$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: /2Hinze3gWvAPfu1Kblgxb1z7VxHUahtcbzwmWyKyQE= Subject key identifier: 16:A2:D0:E8:1A:22:9C:4E:D7:0A:AE:65:96:04:F1:40:2D:7D:1B:58 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 6B1E5BBE8A577FAEF0112430747B105B57F05914 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 049E Signing time: Mon 16 Jun 2025 18:32:07 +0000 Manifest this update: Mon 16 Jun 2025 18:27:07 +0000 Manifest next update: Thu 19 Jun 2025 21:17:07 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: rzjnKVoPcvg8LoYYqlAPNG8z+kcZAMAEA1cgciQRlhI=) 2: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: rrVPmyGL+0K3mABVv6Z4tBHeuoj+RSwE4KkqvjTW7oo=) 3: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: XqWIDcod31e38VgeahW9dRMzM4JKlsw/6vSF5Hd9Xv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1e:5b:be:8a:57:7f:ae:f0:11:24:30:74:7b:10:5b:57:f0:59:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Jun 16 18:27:07 2025 GMT Not After : Jun 19 21:17:07 2025 GMT Subject: CN=16A2D0E81A229C4ED70AAE659604F1402D7D1B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:db:a0:29:4e:17:11:79:8c:9e:58:b9:28: 54:55:e7:2b:bf:58:e9:5b:e0:8d:f5:f0:21:74:94: 7e:9f:2e:51:34:02:e2:80:5e:a8:66:40:2c:7c:32: 83:51:1d:3b:a2:89:62:e2:58:1a:54:51:48:83:7b: 60:c5:8f:18:53:d9:59:83:ce:24:ac:fb:aa:35:b0: 6f:9a:2d:7b:bd:f0:33:7d:2b:2e:e4:74:be:b2:bd: 38:f4:d0:fb:c5:48:a2:ea:33:62:db:f5:2a:50:17: c7:c9:81:df:ab:49:98:b4:e8:17:08:e9:a3:be:17: 06:bc:71:99:35:cf:0b:57:ba:46:fb:47:fc:cf:3a: 09:b0:31:09:22:46:6b:7f:ef:4e:8c:7e:a4:d9:26: f9:fa:11:52:41:b5:6d:42:21:67:b5:27:80:5b:d0: 35:7b:a4:9a:a4:d2:ed:88:75:1c:21:31:5e:53:5e: 3e:cf:23:e9:7b:71:b8:a8:51:dc:0d:27:92:27:e2: e9:d8:46:d0:07:38:54:3a:d1:c2:59:f4:56:5b:97: 8d:34:b2:68:0c:6e:8e:6b:c0:06:1f:c4:1d:48:f3: 39:85:6d:9f:82:4d:f5:d2:5f:b8:8b:cf:9b:9e:ec: cb:1b:7a:30:62:17:92:c6:bf:5f:d5:5e:1e:d7:95: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:D0:E8:1A:22:9C:4E:D7:0A:AE:65:96:04:F1:40:2D:7D:1B:58 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:b9:1a:ac:52:de:9b:a8:9d:02:a8:2b:60:7f:a8:4e:ae: 0a:2c:47:c8:9b:11:1d:db:95:fe:40:00:c1:d6:20:61:3b:e4: 0a:27:89:e5:c5:06:e1:55:75:5f:c2:99:0f:4c:8f:b9:e8:6b: 45:d9:c0:4f:ef:2d:b8:3d:a0:db:c3:00:24:f1:27:12:03:75: 52:e4:67:3a:ef:89:89:7b:b5:07:8f:d3:5c:14:a7:4a:b3:8d: 55:c3:c1:02:d9:8f:6e:d2:5b:fe:40:ed:02:c2:da:e3:0d:a6: 65:72:d5:a9:f5:f7:7b:b5:2d:6d:9d:a2:8f:08:fb:b3:80:ee: b5:74:f3:d3:cb:07:15:ba:18:be:e0:ad:55:9a:b5:ca:e2:ae: 7c:38:13:96:5e:8a:c8:a2:95:1d:49:f0:3d:f9:e0:27:3b:d3: 08:9e:a9:10:4f:64:64:74:59:81:b3:5a:24:81:91:bd:ba:80: ca:02:6e:b3:ee:82:fb:b7:c3:a1:aa:41:6b:f4:e4:fd:10:a4: 22:b3:38:85:b2:b6:8e:58:2c:ef:07:d9:7f:67:8d:19:48:24: 3b:0d:08:1e:ea:f2:1a:70:db:8b:84:61:73:72:8a:71:32:17: 50:ae:70:8f:01:45:cf:c3:e7:a6:92:77:ad:89:58:07:9c:74: f6:ef:fa:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUax5bvopXf67wESQwdHsQW1fwWRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA2MTYxODI3MDdaFw0yNTA2MTkyMTE3MDdaMDMxMTAvBgNV BAMTKDE2QTJEMEU4MUEyMjlDNEVENzBBQUU2NTk2MDRGMTQwMkQ3RDFCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0NugKU4XEXmMnli5KFRV5yu/ WOlb4I318CF0lH6fLlE0AuKAXqhmQCx8MoNRHTuiiWLiWBpUUUiDe2DFjxhT2VmD ziSs+6o1sG+aLXu98DN9Ky7kdL6yvTj00PvFSKLqM2Lb9SpQF8fJgd+rSZi06BcI 6aO+Fwa8cZk1zwtXukb7R/zPOgmwMQkiRmt/706MfqTZJvn6EVJBtW1CIWe1J4Bb 0DV7pJqk0u2IdRwhMV5TXj7PI+l7cbioUdwNJ5In4unYRtAHOFQ60cJZ9FZbl400 smgMbo5rwAYfxB1I8zmFbZ+CTfXSX7iLz5ue7MsbejBiF5LGv1/VXh7Xldr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFqLQ6BoinE7XCq5llgTxQC19G1gwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGGuRqsUt6bqJ0CqCtgf6hOrgosR8ibER3b lf5AAMHWIGE75AonieXFBuFVdV/CmQ9Mj7noa0XZwE/vLbg9oNvDACTxJxIDdVLk ZzrviYl7tQeP01wUp0qzjVXDwQLZj27SW/5A7QLC2uMNpmVy1an193u1LW2doo8I +7OA7rV089PLBxW6GL7grVWatcrirnw4E5ZeisiilR1J8D354Cc70wieqRBPZGR0 WYGzWiSBkb26gMoCbrPugvu3w6GqQWv05P0QpCKzOIWyto5YLO8H2X9njRlIJDsN CB7q8hpw24uEYXNyinEyF1CucI8BRc/D56aSd62JWAecdPbv+oI= -----END CERTIFICATE-----Generated at Wed Jun 18 15:15:54 2025 by rpki-client