$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: a8ZyJn7KtpFOW6cnS2YNmrQe9DgzjoLhjsiB/2ZxzFg= Subject key identifier: 89:EF:8E:1A:4F:33:19:FF:72:55:AE:12:70:FC:71:A3:C5:93:70:F2 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 0BF00F5028A2383739460BB3C678FFEB9A22CDF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 04F1 Signing time: Mon 21 Jul 2025 18:21:42 +0000 Manifest this update: Mon 21 Jul 2025 18:16:42 +0000 Manifest next update: Fri 25 Jul 2025 00:09:42 +0000 Files and hashes: 1: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 2: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: AGSjJh0fg/Nm4U1A5/PJUJsfpLMTy8Zte17AAuL9Npw=) 3: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f0:0f:50:28:a2:38:37:39:46:0b:b3:c6:78:ff:eb:9a:22:cd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Jul 21 18:16:42 2025 GMT Not After : Jul 25 00:09:42 2025 GMT Subject: CN=89EF8E1A4F3319FF7255AE1270FC71A3C59370F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:1b:1b:b2:a1:16:c3:8c:37:a1:de:07:ba: bf:9e:a1:85:6f:d3:c7:03:1e:18:8b:b4:eb:8d:b8: 84:80:3d:90:50:cb:75:24:a7:01:f7:cc:6e:12:24: b9:7b:1f:7d:11:e8:2a:8a:59:e7:c0:e2:8c:bd:36: b7:93:f5:f2:22:f9:88:29:c3:e4:16:7d:59:9d:e4: 15:d4:7f:3e:cf:41:87:9e:e4:88:b6:e4:d1:de:15: ee:aa:b4:94:4a:2a:77:cc:78:4a:69:15:7e:63:4e: 68:35:2b:0a:0b:b3:30:f0:9b:31:bd:25:a0:d3:51: f0:aa:3e:a4:1e:73:b5:84:13:24:0d:90:37:cf:8b: be:6e:9a:31:64:a3:34:46:3e:25:0c:43:6f:37:d5: 86:64:26:c8:03:22:a6:66:8c:b2:90:98:e2:60:eb: c8:9c:a5:b8:c5:8a:fb:ff:ff:81:75:86:97:b4:57: f8:a0:1f:75:22:cb:c9:65:83:1d:94:7d:b0:c3:cd: 48:d6:a5:97:14:5f:0d:bb:7e:47:35:f4:27:a5:b6: 82:8e:93:a4:f6:6c:c3:82:a2:68:d9:cc:a6:eb:1a: b4:f6:43:14:28:b0:51:8a:0a:1e:9e:b3:41:ee:85: 6b:3a:1a:ff:f4:2e:1b:3d:6c:6f:d2:b1:5d:0c:b7: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:8E:1A:4F:33:19:FF:72:55:AE:12:70:FC:71:A3:C5:93:70:F2 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:72:1f:01:19:fc:8b:64:68:d2:61:c3:3b:28:92:d4:8d:8f: 6f:bb:cf:1c:5b:68:0a:a0:c0:4a:f6:f4:09:d0:46:09:61:3e: 50:97:d9:e6:0c:3c:f4:94:6c:e6:d3:fd:70:22:b3:e0:a1:83: be:79:7d:25:0b:b4:07:9b:18:b7:39:15:c1:4b:00:da:7e:8d: e4:78:fb:da:8a:54:a0:80:fb:4b:80:bb:1a:af:99:26:8a:c4: fe:6f:0c:31:17:97:ec:10:96:b4:28:70:9b:79:04:4c:18:a5: 41:58:68:b8:3f:5d:5e:53:92:9d:92:90:03:da:39:8d:5e:39: f5:a8:c2:13:95:b7:67:8d:96:22:ea:4e:69:b0:f2:02:7c:3d: 80:07:35:40:e9:c8:52:71:94:e7:f9:41:4d:89:52:91:b5:06: 07:eb:7d:4c:7b:01:39:0d:8b:98:c8:e4:63:53:22:e6:a3:8d: 23:8e:c3:d5:8d:a2:c3:f4:8d:4e:3e:82:9e:55:8f:75:9c:f3: 87:cb:01:3e:64:a3:80:d7:89:02:10:cc:73:7b:22:d7:3e:3b: f5:d6:99:cf:87:bf:ba:39:45:b6:2d:e4:0a:2e:6e:c6:60:eb: 08:21:80:98:de:60:50:25:83:f3:3f:8e:63:1d:ac:bc:91:84: df:ae:f8:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/APUCiiODc5Rguzxnj/65oizfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTA3MjExODE2NDJaFw0yNTA3MjUwMDA5NDJaMDMxMTAvBgNV BAMTKDg5RUY4RTFBNEYzMzE5RkY3MjU1QUUxMjcwRkM3MUEzQzU5MzcwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUBsbsqEWw4w3od4Hur+eoYVv 08cDHhiLtOuNuISAPZBQy3UkpwH3zG4SJLl7H30R6CqKWefA4oy9NreT9fIi+Ygp w+QWfVmd5BXUfz7PQYee5Ii25NHeFe6qtJRKKnfMeEppFX5jTmg1KwoLszDwmzG9 JaDTUfCqPqQec7WEEyQNkDfPi75umjFkozRGPiUMQ2831YZkJsgDIqZmjLKQmOJg 68icpbjFivv//4F1hpe0V/igH3Uiy8llgx2UfbDDzUjWpZcUXw27fkc19CeltoKO k6T2bMOComjZzKbrGrT2QxQosFGKCh6es0HuhWs6Gv/0Lhs9bG/SsV0Mt1jhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUie+OGk8zGf9yVa4ScPxxo8WTcPIwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVyHwEZ/ItkaNJhwzsoktSNj2+7zxxbaAqg wEr29AnQRglhPlCX2eYMPPSUbObT/XAis+Chg755fSULtAebGLc5FcFLANp+jeR4 +9qKVKCA+0uAuxqvmSaKxP5vDDEXl+wQlrQocJt5BEwYpUFYaLg/XV5Tkp2SkAPa OY1eOfWowhOVt2eNliLqTmmw8gJ8PYAHNUDpyFJxlOf5QU2JUpG1BgfrfUx7ATkN i5jI5GNTIuajjSOOw9WNosP0jU4+gp5Vj3Wc84fLAT5ko4DXiQIQzHN7Itc+O/XW mc+Hv7o5RbYt5AoubsZg6wghgJjeYFAlg/M/jmMdrLyRhN+u+IE= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:13 2025 by rpki-client