$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: Ch8+SqnEf4JHlh9P5JIvQPoAz8TuKIOXDSPTedNymtA= Subject key identifier: 4D:09:45:85:5B:6D:EF:69:FC:48:7B:5A:78:09:75:6D:EE:0F:88:AA Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 0B620D213C5AF8F01E7757EC6F798B6ABBB22F71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 02:22:38 +0000 Manifest this update: Wed 06 Aug 2025 02:17:38 +0000 Manifest next update: Sat 09 Aug 2025 12:22:38 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 2: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 3: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: N+gQtW0tCoFNrIhVJIekwTKfIRrqj+biVkzqv5dzHCo=) 4: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 5: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:62:0d:21:3c:5a:f8:f0:1e:77:57:ec:6f:79:8b:6a:bb:b2:2f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Aug 6 02:17:38 2025 GMT Not After : Aug 9 12:22:38 2025 GMT Subject: CN=4D0945855B6DEF69FC487B5A7809756DEE0F88AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:48:b5:d6:6d:80:68:2e:80:e9:20:b8:e1: 18:4d:d2:bc:9b:d7:25:24:4e:f9:47:c8:36:8c:9b: c0:3d:fa:e5:72:31:63:50:39:fb:c4:6e:9b:be:76: 6d:4e:b1:d9:50:77:77:a2:28:19:1b:e8:34:50:cb: 01:bc:71:6d:ab:ea:8d:c8:d8:9b:9d:db:7e:99:15: 30:a8:e4:39:95:9d:9f:7a:8c:37:ba:f1:37:77:58: d9:dc:29:51:c3:43:7d:6e:a2:c2:7e:40:96:e5:70: 9c:f6:d8:72:c8:4c:17:cb:8c:0b:be:17:12:fc:a4: 11:d2:aa:b4:1f:8a:af:b7:f4:6d:e6:a1:60:60:a8: a3:92:24:98:df:62:26:86:34:8c:e9:dc:a3:17:d1: 83:cd:e0:dc:8c:b0:2c:6c:01:91:cb:4f:60:19:22: a1:9b:2b:cb:c0:ea:0e:19:3d:b0:08:f4:c0:fe:85: 8e:79:78:e4:d5:1d:47:a9:d3:5d:bd:28:e5:2c:07: fc:81:26:df:3b:52:10:97:f9:e0:4b:86:9a:56:37: 37:15:81:c3:39:01:5f:c5:59:9f:94:17:8f:f4:bc: 61:0e:f9:4f:1e:02:67:0a:fb:fa:0b:0c:49:87:89: 8b:f7:9c:6e:c3:ad:b2:b1:18:43:4c:d3:af:80:8a: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:45:85:5B:6D:EF:69:FC:48:7B:5A:78:09:75:6D:EE:0F:88:AA X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:00:53:99:0f:18:55:cb:5d:21:3a:49:7a:ac:6c:72:21:f0: 79:fc:a9:1a:b1:8e:43:bc:ba:3d:38:20:da:a2:e8:5c:1b:bb: 23:37:6b:ae:fe:e3:79:c8:fa:14:23:7c:7b:f5:b6:c1:14:b0: 81:a5:56:e1:23:87:3c:f7:8d:de:a1:b1:c0:18:e8:58:d3:3c: f3:d3:5a:bf:83:8f:fe:84:0a:90:e7:fa:cd:d3:79:13:ad:d5: 73:c8:50:66:e9:fb:88:5c:66:e0:a1:70:db:3a:ad:de:07:c4: fb:40:a7:3d:24:cc:00:94:f8:2d:fa:ac:78:0f:d9:02:7e:ba: 4d:d4:a2:0f:25:a2:53:b5:fb:8c:09:cc:96:77:18:99:10:9f: 6d:dc:9a:62:a0:87:72:00:93:00:bd:2b:17:b2:6e:b4:56:b4: 4c:95:84:e8:fa:09:47:46:bf:cc:92:ad:4c:8e:23:d5:83:51: 70:d4:82:68:bf:be:33:3a:7b:e2:e4:1a:35:94:3b:13:d0:ac: d3:8d:ab:86:12:4f:a8:b6:c2:88:e9:27:50:52:7e:a3:0a:4a: f7:66:63:f8:28:3a:e2:af:69:53:3e:cb:8e:68:0b:26:dd:4e: d4:44:f1:b6:4d:24:c1:40:b6:bf:9b:6a:6d:e4:b8:d7:13:27: 89:68:88:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2INITxa+PAed1fsb3mLaruyL3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA4MDYwMjE3MzhaFw0yNTA4MDkxMjIyMzhaMDMxMTAvBgNV BAMTKDREMDk0NTg1NUI2REVGNjlGQzQ4N0I1QTc4MDk3NTZERUUwRjg4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+Ui11m2AaC6A6SC44RhN0ryb 1yUkTvlHyDaMm8A9+uVyMWNQOfvEbpu+dm1OsdlQd3eiKBkb6DRQywG8cW2r6o3I 2Jud236ZFTCo5DmVnZ96jDe68Td3WNncKVHDQ31uosJ+QJblcJz22HLITBfLjAu+ FxL8pBHSqrQfiq+39G3moWBgqKOSJJjfYiaGNIzp3KMX0YPN4NyMsCxsAZHLT2AZ IqGbK8vA6g4ZPbAI9MD+hY55eOTVHUep0129KOUsB/yBJt87UhCX+eBLhppWNzcV gcM5AV/FWZ+UF4/0vGEO+U8eAmcK+/oLDEmHiYv3nG7DrbKxGENM06+AimzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQlFhVtt72n8SHtaeAl1be4PiKowHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0AU5kPGFXLXSE6SXqsbHIh8Hn8qRqxjkO8 uj04INqi6FwbuyM3a67+43nI+hQjfHv1tsEUsIGlVuEjhzz3jd6hscAY6FjTPPPT Wr+Dj/6ECpDn+s3TeROt1XPIUGbp+4hcZuChcNs6rd4HxPtApz0kzACU+C36rHgP 2QJ+uk3Uog8lolO1+4wJzJZ3GJkQn23cmmKgh3IAkwC9KxeybrRWtEyVhOj6CUdG v8ySrUyOI9WDUXDUgmi/vjM6e+LkGjWUOxPQrNONq4YST6i2wojpJ1BSfqMKSvdm Y/goOuKvaVM+y45oCybdTtRE8bZNJMFAtr+bam3kuNcTJ4loiLA= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:46 2025 by rpki-client