$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: TzAe/pOPzGyQ7AJHb+LWBjlTVATZNamvkFTwWVXuPlo= Subject key identifier: BA:9C:E4:CC:D5:3E:19:01:47:75:F8:11:BE:D9:36:DC:8E:27:68:05 Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 071416BA251B4707EA86C37487721F05EC01F414 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 01BB Signing time: Sun 02 Nov 2025 05:30:02 +0000 Manifest this update: Sun 02 Nov 2025 05:25:02 +0000 Manifest next update: Wed 05 Nov 2025 10:17:02 +0000 Files and hashes: 1: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY=) 2: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=) 3: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: vSuB8Mg/kH0EvIQQRcjT6fHS2rc3TIXURZ3biM2AoJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 10:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:14:16:ba:25:1b:47:07:ea:86:c3:74:87:72:1f:05:ec:01:f4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Nov 2 05:25:02 2025 GMT Not After : Nov 5 10:17:02 2025 GMT Subject: CN=BA9CE4CCD53E19014775F811BED936DC8E276805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:38:03:a0:70:05:87:2a:72:9d:14:1a:64: a6:1a:f2:b8:ad:88:6b:7a:ef:2d:10:83:80:c4:da: 5a:95:bc:96:24:ce:d7:65:9e:0c:1a:aa:8d:ba:d9: ab:3a:0c:f0:4f:a0:cb:bf:b2:4c:85:83:fd:14:13: 64:bf:60:34:5c:a0:b0:8f:13:ea:7f:78:74:eb:5d: 98:56:12:61:03:10:d9:12:8c:46:36:77:ed:7f:17: 34:ff:f7:b9:10:83:c2:36:e9:02:51:37:f4:1e:f8: ec:f7:7c:1e:6d:07:3b:44:80:eb:0c:57:14:82:26: 8c:f9:8b:96:ce:52:9c:b8:c8:ac:9e:f4:fd:ac:7a: 5c:84:80:a9:57:35:de:57:53:65:26:bc:b6:5a:6f: e8:62:a9:d0:f3:50:e8:02:c7:20:23:5f:65:f1:88: c9:8e:9a:04:a1:62:bc:f9:1f:31:c6:5c:53:64:dd: 8e:2d:44:2b:d7:71:d5:c3:b1:15:a1:93:11:9e:4e: c3:b4:b1:e0:4f:7f:84:70:da:1c:4d:aa:4f:7f:28: db:3c:50:4d:33:ec:ed:8c:50:f3:01:2f:49:f5:46: ca:63:39:5c:8d:d6:25:5e:a8:6a:df:7d:82:11:c6: 46:ed:ce:f8:a6:c4:0a:c9:f1:c6:9a:46:97:f5:02: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9C:E4:CC:D5:3E:19:01:47:75:F8:11:BE:D9:36:DC:8E:27:68:05 X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a8:f3:5d:38:d7:d7:62:6c:0f:29:5c:22:08:c8:e1:46:78: ef:32:61:0e:d9:88:94:44:a3:13:2d:34:9b:d7:a0:43:4b:5b: c1:3e:87:93:73:cd:79:53:c5:02:18:7a:0c:ea:ca:8d:42:07: f2:f9:dc:b7:f3:f0:cf:cf:27:35:ad:84:b1:23:8f:81:4c:05: f9:76:cd:98:eb:2d:fa:f0:88:a4:fb:71:07:57:fa:13:aa:ce: bf:dd:fb:f1:47:5d:e4:0c:35:14:9f:1a:d4:e3:98:c8:a5:22: 7a:09:78:e9:88:60:02:f3:56:7a:ac:bc:1c:70:cb:aa:35:b2: 08:42:30:aa:16:3e:5a:c5:8a:b9:3f:00:98:6f:15:9a:fd:7e: 11:e5:02:51:c2:3f:69:63:b3:39:7e:70:4c:69:b7:03:68:9a: dd:33:0d:85:2d:6b:cf:9e:48:e2:07:02:e7:8b:85:60:94:1d: 9b:f0:0c:a3:b3:45:9b:72:25:d6:ec:37:e8:4d:90:d5:42:2d: 33:10:79:f5:0a:14:89:32:87:04:5d:a0:ef:40:71:86:bd:d5: 26:70:df:f8:8a:f7:b4:09:12:cc:99:76:5a:91:7f:c0:9e:2f: 5c:dc:0e:bb:62:0b:f3:8c:32:60:70:bf:1f:6e:e4:58:48:d5: 09:92:e8:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxQWuiUbRwfqhsN0h3IfBewB9BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTExMDIwNTI1MDJaFw0yNTExMDUxMDE3MDJaMDMxMTAvBgNV BAMTKEJBOUNFNENDRDUzRTE5MDE0Nzc1RjgxMUJFRDkzNkRDOEUyNzY4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd6DgDoHAFhypynRQaZKYa8rit iGt67y0Qg4DE2lqVvJYkztdlngwaqo262as6DPBPoMu/skyFg/0UE2S/YDRcoLCP E+p/eHTrXZhWEmEDENkSjEY2d+1/FzT/97kQg8I26QJRN/Qe+Oz3fB5tBztEgOsM VxSCJoz5i5bOUpy4yKye9P2selyEgKlXNd5XU2UmvLZab+hiqdDzUOgCxyAjX2Xx iMmOmgShYrz5HzHGXFNk3Y4tRCvXcdXDsRWhkxGeTsO0seBPf4Rw2hxNqk9/KNs8 UE0z7O2MUPMBL0n1RspjOVyN1iVeqGrffYIRxkbtzvimxArJ8caaRpf1AuF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUupzkzNU+GQFHdfgRvtk23I4naAUwHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIy QTkwN0VFODY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6o810419dibA8pXCIIyOFGeO8yYQ7ZiJRE oxMtNJvXoENLW8E+h5NzzXlTxQIYegzqyo1CB/L53Lfz8M/PJzWthLEjj4FMBfl2 zZjrLfrwiKT7cQdX+hOqzr/d+/FHXeQMNRSfGtTjmMilInoJeOmIYALzVnqsvBxw y6o1sghCMKoWPlrFirk/AJhvFZr9fhHlAlHCP2ljszl+cExptwNomt0zDYUta8+e SOIHAueLhWCUHZvwDKOzRZtyJdbsN+hNkNVCLTMQefUKFIkyhwRdoO9AcYa91SZw 3/iK97QJEsyZdlqRf8CeL1zcDrtiC/OMMmBwvx9u5FhI1QmS6A8= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:18 2025 by rpki-client