$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: vJZ5nJEqcoGrK3nCmHTxYQrBwiC7MiynYwmI0wSZ+T4= Subject key identifier: 75:04:37:B1:87:07:A4:B5:F7:B8:D7:3A:F0:42:09:9B:89:07:26:AC Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 5A95D82D27217C6645AEFA7399F20835B0BA7B76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: D9 Signing time: Sun 15 Jun 2025 02:11:45 +0000 Manifest this update: Sun 15 Jun 2025 02:06:45 +0000 Manifest next update: Wed 18 Jun 2025 04:08:45 +0000 Files and hashes: 1: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: B4sbBxzTFc4tsRiZH2wD89CVqKrZe6408hh6WBQlK8k=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:95:d8:2d:27:21:7c:66:45:ae:fa:73:99:f2:08:35:b0:ba:7b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Jun 15 02:06:45 2025 GMT Not After : Jun 18 04:08:45 2025 GMT Subject: CN=750437B18707A4B5F7B8D73AF042099B890726AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:e1:da:19:31:3d:4c:c8:14:30:f5:4d:cf: be:75:e4:f0:67:7d:ff:d5:d0:1c:59:05:f5:71:8e: 4f:f2:83:02:f7:2b:dc:d4:5a:98:46:17:dd:37:4e: 0e:c0:d8:84:74:11:ac:79:7b:0f:09:29:12:f8:8a: c8:88:1b:dc:ae:e5:bd:84:31:67:fd:97:35:94:aa: f3:25:17:3b:ad:bb:2d:93:de:ef:d2:26:3f:a9:c4: cd:27:c7:0e:9e:ca:73:2a:91:42:cd:f6:8e:d7:a0: df:e4:6a:a3:5d:7e:16:dd:77:5c:0e:21:6c:a2:9d: 7a:56:67:09:99:e7:4c:e1:77:a6:99:a6:e6:fb:98: 1d:ec:3e:c9:cc:77:85:68:08:91:9d:92:06:c7:69: 59:70:66:d0:58:45:63:44:69:e8:16:2e:67:83:ce: b0:91:54:9c:a1:99:fb:dc:18:db:34:0a:ea:64:b1: 87:5d:57:50:ce:f0:67:a2:97:c9:bc:0b:bc:61:1a: 0e:34:d8:70:41:be:5b:ca:67:9c:73:2a:1e:d6:39: 3c:a3:6a:5b:34:f8:3d:f3:f4:ae:01:a6:a1:6c:96: 0d:18:6e:39:62:9e:67:f5:02:e5:ce:66:f9:14:29: 8f:70:13:b2:46:9b:42:c9:41:e7:76:e0:57:f0:e1: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:04:37:B1:87:07:A4:B5:F7:B8:D7:3A:F0:42:09:9B:89:07:26:AC X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2b:91:77:3e:80:8b:2e:6e:d1:49:3f:c6:fe:dd:74:7c:aa: 95:c7:82:2a:ae:ef:0b:64:b3:0d:66:a8:8a:6a:a4:ff:f9:09: fc:89:d6:52:d3:75:31:de:de:af:53:a2:a0:09:22:69:1f:af: f1:17:e3:4d:dd:65:39:30:3f:f5:45:a3:0c:97:ae:44:10:7a: cf:f8:64:0f:0f:b8:46:3b:8a:a5:ee:27:65:ac:30:c8:51:6a: a6:f2:a7:26:b0:37:df:95:4a:60:a1:e9:bd:e3:7e:33:33:5f: 0f:40:f0:4c:05:0e:19:a8:87:db:86:29:dc:3a:d0:63:25:82: 95:8f:ee:81:e8:6d:6b:e2:9f:1d:0b:c6:78:6e:44:d0:63:ac: a5:8b:35:d3:51:aa:4d:c7:55:97:3e:26:02:8e:28:1e:31:ec: ed:2c:43:d3:52:6b:41:53:1f:48:74:4e:f5:19:6c:b0:4f:39: 8b:94:b9:61:ac:e5:86:3d:01:38:89:f8:3c:a6:51:80:12:2d: db:42:cf:a5:a7:79:f5:5f:86:42:7a:18:4b:2a:24:f4:44:e6: 00:27:0b:aa:49:c3:5a:ae:b9:93:ca:8c:c4:eb:da:ee:34:62: 50:07:8f:62:81:1b:25:19:b5:58:19:a8:4e:d2:50:77:f4:ea: 35:2b:c1:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpXYLSchfGZFrvpzmfIINbC6e3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA2MTUwMjA2NDVaFw0yNTA2MTgwNDA4NDVaMDMxMTAvBgNV BAMTKDc1MDQzN0IxODcwN0E0QjVGN0I4RDczQUYwNDIwOTlCODkwNzI2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAd+HaGTE9TMgUMPVNz7515PBn ff/V0BxZBfVxjk/ygwL3K9zUWphGF903Tg7A2IR0Eax5ew8JKRL4isiIG9yu5b2E MWf9lzWUqvMlFzutuy2T3u/SJj+pxM0nxw6eynMqkULN9o7XoN/kaqNdfhbdd1wO IWyinXpWZwmZ50zhd6aZpub7mB3sPsnMd4VoCJGdkgbHaVlwZtBYRWNEaegWLmeD zrCRVJyhmfvcGNs0CupksYddV1DO8Geil8m8C7xhGg402HBBvlvKZ5xzKh7WOTyj als0+D3z9K4BpqFslg0Ybjlinmf1AuXOZvkUKY9wE7JGm0LJQed24Ffw4UDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdQQ3sYcHpLX3uNc68EIJm4kHJqwwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0rkXc+gIsubtFJP8b+3XR8qpXHgiqu7wtk sw1mqIpqpP/5CfyJ1lLTdTHe3q9ToqAJImkfr/EX403dZTkwP/VFowyXrkQQes/4 ZA8PuEY7iqXuJ2WsMMhRaqbypyawN9+VSmCh6b3jfjMzXw9A8EwFDhmoh9uGKdw6 0GMlgpWP7oHobWvinx0LxnhuRNBjrKWLNdNRqk3HVZc+JgKOKB4x7O0sQ9NSa0FT H0h0TvUZbLBPOYuUuWGs5YY9ATiJ+DymUYASLdtCz6WnefVfhkJ6GEsqJPRE5gAn C6pJw1quuZPKjMTr2u40YlAHj2KBGyUZtVgZqE7SUHf06jUrwf8= -----END CERTIFICATE-----Generated at Mon Jun 16 21:05:13 2025 by rpki-client