$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: w62p46Sipi+37Q+GZX7eh5J568ghnq8tJbXJzER6hx8= Subject key identifier: 57:28:9A:66:6B:CC:CF:38:2F:C4:B3:D0:73:80:C2:99:EB:3A:82:79 Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 4BDB1ADC7F3086C73B02C9230AA6E7FC2703497D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 57 Signing time: Wed 30 Apr 2025 10:41:06 +0000 Manifest this update: Wed 30 Apr 2025 10:36:06 +0000 Manifest next update: Sat 03 May 2025 20:06:06 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: nZLQ7+Fl2/hB6xVIXQBScg6XBK3o//mUMAdup2xYgQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 20:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:db:1a:dc:7f:30:86:c7:3b:02:c9:23:0a:a6:e7:fc:27:03:49:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Apr 30 10:36:06 2025 GMT Not After : May 3 20:06:06 2025 GMT Subject: CN=57289A666BCCCF382FC4B3D07380C299EB3A8279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:a1:cb:85:16:bf:13:c0:59:03:a7:c8:c5: 7c:4f:bd:34:25:83:2b:ef:8a:db:7f:ce:5d:07:3f: 79:a6:3f:2e:f8:8d:0f:5c:f3:a7:0d:b2:0e:05:32: 1a:f4:47:f0:21:51:b8:98:7f:06:9d:23:04:8c:55: 03:f9:5f:76:c5:ff:4e:64:61:dd:0b:d3:35:cb:b5: 0d:63:d4:53:d7:e5:48:de:e3:f2:ca:e2:21:82:9c: 92:6c:d1:10:03:9c:be:8d:9d:7f:c6:c6:2d:49:83: b4:05:8b:37:a9:50:b9:8b:85:23:ce:f8:ce:17:65: 66:13:5a:0f:53:7e:b1:0c:cb:8f:71:58:79:ab:2b: 82:e2:17:6d:3f:e7:12:0c:63:28:86:48:45:86:eb: f2:07:1c:bd:6f:8f:b0:4a:31:8e:e7:bb:8f:f2:8d: 52:be:2d:4c:d8:5b:e8:8c:22:af:32:f0:f2:dc:20: e6:d4:df:2f:0a:e8:54:b5:05:a7:9b:28:f8:29:b1: 04:34:10:f6:35:91:94:42:a7:38:8a:79:50:52:e9: d6:e2:dc:ef:80:cf:21:43:4b:a2:2d:9e:49:82:fc: a9:a6:3c:1e:70:fc:af:f9:5f:48:12:fa:9f:7c:f0: cc:0e:28:39:df:fa:0f:21:03:16:06:be:10:0b:15: 68:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:9A:66:6B:CC:CF:38:2F:C4:B3:D0:73:80:C2:99:EB:3A:82:79 X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:54:70:2d:c6:1f:2e:72:11:9b:16:11:e9:97:d1:f4:4d:02: ae:a2:08:53:e5:f4:eb:8f:4d:28:2d:d5:ee:f8:ea:c9:4d:42: d0:a0:4b:ab:02:29:c0:8b:d2:eb:3e:7e:c6:81:90:2e:3c:39: 17:0a:1f:f5:a6:9f:ef:42:b6:e1:71:43:ca:5b:44:3d:61:d9: 55:64:5f:25:83:5a:a4:6c:0c:05:0f:4c:d9:6f:e4:e2:32:9e: 03:9b:a3:bb:bd:b5:b8:23:2f:38:5e:28:f9:bf:75:5d:fa:bf: e8:4f:bd:2c:5d:fe:f1:0e:f9:90:41:b8:c4:57:10:47:76:f9: f8:c8:c2:c3:de:de:37:77:88:f6:7a:64:08:2d:c1:69:98:b3: 53:8d:6c:6f:8b:d3:92:cb:b8:88:96:0a:fd:3a:ba:93:be:80: 8a:c1:7d:8c:75:14:d6:52:4c:36:0d:5c:1d:a1:26:16:f1:54: 89:f5:64:24:73:d8:fc:13:90:82:3c:15:35:e3:cc:8d:c8:79: 57:5e:62:f4:b8:88:cf:20:5c:e8:58:cb:50:be:29:74:84:25: 21:6b:ca:85:52:e6:6c:a2:4a:a3:43:12:1d:e9:51:3e:43:05: 84:bf:25:3e:c2:35:ac:3a:13:52:55:00:8d:06:56:7e:c6:f0: bf:6a:7a:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9sa3H8whsc7AskjCqbn/CcDSX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTA0MzAxMDM2MDZaFw0yNTA1MDMyMDA2MDZaMDMxMTAvBgNV BAMTKDU3Mjg5QTY2NkJDQ0NGMzgyRkM0QjNEMDczODBDMjk5RUIzQTgyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdq6HLhRa/E8BZA6fIxXxPvTQl gyvvitt/zl0HP3mmPy74jQ9c86cNsg4FMhr0R/AhUbiYfwadIwSMVQP5X3bF/05k Yd0L0zXLtQ1j1FPX5Uje4/LK4iGCnJJs0RADnL6NnX/Gxi1Jg7QFizepULmLhSPO +M4XZWYTWg9TfrEMy49xWHmrK4LiF20/5xIMYyiGSEWG6/IHHL1vj7BKMY7nu4/y jVK+LUzYW+iMIq8y8PLcIObU3y8K6FS1BaebKPgpsQQ0EPY1kZRCpziKeVBS6dbi 3O+AzyFDS6ItnkmC/KmmPB5w/K/5X0gS+p988MwOKDnf+g8hAxYGvhALFWgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVyiaZmvMzzgvxLPQc4DCmes6gnkwHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZUcC3GHy5yEZsWEemX0fRNAq6iCFPl9OuP TSgt1e746slNQtCgS6sCKcCL0us+fsaBkC48ORcKH/Wmn+9CtuFxQ8pbRD1h2VVk XyWDWqRsDAUPTNlv5OIyngObo7u9tbgjLzheKPm/dV36v+hPvSxd/vEO+ZBBuMRX EEd2+fjIwsPe3jd3iPZ6ZAgtwWmYs1ONbG+L05LLuIiWCv06upO+gIrBfYx1FNZS TDYNXB2hJhbxVIn1ZCRz2PwTkII8FTXjzI3IeVdeYvS4iM8gXOhYy1C+KXSEJSFr yoVS5myiSqNDEh3pUT5DBYS/JT7CNaw6E1JVAI0GVn7G8L9qeuQ= -----END CERTIFICATE-----Generated at Fri May 2 09:21:47 2025 by rpki-client