$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft File: 365454AF0090F9E623861AF2120855412F7447D1.mft (raw, json) Hash identifier: FPiBC0l0SYJyik6uD5OoHb49AprfakexHHZUwHCkaaY= Subject key identifier: 1B:80:46:4C:5D:F1:DF:38:16:50:4E:C6:27:8B:BF:19:61:83:DE:9F Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 Certificate issuer: /CN=365454AF0090F9E623861AF2120855412F7447D1 Certificate serial: 34DF4576EC43D2B8F8B7E9C7D780A49189B2BFA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft Manifest number: 0496 Signing time: Fri 08 Aug 2025 09:01:31 +0000 Manifest this update: Fri 08 Aug 2025 08:56:31 +0000 Manifest next update: Mon 11 Aug 2025 09:23:31 +0000 Files and hashes: 1: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: nUBG6+R8s7Qlqoihd6rfzu85Dq3VPI+YwbrGoZs+QU0=) 2: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: 9vEr+rW9AjCmQf87UbUqdHYs29iLEMAjVaNaC9HO/xg=) 3: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: oKO5swLiRF2bm1/vzW6OxAY+CbAYuc/9J6jZThWEk60=) 4: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: prt3af0W9LDYfmxlTB9KC67kSbtgNUrFTGVHWlW2dAs=) 5: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: hZdDJxVjtO1n0AGl1pB9t846WGWMULCEbo7Iz08dGoM=) 6: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: 7L47gsfKFmvu8oI5kGPZ+UyouBtE7KrQSLGp8trvWsU=) 7: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: SjnwpKi1JCVbhwIXLEs/r82n8qCMkUN4R4DIR3vyOSc=) 8: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: ZwQEyzr0qU/uG/9S8Tb3R56McpPXpsgC7o/jCqvdCug=) 9: 365454AF0090F9E623861AF2120855412F7447D1.crl (hash: YuiWZ80ESKyJ8/aqQMjVatiDKYk+vSUfH3p0N99q4ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:45:76:ec:43:d2:b8:f8:b7:e9:c7:d7:80:a4:91:89:b2:bf:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1 Validity Not Before: Aug 8 08:56:31 2025 GMT Not After : Aug 11 09:23:31 2025 GMT Subject: CN=1B80464C5DF1DF3816504EC6278BBF196183DE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:e4:3e:25:59:35:4c:2b:d5:53:ce:32:ed: 00:31:b4:7e:f8:44:ac:0e:40:b6:2b:60:b4:a1:5d: e4:31:ab:78:31:81:ac:1b:30:ea:d4:d3:8e:73:21: 78:b0:b7:00:63:78:bd:75:f2:40:de:1c:52:b0:17: 69:7b:cf:85:b3:eb:c4:93:03:24:24:bb:2a:84:cd: 94:70:ba:fb:e5:62:12:bf:fe:35:f3:d8:be:5b:d6: 24:88:c4:6b:a2:16:a5:87:09:73:52:0c:78:b6:a1: e5:76:00:27:d7:f5:05:d1:df:e2:7d:b2:20:5f:c2: f1:99:43:92:2f:05:14:9f:8b:40:92:25:65:3c:ee: 13:52:3d:65:fa:ab:1c:0f:3a:03:6b:1e:61:f4:46: 4f:66:40:6a:a9:13:63:d9:42:73:26:b6:4c:93:d1: 04:09:01:ab:3a:2e:b6:54:ba:72:3b:d7:6f:f8:de: 34:fd:a2:c9:ca:98:ad:81:13:01:e7:f3:e6:3d:3a: bf:11:67:59:65:72:fc:74:4b:07:ec:30:23:5b:a6: cb:84:b5:53:1c:45:73:de:59:c5:62:06:3c:75:38: 