$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: q42W9aTniNF8dmyWkaWkZPvRfZnI5uMXjIsMOkafBYY= Subject key identifier: 44:1D:FC:AA:41:6A:31:64:6E:24:8E:AC:53:F7:8E:E5:79:B8:E2:3F Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 79BCAEAB5EC47CAF500EB0C9ABDA2D5BA019FD50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: AB Signing time: Tue 04 Nov 2025 15:11:10 +0000 Manifest this update: Tue 04 Nov 2025 15:06:10 +0000 Manifest next update: Sat 08 Nov 2025 00:59:10 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: ZAE4SwGlQqZO2chB1kUlHFQyw2Dp0OGjTYN1XGJ9KFg=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bc:ae:ab:5e:c4:7c:af:50:0e:b0:c9:ab:da:2d:5b:a0:19:fd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Nov 4 15:06:10 2025 GMT Not After : Nov 8 00:59:10 2025 GMT Subject: CN=441DFCAA416A31646E248EAC53F78EE579B8E23F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:4c:35:1c:34:1d:b1:33:4f:e4:77:5c:b6: de:48:85:a2:b5:e1:0e:f7:06:6a:db:3e:bd:d6:52: ca:a4:7a:26:f0:e2:81:aa:96:16:7a:77:50:65:f3: 77:e8:46:c2:77:3c:01:be:2e:06:a3:0d:2c:b3:d2: bc:64:36:45:53:1d:7f:9a:39:3f:cb:c4:3f:3c:00: 13:c2:22:d6:aa:ae:ae:a0:70:07:44:f1:cc:de:5f: fe:58:5c:2a:02:68:0e:c3:d5:e3:4c:48:7c:d1:36: 16:52:6c:3c:fe:12:66:d3:19:9a:c3:ab:b2:bc:37: 8b:66:b2:c0:3f:0d:ac:f3:63:b9:77:36:39:99:e8: 5d:7d:c6:90:d2:8e:5d:f5:a6:fd:e6:67:2c:03:e4: 38:d7:13:14:f4:76:ba:c9:9a:bc:d1:88:ab:fb:a4: 9b:b0:3d:51:25:07:2e:a6:7a:6e:b6:a0:d7:e1:e7: aa:49:78:91:30:44:c4:9a:d6:0b:e8:67:d9:a4:1c: 2b:1d:73:aa:fb:2e:40:b3:e9:ee:55:89:1c:59:48: 0f:e8:71:bb:3d:50:9b:90:d5:84:6a:50:d5:93:34: d9:ee:54:7d:8c:f9:8a:36:d7:4d:99:14:09:37:aa: 29:84:8e:aa:30:e7:22:ac:01:a0:9c:bb:93:52:b1: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1D:FC:AA:41:6A:31:64:6E:24:8E:AC:53:F7:8E:E5:79:B8:E2:3F X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e9:16:e7:e2:8a:7c:67:46:9b:10:b4:8d:aa:04:6c:b2:a0: 9c:d2:2f:76:9b:22:04:7e:83:61:a0:83:26:95:e8:c8:c2:c4: 83:dc:35:5c:70:e1:2f:d4:38:18:97:ce:d1:bc:08:2a:20:bf: 57:dd:99:ec:31:12:81:dc:5f:40:fa:fa:f9:8e:07:08:d8:2a: da:c9:53:23:e9:ed:6d:d0:fd:26:3c:eb:47:0b:c8:56:9e:82: 12:f7:4e:89:97:cf:08:61:ce:73:5d:e3:6f:e5:f3:43:60:b9: ed:6c:9c:a9:bf:b7:15:1c:1d:ad:9b:68:f3:68:12:c0:03:05: 06:44:e1:c9:88:08:57:77:1e:d5:d3:a6:1a:e4:2b:a8:b8:77: c7:9e:58:fd:d0:db:84:1f:4f:ca:6d:3c:34:59:9a:5f:01:c4: 7c:44:c5:3f:90:06:02:04:25:1f:0c:b4:9a:9d:16:69:3a:85: 32:11:de:9d:53:27:cd:c3:73:db:ed:4b:eb:c9:8d:b3:9d:b8: fb:e8:2f:d8:e7:33:8e:48:60:89:49:c7:fe:36:1f:06:41:f7: be:34:a7:75:90:8f:36:28:3c:8e:2e:a2:91:c7:7f:e0:67:6b: 38:7c:fd:87:8f:ef:ce:c5:0f:dd:dd:ab:15:3a:d7:53:53:82: 0c:34:c1:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebyuq17EfK9QDrDJq9otW6AZ/VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTExMDQxNTA2MTBaFw0yNTExMDgwMDU5MTBaMDMxMTAvBgNV BAMTKDQ0MURGQ0FBNDE2QTMxNjQ2RTI0OEVBQzUzRjc4RUU1NzlCOEUyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQP0w1HDQdsTNP5Hdctt5IhaK1 4Q73BmrbPr3WUsqkeibw4oGqlhZ6d1Bl83foRsJ3PAG+LgajDSyz0rxkNkVTHX+a OT/LxD88ABPCItaqrq6gcAdE8czeX/5YXCoCaA7D1eNMSHzRNhZSbDz+EmbTGZrD q7K8N4tmssA/DazzY7l3NjmZ6F19xpDSjl31pv3mZywD5DjXExT0drrJmrzRiKv7 pJuwPVElBy6mem62oNfh56pJeJEwRMSa1gvoZ9mkHCsdc6r7LkCz6e5ViRxZSA/o cbs9UJuQ1YRqUNWTNNnuVH2M+Yo2102ZFAk3qimEjqow5yKsAaCcu5NSsXq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURB38qkFqMWRuJI6sU/eO5Xm44j8wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzpFufiinxnRpsQtI2qBGyyoJzSL3abIgR+ g2GggyaV6MjCxIPcNVxw4S/UOBiXztG8CCogv1fdmewxEoHcX0D6+vmOBwjYKtrJ UyPp7W3Q/SY860cLyFaeghL3TomXzwhhznNd42/l80Ngue1snKm/txUcHa2baPNo EsADBQZE4cmICFd3HtXTphrkK6i4d8eeWP3Q24QfT8ptPDRZml8BxHxExT+QBgIE JR8MtJqdFmk6hTIR3p1TJ83Dc9vtS+vJjbOduPvoL9jnM45IYIlJx/42HwZB9740 p3WQjzYoPI4uopHHf+Bnazh8/YeP787FD93dqxU611NTggw0weE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:49 2025 by rpki-client