$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: Y979fv9fZXw3cU2zxdFsYJy4e2Y+B9Aw3DQ7bAbxpqc= Subject key identifier: 62:41:46:10:CA:15:F1:0B:3E:D7:8B:0D:A4:67:8E:74:B8:02:B8:E1 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 0C1C889D379963F040FEA3AAEB3123A180D9E1AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 0372 Signing time: Fri 05 Sep 2025 02:01:21 +0000 Manifest this update: Fri 05 Sep 2025 01:56:21 +0000 Manifest next update: Mon 08 Sep 2025 09:29:21 +0000 Files and hashes: 1: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) 2: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: Rjk1cD84dzWSCKLeDGQ0TbyGPlzT4EZ/3LyVXbgst9Y=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1c:88:9d:37:99:63:f0:40:fe:a3:aa:eb:31:23:a1:80:d9:e1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Sep 5 01:56:21 2025 GMT Not After : Sep 8 09:29:21 2025 GMT Subject: CN=62414610CA15F10B3ED78B0DA4678E74B802B8E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:4a:1a:5e:1c:41:b4:ed:c3:d3:85:0c:25: 7e:a3:3b:4a:a5:33:8d:86:c9:6e:d6:56:5e:69:95: 86:05:ef:22:67:5a:c1:65:60:53:05:12:dc:a5:cc: ed:f8:e5:aa:ab:88:a1:87:55:8f:1d:ba:c5:c0:f7: 58:82:69:d1:26:fb:90:a2:5b:0e:e7:98:cb:32:38: 30:e3:2e:af:e7:c7:8e:a5:0b:6b:ea:8e:f1:fb:50: 4c:b6:49:00:78:78:7f:8d:b6:b4:ef:28:4b:25:c0: f7:43:e8:40:82:72:97:82:cc:91:90:e3:11:43:79: 63:2c:f1:5d:da:68:bc:7a:df:99:51:16:74:4f:eb: 33:54:e6:c9:a5:99:e8:c0:c9:f2:2e:b2:5f:ba:8d: bc:61:4b:4f:6d:aa:08:ce:ae:93:34:46:dc:01:24: 48:90:d5:1c:e8:35:96:ec:92:75:a7:a8:80:63:fe: f1:b1:43:c0:26:a9:b9:70:45:2e:ec:65:f2:3a:0f: 6c:bf:f7:cc:80:4c:56:f3:01:b5:f8:b2:9f:62:ef: 8e:4a:e6:a4:b2:7e:87:ec:3c:e1:13:df:9d:9e:07: ed:ec:ac:a0:e5:08:c9:27:8d:75:20:b1:f3:c1:6a: 68:e0:26:31:73:46:d7:e9:4a:e6:ea:65:7e:b1:26: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:41:46:10:CA:15:F1:0B:3E:D7:8B:0D:A4:67:8E:74:B8:02:B8:E1 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:8b:b1:20:fc:d1:79:54:e1:1f:93:24:fd:30:4d:26:9a:1e: ed:f8:1f:1d:99:85:a7:45:a6:de:46:ed:77:d1:6e:e7:b7:e2: b8:45:47:d7:eb:b7:98:c5:a8:53:2e:4c:fd:d9:00:5b:44:81: 73:a2:21:15:e2:db:29:d3:2c:a4:ae:17:f1:39:ad:63:b7:e4: 8c:5e:4e:4e:19:22:2c:33:c2:89:e1:37:ce:d7:ac:ec:7e:83: ec:cb:26:b1:25:50:c2:ea:95:7f:a4:f6:4c:72:15:6a:e9:99: fe:39:33:4a:dc:59:97:a5:48:ba:c8:25:f1:6c:73:5e:72:cc: 07:26:6b:cc:ee:8a:21:a6:d2:10:ac:c3:95:40:ea:4b:c0:81: 03:3c:16:02:e4:ef:ff:3b:df:92:cd:55:02:03:bc:e7:16:7d: de:4a:d8:80:b7:c7:91:b6:de:9b:a8:9f:b2:64:79:dc:7b:3f: e3:bd:f7:d9:7d:78:f8:73:b5:18:12:db:99:03:b7:c8:05:cd: 6f:0f:53:eb:ee:cc:95:73:89:25:b9:27:36:9d:39:d7:8e:9c: 92:3d:5d:0d:7e:6d:0e:00:8d:c3:c7:78:6b:c5:2b:4c:b8:19: 03:08:f3:2a:d0:8c:45:78:1e:ba:20:d3:46:61:c0:ee:33:33: 92:a0:8d:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDByInTeZY/BA/qOq6zEjoYDZ4a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTA5MDUwMTU2MjFaFw0yNTA5MDgwOTI5MjFaMDMxMTAvBgNV BAMTKDYyNDE0NjEwQ0ExNUYxMEIzRUQ3OEIwREE0Njc4RTc0QjgwMkI4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhEoaXhxBtO3D04UMJX6jO0ql M42GyW7WVl5plYYF7yJnWsFlYFMFEtylzO345aqriKGHVY8dusXA91iCadEm+5Ci Ww7nmMsyODDjLq/nx46lC2vqjvH7UEy2SQB4eH+NtrTvKEslwPdD6ECCcpeCzJGQ 4xFDeWMs8V3aaLx635lRFnRP6zNU5smlmejAyfIusl+6jbxhS09tqgjOrpM0RtwB JEiQ1RzoNZbsknWnqIBj/vGxQ8AmqblwRS7sZfI6D2y/98yATFbzAbX4sp9i745K 5qSyfofsPOET352eB+3srKDlCMknjXUgsfPBamjgJjFzRtfpSubqZX6xJgZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkFGEMoV8Qs+14sNpGeOdLgCuOEwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCLsSD80XlU4R+TJP0wTSaaHu34Hx2ZhadF pt5G7XfRbue34rhFR9frt5jFqFMuTP3ZAFtEgXOiIRXi2ynTLKSuF/E5rWO35Ixe Tk4ZIiwzwonhN87XrOx+g+zLJrElUMLqlX+k9kxyFWrpmf45M0rcWZelSLrIJfFs c15yzAcma8zuiiGm0hCsw5VA6kvAgQM8FgLk7/8735LNVQIDvOcWfd5K2IC3x5G2 3puon7Jkedx7P+O999l9ePhztRgS25kDt8gFzW8PU+vuzJVziSW5JzadOdeOnJI9 XQ1+bQ4AjcPHeGvFK0y4GQMI8yrQjEV4Hrog00ZhwO4zM5KgjQI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client