$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: w89SjrcsIX5bz872RcRkicGZolgX8UtyNYtCp2BFaNI= Subject key identifier: 42:0A:7E:12:EC:BF:08:8C:A7:52:5C:24:CD:4F:0A:F8:FC:15:04:A3 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 404BE9E9347AF3A1173C7DEB8C15D3D9FB71D10C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: F1 Signing time: Wed 06 Aug 2025 00:31:47 +0000 Manifest this update: Wed 06 Aug 2025 00:26:47 +0000 Manifest next update: Sat 09 Aug 2025 03:38:47 +0000 Files and hashes: 1: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 2: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: vF/9nowfFqm+UIuk7ZE03KoJm5H0MvyehAmwvGIaiLs=) 3: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4b:e9:e9:34:7a:f3:a1:17:3c:7d:eb:8c:15:d3:d9:fb:71:d1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Aug 6 00:26:47 2025 GMT Not After : Aug 9 03:38:47 2025 GMT Subject: CN=420A7E12ECBF088CA7525C24CD4F0AF8FC1504A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:9d:08:ab:57:5a:63:45:e2:e9:a5:55:41: 9a:77:7c:3d:c6:73:1e:a0:8c:68:98:31:eb:04:05: e4:78:0e:59:66:d2:24:e1:1b:b9:30:2b:51:5a:e8: 84:47:a7:a6:3d:e7:30:52:2f:41:c2:a8:cc:00:f7: 59:b7:6e:d6:83:e4:d0:10:b0:93:da:7a:79:7b:9b: 1f:d3:7e:f5:37:8f:fe:f2:9d:2b:78:c4:6c:3e:d8: 76:da:d1:b1:38:73:2b:2e:d0:a4:1b:2a:75:94:66: 0b:d8:fc:0f:4d:6d:f9:e3:66:df:3e:2b:d1:70:b9: f4:2d:33:ec:c4:d6:8a:97:8e:3c:a6:93:66:7f:4c: 5d:d8:ac:f9:23:10:a7:b4:13:7b:76:70:86:b4:e4: e7:fe:00:06:af:10:7b:6f:e2:82:fa:d8:7b:61:43: b2:2f:58:ac:4c:aa:de:36:81:ff:1a:e1:39:e5:2d: b6:08:c2:42:68:de:4a:d0:c3:6d:16:90:bd:e0:77: 73:74:6f:0b:d8:5f:b7:ba:68:12:e9:4b:cf:85:22: e3:4f:ff:6a:bc:a4:f5:67:20:ca:59:60:2f:d8:9d: f2:d4:69:eb:9b:24:5d:1d:85:4d:4e:42:8b:40:53: 53:e6:76:fd:56:5f:24:55:43:fe:08:f5:0a:ef:54: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:7E:12:EC:BF:08:8C:A7:52:5C:24:CD:4F:0A:F8:FC:15:04:A3 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:da:06:ce:ff:2f:d5:0c:3d:43:f7:2e:40:01:80:4a:6c:e2: 11:4e:5d:fa:d8:69:94:88:6b:af:e4:c5:81:c8:e2:81:4c:23: ba:37:d5:68:c4:ea:94:42:83:f0:5c:33:6f:13:f1:b8:ff:38: bf:e1:df:6e:00:cd:ac:49:1c:58:f2:2b:3d:87:66:3d:09:57: c9:fa:0e:4d:b8:89:87:8a:d9:1f:63:16:0e:e3:0a:5d:a4:4b: a6:1f:3c:cc:79:e2:bc:3c:1d:7d:9a:3e:f7:ce:e6:84:da:2e: 00:4e:71:57:47:2a:6f:f5:20:15:66:be:c9:d2:45:25:0c:0a: 7d:2b:19:a5:2e:25:98:20:35:e8:60:88:25:ae:10:21:a6:59: c3:9b:ab:2d:cb:3a:cb:b7:c6:d3:c8:93:e6:11:18:b4:aa:a9: 75:f3:a8:b1:19:ac:13:0d:8d:39:b3:89:76:e5:0b:eb:1f:9a: 77:d9:a6:a5:48:b6:2f:de:d2:c3:91:f0:34:3f:de:f7:68:37: 54:5f:19:a5:26:e9:42:0f:fa:dd:3f:7a:fd:a1:31:33:fe:f4: 09:65:70:f1:95:ab:6c:ad:6c:5b:8f:6f:99:46:19:79:14:43: 8d:7b:50:58:b2:72:20:55:bf:d7:29:36:b4:9b:b4:73:a6:59: d0:84:62:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEvp6TR686EXPH3rjBXT2ftx0QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA4MDYwMDI2NDdaFw0yNTA4MDkwMzM4NDdaMDMxMTAvBgNV BAMTKDQyMEE3RTEyRUNCRjA4OENBNzUyNUMyNENENEYwQUY4RkMxNTA0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkp0Iq1daY0Xi6aVVQZp3fD3G cx6gjGiYMesEBeR4Dllm0iThG7kwK1Fa6IRHp6Y95zBSL0HCqMwA91m3btaD5NAQ sJPaenl7mx/TfvU3j/7ynSt4xGw+2Hba0bE4cysu0KQbKnWUZgvY/A9NbfnjZt8+ K9FwufQtM+zE1oqXjjymk2Z/TF3YrPkjEKe0E3t2cIa05Of+AAavEHtv4oL62Hth Q7IvWKxMqt42gf8a4TnlLbYIwkJo3krQw20WkL3gd3N0bwvYX7e6aBLpS8+FIuNP /2q8pPVnIMpZYC/YnfLUaeubJF0dhU1OQotAU1Pmdv1WXyRVQ/4I9QrvVLNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgp+Euy/CIynUlwkzU8K+PwVBKMwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7aBs7/L9UMPUP3LkABgEps4hFOXfrYaZSI a6/kxYHI4oFMI7o31WjE6pRCg/BcM28T8bj/OL/h324AzaxJHFjyKz2HZj0JV8n6 Dk24iYeK2R9jFg7jCl2kS6YfPMx54rw8HX2aPvfO5oTaLgBOcVdHKm/1IBVmvsnS RSUMCn0rGaUuJZggNehgiCWuECGmWcObqy3LOsu3xtPIk+YRGLSqqXXzqLEZrBMN jTmziXblC+sfmnfZpqVIti/e0sOR8DQ/3vdoN1RfGaUm6UIP+t0/ev2hMTP+9All cPGVq2ytbFuPb5lGGXkUQ417UFiyciBVv9cpNrSbtHOmWdCEYk4= -----END CERTIFICATE-----Generated at Thu Aug 7 11:12:40 2025 by rpki-client