$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: 3giYVPuP/4gWAtYuT+ffopzUOgnFScp8PSsWlQMc6HY= Subject key identifier: E0:8C:4A:BE:7B:18:75:1A:DE:08:8C:E3:70:00:60:EB:35:15:50:1C Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 66ABCB639B7F0490324F3CE19DC39683EA23A2F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 04B0 Signing time: Tue 05 Aug 2025 22:11:07 +0000 Manifest this update: Tue 05 Aug 2025 22:06:07 +0000 Manifest next update: Sat 09 Aug 2025 03:55:07 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: 5rj3J+7QwgpXSedPIkHzkVpE4Ysc/FMsMS3cp+SPu/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ab:cb:63:9b:7f:04:90:32:4f:3c:e1:9d:c3:96:83:ea:23:a2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Aug 5 22:06:07 2025 GMT Not After : Aug 9 03:55:07 2025 GMT Subject: CN=E08C4ABE7B18751ADE088CE3700060EB3515501C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:c9:f1:2e:f8:dd:53:3b:d6:c0:b5:f8:ee: ee:0a:a5:91:fd:a4:3f:c8:42:0a:11:4f:52:8c:0f: 17:19:8f:ec:c0:e8:0c:e3:32:7c:00:26:30:5f:4a: 29:92:36:b5:01:fd:44:a6:11:7b:76:2e:0b:9e:90: b2:cb:cc:41:3b:47:30:8c:65:d0:a2:11:f0:fa:57: 1e:8f:1e:91:75:e9:cd:cd:85:bf:0f:1d:8f:f7:f3: 56:95:eb:60:b5:e9:ae:a8:8f:32:33:d7:09:81:46: 8f:7d:45:22:f6:c5:a7:6d:08:10:17:1f:01:b9:fc: 62:57:be:0d:db:aa:99:dd:a7:2e:89:09:9e:1d:36: 06:59:2a:2b:2c:14:7a:2b:60:2a:d8:af:28:78:1f: 3c:22:5c:76:ba:ae:7a:fc:63:f4:99:22:ca:b5:a2: 87:40:57:ee:81:1a:51:12:b2:ca:fc:c6:82:82:f4: 24:97:44:ee:66:b5:e7:69:e8:91:7d:6c:f7:51:e5: 0e:ed:21:b1:91:b2:87:02:0d:3e:4d:29:59:ee:62: 2a:d1:21:30:d1:7c:9d:76:35:45:a5:d0:89:f8:f0: 59:a6:d2:89:3a:f3:e2:ff:8a:0a:20:b7:4d:f7:e4: 30:f2:71:4a:0b:06:9d:e2:19:6d:8f:a3:91:fb:55: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8C:4A:BE:7B:18:75:1A:DE:08:8C:E3:70:00:60:EB:35:15:50:1C X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:76:63:00:8a:e0:d5:91:1a:00:f3:d0:0d:24:57:a3:45:31: 64:66:d5:e2:f5:02:5f:5b:07:2e:98:3b:59:ae:23:61:a1:48: d8:9d:e7:76:dd:43:3f:d4:4e:a5:90:f3:60:c8:dd:1b:a9:69: 24:9f:37:39:75:86:04:9c:e1:d3:17:ec:3e:6d:fc:a9:e2:39: 61:68:2a:f4:bf:c1:3b:47:74:58:8b:79:82:af:30:99:c8:b4: bd:23:14:50:49:d0:f0:87:14:26:38:e1:2f:9c:63:8f:3b:30: 6b:03:23:9d:bf:b4:0a:52:13:89:ad:a0:53:c8:a8:e9:ac:71: a4:5a:b7:d0:d4:a8:bf:30:4d:2a:1f:79:b5:5d:1c:8a:e4:73: 1a:5f:d9:95:c5:17:6b:c9:9c:76:07:8d:6d:81:e0:9c:ab:8b: 0b:e0:e4:65:2d:49:92:a8:48:03:a4:d9:ef:4d:38:4e:4a:4c: 55:94:40:8f:5e:11:18:fe:11:22:6d:91:45:31:ec:5a:73:df: fc:bb:5d:09:f9:7c:d1:b9:9d:b5:3e:25:77:48:04:cf:eb:2f: 2f:c2:f7:89:2b:70:08:91:f1:13:fb:11:d3:1d:1c:ca:19:6a: ec:55:6a:c6:73:b1:ff:7c:ae:8e:b5:10:7c:47:ff:1b:24:16: 0f:5b:23:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqvLY5t/BJAyTzzhncOWg+ojovIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTA4MDUyMjA2MDdaFw0yNTA4MDkwMzU1MDdaMDMxMTAvBgNV BAMTKEUwOEM0QUJFN0IxODc1MUFERTA4OENFMzcwMDA2MEVCMzUxNTUwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ncnxLvjdUzvWwLX47u4KpZH9 pD/IQgoRT1KMDxcZj+zA6AzjMnwAJjBfSimSNrUB/USmEXt2LguekLLLzEE7RzCM ZdCiEfD6Vx6PHpF16c3Nhb8PHY/381aV62C16a6ojzIz1wmBRo99RSL2xadtCBAX HwG5/GJXvg3bqpndpy6JCZ4dNgZZKissFHorYCrYryh4HzwiXHa6rnr8Y/SZIsq1 oodAV+6BGlESssr8xoKC9CSXRO5mtedp6JF9bPdR5Q7tIbGRsocCDT5NKVnuYirR ITDRfJ12NUWl0In48Fmm0ok68+L/igogt0335DDycUoLBp3iGW2Po5H7VWerAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4IxKvnsYdRreCIzjcABg6zUVUBwwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZ2YwCK4NWRGgDz0A0kV6NFMWRm1eL1Al9b By6YO1muI2GhSNid53bdQz/UTqWQ82DI3RupaSSfNzl1hgSc4dMX7D5t/KniOWFo KvS/wTtHdFiLeYKvMJnItL0jFFBJ0PCHFCY44S+cY487MGsDI52/tApSE4mtoFPI qOmscaRat9DUqL8wTSofebVdHIrkcxpf2ZXFF2vJnHYHjW2B4Jyriwvg5GUtSZKo SAOk2e9NOE5KTFWUQI9eERj+ESJtkUUx7Fpz3/y7XQn5fNG5nbU+JXdIBM/rLy/C 94krcAiR8RP7EdMdHMoZauxVasZzsf98ro61EHxH/xskFg9bI0I= -----END CERTIFICATE-----Generated at Wed Aug 6 10:03:25 2025 by rpki-client