$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: asm2AFl3H8USBAIfDAzmulTEKRepCdxxZSEK9+QaJtw= Subject key identifier: 1E:2B:80:E1:EE:88:8F:42:13:FF:17:22:DB:11:00:D0:99:C4:F2:70 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 34320BB392F89E297865727D9BAC40F6D57F34FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04A4 Signing time: Mon 30 Jun 2025 07:22:05 +0000 Manifest this update: Mon 30 Jun 2025 07:17:05 +0000 Manifest next update: Thu 03 Jul 2025 17:28:05 +0000 Files and hashes: 1: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: rCbcIwf1icf5tjIU67LSi7TkhgYETfH4N8P4o0qcNQo=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: XqWIDcod31e38VgeahW9dRMzM4JKlsw/6vSF5Hd9Xv4=) 3: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: rzjnKVoPcvg8LoYYqlAPNG8z+kcZAMAEA1cgciQRlhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 17:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:32:0b:b3:92:f8:9e:29:78:65:72:7d:9b:ac:40:f6:d5:7f:34:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Jun 30 07:17:05 2025 GMT Not After : Jul 3 17:28:05 2025 GMT Subject: CN=1E2B80E1EE888F4213FF1722DB1100D099C4F270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:5d:f0:b2:eb:3d:e0:22:5a:94:69:f9:1a: 43:48:a4:8e:14:cf:76:91:68:a9:b0:4b:ad:09:7e: e5:8e:42:90:1b:af:43:cb:bb:04:93:c2:23:71:f9: ef:18:87:79:50:70:76:0e:ea:4c:56:e4:0c:37:e0: 19:fb:52:d2:46:ea:f1:a5:b0:f6:cd:8c:28:eb:a2: f5:87:5f:a3:2c:47:44:bd:55:c1:4b:bf:d8:f6:b3: f4:a6:b3:ec:5d:6a:65:8f:4e:6b:49:e1:57:18:f6: 3c:2a:eb:59:8e:e5:98:3e:7e:c3:d3:ec:de:77:e2: 27:b4:27:91:5c:d8:e7:18:1a:a1:0a:52:88:e0:9d: e3:ee:b4:a2:a1:51:1c:52:ab:40:e4:08:61:ef:a7: 0a:50:39:aa:93:2a:72:1c:7a:bd:18:75:c8:66:93: 3e:37:bb:62:3a:da:39:bd:e4:0b:85:86:22:d6:11: fb:ae:d9:df:25:c0:af:c8:70:78:51:53:60:39:f4: a7:6e:ed:cc:3b:3e:8b:8e:7b:60:56:76:ae:9b:c9: 76:f6:24:b9:86:50:06:f2:df:7c:06:5a:d4:37:92: fe:32:11:cb:69:8d:79:2d:de:a0:60:36:11:7e:a0: d3:4a:41:e5:89:2b:5f:0e:d3:08:f3:00:21:ce:0b: a5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2B:80:E1:EE:88:8F:42:13:FF:17:22:DB:11:00:D0:99:C4:F2:70 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:76:c1:8d:02:90:38:0c:ff:7a:ac:05:b8:53:e3:7d:f7:14: 17:6f:61:f5:28:7d:8c:e0:d6:e4:9b:87:f7:b6:5e:b9:47:a4: 8a:01:c5:83:23:8a:69:0e:79:88:70:35:7c:0b:ee:dd:cb:33: bf:c8:3f:8d:14:0c:09:87:36:e4:61:50:14:1d:04:a8:63:dc: 09:ea:33:b8:97:ec:41:f1:b3:02:1e:76:8c:48:dc:f4:a1:c5: fb:30:6b:b2:3e:43:c5:5f:33:9c:c8:18:a6:d8:35:93:3f:4d: 1f:f6:85:87:b1:69:d8:5c:e5:41:48:1a:f2:2a:e2:cc:bf:41: d8:ae:10:cf:18:4e:d4:1e:d8:3e:86:01:ad:92:7d:f9:5a:95: 1f:44:f3:b3:9e:ba:12:58:ee:84:c1:0b:fb:34:83:7d:9b:25: c8:db:79:9e:8c:9b:24:ae:f8:bb:ca:b3:9a:85:31:f6:b4:4d: 95:47:27:a8:ed:ab:06:9e:59:be:a4:27:14:4b:f8:05:6b:53: e8:2c:87:c3:a0:28:9b:46:e1:b2:cb:b3:b6:93:03:4a:b9:18: f0:b6:53:f5:a5:dd:e8:99:52:3c:ec:59:8f:30:2f:71:1d:bd: a5:02:a6:46:2f:36:d2:22:16:51:7d:59:fc:5e:6e:5f:d9:db: b1:b7:7a:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDILs5L4nil4ZXJ9m6xA9tV/NP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA2MzAwNzE3MDVaFw0yNTA3MDMxNzI4MDVaMDMxMTAvBgNV BAMTKDFFMkI4MEUxRUU4ODhGNDIxM0ZGMTcyMkRCMTEwMEQwOTlDNEYyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNe13wsus94CJalGn5GkNIpI4U z3aRaKmwS60JfuWOQpAbr0PLuwSTwiNx+e8Yh3lQcHYO6kxW5Aw34Bn7UtJG6vGl sPbNjCjrovWHX6MsR0S9VcFLv9j2s/Sms+xdamWPTmtJ4VcY9jwq61mO5Zg+fsPT 7N534ie0J5Fc2OcYGqEKUojgnePutKKhURxSq0DkCGHvpwpQOaqTKnIcer0Ydchm kz43u2I62jm95AuFhiLWEfuu2d8lwK/IcHhRU2A59Kdu7cw7PouOe2BWdq6byXb2 JLmGUAby33wGWtQ3kv4yEctpjXkt3qBgNhF+oNNKQeWJK18O0wjzACHOC6W5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHiuA4e6Ij0IT/xci2xEA0JnE8nAwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx2wY0CkDgM/3qsBbhT4333FBdvYfUofYzg 1uSbh/e2XrlHpIoBxYMjimkOeYhwNXwL7t3LM7/IP40UDAmHNuRhUBQdBKhj3Anq M7iX7EHxswIedoxI3PShxfswa7I+Q8VfM5zIGKbYNZM/TR/2hYexadhc5UFIGvIq 4sy/QdiuEM8YTtQe2D6GAa2SfflalR9E87OeuhJY7oTBC/s0g32bJcjbeZ6MmySu +LvKs5qFMfa0TZVHJ6jtqwaeWb6kJxRL+AVrU+gsh8OgKJtG4bLLs7aTA0q5GPC2 U/Wl3eiZUjzsWY8wL3EdvaUCpkYvNtIiFlF9Wfxebl/Z27G3elQ= -----END CERTIFICATE-----Generated at Wed Jul 2 15:52:33 2025 by rpki-client