17:6a:77:78:0b:c5:3c:f7:05:e1:fc:87:e9:e7:78: 38:df:48:f7:56:fc:05:95:6e:9a:ad:be:09:bd:74: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:80:46:4C:5D:F1:DF:38:16:50:4E:C6:27:8B:BF:19:61:83:DE:9F X509v3 Authority Key Identifier: keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:5d:a5:c4:eb:1b:2e:61:6b:c6:f6:14:4c:bc:85:e8:02: 36:19:5a:70:7b:3a:a8:a8:7d:6f:98:b8:b4:30:39:51:57:b3: 6b:5a:46:a8:70:ae:b2:5c:ea:ab:93:b5:9d:d8:bb:49:4c:ce: 7f:ea:8f:f1:ad:f2:1e:6d:f8:86:68:bc:33:43:e3:12:5c:17: 68:1f:f1:85:07:4f:f1:c1:b9:6a:e9:75:7f:ae:66:1b:38:5c: 91:b7:74:bf:02:68:ac:b3:48:e2:43:8b:db:18:28:f7:ad:8f: 88:8d:8c:18:6b:5d:f4:4e:67:56:80:50:8f:54:90:ef:71:1c: 8b:7f:57:b9:6e:03:ee:ca:c9:90:86:01:84:02:d7:28:59:bb: 77:25:14:c1:21:65:34:b1:e9:2a:75:e8:c4:fc:46:09:f3:b7: ca:0c:9c:23:d0:fa:f7:a6:9b:56:77:7a:ce:6f:b5:72:61:16: c7:9c:9c:43:14:4f:f2:e0:09:7c:e5:57:63:6e:40:a7:3c:49: 83:5c:6c:ef:24:ee:f8:43:83:5b:cf:14:94:c7:a7:65:73:34: 6f:50:20:0a:45:58:9e:16:d6:25:d5:6d:01:41:62:95:65:c2: 19:3d:9e:c7:ee:b7:9e:f1:ba:2e:a3:a7:37:ad:c4:52:1d:7e: af:01:aa:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNN9FduxD0rj4t+nH14CkkYmyv6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEy Rjc0NDdEMTAeFw0yNTA4MDgwODU2MzFaFw0yNTA4MTEwOTIzMzFaMDMxMTAvBgNV BAMTKDFCODA0NjRDNURGMURGMzgxNjUwNEVDNjI3OEJCRjE5NjE4M0RFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDieeQ+JVk1TCvVU84y7QAxtH74 RKwOQLYrYLShXeQxq3gxgawbMOrU045zIXiwtwBjeL118kDeHFKwF2l7z4Wz68ST AyQkuyqEzZRwuvvlYhK//jXz2L5b1iSIxGuiFqWHCXNSDHi2oeV2ACfX9QXR3+J9 siBfwvGZQ5IvBRSfi0CSJWU87hNSPWX6qxwPOgNrHmH0Rk9mQGqpE2PZQnMmtkyT 0QQJAas6LrZUunI712/43jT9osnKmK2BEwHn8+Y9Or8RZ1llcvx0SwfsMCNbpsuE tVMcRXPeWcViBjx1OBdqd3gLxTz3BeH8h+nneDjfSPdW/AWVbpqtvgm9dKiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG4BGTF3x3zgWUE7GJ4u/GWGD3p8wHwYDVR0j BBgwFoAUNlRUrwCQ+eYjhhryEghVQS90R9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Nzk4NGUzYS00OGY5LTRjZGEtYmU2Yy00MDA2YzA4ZjhmZDIvMC8zNjU0NTRBRjAw OTBGOUU2MjM4NjFBRjIxMjA4NTU0MTJGNzQ0N0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEyRjc0 NDdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1 NDEyRjc0NDdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/GXaXE6xsuYWvG9hRMvIXoAjYZWnB7Oqio fW+YuLQwOVFXs2taRqhwrrJc6quTtZ3Yu0lMzn/qj/Gt8h5t+IZovDND4xJcF2gf 8YUHT/HBuWrpdX+uZhs4XJG3dL8CaKyzSOJDi9sYKPetj4iNjBhrXfROZ1aAUI9U kO9xHIt/V7luA+7KyZCGAYQC1yhZu3clFMEhZTSx6Sp16MT8Rgnzt8oMnCPQ+vem m1Z3es5vtXJhFsecnEMUT/LgCXzlV2NuQKc8SYNcbO8k7vhDg1vPFJTHp2VzNG9Q IApFWJ4W1iXVbQFBYpVlwhk9nsfut57xui6jpzetxFIdfq8Bqnc= -----END CERTIFICATE-----Generated at Sat Aug 9 22:38:27 2025 by rpki-client