$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: U9TqUip1Hg6DQrRSRZKn6xeRfHUO8Lnm9nYN0xv/F0s= Subject key identifier: 0D:90:21:36:4C:C4:44:2F:B1:FA:7B:A6:93:D7:47:27:EE:58:3F:BF Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 668E1B9E38C91E149A3B6B521B165E03033774DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 6D Signing time: Thu 19 Jun 2025 14:41:07 +0000 Manifest this update: Thu 19 Jun 2025 14:36:07 +0000 Manifest next update: Mon 23 Jun 2025 02:13:07 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: NnUldsXcuRRzZ1rLGVRZZIoE0vrxQxYG0LS1qVKRJao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 02:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8e:1b:9e:38:c9:1e:14:9a:3b:6b:52:1b:16:5e:03:03:37:74:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Jun 19 14:36:07 2025 GMT Not After : Jun 23 02:13:07 2025 GMT Subject: CN=0D9021364CC4442FB1FA7BA693D74727EE583FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:37:20:1f:22:06:71:03:73:f2:b2:97:41: 26:9f:85:dc:ca:23:f4:35:fb:8c:f8:b2:e7:0d:56: f2:59:13:d1:b0:a3:20:51:83:a2:59:ea:74:e8:d9: 9a:9e:dd:6b:29:d4:7a:9a:a5:71:98:cd:2a:09:7f: ab:35:ee:d8:8a:b5:a7:0b:f9:fb:d7:14:94:22:ef: 7f:40:39:43:9a:61:79:a9:49:52:ab:6c:a8:1e:81: 67:63:57:ba:b6:5e:d7:f2:11:f9:d8:db:56:60:b9: 0d:44:cd:3d:8e:5c:34:02:88:58:82:20:26:3b:2a: 9d:87:99:a2:74:38:70:48:cc:4d:9f:65:57:dc:01: 34:42:f4:35:a4:d7:70:5c:f9:09:f7:9e:4c:b7:4f: b2:0a:2a:65:d3:8d:fb:ab:5a:fe:d9:db:51:1f:1e: 85:fb:05:91:7f:a9:d7:36:d8:fa:de:8d:af:bf:1d: 0f:d1:c2:2d:19:fd:de:af:82:9b:d9:6d:4b:24:1a: 1f:27:b6:67:4c:9f:9c:72:a0:3d:a6:a9:07:93:7a: 51:7b:5c:90:29:bc:2a:f2:7f:7b:bf:3f:82:98:05: 55:5c:f5:41:27:f7:3f:d8:3e:fa:26:5b:c5:b4:5e: d7:6e:4a:54:a8:78:54:39:28:38:1e:e6:3f:d8:2b: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:90:21:36:4C:C4:44:2F:B1:FA:7B:A6:93:D7:47:27:EE:58:3F:BF X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7a:e5:b8:7a:5d:e9:9b:21:9c:be:e0:d4:a9:fc:a6:9f:bc: ab:4a:ff:62:a7:18:6e:23:1b:66:ce:70:25:f2:70:aa:30:d3: 7e:db:ff:ac:d8:53:1f:26:dc:8a:46:b3:7f:45:11:99:e1:bf: 18:4d:3d:4b:9f:e8:46:44:4f:e9:46:4f:a7:18:7f:91:45:62: 00:1e:cc:86:01:da:29:9e:ea:8d:bc:60:3a:8f:a7:72:82:cc: 42:bc:b8:7c:bb:d0:51:16:90:d9:6d:ad:7f:05:c4:3f:83:1e: 16:98:8d:3f:2a:38:ef:da:9d:e9:56:96:89:83:4a:93:0f:58: 84:81:b9:ef:43:fa:98:d2:97:2b:24:0d:f4:62:e7:e9:6e:a6: 06:29:81:45:3c:6e:77:8f:d2:06:2d:64:85:90:5f:5d:32:7a: cb:10:4b:23:e5:bb:6f:06:03:9f:72:c1:1a:5e:4c:99:6b:bb: 71:76:86:5b:50:46:ac:87:14:84:04:67:04:7f:97:4d:00:f4: 36:8a:6c:e6:a1:24:fa:08:0e:81:4c:c5:fc:dc:cd:2a:52:af: e6:6e:a1:96:4f:82:63:51:52:fb:41:6a:a2:82:0c:a6:5e:a3: 11:3b:66:d1:cc:9d:26:b4:93:66:28:7e:8e:95:7b:f3:c6:bf: 4b:e2:28:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZo4bnjjJHhSaO2tSGxZeAwM3dN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTA2MTkxNDM2MDdaFw0yNTA2MjMwMjEzMDdaMDMxMTAvBgNV BAMTKDBEOTAyMTM2NENDNDQ0MkZCMUZBN0JBNjkzRDc0NzI3RUU1ODNGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+zcgHyIGcQNz8rKXQSafhdzK I/Q1+4z4sucNVvJZE9GwoyBRg6JZ6nTo2Zqe3Wsp1HqapXGYzSoJf6s17tiKtacL +fvXFJQi739AOUOaYXmpSVKrbKgegWdjV7q2XtfyEfnY21ZguQ1EzT2OXDQCiFiC ICY7Kp2HmaJ0OHBIzE2fZVfcATRC9DWk13Bc+Qn3nky3T7IKKmXTjfurWv7Z21Ef HoX7BZF/qdc22Preja+/HQ/Rwi0Z/d6vgpvZbUskGh8ntmdMn5xyoD2mqQeTelF7 XJApvCryf3u/P4KYBVVc9UEn9z/YPvomW8W0XtduSlSoeFQ5KDge5j/YK9BdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZAhNkzERC+x+numk9dHJ+5YP78wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ65bh6XembIZy+4NSp/KafvKtK/2KnGG4j G2bOcCXycKow037b/6zYUx8m3IpGs39FEZnhvxhNPUuf6EZET+lGT6cYf5FFYgAe zIYB2ime6o28YDqPp3KCzEK8uHy70FEWkNltrX8FxD+DHhaYjT8qOO/anelWlomD SpMPWISBue9D+pjSlyskDfRi5+lupgYpgUU8bneP0gYtZIWQX10yessQSyPlu28G A59ywRpeTJlru3F2hltQRqyHFIQEZwR/l00A9DaKbOahJPoIDoFMxfzczSpSr+Zu oZZPgmNRUvtBaqKCDKZeoxE7ZtHMnSa0k2Yofo6Ve/PGv0viKGw= -----END CERTIFICATE-----Generated at Fri Jun 20 20:16:07 2025 by rpki-client