$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: HzgEeNa5iCXa9z8VEHIbzkKau7ggqdzFwvE90N1Itmo= Subject key identifier: 5A:FE:30:1B:29:FD:39:B9:BC:21:20:82:58:4F:AD:63:AE:CC:0E:A6 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 461B78B49D458974C88A7B28909FC2012BA377F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 04DC Signing time: Fri 06 Jun 2025 05:21:41 +0000 Manifest this update: Fri 06 Jun 2025 05:16:41 +0000 Manifest next update: Mon 09 Jun 2025 13:29:41 +0000 Files and hashes: 1: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: uCvkpi9HolkTKU1xLo49+EhyF4G4kHCLMfW3P8bndvA=) 3: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: J3Ffeia5bh+q+EIcLP90vVEe+iW56mPHsaW+cNugtwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 13:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1b:78:b4:9d:45:89:74:c8:8a:7b:28:90:9f:c2:01:2b:a3:77:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Jun 6 05:16:41 2025 GMT Not After : Jun 9 13:29:41 2025 GMT Subject: CN=5AFE301B29FD39B9BC212082584FAD63AECC0EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:e2:79:d8:53:4c:be:e2:cf:db:82:0b:ca: c1:e1:3c:96:df:af:92:4a:6a:57:00:3b:b9:50:72: a2:72:57:81:7d:08:a2:c5:a6:68:d4:98:37:f8:a7: df:0a:20:7d:7f:5f:2c:5d:1f:75:9f:ee:5f:b4:af: 04:85:01:d5:f5:07:98:aa:ae:6e:a3:e5:1e:d2:46: bc:f9:a7:00:9d:6b:e2:4d:d3:79:30:a7:dc:f9:34: ba:98:82:65:52:d7:de:18:df:92:a8:ed:c4:91:e1: c9:68:e9:e3:c4:9d:25:4e:ba:7a:5a:48:17:8f:4a: 70:e4:1f:51:29:c7:0d:82:55:79:1e:cf:27:a5:9e: 9e:76:87:17:f7:4f:47:71:0b:ea:c6:07:54:da:e6: f0:be:ed:ab:29:6d:72:5f:d2:70:6d:64:45:9d:95: 6d:be:ff:d3:45:7d:05:eb:94:29:52:85:da:6f:cc: 2d:6e:88:97:15:f2:4d:a4:a2:42:f7:b8:db:76:40: 37:7f:42:c0:57:14:1e:9e:12:85:db:31:4c:6e:e3: 0a:a2:12:c7:54:9d:ab:4f:e2:0f:76:e0:d1:f5:09: 90:41:ac:f5:84:84:19:05:78:7e:19:20:56:3e:74: 51:56:6a:34:13:69:7e:d5:c1:57:09:54:15:50:f9: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FE:30:1B:29:FD:39:B9:BC:21:20:82:58:4F:AD:63:AE:CC:0E:A6 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c1:d6:1e:bc:2b:9b:5d:97:3f:00:14:45:eb:9e:38:fc:6a: 14:70:23:1b:07:39:a8:80:ff:42:eb:a3:c7:70:ee:dd:f6:5e: 93:dd:34:3c:7a:d0:25:e6:3f:dd:c0:dd:b4:81:72:19:19:26: 2c:1f:ff:1c:18:ad:3d:b9:45:f8:7f:20:1c:d2:b8:88:8b:87: af:ec:96:3b:80:62:a0:7e:01:eb:89:9a:6c:e5:95:d2:12:fd: cf:82:14:3a:94:0f:9c:44:c0:6c:06:3b:de:73:60:9c:83:19: b3:6c:ab:72:bb:fc:14:37:6c:4f:77:84:a7:47:d8:58:70:4a: 28:c4:e3:29:a6:b9:a1:c0:08:2a:36:86:b4:0b:91:fb:f5:7a: 84:b6:ae:01:84:ec:8e:34:c7:8e:c9:c7:9f:2e:83:1a:58:06: 47:96:8e:3f:05:17:ad:0e:47:5d:c6:f7:fd:4a:8e:a1:c7:3e: c8:c1:d0:02:3f:0e:a8:48:05:31:62:fd:04:36:ce:16:5d:b2: 3b:c3:92:fe:5c:ce:d8:aa:cb:94:97:8e:2b:9b:4e:d0:ee:5b: 44:e4:43:a9:2e:f6:33:65:2c:20:97:ad:29:66:89:7c:bf:b7: a7:8c:ba:3e:88:44:ab:f5:06:30:d4:b3:01:bd:a2:2a:a7:7b: 3b:e8:d9:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURht4tJ1FiXTIinsokJ/CASujd/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTA2MDYwNTE2NDFaFw0yNTA2MDkxMzI5NDFaMDMxMTAvBgNV BAMTKDVBRkUzMDFCMjlGRDM5QjlCQzIxMjA4MjU4NEZBRDYzQUVDQzBFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWuJ52FNMvuLP24ILysHhPJbf r5JKalcAO7lQcqJyV4F9CKLFpmjUmDf4p98KIH1/XyxdH3Wf7l+0rwSFAdX1B5iq rm6j5R7SRrz5pwCda+JN03kwp9z5NLqYgmVS194Y35Ko7cSR4clo6ePEnSVOunpa SBePSnDkH1Epxw2CVXkezyelnp52hxf3T0dxC+rGB1Ta5vC+7aspbXJf0nBtZEWd lW2+/9NFfQXrlClShdpvzC1uiJcV8k2kokL3uNt2QDd/QsBXFB6eEoXbMUxu4wqi EsdUnatP4g924NH1CZBBrPWEhBkFeH4ZIFY+dFFWajQTaX7VwVcJVBVQ+RXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWv4wGyn9Obm8ISCCWE+tY67MDqYwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLB1h68K5tdlz8AFEXrnjj8ahRwIxsHOaiA /0Lro8dw7t32XpPdNDx60CXmP93A3bSBchkZJiwf/xwYrT25Rfh/IBzSuIiLh6/s ljuAYqB+AeuJmmzlldIS/c+CFDqUD5xEwGwGO95zYJyDGbNsq3K7/BQ3bE93hKdH 2FhwSijE4ymmuaHACCo2hrQLkfv1eoS2rgGE7I40x47Jx58ugxpYBkeWjj8FF60O R13G9/1KjqHHPsjB0AI/DqhIBTFi/QQ2zhZdsjvDkv5cztiqy5SXjiubTtDuW0Tk Q6ku9jNlLCCXrSlmiXy/t6eMuj6IRKv1BjDUswG9oiqnezvo2ak= -----END CERTIFICATE-----Generated at Fri Jun 6 16:54:02 2025 by rpki-client