$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: ZoG4Cs7G+NCOkErZhIH5xzrfe5qFc6OXUdOp5tSB5Lg= Subject key identifier: 1B:6C:9A:E0:A8:E5:5D:5A:D2:2F:33:59:3F:30:FC:36:02:0A:2E:98 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 10340C28BA9DBBF07317A3F598FF1CAA3655AA47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 02A6 Signing time: Sun 27 Apr 2025 19:50:03 +0000 Manifest this update: Sun 27 Apr 2025 19:45:03 +0000 Manifest next update: Thu 01 May 2025 07:04:03 +0000 Files and hashes: 1: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: /rNqnQhLNaqVLN9Hq//q/+AhHgUOzogNFCC15aZgYGU=) 2: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: 1HoalHOccI6dF96KiGgQSSGYeyzT8ws1YM4qBDYn6kM=) 3: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: F9M4JE/BbL7KPtInfZ2De6C86BPHzRjVLxJovHmyJzk=) 4: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: 3J6hvxgEVqyD6OymkoX4wg6aPVnMQfStqRhmiYMuRiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 07:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:34:0c:28:ba:9d:bb:f0:73:17:a3:f5:98:ff:1c:aa:36:55:aa:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Apr 27 19:45:03 2025 GMT Not After : May 1 07:04:03 2025 GMT Subject: CN=1B6C9AE0A8E55D5AD22F33593F30FC36020A2E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c9:9b:f6:cd:44:f8:6d:ee:52:62:e3:11:82: 9f:e6:8a:43:1a:2a:59:5a:84:ed:ef:c5:a4:87:39: 2e:33:82:40:51:7b:9c:52:86:3a:e7:48:81:36:c2: 54:c6:18:c3:c8:7b:92:c0:10:1d:4f:e2:2f:35:f4: fe:64:e5:d6:37:e6:59:25:32:8a:7b:bd:9d:7a:58: 1f:f9:b5:92:82:f0:60:9b:54:56:4f:f1:f2:60:71: 7f:bc:3e:64:4a:54:e3:94:a7:60:86:06:c1:0c:78: 5a:94:67:3d:d0:c8:00:8b:1f:16:08:4a:72:0e:47: cf:cc:f1:5b:fd:de:32:23:c4:71:53:de:78:cf:c1: 36:19:a4:b7:af:70:cd:14:dc:8c:9e:ee:30:de:3a: e8:c1:1c:6a:7a:35:c4:16:ca:c0:65:34:be:56:6b: 21:37:c1:d6:1b:0b:83:af:9f:23:a0:fa:53:50:76: f9:de:c4:2d:7f:e7:48:55:26:22:c1:d1:83:d8:d7: 74:e6:9e:f1:f6:50:f4:4d:80:07:53:84:c2:9d:27: d8:04:d1:50:8e:c7:7c:6c:8f:09:02:ea:8f:a0:51: ae:1a:2e:e2:81:ec:bf:d2:8f:1b:0d:ab:aa:f0:d7: fc:aa:61:54:c0:53:6e:10:cb:23:69:8b:f6:c8:84: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6C:9A:E0:A8:E5:5D:5A:D2:2F:33:59:3F:30:FC:36:02:0A:2E:98 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:dd:4e:7d:28:7b:6c:d0:01:87:e0:97:73:43:10:b5:b2:46: fd:02:34:e5:da:40:2c:c3:98:fa:0c:90:13:bb:88:2c:85:54: b7:8e:2e:dd:55:e1:6d:17:f0:6d:fd:1f:65:fe:67:e1:0e:8b: df:0d:70:16:5e:bf:2e:e4:10:42:62:b0:77:a5:92:82:79:44: 51:9e:c2:e5:e7:0f:0b:4f:28:f9:53:ef:26:f1:fa:c1:de:75: d2:7e:56:ab:18:68:5c:fb:17:85:65:8d:8d:81:d6:55:8f:0c: ad:52:67:7d:7b:bb:cb:04:75:fb:07:dd:bf:20:74:19:e9:2c: 23:2f:6b:99:e2:a9:92:75:6e:ae:00:ca:05:a4:68:ef:97:85: 7a:2d:c2:bb:a5:ef:82:16:63:9d:d4:7a:0e:dd:ab:a0:4c:d4: 89:37:8c:e8:8a:77:b0:97:03:38:c3:7d:ce:64:19:ee:81:b8: 14:3d:50:65:b1:0d:9d:e0:e7:9a:78:5c:7d:29:15:5d:c2:37: 2b:e6:5c:7f:da:79:e2:36:1f:17:c5:64:7f:26:ad:14:8e:1a: a2:f8:05:63:2e:54:21:21:be:14:c5:0c:eb:48:32:81:fa:cc: e0:63:9a:07:cf:2c:27:c9:97:cd:3c:e5:f0:f7:7f:85:d5:64: c6:d2:ad:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDQMKLqdu/BzF6P1mP8cqjZVqkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTA0MjcxOTQ1MDNaFw0yNTA1MDEwNzA0MDNaMDMxMTAvBgNV BAMTKDFCNkM5QUUwQThFNTVENUFEMjJGMzM1OTNGMzBGQzM2MDIwQTJFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4yZv2zUT4be5SYuMRgp/mikMa KllahO3vxaSHOS4zgkBRe5xShjrnSIE2wlTGGMPIe5LAEB1P4i819P5k5dY35lkl Mop7vZ16WB/5tZKC8GCbVFZP8fJgcX+8PmRKVOOUp2CGBsEMeFqUZz3QyACLHxYI SnIOR8/M8Vv93jIjxHFT3njPwTYZpLevcM0U3Iye7jDeOujBHGp6NcQWysBlNL5W ayE3wdYbC4OvnyOg+lNQdvnexC1/50hVJiLB0YPY13TmnvH2UPRNgAdThMKdJ9gE 0VCOx3xsjwkC6o+gUa4aLuKB7L/SjxsNq6rw1/yqYVTAU24QyyNpi/bIhCJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2ya4KjlXVrSLzNZPzD8NgIKLpgwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbdTn0oe2zQAYfgl3NDELWyRv0CNOXaQCzD mPoMkBO7iCyFVLeOLt1V4W0X8G39H2X+Z+EOi98NcBZevy7kEEJisHelkoJ5RFGe wuXnDwtPKPlT7ybx+sHeddJ+VqsYaFz7F4VljY2B1lWPDK1SZ317u8sEdfsH3b8g dBnpLCMva5niqZJ1bq4AygWkaO+XhXotwrul74IWY53Ueg7dq6BM1Ik3jOiKd7CX AzjDfc5kGe6BuBQ9UGWxDZ3g55p4XH0pFV3CNyvmXH/aeeI2HxfFZH8mrRSOGqL4 BWMuVCEhvhTFDOtIMoH6zOBjmgfPLCfJl8085fD3f4XVZMbSrdI= -----END CERTIFICATE-----Generated at Wed Apr 30 05:25:12 2025 by rpki-client