$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: hmxACTt+0ucZFywoAa/qZqk81fWQOW4FCiOragocC10= Subject key identifier: 49:EE:9E:3A:C9:D3:5C:84:4D:E3:27:AE:06:53:4C:5F:7D:A7:86:92 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 346C6909B124562D72B6A5C5D137B1E5B87B3781 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04BC Signing time: Thu 21 Aug 2025 22:32:09 +0000 Manifest this update: Thu 21 Aug 2025 22:27:09 +0000 Manifest next update: Sun 24 Aug 2025 23:19:09 +0000 Files and hashes: 1: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: sfPcOIDbaEzFbLzHEUIt1SRHuOQn/9qgziZYHfwm7Vc=) 2: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) 3: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6c:69:09:b1:24:56:2d:72:b6:a5:c5:d1:37:b1:e5:b8:7b:37:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Aug 21 22:27:09 2025 GMT Not After : Aug 24 23:19:09 2025 GMT Subject: CN=49EE9E3AC9D35C844DE327AE06534C5F7DA78692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:03:2e:0f:56:37:2c:9b:a3:aa:5c:e2:37: 71:8b:ec:f6:79:8a:28:f9:c2:98:80:a6:e4:e1:78: 10:d3:c1:2e:8f:d9:40:2d:6e:48:2c:03:39:a6:c8: 5f:54:15:23:be:73:2e:68:df:db:37:47:0e:02:f6: 8b:45:66:d3:cd:d2:58:d4:11:3c:32:5f:e3:c8:2f: 7b:d0:45:9e:63:99:41:1b:8c:cf:cf:19:2b:9b:4a: 24:36:a3:fe:e5:97:9b:29:29:c0:7e:ec:4b:d1:4d: 0a:33:b8:8e:71:f1:78:c9:59:2e:80:a2:c1:b9:f3: 5c:85:ee:c3:f6:4f:a4:8e:10:2c:6e:43:f8:65:b8: f8:3e:8e:3a:2d:b2:e7:4f:a0:7e:41:3d:f2:09:5b: 22:23:04:b3:46:ed:40:9a:e1:c0:0e:e8:aa:46:41: 5e:aa:d1:ef:d3:03:43:d1:50:dc:d7:c4:54:12:0c: 1f:d0:9f:e8:9a:38:d0:25:6c:73:4b:43:e6:d2:52: f1:60:8a:3d:05:12:4b:ea:9b:34:40:94:e9:41:d8: 7c:79:7e:65:3d:46:dd:f1:90:e0:17:f8:38:65:b6: 95:3f:18:aa:01:4b:c9:91:91:66:f3:a9:37:b4:45: 64:f6:9c:d5:dc:50:11:2d:65:ef:3e:3f:40:7b:2c: ee:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EE:9E:3A:C9:D3:5C:84:4D:E3:27:AE:06:53:4C:5F:7D:A7:86:92 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ba:64:5f:2d:0f:e1:c5:ee:51:a2:62:ec:0e:51:59:e1:08: 0e:e9:57:99:a8:1c:0e:67:d2:38:3d:4b:4c:c1:5e:fa:b2:f9: 80:f6:8b:6d:25:a8:75:8b:00:9a:6a:0e:21:73:c5:4d:0e:c0: 0e:05:46:da:c3:9e:52:70:fa:a3:be:6e:81:fc:b6:56:5b:2a: be:fc:dc:65:3d:7a:5a:a3:c3:de:7d:34:50:cb:70:3d:b1:df: d9:ad:11:08:d5:12:d3:7e:6b:ff:b5:fb:bc:18:13:26:2f:82: bd:da:de:74:61:cd:e9:45:0e:34:b1:53:00:e2:19:1b:43:b0: 06:6f:34:12:19:aa:c5:bb:41:73:70:c2:95:cb:57:0b:48:da: 04:d0:0f:ac:b9:5d:19:4c:69:df:b7:e4:23:37:b4:14:5b:b6: 0c:63:31:42:c3:ad:55:f8:00:5a:0d:dc:67:a8:14:4f:42:80: ed:ea:63:b6:62:33:4f:1b:ad:c6:c5:ce:ea:75:77:7f:13:b4: 08:76:17:53:ae:09:10:1e:e9:fa:91:b7:c4:45:26:3f:32:32: 5a:b0:d1:26:33:fe:40:a9:e7:d1:ce:6b:7a:4f:fc:cb:0c:21: ce:ab:f3:76:39:00:10:de:94:32:d6:f0:a1:8e:c0:d7:93:0e: 66:72:38:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGxpCbEkVi1ytqXF0Tex5bh7N4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA4MjEyMjI3MDlaFw0yNTA4MjQyMzE5MDlaMDMxMTAvBgNV BAMTKDQ5RUU5RTNBQzlEMzVDODQ0REUzMjdBRTA2NTM0QzVGN0RBNzg2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TgMuD1Y3LJujqlziN3GL7PZ5 iij5wpiApuTheBDTwS6P2UAtbkgsAzmmyF9UFSO+cy5o39s3Rw4C9otFZtPN0ljU ETwyX+PIL3vQRZ5jmUEbjM/PGSubSiQ2o/7ll5spKcB+7EvRTQozuI5x8XjJWS6A osG581yF7sP2T6SOECxuQ/hluPg+jjotsudPoH5BPfIJWyIjBLNG7UCa4cAO6KpG QV6q0e/TA0PRUNzXxFQSDB/Qn+iaONAlbHNLQ+bSUvFgij0FEkvqmzRAlOlB2Hx5 fmU9Rt3xkOAX+DhltpU/GKoBS8mRkWbzqTe0RWT2nNXcUBEtZe8+P0B7LO7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSe6eOsnTXIRN4yeuBlNMX32nhpIwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu6ZF8tD+HF7lGiYuwOUVnhCA7pV5moHA5n 0jg9S0zBXvqy+YD2i20lqHWLAJpqDiFzxU0OwA4FRtrDnlJw+qO+boH8tlZbKr78 3GU9elqjw959NFDLcD2x39mtEQjVEtN+a/+1+7wYEyYvgr3a3nRhzelFDjSxUwDi GRtDsAZvNBIZqsW7QXNwwpXLVwtI2gTQD6y5XRlMad+35CM3tBRbtgxjMULDrVX4 AFoN3GeoFE9CgO3qY7ZiM08brcbFzup1d38TtAh2F1OuCRAe6fqRt8RFJj8yMlqw 0SYz/kCp59HOa3pP/MsMIc6r83Y5ABDelDLW8KGOwNeTDmZyOAM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:43 2025 by rpki-client