$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: mBfCUEfIT7zwa2QjfJobReeLoR2YtdM0HlSprI2Pojw= Subject key identifier: F6:CF:C8:7B:E2:2E:C4:EF:D8:B7:70:C6:B0:3D:13:A7:A4:4D:D8:FD Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 6CC1F3AC9418F9E00D215D14F2F9FE558FFCA0C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: D7 Signing time: Sat 06 Sep 2025 03:02:20 +0000 Manifest this update: Sat 06 Sep 2025 02:57:20 +0000 Manifest next update: Tue 09 Sep 2025 13:46:20 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: wkBhrIZeJI/EiWQZlIyn62peBiE9UDjyvPJMgv9yimk=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c1:f3:ac:94:18:f9:e0:0d:21:5d:14:f2:f9:fe:55:8f:fc:a0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Sep 6 02:57:20 2025 GMT Not After : Sep 9 13:46:20 2025 GMT Subject: CN=F6CFC87BE22EC4EFD8B770C6B03D13A7A44DD8FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:c0:df:63:31:5f:31:93:c2:fa:72:bf:4c: 8e:5b:c4:48:89:ec:30:2d:d1:1e:d0:d9:7c:4a:01: 29:66:ae:ce:f6:1a:eb:97:60:0f:63:dc:df:76:dd: 03:ee:cc:5d:f8:97:0c:c6:b2:85:9f:b4:16:1e:be: 79:d8:ce:c9:39:ee:46:cd:94:c0:d3:dd:f5:56:94: a6:7e:28:6e:0f:06:ba:92:e9:f2:68:44:85:f7:96: 6e:23:17:62:6e:ef:c8:e1:01:cf:b1:c0:ee:d8:12: 8a:13:d1:04:71:2d:aa:47:29:e1:6a:b8:9c:da:a4: 1b:86:be:b0:29:4b:6d:aa:a2:a3:46:21:04:5a:a1: b9:2c:13:60:0d:e7:34:b2:db:86:56:8a:a3:73:db: 5c:49:02:13:a3:53:34:c6:ae:fb:0e:b8:8c:d7:ae: 6c:74:3e:7d:b8:f3:ef:1a:72:21:7f:e6:ac:81:7a: 25:48:a3:57:56:df:2f:89:5c:91:48:dc:11:b7:ca: 7f:41:76:4f:78:34:10:0b:d5:10:c9:7f:39:dd:87: 2d:cb:a3:f2:a5:f4:2b:6b:40:63:aa:a1:d1:65:94: c6:b7:6e:cb:a8:38:bc:9c:95:75:4c:69:5a:18:4f: b3:77:1b:c5:5a:8e:d1:05:07:c5:32:8d:55:73:16: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:C8:7B:E2:2E:C4:EF:D8:B7:70:C6:B0:3D:13:A7:A4:4D:D8:FD X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:65:04:9d:1a:18:09:a6:eb:3a:1c:0c:64:45:e6:53:b9:4f: aa:20:9f:28:fc:d6:ed:28:1b:15:e4:7f:18:0c:2a:c7:ae:5a: c7:66:aa:c1:03:d5:a9:af:69:31:eb:5a:26:67:9c:95:5c:d7: 37:86:c7:69:b9:69:4c:a6:83:13:ff:37:5c:e9:43:53:e4:89: 05:74:2b:ea:59:f0:de:11:98:74:aa:20:44:2d:b0:ea:b1:93: cb:b3:db:d2:ac:03:f3:39:21:29:8a:79:b2:8e:a6:7f:89:dd: 21:45:70:45:b1:91:11:a0:61:35:85:be:38:ad:0e:4f:76:7d: 0a:37:b1:2c:83:5a:97:d8:c7:89:65:9c:1e:f9:2d:dc:e8:a6: 29:7c:7b:a6:6b:19:ee:8b:7f:8c:ff:78:97:1e:7c:04:3c:88: 13:38:ad:b6:9d:68:bc:25:16:7f:6a:af:be:e0:96:9b:b9:ca: 2f:63:34:68:31:af:45:7f:e8:c4:f0:8f:bf:7f:52:37:42:12: 3b:13:d2:29:c9:f7:db:1c:cc:e3:c8:d5:87:4a:15:f9:be:ab: f0:55:60:e0:4f:a2:34:85:a1:f1:fc:5e:f1:8d:ca:ca:14:31: e5:0a:e8:94:79:ed:4f:cc:08:86:84:55:af:01:d9:05:b7:6d: 68:fe:d9:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMHzrJQY+eANIV0U8vn+VY/8oMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA5MDYwMjU3MjBaFw0yNTA5MDkxMzQ2MjBaMDMxMTAvBgNV BAMTKEY2Q0ZDODdCRTIyRUM0RUZEOEI3NzBDNkIwM0QxM0E3QTQ0REQ4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSosDfYzFfMZPC+nK/TI5bxEiJ 7DAt0R7Q2XxKASlmrs72GuuXYA9j3N923QPuzF34lwzGsoWftBYevnnYzsk57kbN lMDT3fVWlKZ+KG4PBrqS6fJoRIX3lm4jF2Ju78jhAc+xwO7YEooT0QRxLapHKeFq uJzapBuGvrApS22qoqNGIQRaobksE2AN5zSy24ZWiqNz21xJAhOjUzTGrvsOuIzX rmx0Pn248+8aciF/5qyBeiVIo1dW3y+JXJFI3BG3yn9Bdk94NBAL1RDJfzndhy3L o/Kl9CtrQGOqodFllMa3bsuoOLyclXVMaVoYT7N3G8VajtEFB8UyjVVzFhUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9s/Ie+IuxO/Yt3DGsD0Tp6RN2P0wHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVlBJ0aGAmm6zocDGRF5lO5T6ognyj81u0o GxXkfxgMKseuWsdmqsED1amvaTHrWiZnnJVc1zeGx2m5aUymgxP/N1zpQ1PkiQV0 K+pZ8N4RmHSqIEQtsOqxk8uz29KsA/M5ISmKebKOpn+J3SFFcEWxkRGgYTWFvjit Dk92fQo3sSyDWpfYx4llnB75Ldzopil8e6ZrGe6Lf4z/eJcefAQ8iBM4rbadaLwl Fn9qr77glpu5yi9jNGgxr0V/6MTwj79/UjdCEjsT0inJ99sczOPI1YdKFfm+q/BV YOBPojSFofH8XvGNysoUMeUK6JR57U/MCIaEVa8B2QW3bWj+2Uo= -----END CERTIFICATE-----Generated at Mon Sep 8 08:32:51 2025 by rpki-client