$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: wOjDKq6YjieFqWcBWcAtsp20NksA/Sr/1m8qhp11flU= Subject key identifier: 11:2B:68:1F:02:E9:A0:D8:FC:F3:35:6E:66:4F:51:AF:7D:F0:DD:57 Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 42734235D97A3E4CC94BF086640D6FAB5C742BDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 0524 Signing time: Sun 16 Nov 2025 06:42:13 +0000 Manifest this update: Sun 16 Nov 2025 06:37:13 +0000 Manifest next update: Wed 19 Nov 2025 10:33:13 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) 2: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: llD3XB86o10e3xUOr+HzxR1/3YRQYHwVxq3YZc4cbh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 10:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:73:42:35:d9:7a:3e:4c:c9:4b:f0:86:64:0d:6f:ab:5c:74:2b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Nov 16 06:37:13 2025 GMT Not After : Nov 19 10:33:13 2025 GMT Subject: CN=112B681F02E9A0D8FCF3356E664F51AF7DF0DD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:3d:bb:6c:47:bf:ab:8a:25:60:a7:48:71: 10:bc:05:49:45:0d:ad:de:d1:ed:09:fa:e9:bb:1e: 8c:10:5d:46:58:60:f5:85:b4:8b:22:b7:c8:0f:9c: 66:48:e3:a5:c0:c4:31:76:31:24:b2:57:4e:6d:31: 7d:68:fe:22:73:3e:4f:63:ca:2f:f3:18:8f:46:50: 89:17:ee:22:c3:bf:1e:59:c7:40:35:cf:a0:ac:17: 96:78:d9:80:3e:73:f1:d5:65:15:e3:63:31:a5:86: 61:22:50:3d:aa:f9:32:a2:0e:e6:83:0a:9c:0e:e7: 13:64:2d:bd:b0:6c:70:35:c4:86:e7:22:eb:c6:44: c3:0d:e5:81:0c:8f:90:c0:da:ae:48:89:1e:ce:39: ee:0c:75:7e:82:cb:eb:08:24:94:6f:e5:bc:f2:57: 83:7a:7e:c2:20:ce:28:b8:c6:22:9c:0e:b9:b8:c2: 2b:e8:1f:bb:fc:82:24:bc:45:70:fe:53:41:25:eb: b6:78:69:63:57:da:7b:ac:06:d9:d4:8f:dd:79:50: 75:fc:6f:d4:b8:41:83:81:0a:9b:6b:95:c3:74:20: f3:09:65:f0:26:e1:54:2b:e8:ea:63:67:88:a2:f1: 02:7a:5b:22:ee:b6:de:29:12:8c:5d:0b:aa:c0:55: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:68:1F:02:E9:A0:D8:FC:F3:35:6E:66:4F:51:AF:7D:F0:DD:57 X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8d:20:8d:89:97:42:fa:13:3a:07:17:ad:fb:ec:c4:bd:a8: 09:70:16:15:dc:17:c6:4c:02:90:3f:dc:7c:0a:f7:3d:6f:0d: db:b9:0c:81:88:d0:7f:ea:2e:11:8d:24:91:04:6b:74:ed:ac: 6a:48:89:94:46:9c:2b:96:2e:f4:da:5f:b0:61:f0:fc:fa:cc: 8b:13:50:8a:c3:b8:bc:67:87:a3:4d:ea:1f:2e:06:f9:90:d3: 77:a8:ce:8a:1c:4c:72:db:83:81:47:5a:38:b9:85:4f:fe:bb: 3a:a1:1a:95:20:64:02:c8:41:0f:d9:be:eb:1c:d9:a5:89:cc: f7:75:a2:86:c1:22:15:1c:82:c9:97:e9:09:0b:52:87:8a:b9: d7:5f:06:fb:d9:1e:d6:17:29:58:1a:b4:9b:49:d1:95:4f:cd: 9e:0a:2e:f7:51:08:0f:90:4b:7b:d3:48:90:ab:5b:55:10:ec: 4e:34:de:00:01:e0:95:23:63:6e:ab:18:b3:52:01:64:89:da: 4a:fa:42:e1:f2:73:da:29:b6:a6:93:3d:a3:ec:02:cd:b5:3b: 20:10:55:b4:bc:20:87:14:8d:2a:5e:39:dd:80:6c:7d:cf:55: 97:00:7b:51:cf:82:89:81:a8:aa:30:4b:f9:c8:00:f7:6a:31: bb:4d:26:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnNCNdl6PkzJS/CGZA1vq1x0K9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNTExMTYwNjM3MTNaFw0yNTExMTkxMDMzMTNaMDMxMTAvBgNV BAMTKDExMkI2ODFGMDJFOUEwRDhGQ0YzMzU2RTY2NEY1MUFGN0RGMERENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxT27bEe/q4olYKdIcRC8BUlF Da3e0e0J+um7HowQXUZYYPWFtIsit8gPnGZI46XAxDF2MSSyV05tMX1o/iJzPk9j yi/zGI9GUIkX7iLDvx5Zx0A1z6CsF5Z42YA+c/HVZRXjYzGlhmEiUD2q+TKiDuaD CpwO5xNkLb2wbHA1xIbnIuvGRMMN5YEMj5DA2q5IiR7OOe4MdX6Cy+sIJJRv5bzy V4N6fsIgzii4xiKcDrm4wivoH7v8giS8RXD+U0El67Z4aWNX2nusBtnUj915UHX8 b9S4QYOBCptrlcN0IPMJZfAm4VQr6OpjZ4ii8QJ6WyLutt4pEoxdC6rAVT4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEStoHwLpoNj88zVuZk9Rr33w3VcwHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCNII2Jl0L6EzoHF6377MS9qAlwFhXcF8ZM ApA/3HwK9z1vDdu5DIGI0H/qLhGNJJEEa3TtrGpIiZRGnCuWLvTaX7Bh8Pz6zIsT UIrDuLxnh6NN6h8uBvmQ03eozoocTHLbg4FHWji5hU/+uzqhGpUgZALIQQ/Zvusc 2aWJzPd1oobBIhUcgsmX6QkLUoeKuddfBvvZHtYXKVgatJtJ0ZVPzZ4KLvdRCA+Q S3vTSJCrW1UQ7E403gAB4JUjY26rGLNSAWSJ2kr6QuHyc9optqaTPaPsAs21OyAQ VbS8IIcUjSpeOd2AbH3PVZcAe1HPgomBqKowS/nIAPdqMbtNJvI= -----END CERTIFICATE-----Generated at Mon Nov 17 02:31:26 2025 by rpki-client