$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: Kkyoh1M0XJXQLhF+pWE5/pAXryNDNXRGg0R6V3I82EA= Subject key identifier: 76:D3:BB:5B:35:C3:63:9F:51:34:B9:25:18:3A:21:C4:DD:57:1C:6F Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 71B2891D3563EA3B204ED6B580450EC33EBFA89A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 0151 Signing time: Mon 16 Jun 2025 14:31:59 +0000 Manifest this update: Mon 16 Jun 2025 14:26:59 +0000 Manifest next update: Thu 19 Jun 2025 17:39:59 +0000 Files and hashes: 1: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: 1jGIsjnRWKAjYEK7TSFGcWeXONe75N1qbPc54plvXY4=) 2: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: PdPBAR89fx10ebBDnvMkbVmnLu9rukRdqvtFpUfTONw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b2:89:1d:35:63:ea:3b:20:4e:d6:b5:80:45:0e:c3:3e:bf:a8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Jun 16 14:26:59 2025 GMT Not After : Jun 19 17:39:59 2025 GMT Subject: CN=76D3BB5B35C3639F5134B925183A21C4DD571C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:6d:cb:3c:a7:7e:09:75:56:a6:c2:a0:4f: 1f:6a:bf:4b:24:31:e8:44:cf:8a:26:48:02:8b:4f: ac:44:41:77:7a:5a:96:ca:a8:03:3e:1a:43:05:69: dd:0f:f1:96:64:75:6c:77:ed:aa:85:ab:77:04:7f: a8:64:3e:07:73:17:d6:2d:c5:81:32:7e:2f:a8:09: 49:6f:5a:64:8b:3c:5f:71:d5:92:15:13:14:e7:33: 9e:dd:bd:f9:69:a7:99:57:8a:3b:49:71:01:d3:2a: 7f:99:f1:16:ec:ea:db:f4:2b:89:23:c1:88:6b:4b: 20:fa:3b:40:12:ee:2d:54:50:13:4d:ff:12:fb:af: c4:e2:f9:b1:1f:0c:56:db:96:36:0c:b8:41:c1:5e: 73:18:d9:88:ac:9a:cd:83:48:a0:47:e4:46:35:b7: 82:e4:ae:41:b6:ae:aa:66:d6:83:4c:e5:5c:58:f6: 11:fa:c4:03:85:fe:3b:7b:75:65:10:9c:5f:d5:5c: 54:e3:8f:df:6c:83:05:51:31:e7:60:06:47:5f:66: 40:99:2a:a3:5d:5c:23:b7:ed:01:f0:f9:3c:29:06: e5:ca:99:9f:cf:b0:ab:3a:5c:d9:68:67:02:ad:d8: ea:f5:d1:b8:3d:b3:77:e5:67:e6:b8:f2:c6:2f:74: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D3:BB:5B:35:C3:63:9F:51:34:B9:25:18:3A:21:C4:DD:57:1C:6F X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8b:a5:8d:1f:14:a0:9d:31:f7:a7:de:41:e6:ab:de:ce:1c: 9d:00:4d:a8:8e:fe:d4:2a:60:8d:63:30:46:5e:d4:e6:07:3c: 34:f4:e5:3a:86:96:80:c8:21:f8:45:b1:40:aa:f9:a3:ad:6a: 99:5d:86:5d:92:ef:2b:ba:de:0c:2c:e6:ee:ce:5d:83:41:4a: 98:05:66:9b:84:3f:c4:f3:b7:44:81:0f:0d:9f:da:7e:b9:26: df:09:1f:d2:99:0c:f3:13:24:af:34:ba:72:aa:6e:43:9a:72: a0:64:df:a8:4b:a9:53:e1:c7:07:d8:6f:20:2d:9b:0e:a8:5d: ae:dd:ae:cd:07:c5:14:f9:e4:10:2e:e7:25:9f:f6:c3:d7:04: 01:4a:d7:25:21:7e:b5:38:66:e8:ea:0f:e1:a7:80:db:53:e4: ec:7e:55:6f:03:4c:7e:5d:00:f9:ca:a6:6a:0d:62:92:1f:5d: bf:ed:2a:5f:02:ef:ba:81:8d:87:1a:9a:31:4a:37:65:a8:91: c1:17:ea:f6:4d:1d:d1:c1:2c:42:22:35:90:46:d0:73:d9:8a: 12:40:5d:6a:c7:53:4b:94:cc:4d:c7:99:0e:9b:2d:e4:9e:46: 0a:aa:5c:34:c4:60:ce:8e:cd:b9:d5:cb:11:a7:af:6c:c8:5d: 75:ef:75:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbKJHTVj6jsgTta1gEUOwz6/qJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTA2MTYxNDI2NTlaFw0yNTA2MTkxNzM5NTlaMDMxMTAvBgNV BAMTKDc2RDNCQjVCMzVDMzYzOUY1MTM0QjkyNTE4M0EyMUM0REQ1NzFDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tm3LPKd+CXVWpsKgTx9qv0sk MehEz4omSAKLT6xEQXd6WpbKqAM+GkMFad0P8ZZkdWx37aqFq3cEf6hkPgdzF9Yt xYEyfi+oCUlvWmSLPF9x1ZIVExTnM57dvflpp5lXijtJcQHTKn+Z8Rbs6tv0K4kj wYhrSyD6O0AS7i1UUBNN/xL7r8Ti+bEfDFbbljYMuEHBXnMY2Yisms2DSKBH5EY1 t4LkrkG2rqpm1oNM5VxY9hH6xAOF/jt7dWUQnF/VXFTjj99sgwVRMedgBkdfZkCZ KqNdXCO37QHw+TwpBuXKmZ/PsKs6XNloZwKt2Or10bg9s3flZ+a48sYvdMMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtO7WzXDY59RNLklGDohxN1XHG8wHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaLpY0fFKCdMfen3kHmq97OHJ0ATaiO/tQq YI1jMEZe1OYHPDT05TqGloDIIfhFsUCq+aOtapldhl2S7yu63gws5u7OXYNBSpgF ZpuEP8Tzt0SBDw2f2n65Jt8JH9KZDPMTJK80unKqbkOacqBk36hLqVPhxwfYbyAt mw6oXa7drs0HxRT55BAu5yWf9sPXBAFK1yUhfrU4ZujqD+GngNtT5Ox+VW8DTH5d APnKpmoNYpIfXb/tKl8C77qBjYcamjFKN2WokcEX6vZNHdHBLEIiNZBG0HPZihJA XWrHU0uUzE3HmQ6bLeSeRgqqXDTEYM6OzbnVyxGnr2zIXXXvdRI= -----END CERTIFICATE-----Generated at Tue Jun 17 03:23:29 2025 by rpki-client