$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: hzxo9X9klVOsfuHGJxqLS8boxpw031ikM9k0qBZN2tg= Subject key identifier: 0F:8C:85:68:C5:A6:7C:82:31:EA:7B:A3:39:DB:17:F2:A0:8B:4A:84 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 5F0F2F259FD82AFD2912BC973307E65FCE96CF0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 0507 Signing time: Tue 09 Sep 2025 07:21:43 +0000 Manifest this update: Tue 09 Sep 2025 07:16:43 +0000 Manifest next update: Fri 12 Sep 2025 10:53:43 +0000 Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) 2: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: DQrMSCOZYNioXzYSmGxEev/03/IF0hPo2Pdow6hO90o=) 3: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 10:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0f:2f:25:9f:d8:2a:fd:29:12:bc:97:33:07:e6:5f:ce:96:cf:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Sep 9 07:16:43 2025 GMT Not After : Sep 12 10:53:43 2025 GMT Subject: CN=0F8C8568C5A67C8231EA7BA339DB17F2A08B4A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:76:0d:39:50:ec:3d:a0:35:03:24:4a:6a: c2:3e:f5:7a:5f:81:f1:a8:8b:71:0d:cb:b1:62:19: 54:fb:1c:be:c9:43:8b:96:2c:a4:6f:ed:2b:ec:17: a0:e0:f8:85:ba:9e:35:e3:31:46:3b:15:aa:8a:96: 9d:86:f9:39:a9:4d:f2:2b:b3:9d:4d:52:65:3a:8b: dc:10:14:cc:b3:9b:6e:d9:19:49:f9:bb:8b:30:b9: b3:f7:f9:d6:8d:82:2f:72:ff:b3:45:20:d1:9e:24: 8d:e5:9b:9e:2f:2a:7e:f8:57:c8:fb:fa:a1:68:84: 38:f9:1d:2d:e1:1c:b7:ca:ce:ec:a1:d8:34:b3:f1: df:1c:59:de:9a:84:d9:1d:94:fc:7d:7a:aa:1b:7a: 49:95:4f:67:fa:59:7e:4b:88:f1:2d:dd:dd:40:77: 6e:9e:ee:24:6f:53:8a:7a:ca:bd:a8:2e:68:f6:3e: 4b:29:65:f6:f5:48:87:a7:aa:bd:62:fb:76:a2:81: d8:c3:45:98:89:24:8d:af:51:18:c1:57:98:91:1b: 4e:90:96:71:ff:e7:a5:3a:7a:5f:bb:95:3f:1f:79: 1f:32:2e:5b:fa:f3:77:ae:26:f9:a1:fe:98:b2:17: 41:ef:6b:e4:68:e4:26:f5:2a:49:22:73:19:7f:2d: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8C:85:68:C5:A6:7C:82:31:EA:7B:A3:39:DB:17:F2:A0:8B:4A:84 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ef:8e:07:2b:eb:a7:08:25:c4:4a:01:5f:c2:2e:19:56:ca: 81:bb:d1:89:e7:cd:c9:98:52:8d:43:ff:8c:5a:78:bb:1a:eb: d9:2e:e5:9d:75:88:06:e5:1f:58:33:b6:f7:36:ce:85:60:5b: c3:f0:ad:db:c8:76:99:93:6a:11:da:c6:b8:c0:26:82:4d:c4: 99:63:a2:f1:a0:78:ed:d8:38:f8:59:3b:6b:9a:79:9b:92:9a: 64:1c:2e:3d:ee:2c:e0:30:1e:7d:7e:4a:48:6c:de:49:35:31: 54:7a:eb:7b:fe:a6:41:84:5b:15:fc:96:f3:03:d0:20:f7:ad: c7:14:7f:90:9f:2c:0d:1f:82:b1:57:48:26:8b:d8:51:ba:1f: 7e:cc:e2:1a:9e:f3:0d:52:c0:29:41:41:f1:b7:37:bc:81:be: f7:de:ad:94:31:62:ca:8a:19:f5:68:6c:71:a7:cb:b9:df:f3: f8:93:3f:99:02:2f:6a:a7:d5:30:9e:46:d2:2a:c7:5d:34:67: ae:d4:77:59:31:96:20:4c:61:d1:5f:b9:5e:a0:aa:0b:f1:ee: a2:65:3d:6b:3f:96:ea:15:24:55:aa:f3:61:cc:3a:f2:ab:3d: 6e:7e:35:45:e7:c3:c3:83:42:a3:21:25:c9:93:2a:e6:0b:a6: 08:2e:d4:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXw8vJZ/YKv0pEryXMwfmX86Wzw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTA5MDkwNzE2NDNaFw0yNTA5MTIxMDUzNDNaMDMxMTAvBgNV BAMTKDBGOEM4NTY4QzVBNjdDODIzMUVBN0JBMzM5REIxN0YyQTA4QjRBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzHYNOVDsPaA1AyRKasI+9Xpf gfGoi3ENy7FiGVT7HL7JQ4uWLKRv7SvsF6Dg+IW6njXjMUY7FaqKlp2G+TmpTfIr s51NUmU6i9wQFMyzm27ZGUn5u4swubP3+daNgi9y/7NFINGeJI3lm54vKn74V8j7 +qFohDj5HS3hHLfKzuyh2DSz8d8cWd6ahNkdlPx9eqobekmVT2f6WX5LiPEt3d1A d26e7iRvU4p6yr2oLmj2PkspZfb1SIenqr1i+3aigdjDRZiJJI2vURjBV5iRG06Q lnH/56U6el+7lT8feR8yLlv683euJvmh/piyF0Hva+Ro5Cb1Kkkicxl/LSVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4yFaMWmfIIx6nujOdsX8qCLSoQwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErvjgcr66cIJcRKAV/CLhlWyoG70YnnzcmY Uo1D/4xaeLsa69ku5Z11iAblH1gztvc2zoVgW8PwrdvIdpmTahHaxrjAJoJNxJlj ovGgeO3YOPhZO2uaeZuSmmQcLj3uLOAwHn1+Skhs3kk1MVR663v+pkGEWxX8lvMD 0CD3rccUf5CfLA0fgrFXSCaL2FG6H37M4hqe8w1SwClBQfG3N7yBvvferZQxYsqK GfVobHGny7nf8/iTP5kCL2qn1TCeRtIqx100Z67Ud1kxliBMYdFfuV6gqgvx7qJl PWs/luoVJFWq82HMOvKrPW5+NUXnw8ODQqMhJcmTKuYLpggu1JE= -----END CERTIFICATE-----Generated at Tue Sep 9 17:12:23 2025 by rpki-client