$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: OTvRzN6g+134Loz6b/3uQTMV5iiCdG2O+C0yQcRgcbE= Subject key identifier: A8:30:82:DF:51:34:CE:00:5C:6D:86:D9:2C:7F:85:F0:66:6F:81:E8 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 40E909B5B76653685E01392B3D6DACDA2C12EC26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: C2 Signing time: Mon 21 Jul 2025 18:52:16 +0000 Manifest this update: Mon 21 Jul 2025 18:47:16 +0000 Manifest next update: Thu 24 Jul 2025 21:27:16 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: djGe5omlNJjRS/11Aj9fMlJmoY/Kcvow3g9hC9nY7Uo=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e9:09:b5:b7:66:53:68:5e:01:39:2b:3d:6d:ac:da:2c:12:ec:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Jul 21 18:47:16 2025 GMT Not After : Jul 24 21:27:16 2025 GMT Subject: CN=A83082DF5134CE005C6D86D92C7F85F0666F81E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:28:b3:cb:3c:2c:62:88:f0:02:12:10:ba: 8a:7c:fe:00:27:77:07:b6:80:06:38:5a:2d:ef:57: 1f:56:c6:54:1e:14:e1:18:22:be:d6:ee:a3:78:f6: f0:00:c9:da:2b:ef:62:b0:71:04:7b:4c:d7:1e:21: c3:43:11:0d:d0:d0:ed:47:02:3b:96:69:20:08:02: a2:ec:8f:a4:f1:ca:8f:fa:0d:a7:db:bf:4f:f0:c3: cb:41:46:f8:b8:f0:7d:f4:01:1a:24:e8:39:46:b3: 54:d4:a9:73:d4:f7:43:a0:36:2b:b5:dc:15:a7:e8: cd:ea:cf:de:ba:84:b4:04:d8:30:18:8e:55:72:c2: 6b:c0:fe:9b:64:cc:26:55:99:fc:4b:19:ba:14:7e: 1a:25:be:41:f9:c0:3d:4f:84:b1:7f:7c:75:64:13: 5d:ec:a6:ec:f0:cf:cc:e2:0d:6d:c6:f4:f0:dd:14: 8b:de:4c:14:01:5d:f0:ab:da:19:d1:73:ec:58:72: 94:06:61:97:8f:b6:35:fa:9c:2b:31:7b:75:8c:32: b4:fc:11:6a:11:ed:a7:1b:d6:12:c5:d2:37:f9:f9: 00:81:53:47:54:eb:bf:f3:04:8d:b3:90:3d:fb:ff: 33:a6:6f:97:e7:ad:69:ae:08:e3:62:91:ed:67:18: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:30:82:DF:51:34:CE:00:5C:6D:86:D9:2C:7F:85:F0:66:6F:81:E8 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:13:b9:52:0c:dc:01:e3:f7:e2:ba:7e:00:de:09:15:88:3b: e4:8e:6b:d4:bf:e6:30:01:74:84:0b:8f:6f:6f:fb:bf:e4:52: 63:94:de:d0:62:66:0f:14:80:25:6e:d2:a1:e9:26:63:2d:84: c3:45:b1:b7:de:70:97:82:d0:33:5d:a7:af:62:24:fa:37:98: bf:e2:49:38:fa:fb:20:08:9d:85:ee:da:3c:ff:42:7d:6a:87: 1a:dc:45:6b:99:f6:d2:b4:61:14:c6:1f:ad:9c:70:72:60:c5: ec:01:06:17:a5:7b:d6:8c:bc:e7:26:e9:60:32:d2:bc:4c:1d: 79:c1:fc:ae:dc:e0:b6:0f:bb:03:b7:d6:07:5a:7b:9d:ba:c5: f1:82:90:79:10:55:b9:be:f4:65:eb:cb:27:be:3a:d9:da:e0: 70:38:fc:07:4e:79:6f:75:11:3b:41:44:3e:5e:42:76:85:1c: 9a:17:f3:99:d9:fc:fe:d0:fa:bf:1d:47:53:e5:03:f7:09:a2: b5:de:88:34:a1:ae:8e:de:ea:b9:96:69:00:b6:06:85:08:41: e2:8f:62:c3:80:66:3a:9d:15:11:1f:03:ed:52:aa:cf:61:a9: d7:48:f8:ca:7d:c2:74:d2:72:84:da:51:77:57:96:6f:ef:3c: 9e:14:5b:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOkJtbdmU2heATkrPW2s2iwS7CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA3MjExODQ3MTZaFw0yNTA3MjQyMTI3MTZaMDMxMTAvBgNV BAMTKEE4MzA4MkRGNTEzNENFMDA1QzZEODZEOTJDN0Y4NUYwNjY2RjgxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+iizyzwsYojwAhIQuop8/gAn dwe2gAY4Wi3vVx9WxlQeFOEYIr7W7qN49vAAydor72KwcQR7TNceIcNDEQ3Q0O1H AjuWaSAIAqLsj6Txyo/6Dafbv0/ww8tBRvi48H30ARok6DlGs1TUqXPU90OgNiu1 3BWn6M3qz966hLQE2DAYjlVywmvA/ptkzCZVmfxLGboUfholvkH5wD1PhLF/fHVk E13spuzwz8ziDW3G9PDdFIveTBQBXfCr2hnRc+xYcpQGYZePtjX6nCsxe3WMMrT8 EWoR7acb1hLF0jf5+QCBU0dU67/zBI2zkD37/zOmb5fnrWmuCONike1nGARnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqDCC31E0zgBcbYbZLH+F8GZvgegwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkTuVIM3AHj9+K6fgDeCRWIO+SOa9S/5jAB dIQLj29v+7/kUmOU3tBiZg8UgCVu0qHpJmMthMNFsbfecJeC0DNdp69iJPo3mL/i STj6+yAInYXu2jz/Qn1qhxrcRWuZ9tK0YRTGH62ccHJgxewBBhele9aMvOcm6WAy 0rxMHXnB/K7c4LYPuwO31gdae526xfGCkHkQVbm+9GXryye+Otna4HA4/AdOeW91 ETtBRD5eQnaFHJoX85nZ/P7Q+r8dR1PlA/cJorXeiDShro7e6rmWaQC2BoUIQeKP YsOAZjqdFREfA+1Sqs9hqddI+Mp9wnTScoTaUXdXlm/vPJ4UW3g= -----END CERTIFICATE-----Generated at Wed Jul 23 01:58:55 2025 by rpki-client