$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: JHP2t6JsG3CyvWKe4sw4OyRpxpuO09o0JmEWczdgRaM= Subject key identifier: 8A:CA:53:5C:D5:64:D2:EF:20:10:F1:A7:26:9E:11:9F:A0:9B:C1:41 Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 5264532BB335D4F8C1A2967E17CAAE35E927D843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 04EF Signing time: Sat 19 Jul 2025 14:42:06 +0000 Manifest this update: Sat 19 Jul 2025 14:37:06 +0000 Manifest next update: Tue 22 Jul 2025 20:58:06 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) 2: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: YVAdVwyt68EZITuVuIP2q1xhHmiJMb7nQNAH1QZNRHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:64:53:2b:b3:35:d4:f8:c1:a2:96:7e:17:ca:ae:35:e9:27:d8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Jul 19 14:37:06 2025 GMT Not After : Jul 22 20:58:06 2025 GMT Subject: CN=8ACA535CD564D2EF2010F1A7269E119FA09BC141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:9e:c6:55:98:95:c6:0e:90:a1:89:55:a3: ac:5e:f0:c8:fd:3f:91:84:ea:b9:9e:9e:58:e4:88: 7e:14:3a:68:4e:9c:6b:96:5f:b2:44:2e:7d:fb:36: ad:64:24:3f:5b:17:b8:52:31:99:0c:d3:d5:26:95: b1:b0:8e:68:1b:f0:19:8a:eb:87:16:84:72:01:9a: 0e:fd:73:96:02:9a:60:ee:1f:f1:c2:a2:e9:ea:28: ee:98:40:51:ba:6d:2f:16:b2:00:f4:42:bc:a4:e0: 17:42:8a:25:aa:df:0a:74:f4:ab:a3:01:97:db:8f: 46:77:09:9b:d3:5f:79:d1:ab:60:0d:65:07:ad:fd: 7e:02:3a:7b:dd:63:8a:97:16:02:1e:b2:b8:13:3f: 28:fb:60:eb:24:a3:35:b4:04:2d:e8:17:f6:5b:cd: 06:9d:f9:06:33:55:6d:d5:a5:6c:79:21:6d:7d:d6: 5e:27:7e:96:7b:9d:37:fd:e0:a0:12:f3:fb:d8:f2: 15:f8:2d:5d:34:5d:6f:3a:68:e1:19:02:91:c9:5a: 1e:bd:47:84:bf:1b:3b:84:c8:ba:eb:de:00:43:e5: f2:af:19:be:a9:83:79:5c:24:78:e5:5e:5a:d2:b1: c9:35:21:b8:9f:c7:57:fa:51:c6:9c:7f:42:4d:42: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CA:53:5C:D5:64:D2:EF:20:10:F1:A7:26:9E:11:9F:A0:9B:C1:41 X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:12:cb:75:bf:d3:35:fd:a9:24:d7:ce:99:fc:7d:45:1f:ea: a8:a9:b9:a2:c6:80:59:b4:65:49:7c:0f:0c:eb:38:4e:cb:14: f0:79:d1:18:41:96:b2:95:28:fe:66:c6:4c:be:53:8d:33:d2: c1:c2:40:90:8f:92:6a:75:3e:94:7d:21:b5:bb:42:06:f1:2f: 3b:2a:b9:1c:fc:19:f7:ee:5f:f0:b1:68:db:3d:47:c5:a7:2e: 8f:35:b8:4f:01:2a:99:2e:00:43:c8:70:f0:d0:ea:8c:fb:90: d6:fa:bf:32:96:91:00:77:81:6c:1f:f6:42:73:70:90:5a:37: e4:42:84:20:14:df:08:d7:aa:32:a3:85:37:12:65:20:1f:2a: 19:fa:a6:4b:e3:d7:a6:d7:a0:4f:87:6b:41:63:6f:6c:fd:5b: d6:76:83:75:cb:ef:ad:ac:f9:86:03:5b:46:58:88:60:b1:84: 5f:2b:86:d9:e0:95:85:6e:1e:fd:5d:dd:9f:8c:a4:69:6f:a7: 2f:05:6a:fc:e8:02:14:d3:1a:eb:5f:5d:8a:7d:a3:4f:e7:9b: 97:fd:2d:3d:e8:12:11:98:24:b6:3c:8d:00:36:4b:ee:8a:d6: d3:20:7c:0f:87:18:46:58:2c:6f:07:94:41:25:7e:2f:c8:56: ae:22:29:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmRTK7M11PjBopZ+F8quNekn2EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNTA3MTkxNDM3MDZaFw0yNTA3MjIyMDU4MDZaMDMxMTAvBgNV BAMTKDhBQ0E1MzVDRDU2NEQyRUYyMDEwRjFBNzI2OUUxMTlGQTA5QkMxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80p7GVZiVxg6QoYlVo6xe8Mj9 P5GE6rmenljkiH4UOmhOnGuWX7JELn37Nq1kJD9bF7hSMZkM09UmlbGwjmgb8BmK 64cWhHIBmg79c5YCmmDuH/HCounqKO6YQFG6bS8WsgD0Qryk4BdCiiWq3wp09Kuj AZfbj0Z3CZvTX3nRq2ANZQet/X4COnvdY4qXFgIesrgTPyj7YOskozW0BC3oF/Zb zQad+QYzVW3VpWx5IW191l4nfpZ7nTf94KAS8/vY8hX4LV00XW86aOEZApHJWh69 R4S/GzuEyLrr3gBD5fKvGb6pg3lcJHjlXlrSsck1Ibifx1f6Ucacf0JNQiTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUispTXNVk0u8gEPGnJp4Rn6CbwUEwHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUSy3W/0zX9qSTXzpn8fUUf6qipuaLGgFm0 ZUl8DwzrOE7LFPB50RhBlrKVKP5mxky+U40z0sHCQJCPkmp1PpR9IbW7QgbxLzsq uRz8GffuX/CxaNs9R8WnLo81uE8BKpkuAEPIcPDQ6oz7kNb6vzKWkQB3gWwf9kJz cJBaN+RChCAU3wjXqjKjhTcSZSAfKhn6pkvj16bXoE+Ha0Fjb2z9W9Z2g3XL762s +YYDW0ZYiGCxhF8rhtnglYVuHv1d3Z+MpGlvpy8FavzoAhTTGutfXYp9o0/nm5f9 LT3oEhGYJLY8jQA2S+6K1tMgfA+HGEZYLG8HlEElfi/IVq4iKak= -----END CERTIFICATE-----Generated at Mon Jul 21 02:12:22 2025 by rpki-client