$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: G+A9u9zHyZCdl7PXAMjQH2CiRRdEQwTINa4c2ZPua2E= Subject key identifier: 3C:59:C2:6B:7C:9F:D3:CB:0B:59:99:62:62:C9:40:DD:C7:51:D1:C7 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 6EC83D27BE8B12EBD7E17E6D65385117AA6C8BC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 035D Signing time: Sun 20 Jul 2025 23:41:22 +0000 Manifest this update: Sun 20 Jul 2025 23:36:22 +0000 Manifest next update: Thu 24 Jul 2025 00:11:22 +0000 Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: +QPMqiCGWqSuVR3xm2c/8qGVZ2VyqCZI2aA0WeQ03mI=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c8:3d:27:be:8b:12:eb:d7:e1:7e:6d:65:38:51:17:aa:6c:8b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Jul 20 23:36:22 2025 GMT Not After : Jul 24 00:11:22 2025 GMT Subject: CN=3C59C26B7C9FD3CB0B59996262C940DDC751D1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:cf:8f:57:e1:ad:ff:9e:5b:ea:7b:8a:28: 7a:e2:ff:5d:db:71:d4:3a:ca:77:1b:41:b7:ed:d4: d5:f4:50:73:e2:ab:40:ae:35:8b:bf:b0:7c:aa:af: 51:54:16:bb:fa:89:67:22:17:79:06:37:d5:ec:50: 7c:c2:86:4d:e0:32:fb:10:9c:b0:0a:92:e0:09:b4: 0f:e9:21:fa:f9:ef:a3:07:9c:ef:bb:3c:18:a5:df: 70:f1:3c:f9:b5:f5:fe:d0:ab:78:2f:4f:de:06:3a: 38:34:bd:00:ec:fa:b5:02:53:f2:8e:7b:0d:cd:62: 68:b1:91:3b:55:a4:67:77:b8:51:10:7a:da:db:84: 70:2a:42:20:ac:9c:4d:4f:be:22:46:39:37:7b:a3: d1:e5:b7:85:ed:42:a8:6a:72:80:e5:19:39:26:1d: 8f:bf:50:61:7f:45:9e:46:42:24:db:6e:69:00:a3: 9b:2d:2c:6c:64:e5:6c:ad:a0:01:d9:fa:b2:60:3d: c9:23:c8:f6:89:70:18:be:f3:50:5f:e2:f1:a4:13: 9e:f3:65:85:7d:b0:40:6a:0a:19:e6:75:d0:60:23: 74:e1:2b:b5:b6:f3:8f:02:9f:a3:12:29:0f:b1:62: d8:32:e3:65:43:e6:d4:69:94:ee:8b:12:79:b0:9d: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:59:C2:6B:7C:9F:D3:CB:0B:59:99:62:62:C9:40:DD:C7:51:D1:C7 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:01:36:61:dc:3c:55:e2:5c:89:72:8a:1d:11:14:e7:b6:2e: f8:1c:f7:43:16:de:56:ad:90:e0:43:ff:ab:e4:79:ae:10:89: 06:30:7e:a5:9b:89:06:78:f0:ae:28:4e:4d:4c:d6:a4:44:4b: 8e:84:52:a2:be:4f:eb:92:b5:6f:af:ab:4b:4d:4c:b8:43:1d: 89:77:dc:e8:35:04:74:7d:21:15:23:f9:20:52:6c:93:ec:a1: 94:81:96:c6:9e:fb:c5:9f:f6:d2:53:cb:42:e5:3b:5e:e1:b0: 3e:bf:bf:59:bd:ec:1d:3d:06:67:6d:71:65:ce:82:7a:fe:40: 83:22:c0:de:3b:af:0a:51:f4:73:1e:82:c6:43:41:3b:4b:8b: 50:90:07:ed:cc:d5:4a:d8:f3:ae:31:0a:14:20:89:87:d2:5b: 9b:63:3d:75:18:00:db:1d:07:3b:74:03:e8:c2:62:25:02:35: cf:9b:88:44:ed:1d:ad:0b:e1:96:47:e4:c5:42:66:4e:fa:d5: 10:03:d5:da:44:00:48:8e:26:bc:29:f4:5e:53:3e:c2:e5:c4: d0:e8:33:17:58:40:b5:12:03:c3:d8:36:68:28:43:df:98:d6: 0a:ed:49:1f:cf:72:2c:ea:a3:0e:de:3b:79:7c:e4:19:3c:d3: c6:0a:e5:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsg9J76LEuvX4X5tZThRF6psi8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTA3MjAyMzM2MjJaFw0yNTA3MjQwMDExMjJaMDMxMTAvBgNV BAMTKDNDNTlDMjZCN0M5RkQzQ0IwQjU5OTk2MjYyQzk0MEREQzc1MUQxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9M+PV+Gt/55b6nuKKHri/13b cdQ6yncbQbft1NX0UHPiq0CuNYu/sHyqr1FUFrv6iWciF3kGN9XsUHzChk3gMvsQ nLAKkuAJtA/pIfr576MHnO+7PBil33DxPPm19f7Qq3gvT94GOjg0vQDs+rUCU/KO ew3NYmixkTtVpGd3uFEQetrbhHAqQiCsnE1PviJGOTd7o9Hlt4XtQqhqcoDlGTkm HY+/UGF/RZ5GQiTbbmkAo5stLGxk5WytoAHZ+rJgPckjyPaJcBi+81Bf4vGkE57z ZYV9sEBqChnmddBgI3ThK7W2848Cn6MSKQ+xYtgy42VD5tRplO6LEnmwnYqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFnCa3yf08sLWZliYslA3cdR0ccwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMBNmHcPFXiXIlyih0RFOe2Lvgc90MW3lat kOBD/6vkea4QiQYwfqWbiQZ48K4oTk1M1qRES46EUqK+T+uStW+vq0tNTLhDHYl3 3Og1BHR9IRUj+SBSbJPsoZSBlsae+8Wf9tJTy0LlO17hsD6/v1m97B09BmdtcWXO gnr+QIMiwN47rwpR9HMegsZDQTtLi1CQB+3M1UrY864xChQgiYfSW5tjPXUYANsd Bzt0A+jCYiUCNc+biETtHa0L4ZZH5MVCZk761RAD1dpEAEiOJrwp9F5TPsLlxNDo MxdYQLUSA8PYNmgoQ9+Y1grtSR/Pcizqow7eO3l85Bk808YK5R4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:22:13 2025 by rpki-client