d9: e8:35:e3:10:50:f0:28:85:a3:de:f1:9c:c0:e1:30:33:66:d4: 5e:56:84:d3:9a:2b:9e:09:c2:e2:0d:da:f6:96:dc:36:3d:96: 3d:9f:f5:7a:fd:61:de:2f:4c:8a:83:80:40:26:96:07:d4:31: 56:17:92:18:03:a7:d4:09:bd:fa:47:f1:3c:ba:07:6d:b9:94: ec:c4:89:23:80:37:01:ce:88:a8:4e:8f:b3:28:73:d1:e8:c8: e1:25:b7:5b:08:e3:5b:1e:34:1d:1d:bd:ab:16:5e:7d:93:95: 0c:0b:bb:c6:1f:86:10:c6:68:0a:52:f0:1e:5b:49:2f:09:10: bb:d2:df:c2:1f:3c:8f:c4:e8:fd:80:e3:25:cf:83:24:ea:c9: 43:77:20:23:ec:22:fc:0e:ee:97:00:49:b6:db:f1:5e:72:d7: 4c:a5:85:81:a2:ee:ea:85:bd:45:a7:d6:c9:e4:75:ce:a2:26: 7d:c7:9f:8c:92:ba:31:e1:68:3c:65:e7:9f:99:e7:3d:7b:54: c9:8c:7a:b4:73:e0:b6:0f:4e:78:c6:4f:53:0b:5d:c7:7d:54: a3:81:b0:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSsi/bHNN0+xl06U9Sy+B4VZCm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTA2MjgxMTU2MzhaFw0yNTA3MDExMjA2MzhaMDMxMTAvBgNV BAMTKEY2NUI4NzFDQzQ1Q0I0MjRCNEYzMzM1NDcwN0U0OERFMkRCMEJDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hBCDigRpnTR5aLQgYofp1oY0 F1QnvFu9mWbBEfRdf6LwKNccgfM/rovOPh1O8O0e7UlHLt7pf+LO9C0IT0aBH1Vw N3A7+r5xkn3E+H/2UlUb1WPfPnoh9oRqR3mzU67gBNu/xWp9AYZJVgDNzyDO5LTr CkLz7wxd1RsOBL9FbV0NkoTZaLYKFZZjJ69tAoooddDdI+LY8Wq/OSPrca65IDWh fDOeX8n6eppdtYTfH//lLrqKeQYrp1zkRcDss5u3JFJUhwrKpVF9nNqruyrWgK1Y jm1gVNp+uY2LeJSVIhSbgM0lDMe4HyMYBEZe2mQJwpdTBnfVs/eArN2br7Z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9luHHMRctCS08zNUcH5I3i2wvM0wHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+kFUP1fwlZLVEjCD+xIO8VZWieHDF0Q0Sk UWz0NveaS3G52eg14xBQ8CiFo97xnMDhMDNm1F5WhNOaK54JwuIN2vaW3DY9lj2f 9Xr9Yd4vTIqDgEAmlgfUMVYXkhgDp9QJvfpH8Ty6B225lOzEiSOANwHOiKhOj7Mo c9HoyOElt1sI41seNB0dvasWXn2TlQwLu8YfhhDGaApS8B5bSS8JELvS38IfPI/E 6P2A4yXPgyTqyUN3ICPsIvwO7pcASbbb8V5y10ylhYGi7uqFvUWn1snkdc6iJn3H n4ySujHhaDxl55+Z5z17VMmMerRz4LYPTnjGT1MLXcd9VKOBsO4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:30:40 2025 by rpki-client