$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: 1TXTVyXwRoJUyT0k13qE+auIKij1H856On12sbN+jFE= Subject key identifier: 73:ED:39:9F:84:85:1D:8D:67:96:8C:CF:35:C0:00:9C:C4:D7:E1:53 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 5C21AEDFCD06CC08FC5E4A245FB426FA6DA6B66A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04D6 Signing time: Sun 19 Oct 2025 05:02:10 +0000 Manifest this update: Sun 19 Oct 2025 04:57:10 +0000 Manifest next update: Wed 22 Oct 2025 15:58:10 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) 3: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: w0lr8iqnIFRp6Tnz7xhCroe4RWdZ3MPhBSFVKxb3k0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:21:ae:df:cd:06:cc:08:fc:5e:4a:24:5f:b4:26:fa:6d:a6:b6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Oct 19 04:57:10 2025 GMT Not After : Oct 22 15:58:10 2025 GMT Subject: CN=73ED399F84851D8D67968CCF35C0009CC4D7E153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bf:44:21:5a:bd:58:cd:9b:d1:e2:80:03:da: 9a:1c:60:73:cd:7f:bb:c7:a9:03:24:10:21:91:31: 76:41:61:0e:7f:7a:62:7e:7e:fb:8f:cf:fe:7a:ac: ba:ac:1d:b9:fc:7d:0d:89:5b:3a:9c:5c:82:b5:0f: 94:2f:4a:c0:aa:4d:6c:6e:39:06:1e:df:ee:99:3a: 34:de:80:28:d1:b7:01:18:86:3b:da:f2:b3:2b:b0: ff:fb:23:28:48:21:34:f5:77:f9:91:cd:d5:5a:79: 77:2e:f8:4e:cd:42:e2:61:d5:0e:9b:80:39:6e:84: 47:f4:f1:32:0f:3b:88:16:02:61:b0:91:d1:50:42: 54:0d:10:23:d6:a2:6e:36:54:89:12:80:e3:e1:50: 68:7c:b9:33:fb:3d:8a:f7:77:ff:e1:1a:0b:47:3a: 58:10:43:60:64:fd:08:a9:41:6d:62:e8:b1:84:01: ec:fe:74:59:4e:58:eb:9b:cc:0c:f7:c0:f8:76:a7: 80:74:d3:91:33:3b:ef:d4:7c:4f:1c:af:02:19:9a: 5c:ab:42:de:d9:2d:52:0d:1b:9e:ef:59:bf:92:6e: d5:36:e1:73:fe:5f:5c:94:ad:1d:11:43:49:5f:a2: 47:99:36:fd:94:4f:dc:65:aa:fe:d6:fc:fb:6f:78: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:ED:39:9F:84:85:1D:8D:67:96:8C:CF:35:C0:00:9C:C4:D7:E1:53 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:65:6c:cb:04:86:a9:3e:7d:33:36:8f:04:cc:11:70:90:1f: 07:96:9c:af:66:98:5b:82:17:8d:2d:53:ba:46:bc:28:a6:30: e6:9f:0d:b5:60:f5:2b:3a:d1:92:e6:4c:d5:10:37:d8:5e:16: 38:19:84:2c:fe:ab:78:b1:ff:b7:70:71:ab:2a:63:c8:f2:9b: 04:e8:c4:9f:a9:83:f9:28:d0:d7:12:18:ec:ea:79:03:07:89: 78:d7:23:23:47:75:fa:93:1d:62:b5:d0:20:ea:39:7a:ff:f2: 7b:61:79:f2:3c:5d:07:54:1e:1b:41:98:20:58:74:b2:6d:c6: e0:a5:99:41:5f:79:0b:e6:7c:5f:f1:d1:bf:b3:da:f8:13:3b: 2f:f6:c1:98:85:e1:e7:7a:cc:b4:3b:68:38:de:c0:7d:f5:84: ef:96:29:8a:5c:10:81:89:5f:bf:b7:31:63:18:ec:5e:c8:22: 0d:a1:6c:af:ec:e0:46:9b:c6:16:b1:d1:de:30:b0:01:51:94: 10:00:62:c0:ae:67:4d:c2:e1:e4:60:c5:ec:a1:18:9c:2f:c4: db:91:34:68:8b:f3:1e:70:49:a7:dd:9f:e4:6f:32:8c:1c:be: 53:69:76:ef:c2:90:0e:8f:e5:9c:ef:fb:fb:82:b6:cc:e9:75: 9f:02:21:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCGu380GzAj8XkokX7Qm+m2mtmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTEwMTkwNDU3MTBaFw0yNTEwMjIxNTU4MTBaMDMxMTAvBgNV BAMTKDczRUQzOTlGODQ4NTFEOEQ2Nzk2OENDRjM1QzAwMDlDQzREN0UxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuv0QhWr1YzZvR4oAD2pocYHPN f7vHqQMkECGRMXZBYQ5/emJ+fvuPz/56rLqsHbn8fQ2JWzqcXIK1D5QvSsCqTWxu OQYe3+6ZOjTegCjRtwEYhjva8rMrsP/7IyhIITT1d/mRzdVaeXcu+E7NQuJh1Q6b gDluhEf08TIPO4gWAmGwkdFQQlQNECPWom42VIkSgOPhUGh8uTP7PYr3d//hGgtH OlgQQ2Bk/QipQW1i6LGEAez+dFlOWOubzAz3wPh2p4B005EzO+/UfE8crwIZmlyr Qt7ZLVING57vWb+SbtU24XP+X1yUrR0RQ0lfokeZNv2UT9xlqv7W/PtveCv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+05n4SFHY1nlozPNcAAnMTX4VMwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNlbMsEhqk+fTM2jwTMEXCQHweWnK9mmFuC F40tU7pGvCimMOafDbVg9Ss60ZLmTNUQN9heFjgZhCz+q3ix/7dwcasqY8jymwTo xJ+pg/ko0NcSGOzqeQMHiXjXIyNHdfqTHWK10CDqOXr/8nthefI8XQdUHhtBmCBY dLJtxuClmUFfeQvmfF/x0b+z2vgTOy/2wZiF4ed6zLQ7aDjewH31hO+WKYpcEIGJ X7+3MWMY7F7IIg2hbK/s4Eabxhax0d4wsAFRlBAAYsCuZ03C4eRgxeyhGJwvxNuR NGiL8x5wSafdn+RvMowcvlNpdu/CkA6P5Zzv+/uCtszpdZ8CIV8= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:09 2025 by rpki-client