$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: DX8aL0Va8ALiO9h2SPQAGm7zd2wjMH8lulbuaoPCTwY= Subject key identifier: 6D:4A:7B:D9:37:9C:E8:CA:00:9A:80:00:B8:2C:03:F5:52:DC:95:F8 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 6AA0A89738B43F93F6E0C8F5F7283529A12085D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04DD Signing time: Tue 04 Nov 2025 10:22:41 +0000 Manifest this update: Tue 04 Nov 2025 10:17:41 +0000 Manifest next update: Fri 07 Nov 2025 14:07:41 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) 2: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: 5Gvc5+g3lE/3I0qefjhdLJht5d6g7s0kkWhDzJHYJss=) 3: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a0:a8:97:38:b4:3f:93:f6:e0:c8:f5:f7:28:35:29:a1:20:85:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Nov 4 10:17:41 2025 GMT Not After : Nov 7 14:07:41 2025 GMT Subject: CN=6D4A7BD9379CE8CA009A8000B82C03F552DC95F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:2d:d4:4a:85:0f:b1:cd:3d:0a:a9:b6:e4: 5c:f0:cb:89:93:b3:72:02:c6:25:e3:10:2f:7d:60: 10:a5:34:57:de:83:21:3d:d7:94:e4:6b:2d:4f:a6: fb:c8:4c:40:8c:f5:5d:52:bb:5f:b5:0d:97:6d:22: 0d:c8:ea:31:9b:7f:f7:34:3e:6b:77:27:ed:5b:cc: 58:54:da:9b:ef:5d:83:5f:9c:b5:35:72:58:5d:45: 7c:4f:76:f9:52:3b:0f:bf:98:ba:0a:32:32:c4:d2: 86:19:04:98:0d:e8:25:95:1f:8b:32:99:ca:bd:33: c2:c7:7f:52:d3:fd:c8:91:04:cf:14:bc:5e:12:3e: 77:d4:92:7d:bc:43:ca:4d:3e:74:df:37:c3:4b:57: 35:e0:cf:fa:9b:ce:14:46:2a:70:c1:fa:56:3c:b1: 4b:81:3e:db:c1:25:56:72:b8:69:e9:5c:da:ef:77: 20:b9:ad:60:da:84:46:33:a4:cc:99:69:7d:79:0d: 4b:88:59:57:a7:19:95:78:80:28:11:02:c8:79:ee: 16:2d:e1:ab:80:a7:58:75:7d:53:15:0c:86:f0:6b: 63:c1:dc:e8:cd:06:f1:5e:ce:35:36:e1:d9:c0:86: f8:08:53:24:ef:72:1e:d2:41:50:56:7d:e0:19:0f: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4A:7B:D9:37:9C:E8:CA:00:9A:80:00:B8:2C:03:F5:52:DC:95:F8 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f2:38:4a:f4:91:02:2f:36:5c:f4:a0:6b:87:b4:9f:c0:e3: 64:f9:41:b7:af:6d:02:1f:b8:76:3e:f7:c2:b9:ea:84:a3:af: 08:ec:94:4c:1d:09:91:9c:d0:1e:67:22:1b:a8:ce:7f:f8:04: 40:81:31:4e:1c:d4:d0:38:2c:03:71:fa:27:55:06:d2:07:53: f1:27:6e:21:1d:fd:d7:a0:1c:87:42:bd:01:ee:c0:4e:97:4d: d1:36:fb:92:8d:7e:b2:ad:85:19:0d:98:d4:ad:28:68:40:cf: 2a:a7:5f:9c:7f:56:e6:8f:22:4e:a9:cc:f8:8a:84:69:c7:3b: 09:e0:dd:7a:c8:42:a9:e3:a4:8d:5b:3a:23:ba:b3:8a:39:4d: d9:3d:61:eb:79:56:1b:c0:8c:60:08:95:2d:ca:dd:95:1b:fa: 2b:02:60:c9:a7:c7:83:7e:db:35:ef:08:67:5b:f0:a3:26:38: 80:ee:f7:a2:02:60:75:33:3f:3f:a3:36:b9:25:f0:e6:b5:b1: 03:3e:ed:ac:80:b7:9d:6b:e9:e0:73:23:ce:66:06:11:42:b0: 08:82:39:ad:a8:cb:c3:33:a6:9e:1f:e6:04:f6:9b:e4:66:c4: fa:ab:98:cb:ab:5e:d5:e8:10:71:cb:e5:02:29:89:3f:2a:6d: ee:14:97:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqColzi0P5P24Mj19yg1KaEghdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTExMDQxMDE3NDFaFw0yNTExMDcxNDA3NDFaMDMxMTAvBgNV BAMTKDZENEE3QkQ5Mzc5Q0U4Q0EwMDlBODAwMEI4MkMwM0Y1NTJEQzk1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pC3USoUPsc09Cqm25Fzwy4mT s3ICxiXjEC99YBClNFfegyE915Tkay1PpvvITECM9V1Su1+1DZdtIg3I6jGbf/c0 Pmt3J+1bzFhU2pvvXYNfnLU1clhdRXxPdvlSOw+/mLoKMjLE0oYZBJgN6CWVH4sy mcq9M8LHf1LT/ciRBM8UvF4SPnfUkn28Q8pNPnTfN8NLVzXgz/qbzhRGKnDB+lY8 sUuBPtvBJVZyuGnpXNrvdyC5rWDahEYzpMyZaX15DUuIWVenGZV4gCgRAsh57hYt 4auAp1h1fVMVDIbwa2PB3OjNBvFezjU24dnAhvgIUyTvch7SQVBWfeAZD0orAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUp72Tec6MoAmoAAuCwD9VLclfgwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTyOEr0kQIvNlz0oGuHtJ/A42T5QbevbQIf uHY+98K56oSjrwjslEwdCZGc0B5nIhuozn/4BECBMU4c1NA4LANx+idVBtIHU/En biEd/degHIdCvQHuwE6XTdE2+5KNfrKthRkNmNStKGhAzyqnX5x/VuaPIk6pzPiK hGnHOwng3XrIQqnjpI1bOiO6s4o5Tdk9Yet5VhvAjGAIlS3K3ZUb+isCYMmnx4N+ 2zXvCGdb8KMmOIDu96ICYHUzPz+jNrkl8Oa1sQM+7ayAt51r6eBzI85mBhFCsAiC Oa2oy8Mzpp4f5gT2m+RmxPqrmMurXtXoEHHL5QIpiT8qbe4Ul+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:08 2025 by rpki-client