$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: OX0DVJ8AhGq6aoh34f0nsKY48L2/P0fqEhy9tszTk8w= Subject key identifier: 03:3D:D6:36:4C:55:8D:6E:7D:A9:2B:9B:B1:6C:6D:95:83:5B:42:AD Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 6F908CB58379788F6FFD4962BF0B9505E3308394 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 84 Signing time: Sun 10 Aug 2025 06:51:08 +0000 Manifest this update: Sun 10 Aug 2025 06:46:08 +0000 Manifest next update: Wed 13 Aug 2025 14:28:08 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: FzLltn5BCDEXb6P4/HHAkNYEwIKrn1MG6lk2GXN7Mws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:90:8c:b5:83:79:78:8f:6f:fd:49:62:bf:0b:95:05:e3:30:83:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Aug 10 06:46:08 2025 GMT Not After : Aug 13 14:28:08 2025 GMT Subject: CN=033DD6364C558D6E7DA92B9BB16C6D95835B42AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:14:85:3c:9a:c7:a0:74:55:98:3a:24:fc:9a: 4c:46:2f:48:79:94:98:75:a5:d2:17:f0:5c:57:4d: d8:e5:c5:a8:1c:84:41:d2:e4:bd:02:1d:53:8c:23: 4a:1f:b8:1b:19:87:24:d4:c8:2e:3c:35:63:07:80: 0a:43:38:09:0c:12:37:df:72:bb:9d:52:0a:58:20: 59:65:31:e3:59:46:79:84:97:92:0c:ce:f3:de:03: 62:68:c8:9e:7f:79:22:7f:19:92:87:46:0c:82:48: 89:0c:34:46:f9:d6:a7:02:7a:5c:09:0d:c6:f2:25: fe:cc:70:ac:e9:93:16:92:d2:b6:e0:d1:fa:7f:c6: d9:0e:a1:8a:38:56:58:c8:90:ee:c2:17:24:4b:88: 51:d4:b2:b9:4d:e2:5f:41:d0:cc:9a:2d:62:f8:e2: 93:9a:99:83:43:4c:10:54:46:3c:df:d4:ab:91:27: c5:3b:81:4b:db:e3:77:f8:2a:77:81:da:40:72:43: 11:18:e0:b1:70:f1:ec:da:2a:b1:99:45:f1:57:76: 79:96:1a:f5:59:a3:b1:5e:6f:e0:f5:ee:d1:fd:5f: 7c:a3:60:eb:fb:06:7e:c5:4e:de:ed:78:1f:54:82: d7:d8:27:0b:75:fa:e2:36:60:37:cb:e6:33:37:6d: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3D:D6:36:4C:55:8D:6E:7D:A9:2B:9B:B1:6C:6D:95:83:5B:42:AD X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:1c:5f:77:6a:bb:e7:02:bc:22:08:4c:94:3e:9d:56:a9:ff: 80:08:5e:63:8a:5b:81:5b:30:86:22:ff:16:bd:61:4e:61:ef: cc:11:d4:e1:8d:45:87:e9:e3:e9:70:d2:68:2e:e0:6e:9a:61: 17:49:3f:04:d3:5c:99:2e:a2:c1:6d:59:82:31:4a:f4:8a:de: 9a:c4:81:7a:d6:12:7a:08:4a:20:12:8b:31:0c:ac:53:1e:c8: c6:42:ab:d6:c2:31:47:c8:6c:b1:a0:be:1a:4f:0d:0d:d3:b4: c8:b1:04:31:55:31:b5:cc:5d:78:df:55:f0:49:52:ae:24:9e: b9:9e:d2:11:c3:ee:05:48:f8:e3:03:22:9a:6b:bf:2a:e5:b1: b8:d3:aa:b6:38:94:aa:bd:21:c7:79:05:a4:ef:15:70:a0:36: 38:11:09:d9:e2:75:d0:0b:b9:97:1d:40:f3:6b:24:95:64:b1: 1a:da:c3:d6:3a:f2:b7:ea:d3:68:3f:f9:36:6c:ef:ba:49:ed: 2f:c5:c5:0c:94:24:2b:c1:32:50:25:70:9b:9a:69:1d:81:4c: 22:f4:79:96:e5:6f:9a:40:b1:f3:49:15:08:43:94:85:b3:75: d8:37:8e:71:fc:7d:6f:f5:ab:8e:2e:e6:7a:39:f3:80:9d:ca: b4:1e:1c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5CMtYN5eI9v/UlivwuVBeMwg5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTA4MTAwNjQ2MDhaFw0yNTA4MTMxNDI4MDhaMDMxMTAvBgNV BAMTKDAzM0RENjM2NEM1NThENkU3REE5MkI5QkIxNkM2RDk1ODM1QjQyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmFIU8msegdFWYOiT8mkxGL0h5 lJh1pdIX8FxXTdjlxagchEHS5L0CHVOMI0ofuBsZhyTUyC48NWMHgApDOAkMEjff crudUgpYIFllMeNZRnmEl5IMzvPeA2JoyJ5/eSJ/GZKHRgyCSIkMNEb51qcCelwJ DcbyJf7McKzpkxaS0rbg0fp/xtkOoYo4VljIkO7CFyRLiFHUsrlN4l9B0MyaLWL4 4pOamYNDTBBURjzf1KuRJ8U7gUvb43f4KneB2kByQxEY4LFw8ezaKrGZRfFXdnmW GvVZo7Feb+D17tH9X3yjYOv7Bn7FTt7teB9UgtfYJwt1+uI2YDfL5jM3bfmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAz3WNkxVjW59qSubsWxtlYNbQq0wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMccX3dqu+cCvCIITJQ+nVap/4AIXmOKW4Fb MIYi/xa9YU5h78wR1OGNRYfp4+lw0mgu4G6aYRdJPwTTXJkuosFtWYIxSvSK3prE gXrWEnoISiASizEMrFMeyMZCq9bCMUfIbLGgvhpPDQ3TtMixBDFVMbXMXXjfVfBJ Uq4knrme0hHD7gVI+OMDIpprvyrlsbjTqrY4lKq9Icd5BaTvFXCgNjgRCdniddAL uZcdQPNrJJVksRraw9Y68rfq02g/+TZs77pJ7S/FxQyUJCvBMlAlcJuaaR2BTCL0 eZblb5pAsfNJFQhDlIWzddg3jnH8fW/1q44u5no584CdyrQeHLE= -----END CERTIFICATE-----Generated at Sun Aug 10 18:16:28 2025 by rpki-client