$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: 6AMhiLoedGarGzHurQLgPgofO8+leLaoT/hE0xqyu14= Subject key identifier: 46:1E:F6:CA:9D:53:AE:07:2C:85:9B:03:02:B3:FA:B1:23:E0:AF:06 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 12389E44E2D1F335FF7B822B7B81BC991FF40BCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04E0 Signing time: Mon 16 Jun 2025 04:41:34 +0000 Manifest this update: Mon 16 Jun 2025 04:36:34 +0000 Manifest next update: Thu 19 Jun 2025 15:04:34 +0000 Files and hashes: 1: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: 4rVBQ6x0GYORzQyY05vjzhtLN1/rnPCEWnX9nKtYbhM=) 2: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 3: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 4: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:38:9e:44:e2:d1:f3:35:ff:7b:82:2b:7b:81:bc:99:1f:f4:0b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Jun 16 04:36:34 2025 GMT Not After : Jun 19 15:04:34 2025 GMT Subject: CN=461EF6CA9D53AE072C859B0302B3FAB123E0AF06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:72:29:1e:62:45:9b:1a:2e:88:33:93:17: 6e:f4:0c:39:93:25:2d:68:ea:a6:c8:11:ea:01:80: 6c:9d:18:e1:9d:3a:1c:93:94:cc:f5:fb:28:ad:94: ce:bb:bb:18:0a:1d:2c:b5:04:84:35:1e:3a:cb:11: 9e:34:40:e0:41:ac:f5:bf:6a:3f:29:32:3e:da:e9: 25:3f:62:92:c8:b4:67:6a:12:30:7c:75:88:25:f7: 6f:dc:72:f8:bf:e9:fa:83:1e:83:f7:3b:c4:39:46: 8c:87:96:b7:d0:2f:45:df:ef:61:71:5f:da:67:36: cb:be:b9:cc:f2:56:9f:19:db:f1:35:16:95:0d:f5: fc:11:ea:43:b7:e0:4b:b0:c4:74:f8:5e:a2:ba:f5: 40:07:58:59:d7:c3:1e:b4:9d:69:b7:cc:b2:0b:80: 69:c7:f8:f5:f1:4e:96:20:dd:3b:49:97:7b:8b:21: bc:1e:11:b0:d0:f2:df:d0:23:23:c5:14:e3:69:b1: 09:c8:30:4c:cc:c6:92:4a:a1:d1:ca:45:07:c9:6f: cb:65:56:68:f1:8c:02:6f:e6:87:94:f8:6a:3a:0e: 72:de:1b:0e:b5:65:d2:37:58:5d:07:ac:9c:c8:1c: d1:ce:bd:fe:d3:7b:9d:f6:fa:a4:05:11:53:29:69: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1E:F6:CA:9D:53:AE:07:2C:85:9B:03:02:B3:FA:B1:23:E0:AF:06 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ec:c5:cd:b9:77:8a:79:d4:e4:e8:0a:4d:4a:49:3a:0c:44: d6:64:92:de:94:00:05:c2:9c:8e:f8:ae:2e:a5:a4:70:55:a2: 92:e6:23:b1:72:5a:fd:2a:64:5e:03:64:f1:c3:d6:84:0a:4d: 36:ab:88:f7:8f:e4:be:6d:23:b3:07:9d:4c:2c:fc:a1:f9:a4: ec:26:ee:5c:73:ab:f5:27:bb:e2:6e:3c:b3:91:23:67:51:be: f6:2a:6e:47:b2:cf:6c:3f:03:89:da:e8:c3:83:5e:44:ba:e1: 4f:7a:13:39:5f:ac:83:f1:1e:0b:73:91:8a:06:f5:13:42:8e: 6c:6e:89:9f:ae:fd:31:14:2e:23:a7:46:68:ad:20:65:58:43: c1:50:22:9f:86:db:20:b0:5f:09:f5:ec:76:fa:b7:d9:66:89: a5:32:51:ae:cb:61:8c:a6:67:24:d9:70:46:00:1b:2e:75:db: 5c:29:ef:89:66:97:d0:fe:67:cb:d5:24:f3:08:5b:41:d7:2f: 94:e0:29:88:00:07:81:9b:59:04:05:05:d7:25:3a:13:05:9b: 32:60:67:b7:72:e8:c4:82:9b:04:aa:ed:71:e8:2b:8a:0f:7b: a4:d5:57:5d:5f:4b:01:76:77:94:64:29:30:3e:bc:74:04:67: a2:d6:32:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjieROLR8zX/e4Ire4G8mR/0C84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA2MTYwNDM2MzRaFw0yNTA2MTkxNTA0MzRaMDMxMTAvBgNV BAMTKDQ2MUVGNkNBOUQ1M0FFMDcyQzg1OUIwMzAyQjNGQUIxMjNFMEFGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTknIpHmJFmxouiDOTF270DDmT JS1o6qbIEeoBgGydGOGdOhyTlMz1+yitlM67uxgKHSy1BIQ1HjrLEZ40QOBBrPW/ aj8pMj7a6SU/YpLItGdqEjB8dYgl92/ccvi/6fqDHoP3O8Q5RoyHlrfQL0Xf72Fx X9pnNsu+uczyVp8Z2/E1FpUN9fwR6kO34EuwxHT4XqK69UAHWFnXwx60nWm3zLIL gGnH+PXxTpYg3TtJl3uLIbweEbDQ8t/QIyPFFONpsQnIMEzMxpJKodHKRQfJb8tl VmjxjAJv5oeU+Go6DnLeGw61ZdI3WF0HrJzIHNHOvf7Te532+qQFEVMpafhxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURh72yp1TrgcshZsDArP6sSPgrwYwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzsxc25d4p51OToCk1KSToMRNZkkt6UAAXC nI74ri6lpHBVopLmI7FyWv0qZF4DZPHD1oQKTTariPeP5L5tI7MHnUws/KH5pOwm 7lxzq/Unu+JuPLORI2dRvvYqbkeyz2w/A4na6MODXkS64U96EzlfrIPxHgtzkYoG 9RNCjmxuiZ+u/TEULiOnRmitIGVYQ8FQIp+G2yCwXwn17Hb6t9lmiaUyUa7LYYym ZyTZcEYAGy5121wp74lml9D+Z8vVJPMIW0HXL5TgKYgAB4GbWQQFBdclOhMFmzJg Z7dy6MSCmwSq7XHoK4oPe6TVV11fSwF2d5RkKTA+vHQEZ6LWMpY= -----END CERTIFICATE-----Generated at Mon Jun 16 23:38:04 2025 by rpki-client