$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: b9gLmnWUgw9/2AjDmT0tT9r3KbdLLyb0f+eDaYC6n2s= Subject key identifier: 0B:3D:B0:D3:CF:8F:02:8B:E8:7C:CD:E8:A5:63:5E:D6:99:E9:1D:4F Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 0974AD6C5A98FA63FE97C6AE169AA73BC32B37C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 031C Signing time: Sun 20 Jul 2025 16:21:36 +0000 Manifest this update: Sun 20 Jul 2025 16:16:36 +0000 Manifest next update: Thu 24 Jul 2025 00:23:36 +0000 Files and hashes: 1: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: 6eQp2yytv6W+dLZquFnU17vL6TDvLE78rmaZNx4QXNo=) 2: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) 3: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:74:ad:6c:5a:98:fa:63:fe:97:c6:ae:16:9a:a7:3b:c3:2b:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Jul 20 16:16:36 2025 GMT Not After : Jul 24 00:23:36 2025 GMT Subject: CN=0B3DB0D3CF8F028BE87CCDE8A5635ED699E91D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c5:20:ba:99:53:b8:cf:1d:16:a0:ad:e9:9c: 2b:3c:64:e1:51:ab:37:42:e4:39:a8:89:46:50:3d: 79:1d:30:f3:d7:83:77:22:d1:c2:54:a3:a1:0f:d4: 9b:47:1a:40:84:31:a5:79:18:bd:f0:81:21:31:ca: c0:05:4b:a8:51:d0:5e:f0:95:58:34:ab:2a:21:d8: 46:42:32:d7:88:28:a6:29:ca:45:ac:50:d4:3b:73: cd:08:af:29:5e:b6:c8:05:8b:91:52:ec:8a:07:48: 54:92:24:48:8e:91:de:72:b0:99:e6:df:f3:00:4f: 35:49:20:b8:43:fc:ea:bf:49:07:46:93:6a:29:4f: 42:61:e0:c0:75:03:3b:9a:a5:79:6c:67:ea:4d:f0: 89:43:9d:a8:8a:8d:bf:7d:fb:c0:5e:62:ea:15:1f: 63:77:40:c5:03:46:e9:fe:73:5a:de:f3:80:bc:ec: 37:1f:16:23:f1:51:05:fe:01:c4:46:22:3c:1b:f4: 16:6e:e9:91:62:72:d8:38:97:e6:b0:fd:07:78:bc: 46:5d:5c:08:89:5f:09:8b:12:20:73:50:74:2a:1a: 5d:87:e8:fe:03:a6:67:ea:ad:b9:90:09:b4:91:ed: 97:20:dc:3e:64:a3:4e:35:ed:e4:48:79:8e:bd:92: 04:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3D:B0:D3:CF:8F:02:8B:E8:7C:CD:E8:A5:63:5E:D6:99:E9:1D:4F X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9e:96:07:ad:8b:7d:22:a2:18:8d:7b:bc:65:12:72:6f:27: 4f:e9:6c:62:4f:1f:2c:cd:54:48:9b:60:39:da:e1:1f:08:aa: 43:d4:cd:97:f1:48:51:3f:0e:e8:94:bf:c5:a7:74:c1:43:56: 92:47:16:c8:a4:f3:36:81:1a:0a:9e:45:65:af:5e:46:94:3f: 4f:a1:26:51:6d:f0:af:50:f6:44:b7:94:8f:0c:23:f8:12:2e: 96:0d:e1:dd:b0:96:54:bb:1c:3b:1a:7b:25:2a:17:e9:68:36: d3:c0:57:ad:0d:c5:4e:e1:5e:20:f9:02:f6:fb:1a:5f:d0:39: b9:12:c8:73:8a:6d:1f:8a:67:1d:05:fd:0f:4e:08:d1:74:30: 56:0b:a5:85:39:6e:1a:3b:59:8c:41:2e:ad:d9:b1:a1:6e:d3: 48:f8:ea:e8:7a:61:21:5a:e6:e4:1a:a0:1a:88:0b:55:88:d5: 6a:b8:95:76:d2:94:67:ad:16:a1:c6:e1:f4:0e:71:b7:ea:a2: bf:81:46:61:19:76:83:cc:1d:41:b2:19:e1:c9:14:eb:5b:b4: 13:c9:54:12:54:45:1a:0d:76:61:cc:89:77:07:43:81:78:01: 01:ac:3a:ef:f4:8b:1b:02:28:aa:26:b7:c3:0e:69:47:6a:00: a6:94:58:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCXStbFqY+mP+l8auFpqnO8MrN8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTA3MjAxNjE2MzZaFw0yNTA3MjQwMDIzMzZaMDMxMTAvBgNV BAMTKDBCM0RCMEQzQ0Y4RjAyOEJFODdDQ0RFOEE1NjM1RUQ2OTlFOTFENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxSC6mVO4zx0WoK3pnCs8ZOFR qzdC5DmoiUZQPXkdMPPXg3ci0cJUo6EP1JtHGkCEMaV5GL3wgSExysAFS6hR0F7w lVg0qyoh2EZCMteIKKYpykWsUNQ7c80IryletsgFi5FS7IoHSFSSJEiOkd5ysJnm 3/MATzVJILhD/Oq/SQdGk2opT0Jh4MB1AzuapXlsZ+pN8IlDnaiKjb99+8BeYuoV H2N3QMUDRun+c1re84C87DcfFiPxUQX+AcRGIjwb9BZu6ZFictg4l+aw/Qd4vEZd XAiJXwmLEiBzUHQqGl2H6P4DpmfqrbmQCbSR7Zcg3D5ko0417eRIeY69kgRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCz2w08+PAovofM3opWNe1pnpHU8wHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCelgeti30iohiNe7xlEnJvJ0/pbGJPHyzN VEibYDna4R8IqkPUzZfxSFE/DuiUv8WndMFDVpJHFsik8zaBGgqeRWWvXkaUP0+h JlFt8K9Q9kS3lI8MI/gSLpYN4d2wllS7HDsaeyUqF+loNtPAV60NxU7hXiD5Avb7 Gl/QObkSyHOKbR+KZx0F/Q9OCNF0MFYLpYU5bho7WYxBLq3ZsaFu00j46uh6YSFa 5uQaoBqIC1WI1Wq4lXbSlGetFqHG4fQOcbfqor+BRmEZdoPMHUGyGeHJFOtbtBPJ VBJURRoNdmHMiXcHQ4F4AQGsOu/0ixsCKKomt8MOaUdqAKaUWHs= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:51 2025 by rpki-client