$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: 7nyWETqULaLNLfAYJNP7LxMFwflbi58HMb7/v2emiYQ= Subject key identifier: A7:7E:12:AC:E6:2C:80:D4:28:D7:29:FD:7A:11:14:8A:24:76:1A:A0 Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 6274A1130023BFE218AAE2603028737A1BB8BAA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 049F Signing time: Sat 28 Jun 2025 17:21:06 +0000 Manifest this update: Sat 28 Jun 2025 17:16:06 +0000 Manifest next update: Tue 01 Jul 2025 17:37:06 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: cFUlR6DprM2cJCXO8BN5OEirdKD+sfOUEcaSzOEkgt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:74:a1:13:00:23:bf:e2:18:aa:e2:60:30:28:73:7a:1b:b8:ba:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Jun 28 17:16:06 2025 GMT Not After : Jul 1 17:37:06 2025 GMT Subject: CN=A77E12ACE62C80D428D729FD7A11148A24761AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:cc:23:b8:bf:3c:a1:a2:7c:68:13:46:69: d3:f4:64:6c:74:1a:23:6c:40:ed:7a:77:ea:61:2c: ac:e7:a5:25:54:55:dd:5a:09:f6:4e:16:01:01:ea: 78:ae:7c:a4:e5:f5:2e:74:21:39:a3:f0:5a:f1:81: fc:50:c5:2b:df:ab:47:81:70:97:06:90:8e:04:dd: 24:f8:92:cd:fe:85:15:e5:76:73:01:31:14:23:50: 5f:aa:90:85:12:12:b2:24:75:98:c9:8a:20:4d:03: 2c:97:85:b7:f9:af:e2:91:ab:5e:36:9a:0a:91:6c: 3c:ab:21:43:1d:4e:d0:f2:b2:fd:a3:32:9c:4f:e9: 7f:56:90:e0:76:27:7a:ea:12:92:32:15:5d:df:d6: 92:42:48:e5:e5:fc:bb:5f:6b:07:a0:18:27:0e:24: 8f:7c:c7:bf:49:f7:11:95:23:54:8e:89:99:24:20: 63:cd:26:fc:f4:96:a6:b4:9b:b8:e6:9c:8c:fa:8d: 05:0e:3e:47:66:cd:69:94:9f:34:20:08:1c:92:b7: b8:32:65:03:a0:24:cc:d4:0e:02:ce:84:2b:48:95: a2:a9:f6:31:10:47:2b:0f:bd:fa:40:67:50:e9:74: 5b:bd:15:94:f3:fe:85:43:48:c7:c6:24:62:63:1f: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:12:AC:E6:2C:80:D4:28:D7:29:FD:7A:11:14:8A:24:76:1A:A0 X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a1:82:6f:f8:c4:0b:6a:d8:39:58:d8:e8:a8:2d:b2:8b:e4: d8:1c:b7:47:4c:dd:3e:e5:38:f7:e5:e6:ec:87:e0:bb:dc:d8: de:f7:a7:ef:76:2a:ad:98:12:da:58:c1:7f:9f:7e:a0:eb:ed: 58:6d:06:a7:5c:c2:c5:ea:8a:ed:36:c4:aa:ac:5d:f8:60:72: 6d:c2:85:59:b2:e5:bf:a1:08:4e:7d:cd:79:e7:7f:b0:54:32: dc:4f:a1:39:fc:89:ea:c8:8d:d4:4b:88:6c:f4:c2:41:65:87: c0:45:92:36:57:3b:89:b4:1d:bf:71:71:0b:8c:8e:28:23:88: 4d:91:0b:63:11:be:bc:58:21:64:04:89:f1:d4:e0:5f:51:d2: bd:a4:81:cf:91:6d:76:a7:f4:f3:7f:45:9e:c4:38:5e:71:45: 65:8c:f5:ec:c0:fa:42:c8:14:58:72:d2:f7:e3:f5:3d:ef:49: 42:26:8b:64:fc:c7:44:55:96:50:4a:3d:cb:a1:3a:32:93:80: d5:23:8d:59:ba:1d:b3:a4:4f:9f:77:24:3b:d8:1b:22:47:5b: 3c:25:ab:f5:2f:95:9a:3d:64:44:16:b7:29:89:76:15:f4:12: 6c:37:7a:7e:73:04:f4:8e:55:e2:f0:c1:58:7a:39:f2:86:30: 0f:72:51:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnShEwAjv+IYquJgMChzehu4uqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTA2MjgxNzE2MDZaFw0yNTA3MDExNzM3MDZaMDMxMTAvBgNV BAMTKEE3N0UxMkFDRTYyQzgwRDQyOEQ3MjlGRDdBMTExNDhBMjQ3NjFBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4swjuL88oaJ8aBNGadP0ZGx0 GiNsQO16d+phLKznpSVUVd1aCfZOFgEB6niufKTl9S50ITmj8FrxgfxQxSvfq0eB cJcGkI4E3ST4ks3+hRXldnMBMRQjUF+qkIUSErIkdZjJiiBNAyyXhbf5r+KRq142 mgqRbDyrIUMdTtDysv2jMpxP6X9WkOB2J3rqEpIyFV3f1pJCSOXl/LtfawegGCcO JI98x79J9xGVI1SOiZkkIGPNJvz0lqa0m7jmnIz6jQUOPkdmzWmUnzQgCBySt7gy ZQOgJMzUDgLOhCtIlaKp9jEQRysPvfpAZ1DpdFu9FZTz/oVDSMfGJGJjH2rjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp34SrOYsgNQo1yn9ehEUiiR2GqAwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAChgm/4xAtq2DlY2OioLbKL5Ngct0dM3T7l OPfl5uyH4Lvc2N73p+92Kq2YEtpYwX+ffqDr7VhtBqdcwsXqiu02xKqsXfhgcm3C hVmy5b+hCE59zXnnf7BUMtxPoTn8ierIjdRLiGz0wkFlh8BFkjZXO4m0Hb9xcQuM jigjiE2RC2MRvrxYIWQEifHU4F9R0r2kgc+RbXan9PN/RZ7EOF5xRWWM9ezA+kLI FFhy0vfj9T3vSUImi2T8x0RVllBKPcuhOjKTgNUjjVm6HbOkT593JDvYGyJHWzwl q/UvlZo9ZEQWtymJdhX0Emw3en5zBPSOVeLwwVh6OfKGMA9yUQ8= -----END CERTIFICATE-----Generated at Sun Jun 29 20:09:36 2025 by rpki-client