$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: fbCe54Z8Y/FJOdlQlfE3+vOtFqDrQO7KJf938oUS19o= Subject key identifier: B0:EF:AD:D4:D9:42:B8:F3:0B:2D:09:CC:A6:5E:40:35:03:AF:B2:91 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 05DFEA0C5BC37FEEDA74FB95F5E6037568C6A873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 0168 Signing time: Thu 07 Aug 2025 22:52:05 +0000 Manifest this update: Thu 07 Aug 2025 22:47:05 +0000 Manifest next update: Mon 11 Aug 2025 04:32:05 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: 9oIt/62r/x4VTDZKeuhW09/dH9XcdHglhr0Vav7DUr8=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: 1jGIsjnRWKAjYEK7TSFGcWeXONe75N1qbPc54plvXY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 04:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:df:ea:0c:5b:c3:7f:ee:da:74:fb:95:f5:e6:03:75:68:c6:a8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Aug 7 22:47:05 2025 GMT Not After : Aug 11 04:32:05 2025 GMT Subject: CN=B0EFADD4D942B8F30B2D09CCA65E403503AFB291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:af:aa:2d:dc:cb:66:fd:dc:e1:eb:8e:44: ce:23:53:67:11:f8:1f:e4:37:a0:02:e1:83:95:25: 63:c2:1a:85:dc:b2:c3:48:6b:0e:d8:0b:56:94:e4: d9:66:9e:a3:90:56:d4:d5:24:93:25:29:4c:71:63: 27:97:f3:67:2f:75:62:38:d0:bf:99:58:4b:34:99: 28:8e:59:42:13:77:44:0d:d5:61:12:ed:85:4c:88: a8:0e:ec:1d:58:72:78:09:ed:d8:22:85:a9:57:a2: 7d:5b:cd:7e:4c:e1:a1:76:fc:c5:c6:b5:41:1c:94: 4b:d5:14:30:ef:82:57:bf:98:0d:d8:4f:5e:3d:7e: f7:3f:ba:c0:36:23:95:40:ee:28:82:c0:5b:9e:97: 76:44:e6:80:fc:e3:12:74:25:9c:df:31:7c:12:2a: 89:38:df:43:ce:0f:b3:86:01:63:cd:f1:3e:87:f5: b8:28:ba:e3:6e:62:cb:31:83:6f:62:8f:64:e2:e3: 6a:38:d2:35:3b:5b:c5:8a:98:1b:23:ba:4a:b8:e0: 77:c8:dd:0b:9b:18:09:46:c7:32:1b:e6:64:86:4d: 8f:91:c2:02:e5:c9:8f:1a:4e:d3:60:0d:eb:22:f8: 12:9d:da:c0:c7:be:17:0d:24:3a:34:80:15:59:fc: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EF:AD:D4:D9:42:B8:F3:0B:2D:09:CC:A6:5E:40:35:03:AF:B2:91 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:99:cc:ea:99:25:86:ff:48:83:9a:a5:d6:87:35:98:f5:32: 5d:fe:94:6b:5f:3a:58:fb:ab:50:7e:b7:d0:f0:90:87:97:de: cc:a1:c1:00:b0:7a:8f:fa:5d:da:a9:ce:24:5b:bc:cb:10:8b: af:95:d6:8b:2a:61:27:f0:ef:23:38:d0:c2:3e:bd:b8:af:2d: 80:1e:62:b5:51:7c:3f:cd:a8:04:e9:e4:bb:96:76:24:9f:b6: c9:59:0a:af:d9:18:8f:2d:b5:d7:ea:de:cb:08:f9:8a:c9:9d: 8c:cb:32:20:19:20:1d:46:29:83:ea:30:65:fb:f4:16:a1:29: d7:75:db:30:8e:ea:bc:a4:ae:26:23:7f:72:3d:49:fa:43:ec: 5c:2f:6d:5d:15:ed:9c:39:8f:62:b5:85:9b:5e:32:2e:80:5f: 39:52:d0:85:bc:74:ba:b5:8f:9e:97:fe:60:5b:9d:70:e8:3e: 0d:15:59:2c:01:1a:d0:78:31:2e:97:f9:f1:dd:47:50:34:12: 72:e1:00:00:e8:29:c5:9f:5a:df:7f:4e:1c:1c:e0:12:70:ee: 02:58:76:ab:0c:bc:db:3e:d8:f3:1c:03:02:f0:b1:34:c1:d4: 22:c5:dd:ed:4e:b0:ce:75:57:af:b6:33:7d:95:bf:27:3e:b4: 2e:c1:56:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBd/qDFvDf+7adPuV9eYDdWjGqHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTA4MDcyMjQ3MDVaFw0yNTA4MTEwNDMyMDVaMDMxMTAvBgNV BAMTKEIwRUZBREQ0RDk0MkI4RjMwQjJEMDlDQ0E2NUU0MDM1MDNBRkIyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2e6+qLdzLZv3c4euORM4jU2cR +B/kN6AC4YOVJWPCGoXcssNIaw7YC1aU5NlmnqOQVtTVJJMlKUxxYyeX82cvdWI4 0L+ZWEs0mSiOWUITd0QN1WES7YVMiKgO7B1YcngJ7dgihalXon1bzX5M4aF2/MXG tUEclEvVFDDvgle/mA3YT149fvc/usA2I5VA7iiCwFuel3ZE5oD84xJ0JZzfMXwS Kok430POD7OGAWPN8T6H9bgouuNuYssxg29ij2Ti42o40jU7W8WKmBsjukq44HfI 3QubGAlGxzIb5mSGTY+RwgLlyY8aTtNgDesi+BKd2sDHvhcNJDo0gBVZ/K9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsO+t1NlCuPMLLQnMpl5ANQOvspEwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyZzOqZJYb/SIOapdaHNZj1Ml3+lGtfOlj7 q1B+t9DwkIeX3syhwQCweo/6XdqpziRbvMsQi6+V1osqYSfw7yM40MI+vbivLYAe YrVRfD/NqATp5LuWdiSftslZCq/ZGI8ttdfq3ssI+YrJnYzLMiAZIB1GKYPqMGX7 9BahKdd12zCO6rykriYjf3I9SfpD7FwvbV0V7Zw5j2K1hZteMi6AXzlS0IW8dLq1 j56X/mBbnXDoPg0VWSwBGtB4MS6X+fHdR1A0EnLhAADoKcWfWt9/Thwc4BJw7gJY dqsMvNs+2PMcAwLwsTTB1CLF3e1OsM51V6+2M32Vvyc+tC7BVjc= -----END CERTIFICATE-----Generated at Sat Aug 9 20:42:16 2025 by rpki-client