$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: 7WSRP/aoR+egKmM4MP24XwfYl0BGr3oe8nFrC4zC5yM= Subject key identifier: 18:22:22:74:55:28:16:C5:30:40:CF:73:AC:D7:E2:1A:B4:97:BC:85 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 4B2442C98122C015F0BD49BF6B727BAB2A7BD6C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 0348 Signing time: Tue 03 Jun 2025 07:32:43 +0000 Manifest this update: Tue 03 Jun 2025 07:27:43 +0000 Manifest next update: Fri 06 Jun 2025 09:36:43 +0000 Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: um8mYCFBarb3w+x+JM3rz9ZxM3XNcEyigBLrr2K5YWM=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 09:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:24:42:c9:81:22:c0:15:f0:bd:49:bf:6b:72:7b:ab:2a:7b:d6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Jun 3 07:27:43 2025 GMT Not After : Jun 6 09:36:43 2025 GMT Subject: CN=18222274552816C53040CF73ACD7E21AB497BC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:6f:85:47:25:b5:3b:8f:29:eb:6c:c3:71: 40:2a:a9:c0:9c:22:14:6a:4f:c6:37:58:3c:8b:23: a1:66:0c:28:6e:fb:fe:8c:93:f6:5f:d0:92:db:d6: 1a:c9:7e:bf:6b:b6:d2:ba:d3:ff:97:c1:0d:73:fb: 78:c4:f0:a8:e3:91:a7:dd:4f:a2:6d:9c:61:72:15: 4d:5d:6b:b3:b7:05:02:fd:9e:72:4f:5d:3c:30:42: f1:59:94:97:60:d2:83:80:31:60:b5:4d:24:73:30: 4a:a1:b8:b2:82:73:33:ed:5d:85:33:54:f3:31:1d: a6:dc:ab:6c:a8:66:76:2d:f0:71:18:b8:69:34:b7: 55:b9:29:17:be:13:d9:50:09:37:70:4c:be:75:06: 89:4e:f3:d8:d3:9b:b6:f8:1f:c7:67:3c:35:81:92: ac:0a:70:22:cd:a5:57:15:5b:c0:f6:29:f3:d6:25: 48:d8:ff:6d:1d:72:89:96:03:62:07:c1:0f:a4:85: 8d:2b:45:7d:73:c3:9a:26:07:0c:df:46:ee:6f:9f: f0:8e:c9:71:60:fe:d9:5f:40:02:c3:54:4b:27:6a: 19:cd:a5:a1:7c:59:05:48:53:d6:0f:a5:ef:fe:4e: 15:a1:c2:3f:55:0d:bc:40:0a:2e:2f:94:76:b2:39: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:22:74:55:28:16:C5:30:40:CF:73:AC:D7:E2:1A:B4:97:BC:85 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7f:f1:d9:6b:ec:dd:4b:79:cf:c8:d7:4e:5c:80:a3:4d:91: 0d:67:ca:0a:70:20:56:f2:ac:a1:4d:eb:7a:1e:e6:7e:62:84: 34:31:e1:e8:77:65:b9:9c:f7:ed:d1:d7:78:7e:89:0d:c3:58: 61:58:3b:33:0d:6b:d7:3b:86:1c:c2:1a:a8:71:77:4b:10:4e: 80:06:d8:c3:30:69:4b:a7:e9:c0:af:fe:00:c3:5f:c1:d8:7b: 96:2c:6a:7b:b5:24:10:97:aa:eb:e0:58:72:fe:76:39:34:97: 46:89:35:81:78:3f:79:f7:2e:8a:48:64:49:9d:66:85:8c:3a: 22:59:a7:7f:a5:17:60:25:f8:a2:6e:58:55:1a:0c:08:6e:71: 93:3c:90:78:f7:f7:c4:a8:f8:5d:54:5b:e1:6f:83:00:3c:f7: ce:fb:43:ba:d6:4a:0a:b8:f1:2e:e0:17:d7:a5:9a:7f:41:7b: b1:1b:5f:9b:91:82:51:f5:29:65:9d:de:e5:8a:bf:b4:e3:ad: 53:31:51:17:73:d2:ea:bd:ad:22:84:49:3a:5e:ad:f1:56:77: 9d:93:4b:92:d2:ec:8b:1d:d1:fc:60:06:43:09:65:8e:22:6e: be:13:74:3e:7d:7c:57:1d:d2:a1:b9:a4:f1:c9:61:2c:4f:d6: df:af:da:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyRCyYEiwBXwvUm/a3J7qyp71sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTA2MDMwNzI3NDNaFw0yNTA2MDYwOTM2NDNaMDMxMTAvBgNV BAMTKDE4MjIyMjc0NTUyODE2QzUzMDQwQ0Y3M0FDRDdFMjFBQjQ5N0JDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrl2+FRyW1O48p62zDcUAqqcCc IhRqT8Y3WDyLI6FmDChu+/6Mk/Zf0JLb1hrJfr9rttK60/+XwQ1z+3jE8Kjjkafd T6JtnGFyFU1da7O3BQL9nnJPXTwwQvFZlJdg0oOAMWC1TSRzMEqhuLKCczPtXYUz VPMxHabcq2yoZnYt8HEYuGk0t1W5KRe+E9lQCTdwTL51BolO89jTm7b4H8dnPDWB kqwKcCLNpVcVW8D2KfPWJUjY/20dcomWA2IHwQ+khY0rRX1zw5omBwzfRu5vn/CO yXFg/tlfQALDVEsnahnNpaF8WQVIU9YPpe/+ThWhwj9VDbxACi4vlHayORkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCIidFUoFsUwQM9zrNfiGrSXvIUwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHx/8dlr7N1Lec/I105cgKNNkQ1nygpwIFby rKFN63oe5n5ihDQx4eh3Zbmc9+3R13h+iQ3DWGFYOzMNa9c7hhzCGqhxd0sQToAG 2MMwaUun6cCv/gDDX8HYe5Ysanu1JBCXquvgWHL+djk0l0aJNYF4P3n3LopIZEmd ZoWMOiJZp3+lF2Al+KJuWFUaDAhucZM8kHj398So+F1UW+FvgwA89877Q7rWSgq4 8S7gF9elmn9Be7EbX5uRglH1KWWd3uWKv7TjrVMxURdz0uq9rSKESTperfFWd52T S5LS7Isd0fxgBkMJZY4ibr4TdD59fFcd0qG5pPHJYSxP1t+v2iQ= -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:46 2025 by rpki-client