$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: iNox0zUI0163s9lz9yvUCaFVthZDC0bS8OM+4P5bhGs= Subject key identifier: 1E:92:91:C3:14:49:1E:01:2E:42:57:75:EE:AB:6E:99:10:A1:11:10 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 6A996882297C53C88C56948CF383C401B7BAAE70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 0190 Signing time: Tue 04 Nov 2025 08:12:06 +0000 Manifest this update: Tue 04 Nov 2025 08:07:06 +0000 Manifest next update: Fri 07 Nov 2025 17:26:06 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: td0R1VENuSnUbyBJW6HZ6WmMy1NQvDZcAoNWisBNAug=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: DvNJ8H1CJLvMIn5Y34NSV0YQmp6wM1aq7OtPFufJmPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:99:68:82:29:7c:53:c8:8c:56:94:8c:f3:83:c4:01:b7:ba:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Nov 4 08:07:06 2025 GMT Not After : Nov 7 17:26:06 2025 GMT Subject: CN=1E9291C314491E012E425775EEAB6E9910A11110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:56:60:17:8e:4c:06:7b:7e:f4:e1:5a:01: 6b:61:be:de:47:b3:97:a1:79:a3:ed:1b:e1:c6:aa: 19:ac:04:c9:ae:81:33:3e:4f:66:4d:af:25:be:ff: 71:fd:5e:7a:3b:0f:7e:07:25:04:73:22:21:ff:ea: ae:e9:fc:55:dc:41:a3:97:6c:2e:00:82:2f:f3:34: aa:c6:34:8e:3a:9b:11:27:41:f1:8e:03:5f:68:c3: b6:f1:a9:da:e1:a1:4a:20:5a:8a:d1:5d:6e:45:04: cb:32:2d:06:8b:a6:6b:00:73:29:69:d7:38:30:b5: 7d:dd:66:4d:c3:b2:c6:81:ad:53:0e:07:9b:a1:96: 2f:65:5f:27:dd:36:38:4b:fb:0e:13:fc:bb:08:1f: fb:ba:a6:0a:b2:71:ee:e7:13:65:5d:68:ed:88:f2: 74:02:eb:44:ea:0a:76:77:d1:9c:5d:9e:cf:08:f7: b8:8c:a3:d9:25:a1:06:0a:c5:8c:1f:a5:86:91:ec: d7:d4:56:04:30:7b:3f:87:ec:bb:82:aa:fc:61:72: a7:75:e3:07:5b:20:fb:8b:f1:27:73:3a:13:5a:5f: c3:16:39:a8:f8:19:ae:87:ab:f3:19:a9:f8:ad:42: 3f:e0:a0:8b:e8:1f:d7:23:37:43:75:cc:02:bb:e6: 89:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:91:C3:14:49:1E:01:2E:42:57:75:EE:AB:6E:99:10:A1:11:10 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:69:0d:81:b2:8d:8d:72:27:50:dd:f9:62:67:7a:2d:06: de:4f:cf:ec:34:f0:f1:54:ee:89:4b:59:27:62:3d:f8:50:d9: 95:b1:20:a8:2e:0f:c3:ec:fc:1e:c7:7b:8d:f1:7b:11:a7:ed: 32:ac:b9:57:19:b0:24:c4:0a:89:ff:82:0f:cd:7f:98:6b:13: 3b:c9:68:87:17:31:21:70:f1:dc:b4:0c:e8:18:82:b6:80:25: 45:38:3e:3d:ed:61:4b:02:5e:dc:67:f8:0b:78:3e:d9:74:16: cb:09:e9:e1:6c:2e:d9:18:35:d9:09:44:04:65:38:74:b0:87: b6:41:a6:e9:00:3f:43:5a:f0:a5:d1:31:96:42:f9:e7:74:79: 44:a6:c6:52:13:ab:94:b8:d3:0b:f2:90:69:24:ed:43:06:75: 7d:98:62:07:74:7f:49:41:ce:6d:49:7a:70:16:2a:3d:b0:a5: 9e:69:ca:27:3d:a2:0d:10:ec:74:c7:eb:aa:f2:0f:0d:d5:a8: b0:31:12:3b:e2:50:26:a9:77:ec:96:66:03:1f:20:55:a9:f6: 56:38:c9:ba:d8:71:1b:8d:86:55:b2:af:1d:26:5d:7b:55:fc: cf:eb:fb:f3:1c:4b:d9:92:2a:9b:8f:52:d5:7f:8a:2c:36:65: f1:95:16:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaplogil8U8iMVpSM84PEAbe6rnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTExMDQwODA3MDZaFw0yNTExMDcxNzI2MDZaMDMxMTAvBgNV BAMTKDFFOTI5MUMzMTQ0OTFFMDEyRTQyNTc3NUVFQUI2RTk5MTBBMTExMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDFZgF45MBnt+9OFaAWthvt5H s5eheaPtG+HGqhmsBMmugTM+T2ZNryW+/3H9Xno7D34HJQRzIiH/6q7p/FXcQaOX bC4Agi/zNKrGNI46mxEnQfGOA19ow7bxqdrhoUogWorRXW5FBMsyLQaLpmsAcylp 1zgwtX3dZk3DssaBrVMOB5uhli9lXyfdNjhL+w4T/LsIH/u6pgqyce7nE2VdaO2I 8nQC60TqCnZ30Zxdns8I97iMo9kloQYKxYwfpYaR7NfUVgQwez+H7LuCqvxhcqd1 4wdbIPuL8SdzOhNaX8MWOaj4Ga6Hq/MZqfitQj/goIvoH9cjN0N1zAK75omJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpKRwxRJHgEuQld17qtumRChERAwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6taQ2Bso2NcidQ3fliZ3otBt5Pz+w08PFU 7olLWSdiPfhQ2ZWxIKguD8Ps/B7He43xexGn7TKsuVcZsCTECon/gg/Nf5hrEzvJ aIcXMSFw8dy0DOgYgraAJUU4Pj3tYUsCXtxn+At4Ptl0FssJ6eFsLtkYNdkJRARl OHSwh7ZBpukAP0Na8KXRMZZC+ed0eUSmxlITq5S40wvykGkk7UMGdX2YYgd0f0lB zm1JenAWKj2wpZ5pyic9og0Q7HTH66ryDw3VqLAxEjviUCapd+yWZgMfIFWp9lY4 ybrYcRuNhlWyrx0mXXtV/M/r+/McS9mSKpuPUtV/iiw2ZfGVFnc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:12 2025 by rpki-client