$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: 3l9xsFxZ+VX+zpe0Hwa9zSn5Kcko+WXMWZw6ucFD+Ho= Subject key identifier: B9:D5:31:55:F8:47:FF:F0:31:4B:31:EB:AF:12:EC:3F:A5:C9:0E:BB Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 020B125B380DD116E16A2B3409C37E43D00BBD5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 04DA Signing time: Mon 02 Jun 2025 02:04:44 +0000 Manifest this update: Mon 02 Jun 2025 01:59:44 +0000 Manifest next update: Thu 05 Jun 2025 08:28:44 +0000 Files and hashes: 1: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) 2: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: fYmicUw8JRFStqaHHV68T3BN2MknhDDO2XIGI1076WI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0b:12:5b:38:0d:d1:16:e1:6a:2b:34:09:c3:7e:43:d0:0b:bd:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Jun 2 01:59:44 2025 GMT Not After : Jun 5 08:28:44 2025 GMT Subject: CN=B9D53155F847FFF0314B31EBAF12EC3FA5C90EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:54:fb:de:da:fa:3f:59:b0:35:5e:f7:34: fd:6e:06:12:f5:4d:cf:e5:41:96:d7:67:5c:fa:d8: 15:39:d5:18:a4:7c:11:ca:48:b7:d9:37:0b:fd:b8: ed:b0:f9:54:30:29:31:54:f1:64:00:39:30:4c:26: 50:a8:e6:7e:10:26:7f:45:24:29:dc:07:ac:68:86: 17:76:98:6e:89:65:ed:4b:44:c3:b3:09:6c:a3:c9: e2:81:bb:47:62:75:3e:33:4b:fc:69:b8:8e:37:9c: 08:47:01:2b:ad:b1:25:d1:dc:cf:ab:98:be:ca:b0: 4a:98:76:e6:55:01:af:9b:aa:40:aa:42:53:a2:e2: fb:70:3b:98:e5:b0:ec:65:7a:55:30:b3:23:3b:a8: bb:fa:6e:fc:6f:cf:74:36:04:87:5a:e1:03:a5:1f: 07:31:d4:36:7a:93:e8:66:8d:31:1a:6f:1d:05:58: 25:68:24:85:16:3d:71:58:3e:cb:f4:87:1b:3d:c0: 16:f9:7e:d9:e5:db:39:04:65:30:ee:23:f2:77:95: 21:85:5b:3a:9e:20:9e:6d:37:4a:1b:d3:ef:40:eb: c0:c5:ab:bd:db:6c:ff:8f:be:33:3f:2e:b6:c5:66: 54:9c:f2:0d:54:8a:d7:46:09:36:eb:e9:22:12:c8: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D5:31:55:F8:47:FF:F0:31:4B:31:EB:AF:12:EC:3F:A5:C9:0E:BB X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c2:a0:a7:82:9f:72:19:9a:e1:bc:fa:b2:aa:08:0d:79:19: d4:ca:c4:a7:9a:2c:15:12:e7:6e:39:16:85:e6:0e:5e:32:c6: 3c:0d:74:f2:dd:06:08:52:21:24:83:20:43:be:59:22:49:52: bc:20:47:70:0e:4d:9c:bc:8a:39:3a:c2:a9:fe:ea:86:fe:0a: 82:7a:0b:6f:8c:67:67:3f:71:d9:80:fe:f8:36:a1:c7:2e:a4: 93:82:8b:34:80:4f:66:24:6f:23:fa:f3:4b:60:ec:76:b1:29: a3:50:d6:2c:cc:96:21:ff:18:12:4d:dc:42:4e:78:4c:ac:44: e0:b3:b1:7b:14:0c:10:7f:e0:c0:25:eb:aa:0a:cb:ca:e6:23: 86:4b:c5:89:90:e1:35:d3:71:83:c6:17:64:8b:2d:45:2e:cf: 67:09:bd:73:f6:af:17:30:46:a5:42:fb:d0:86:c7:1d:5e:11: 03:1f:00:5b:4d:f8:31:13:a4:7a:76:e3:ac:da:d1:3c:c9:d1: 90:3e:c2:33:78:2e:56:e1:7d:c1:46:7b:bd:d4:90:7e:f2:0f: e8:30:5e:87:2a:cf:bc:c9:f2:53:02:77:4b:2b:dd:33:cf:fd: d9:15:9c:64:2f:49:4e:4a:c3:30:6b:50:a0:f6:ab:1c:7a:83: 9a:bc:a2:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgsSWzgN0Rbhais0CcN+Q9ALvV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNTA2MDIwMTU5NDRaFw0yNTA2MDUwODI4NDRaMDMxMTAvBgNV BAMTKEI5RDUzMTU1Rjg0N0ZGRjAzMTRCMzFFQkFGMTJFQzNGQTVDOTBFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40FT73tr6P1mwNV73NP1uBhL1 Tc/lQZbXZ1z62BU51RikfBHKSLfZNwv9uO2w+VQwKTFU8WQAOTBMJlCo5n4QJn9F JCncB6xohhd2mG6JZe1LRMOzCWyjyeKBu0didT4zS/xpuI43nAhHASutsSXR3M+r mL7KsEqYduZVAa+bqkCqQlOi4vtwO5jlsOxlelUwsyM7qLv6bvxvz3Q2BIda4QOl Hwcx1DZ6k+hmjTEabx0FWCVoJIUWPXFYPsv0hxs9wBb5ftnl2zkEZTDuI/J3lSGF WzqeIJ5tN0ob0+9A68DFq73bbP+PvjM/LrbFZlSc8g1UitdGCTbr6SISyLC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudUxVfhH//AxSzHrrxLsP6XJDrswHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErCoKeCn3IZmuG8+rKqCA15GdTKxKeaLBUS 5245FoXmDl4yxjwNdPLdBghSISSDIEO+WSJJUrwgR3AOTZy8ijk6wqn+6ob+CoJ6 C2+MZ2c/cdmA/vg2occupJOCizSAT2YkbyP680tg7HaxKaNQ1izMliH/GBJN3EJO eEysROCzsXsUDBB/4MAl66oKy8rmI4ZLxYmQ4TXTcYPGF2SLLUUuz2cJvXP2rxcw RqVC+9CGxx1eEQMfAFtN+DETpHp246za0TzJ0ZA+wjN4LlbhfcFGe73UkH7yD+gw Xocqz7zJ8lMCd0sr3TPP/dkVnGQvSU5KwzBrUKD2qxx6g5q8ogo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:31 2025 by rpki-client