$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: 4Q2ET0mwJARF+ZDGWX9wjt4xx/6sC2JKyL/YB1IHFfw= Subject key identifier: A0:E7:63:12:A0:66:FA:8A:71:48:5D:3A:B4:BE:C6:72:BD:D2:7C:0A Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 3A8009ED086F3C23F9D8289D6DB62A70B69B803C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 048E Signing time: Sun 11 May 2025 00:12:06 +0000 Manifest this update: Sun 11 May 2025 00:07:06 +0000 Manifest next update: Wed 14 May 2025 08:38:06 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: rzjnKVoPcvg8LoYYqlAPNG8z+kcZAMAEA1cgciQRlhI=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: XqWIDcod31e38VgeahW9dRMzM4JKlsw/6vSF5Hd9Xv4=) 3: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: kcIqmllxdr2ugCRIddS+4LOduF+uVW7YsBlvRnTCmgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 08:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:80:09:ed:08:6f:3c:23:f9:d8:28:9d:6d:b6:2a:70:b6:9b:80:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: May 11 00:07:06 2025 GMT Not After : May 14 08:38:06 2025 GMT Subject: CN=A0E76312A066FA8A71485D3AB4BEC672BDD27C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:5e:f2:71:48:c0:1b:69:10:ce:d2:7e:19: 09:18:3d:23:27:3e:9e:89:87:b8:d3:80:83:29:1a: 59:82:6c:83:d7:4f:c1:19:94:2e:17:80:17:7e:f5: d6:f1:ca:f7:c2:5d:d0:ad:0c:d8:01:54:c8:1b:83: 48:18:0f:7c:8d:b7:6c:a3:f0:66:a8:a5:8d:9f:61: 65:c3:41:30:67:c5:0b:22:9f:e3:5b:8a:d5:b9:a9: 7b:81:6e:d0:33:10:37:b9:da:0c:3c:0a:f0:47:2d: b0:fd:5e:a4:39:72:ab:b2:17:71:57:e8:b2:7c:2c: 79:30:6f:60:c0:f7:0a:87:4e:fb:5c:8b:76:67:f3: c1:a5:94:bd:3a:e8:b9:fa:74:6d:64:c1:90:1f:d9: a9:3d:d0:1c:c2:30:50:2c:68:7f:19:2c:df:01:45: 05:92:2f:5f:6c:cf:48:70:d5:c8:be:43:d3:76:c0: 3b:45:f8:81:e1:cb:bc:eb:98:78:b8:8f:dd:2e:e6: 16:33:11:dd:8f:a9:20:38:03:ce:2d:f4:99:81:16: 84:e5:6e:d1:2d:75:35:b3:ba:5e:0d:42:3b:b9:22: 21:77:92:d1:7e:e4:6b:cb:64:a8:99:cd:33:4d:50: e0:b2:48:11:a9:b8:3a:0e:cc:51:80:df:25:9f:a7: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E7:63:12:A0:66:FA:8A:71:48:5D:3A:B4:BE:C6:72:BD:D2:7C:0A X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b7:7d:3c:ba:5c:c4:26:c2:e8:b6:0f:3e:28:6c:b8:c0:dc: 53:47:b2:03:a1:9d:36:4a:a7:7e:fc:99:d5:a5:cc:4e:34:18: 4d:db:7b:e5:a1:7f:2b:58:ea:b5:f4:5a:df:13:43:58:dd:bb: 7e:a4:05:ff:eb:a8:72:20:05:22:39:c2:00:66:4e:c5:b2:a2: 45:d3:ee:a2:7f:e2:44:55:12:39:5c:f4:52:a7:79:e3:68:6c: 92:1a:d9:eb:b7:a3:fa:15:04:85:6b:4c:85:cc:74:3f:31:97: 35:87:36:ba:ab:50:e0:b6:58:91:7d:8b:29:cd:9a:db:16:9b: 15:61:49:b8:21:06:49:d8:fd:47:7b:18:a8:9b:63:00:f7:c9: cd:ab:bf:fc:2e:7a:82:24:f4:c7:78:2d:36:64:da:09:53:40: e1:f8:d3:0c:14:1d:ed:aa:b0:18:c7:04:8e:d6:0e:d5:06:5b: 66:f1:20:d3:d9:e3:22:22:9f:f7:8a:1b:e1:ee:af:d6:d9:4a: 7a:65:a1:97:6f:fe:ac:37:a9:83:80:c9:dd:d0:01:86:08:98: da:de:d6:1c:76:60:42:03:19:ad:86:01:e8:b5:01:75:a1:c2: 93:54:6c:cc:61:3f:5d:85:ef:1c:2c:fd:9a:b0:a6:d1:54:aa: c9:e5:b6:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOoAJ7QhvPCP52CidbbYqcLabgDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA1MTEwMDA3MDZaFw0yNTA1MTQwODM4MDZaMDMxMTAvBgNV BAMTKEEwRTc2MzEyQTA2NkZBOEE3MTQ4NUQzQUI0QkVDNjcyQkREMjdDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9F7ycUjAG2kQztJ+GQkYPSMn Pp6Jh7jTgIMpGlmCbIPXT8EZlC4XgBd+9dbxyvfCXdCtDNgBVMgbg0gYD3yNt2yj 8GaopY2fYWXDQTBnxQsin+NbitW5qXuBbtAzEDe52gw8CvBHLbD9XqQ5cquyF3FX 6LJ8LHkwb2DA9wqHTvtci3Zn88GllL066Ln6dG1kwZAf2ak90BzCMFAsaH8ZLN8B RQWSL19sz0hw1ci+Q9N2wDtF+IHhy7zrmHi4j90u5hYzEd2PqSA4A84t9JmBFoTl btEtdTWzul4NQju5IiF3ktF+5GvLZKiZzTNNUOCySBGpuDoOzFGA3yWfp67FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoOdjEqBm+opxSF06tL7Gcr3SfAowHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ23fTy6XMQmwui2Dz4obLjA3FNHsgOhnTZK p378mdWlzE40GE3be+WhfytY6rX0Wt8TQ1jdu36kBf/rqHIgBSI5wgBmTsWyokXT 7qJ/4kRVEjlc9FKneeNobJIa2eu3o/oVBIVrTIXMdD8xlzWHNrqrUOC2WJF9iynN mtsWmxVhSbghBknY/Ud7GKibYwD3yc2rv/wueoIk9Md4LTZk2glTQOH40wwUHe2q sBjHBI7WDtUGW2bxINPZ4yIin/eKG+Hur9bZSnploZdv/qw3qYOAyd3QAYYImNre 1hx2YEIDGa2GAei1AXWhwpNUbMxhP12F7xws/ZqwptFUqsnltrE= -----END CERTIFICATE-----Generated at Sun May 11 20:06:12 2025 by rpki-client