$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: qCHVQ4NCFQx6Re+hHEqrTrPzW9c1Ks6NE47tjQR6Ruk= Subject key identifier: BF:4F:77:DC:23:6C:AD:CB:2D:E8:9C:90:93:F5:D7:59:47:0D:8C:56 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 606904C7EC11B2AC0DBF11CA42911440EB8C514D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: 0119 Signing time: Mon 03 Nov 2025 22:33:40 +0000 Manifest this update: Mon 03 Nov 2025 22:28:40 +0000 Manifest next update: Fri 07 Nov 2025 08:28:40 +0000 Files and hashes: 1: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) 2: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: 1h3X9D0Cqsp2Ychx33IagEJK8S4vBUkfMn1C6RyyPSY=) 4: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:69:04:c7:ec:11:b2:ac:0d:bf:11:ca:42:91:14:40:eb:8c:51:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Nov 3 22:28:40 2025 GMT Not After : Nov 7 08:28:40 2025 GMT Subject: CN=BF4F77DC236CADCB2DE89C9093F5D759470D8C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:d8:63:f4:c1:c1:d1:a9:b0:17:2d:aa:f5: b1:db:58:02:46:a8:30:83:99:28:35:f6:7c:c9:f1: 97:61:84:a8:32:d4:8f:47:10:25:4c:c3:ea:b4:b6: 84:0d:7d:e2:6c:86:08:08:7d:6f:89:ba:03:25:ac: 2c:9c:d1:3e:5b:a0:be:8e:f6:f0:8e:bd:e2:0c:c2: 35:73:68:f5:74:a2:1a:08:02:09:67:3b:ff:c2:28: d8:0d:82:d1:42:ce:71:a8:fb:98:c8:cc:32:d1:b3: bd:42:f4:51:f5:ca:bd:74:7c:b6:cc:11:62:64:07: c8:ad:ea:2d:ca:1a:f1:fc:94:b8:23:49:88:7a:95: f4:b6:6a:5a:b0:9a:8d:51:27:fa:1e:fa:7c:f5:1e: a1:8d:5c:3c:39:7d:17:6b:e6:5d:5c:98:59:95:9e: cf:87:8c:97:a5:da:c1:c3:55:98:94:c5:7f:fe:79: fc:fe:93:02:46:fd:73:71:f0:df:5a:f8:d8:bb:1a: 10:fa:15:08:49:5b:73:92:ed:f9:4c:15:9f:48:2e: 92:76:43:b0:52:cc:21:22:88:16:60:c3:f7:7a:da: 8b:a2:bd:59:04:d6:33:70:f3:76:28:73:c8:c8:d4: 97:1f:ff:5d:38:ce:5d:21:70:f5:7b:c1:2b:8c:2e: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4F:77:DC:23:6C:AD:CB:2D:E8:9C:90:93:F5:D7:59:47:0D:8C:56 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:35:38:88:38:89:fa:49:28:42:0b:bf:89:6d:ea:0b:19:38: de:dc:ef:18:61:61:f2:3a:54:df:f9:ab:9a:df:66:dd:d4:e2: e2:38:e5:d0:18:77:a5:28:7c:64:33:ed:43:65:52:5b:5a:a1: c8:95:9b:99:a8:29:96:80:ab:7b:68:2a:49:03:e5:e1:34:9b: a0:f6:af:31:29:b9:81:0f:4e:fc:75:6c:38:f3:e8:7c:08:a1: 10:cb:1e:b3:f4:c7:d0:a3:b1:76:b3:66:5b:7c:8c:49:08:08: ac:88:92:e2:88:bf:ef:f0:82:c0:bb:fc:92:fa:bb:47:c4:71: 8b:f0:98:6d:35:67:b8:04:e6:5f:2e:85:07:6c:49:a1:0d:67: 10:e7:6c:57:27:e5:84:3c:3c:ec:ca:15:c7:ad:86:52:8e:bb: 57:9e:d3:69:e8:d2:20:42:0b:c2:e1:33:5a:ca:82:dc:33:0c: cb:a7:6d:0e:00:d7:50:2e:0a:94:98:2a:2d:ae:77:ff:9a:78: 62:27:f7:84:37:63:d3:af:57:64:3f:6b:7f:f0:84:78:0e:af: ca:7e:8b:93:90:9f:cd:6b:16:a2:27:7b:fb:95:b7:11:67:ca: f4:5b:fd:4f:5d:6a:27:3e:f3:09:8a:cf:d3:65:4e:8d:20:76: e9:2d:ee:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGkEx+wRsqwNvxHKQpEUQOuMUU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTExMDMyMjI4NDBaFw0yNTExMDcwODI4NDBaMDMxMTAvBgNV BAMTKEJGNEY3N0RDMjM2Q0FEQ0IyREU4OUM5MDkzRjVENzU5NDcwRDhDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUdhj9MHB0amwFy2q9bHbWAJG qDCDmSg19nzJ8ZdhhKgy1I9HECVMw+q0toQNfeJshggIfW+JugMlrCyc0T5boL6O 9vCOveIMwjVzaPV0ohoIAglnO//CKNgNgtFCznGo+5jIzDLRs71C9FH1yr10fLbM EWJkB8it6i3KGvH8lLgjSYh6lfS2alqwmo1RJ/oe+nz1HqGNXDw5fRdr5l1cmFmV ns+HjJel2sHDVZiUxX/+efz+kwJG/XNx8N9a+Ni7GhD6FQhJW3OS7flMFZ9ILpJ2 Q7BSzCEiiBZgw/d62ouivVkE1jNw83Yoc8jI1Jcf/104zl0hcPV7wSuMLm6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv0933CNsrcst6JyQk/XXWUcNjFYwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD81OIg4ifpJKEILv4lt6gsZON7c7xhhYfI6 VN/5q5rfZt3U4uI45dAYd6UofGQz7UNlUltaociVm5moKZaAq3toKkkD5eE0m6D2 rzEpuYEPTvx1bDjz6HwIoRDLHrP0x9CjsXazZlt8jEkICKyIkuKIv+/wgsC7/JL6 u0fEcYvwmG01Z7gE5l8uhQdsSaENZxDnbFcn5YQ8POzKFcethlKOu1ee02no0iBC C8LhM1rKgtwzDMunbQ4A11AuCpSYKi2ud/+aeGIn94Q3Y9OvV2Q/a3/whHgOr8p+ i5OQn81rFqIne/uVtxFnyvRb/U9daic+8wmKz9NlTo0gdukt7vM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:40 2025 by rpki-client