$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: SIGjijsz9uSHHi9vV3uLlBxGzotXoJLhVPXAJ0xhUa4= Subject key identifier: 46:E5:66:7F:A9:AA:70:A9:6C:C6:FA:01:FA:1F:9B:F7:85:DF:AE:18 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 0AA422FEEA4053A1F5CAB8784D14B128A4DC29F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 0274 Signing time: Mon 08 Sep 2025 07:02:48 +0000 Manifest this update: Mon 08 Sep 2025 06:57:48 +0000 Manifest next update: Thu 11 Sep 2025 10:11:48 +0000 Files and hashes: 1: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=) 2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=) 3: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=) 4: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: P4MaqUt47YtiGys3tUEXagRpZOHbGSoMecDv5KXARPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 10:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a4:22:fe:ea:40:53:a1:f5:ca:b8:78:4d:14:b1:28:a4:dc:29:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Sep 8 06:57:48 2025 GMT Not After : Sep 11 10:11:48 2025 GMT Subject: CN=46E5667FA9AA70A96CC6FA01FA1F9BF785DFAE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7f:3c:4b:e6:10:d1:72:e8:ce:7e:e6:27:88: 73:df:00:03:b4:2c:0a:76:6a:8c:b2:25:3c:4c:da: 67:65:9c:13:91:8c:8d:b7:b7:d1:d7:e3:a4:b7:1c: 4d:f1:eb:8b:8c:f8:3e:f7:7e:ac:15:9d:d7:85:a7: 53:c4:6f:6a:5e:07:51:55:79:a1:bf:ed:9a:39:a9: d8:f6:59:d9:fc:cf:8f:1a:a8:ba:3d:d4:a6:ed:42: eb:4b:20:99:1d:b1:49:ab:41:c7:b1:81:86:15:78: 77:a5:89:c9:03:7e:bc:3f:d2:63:a4:9c:88:e9:2c: 59:e5:87:0d:ab:60:86:89:78:f9:56:65:f5:de:dc: 60:4e:91:0f:da:a4:8d:20:7c:c6:8a:e4:c2:47:e8: 4b:8a:78:1d:39:67:f2:cd:b5:c7:cb:b4:f4:f8:de: 1f:e9:01:ce:9c:f6:0f:25:63:aa:70:b6:ea:71:15: bf:10:15:a5:9c:dc:31:33:1a:dc:4d:4a:a1:8f:b5: b7:24:7a:69:87:0e:6c:9e:c5:00:e0:77:8a:69:92: fd:d3:01:db:af:fd:c5:17:17:1f:f0:cf:07:94:d7: b4:87:4b:40:64:f7:f3:b1:a4:f0:50:33:47:b9:84: c9:43:c7:b8:c1:b7:41:7f:75:1a:9a:91:0d:8d:5f: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E5:66:7F:A9:AA:70:A9:6C:C6:FA:01:FA:1F:9B:F7:85:DF:AE:18 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3a:44:48:44:a9:af:3d:3a:d0:7d:21:ab:91:90:3f:2e:01: 65:a3:ae:33:38:3c:6a:c6:97:02:3d:76:15:5c:27:7b:45:0f: a8:77:66:58:52:27:f6:68:f2:ca:81:8b:cc:37:d7:a1:e6:6a: bd:56:d9:8d:04:f2:ca:96:0e:7a:06:5f:45:16:32:e5:b3:a9: b4:25:21:9d:2d:0d:10:d4:e7:6d:a0:03:5a:f8:0e:27:e2:3d: 50:92:65:91:91:3d:8e:48:20:cd:45:a6:ed:de:b4:60:50:4d: 60:77:f2:6b:b3:84:e3:fc:f0:e2:4e:38:e4:07:04:a3:8a:51: 3c:4f:17:46:c7:33:7b:a9:b0:94:1f:e8:34:95:f7:82:b8:e7: 30:d9:0c:4e:8f:ad:ae:f7:3e:2e:9c:4e:7d:e9:4d:91:37:a5: d2:df:83:d9:5c:82:0a:77:e1:19:13:53:ff:12:a4:89:06:b5: 01:bc:15:ab:86:e2:47:b3:52:7e:80:a4:b4:a3:da:6e:7b:66: 7e:e7:dd:bf:c9:16:f7:b5:9b:bd:a0:b5:5d:be:48:fa:43:eb: 2e:a6:dc:88:ab:fa:fc:1d:d9:bb:b5:b9:84:69:6b:3a:b7:5a: 55:65:10:8e:80:06:de:f2:0c:dc:58:67:76:91:ae:ce:6d:4f: 22:0a:08:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqQi/upAU6H1yrh4TRSxKKTcKfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTA5MDgwNjU3NDhaFw0yNTA5MTExMDExNDhaMDMxMTAvBgNV BAMTKDQ2RTU2NjdGQTlBQTcwQTk2Q0M2RkEwMUZBMUY5QkY3ODVERkFFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfzxL5hDRcujOfuYniHPfAAO0 LAp2aoyyJTxM2mdlnBORjI23t9HX46S3HE3x64uM+D73fqwVndeFp1PEb2peB1FV eaG/7Zo5qdj2Wdn8z48aqLo91KbtQutLIJkdsUmrQcexgYYVeHelickDfrw/0mOk nIjpLFnlhw2rYIaJePlWZfXe3GBOkQ/apI0gfMaK5MJH6EuKeB05Z/LNtcfLtPT4 3h/pAc6c9g8lY6pwtupxFb8QFaWc3DEzGtxNSqGPtbckemmHDmyexQDgd4ppkv3T Aduv/cUXFx/wzweU17SHS0Bk9/OxpPBQM0e5hMlDx7jBt0F/dRqakQ2NX7EdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuVmf6mqcKlsxvoB+h+b94XfrhgwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF86REhEqa89OtB9IauRkD8uAWWjrjM4PGrG lwI9dhVcJ3tFD6h3ZlhSJ/Zo8sqBi8w316Hmar1W2Y0E8sqWDnoGX0UWMuWzqbQl IZ0tDRDU522gA1r4DifiPVCSZZGRPY5IIM1Fpu3etGBQTWB38muzhOP88OJOOOQH BKOKUTxPF0bHM3upsJQf6DSV94K45zDZDE6Pra73Pi6cTn3pTZE3pdLfg9lcggp3 4RkTU/8SpIkGtQG8FauG4kezUn6ApLSj2m57Zn7n3b/JFve1m72gtV2+SPpD6y6m 3Iir+vwd2bu1uYRpazq3WlVlEI6ABt7yDNxYZ3aRrs5tTyIKCD4= -----END CERTIFICATE-----Generated at Tue Sep 9 02:30:58 2025 by rpki-client