$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: XyycMrZOnHhq1K+6l3JRWVJ7UGHpMbNxLTTKWpycTrQ= Subject key identifier: 1F:FD:7F:98:6C:A4:BA:69:3E:5A:B1:E6:9A:DD:F8:B5:BD:0F:90:B7 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 5B24E17ECAAF0D7C3C3F633A064B6F8C994452D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04B6 Signing time: Fri 08 Aug 2025 10:52:48 +0000 Manifest this update: Fri 08 Aug 2025 10:47:48 +0000 Manifest next update: Mon 11 Aug 2025 18:27:48 +0000 Files and hashes: 1: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: NszoBPrVNeBtmiqakYgls7NrUnBRx6tUVepM5XNpSEo=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) 3: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:24:e1:7e:ca:af:0d:7c:3c:3f:63:3a:06:4b:6f:8c:99:44:52:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Aug 8 10:47:48 2025 GMT Not After : Aug 11 18:27:48 2025 GMT Subject: CN=1FFD7F986CA4BA693E5AB1E69ADDF8B5BD0F90B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:0c:a6:cb:0e:16:c9:8a:60:bb:79:8b:46: f8:8a:e1:0c:41:73:e4:95:74:51:14:a9:bf:ab:2a: 84:81:cd:3e:f1:2e:2e:24:df:76:3a:9c:47:f5:a9: 75:1e:f3:da:44:fc:63:c8:bc:a0:5d:b0:90:e3:cc: 9a:00:71:af:76:a0:3c:4d:c8:24:5e:7d:f2:aa:58: 9f:d4:30:92:2f:d1:35:6c:d6:07:8a:9b:87:80:a2: e4:87:bb:c1:a3:98:cb:ab:01:c7:86:65:cd:3e:79: d6:80:bd:d4:91:e3:d3:83:61:62:b9:79:ce:49:8e: 2f:69:a1:0d:6a:75:93:6e:77:70:40:3f:70:36:e7: c4:bd:d3:d2:36:04:1d:9c:d6:70:de:04:71:80:4d: 5b:02:2b:7e:89:cf:f0:93:0d:ed:04:55:73:f0:27: 4d:44:69:27:bb:da:4e:80:55:5c:55:6d:09:83:11: 6d:c8:03:e0:d2:ee:cf:d2:c4:06:ed:3b:3f:8c:01: 2c:56:d4:b2:dc:61:a7:33:0f:c3:57:ca:cc:13:3c: 60:dc:b1:24:93:f5:51:a6:14:1f:b5:2f:5e:3a:2c: a4:9b:cc:f3:ea:53:f9:76:bd:25:19:a8:16:d2:c9: a2:6b:8e:80:f0:df:cf:cd:d6:59:08:5d:c0:51:c4: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FD:7F:98:6C:A4:BA:69:3E:5A:B1:E6:9A:DD:F8:B5:BD:0F:90:B7 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e3:46:d0:5d:30:67:e0:00:16:88:06:16:20:24:93:fd:7f: 10:01:25:97:fe:63:e1:25:66:81:1b:92:3f:63:c5:78:c1:fe: 7d:79:3f:b8:3a:6c:16:ed:d9:1c:41:5c:09:fc:9f:15:4e:a3: 89:f1:b4:d5:33:c4:6f:10:01:48:cb:68:7d:96:cf:2b:92:59: 9d:46:2f:aa:c2:f5:c8:66:c8:96:83:6a:48:f3:02:c2:86:52: 02:ba:35:df:2a:e6:bd:d5:72:0b:b9:56:bb:87:71:df:54:69: 59:9c:18:cf:d3:1d:6a:74:3d:20:01:42:c1:5b:12:be:8d:ec: 5d:ee:1c:6f:f4:bc:ab:af:5a:54:fb:5d:c6:d4:c4:98:75:5a: f0:11:8d:00:63:41:bf:cf:57:f1:88:4e:50:21:da:3f:28:e0: 1a:05:71:4c:0a:ee:23:51:fe:64:ca:44:d1:05:f7:cc:8b:77: be:5b:cc:6a:7c:c9:81:87:7a:ad:1a:94:a9:10:57:9a:01:a2: 42:68:52:57:97:9c:90:f8:6e:bf:f9:6e:f2:ed:72:fb:12:91: 0b:5e:97:3f:bf:62:db:08:78:04:f1:fd:3f:1f:1a:38:9f:14: a7:d6:f3:5c:0f:4f:4c:4b:a5:c5:d6:f1:7f:76:53:03:22:be: 95:c8:da:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyThfsqvDXw8P2M6BktvjJlEUtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA4MDgxMDQ3NDhaFw0yNTA4MTExODI3NDhaMDMxMTAvBgNV BAMTKDFGRkQ3Rjk4NkNBNEJBNjkzRTVBQjFFNjlBRERGOEI1QkQwRjkwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9gymyw4WyYpgu3mLRviK4QxB c+SVdFEUqb+rKoSBzT7xLi4k33Y6nEf1qXUe89pE/GPIvKBdsJDjzJoAca92oDxN yCReffKqWJ/UMJIv0TVs1geKm4eAouSHu8GjmMurAceGZc0+edaAvdSR49ODYWK5 ec5Jji9poQ1qdZNud3BAP3A258S909I2BB2c1nDeBHGATVsCK36Jz/CTDe0EVXPw J01EaSe72k6AVVxVbQmDEW3IA+DS7s/SxAbtOz+MASxW1LLcYaczD8NXyswTPGDc sSST9VGmFB+1L146LKSbzPPqU/l2vSUZqBbSyaJrjoDw38/N1lkIXcBRxBa5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/1/mGykumk+WrHmmt34tb0PkLcwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3jRtBdMGfgABaIBhYgJJP9fxABJZf+Y+El ZoEbkj9jxXjB/n15P7g6bBbt2RxBXAn8nxVOo4nxtNUzxG8QAUjLaH2WzyuSWZ1G L6rC9chmyJaDakjzAsKGUgK6Nd8q5r3Vcgu5VruHcd9UaVmcGM/THWp0PSABQsFb Er6N7F3uHG/0vKuvWlT7XcbUxJh1WvARjQBjQb/PV/GITlAh2j8o4BoFcUwK7iNR /mTKRNEF98yLd75bzGp8yYGHeq0alKkQV5oBokJoUleXnJD4br/5bvLtcvsSkQte lz+/YtsIeATx/T8fGjifFKfW81wPT0xLpcXW8X92UwMivpXI2hU= -----END CERTIFICATE-----Generated at Sat Aug 9 05:43:57 2025 by rpki-client