$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: 9mjpl1Mxl7GA24g5kgVggKxiwk36S8YmSqgWYyWZ+u4= Subject key identifier: 37:92:3C:EF:16:25:C0:A4:2D:D8:82:BD:A5:DF:8F:70:4F:DB:69:18 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 4A166838DE19D7DBB90E9F5C10EC40667CAC4CE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: E0 Signing time: Mon 30 Jun 2025 09:31:47 +0000 Manifest this update: Mon 30 Jun 2025 09:26:47 +0000 Manifest next update: Thu 03 Jul 2025 14:48:47 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 2: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: qOj8UOsUQHYD94ZDDGH8mRli2gTsEVQSxxVFAUgt2xs=) 3: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) 4: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:16:68:38:de:19:d7:db:b9:0e:9f:5c:10:ec:40:66:7c:ac:4c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Jun 30 09:26:47 2025 GMT Not After : Jul 3 14:48:47 2025 GMT Subject: CN=37923CEF1625C0A42DD882BDA5DF8F704FDB6918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:b5:d4:71:ae:be:a2:7f:1f:20:af:be:3c: 48:18:80:fe:19:46:98:87:96:0e:92:45:69:38:5e: 73:b8:12:3d:1d:70:b4:6c:bd:63:a6:3d:37:9c:09: 2e:7a:f5:d1:ce:fd:b5:d9:b5:72:b0:06:ce:f1:52: 60:10:4f:71:95:7b:5a:a4:a8:9c:27:23:1a:0b:d6: 69:24:15:6b:a9:36:a9:d7:97:cb:78:d0:ff:d6:b4: 34:47:9d:9d:f1:ec:00:a2:62:e7:a1:dc:f2:c9:3e: 08:02:20:4a:09:d3:e9:9a:02:c7:de:8d:18:e8:d2: 6a:84:f5:b9:58:02:24:6f:a4:3c:bb:f9:84:3f:2e: a5:22:ee:3a:14:5a:81:89:8f:ae:f4:25:61:85:21: e2:4a:31:4c:91:92:77:02:8f:57:8b:fe:27:9b:19: 70:97:ab:f9:a3:dd:0b:8f:ef:9d:b7:ff:d1:59:2b: de:09:86:99:a9:e7:6b:8a:e4:36:2e:3d:a7:28:27: c6:94:14:26:3f:b7:ff:28:8e:02:0d:5c:ff:ac:37: c6:ba:0f:8b:77:ce:c7:02:18:78:a6:05:5d:0c:48: e2:24:45:6b:0c:c2:73:f0:9b:58:1a:08:ee:8e:bc: 7c:ba:dc:a3:65:a8:1c:37:79:6b:fe:ba:73:37:c8: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:92:3C:EF:16:25:C0:A4:2D:D8:82:BD:A5:DF:8F:70:4F:DB:69:18 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c5:21:8b:c4:ea:20:8a:18:79:03:9e:7a:cc:a4:51:a7:51: 42:bb:c7:40:13:ac:5b:20:41:f4:1b:b5:d4:6f:19:0c:8e:3b: 49:05:73:04:6c:6e:3a:8b:a9:75:fe:ad:87:d1:8b:a7:76:23: e1:af:f9:ac:f5:ba:13:c5:a4:d9:ee:30:4f:6e:ed:76:b4:fe: 7b:b2:1f:1a:52:23:b1:90:e9:25:78:32:33:68:9f:57:6f:19: ec:f0:f0:86:6c:90:b6:71:e5:06:72:62:83:01:62:a0:4d:ae: 6b:72:b8:d5:e3:46:f9:36:24:5a:5d:95:30:3f:bc:a8:58:c4: 8f:ce:1c:90:51:78:54:04:66:c4:97:56:c0:69:fe:f1:c9:c9: f8:6f:03:8e:e6:c7:7c:88:f8:c0:bd:90:2c:58:9c:7b:d7:30: 19:51:61:eb:6a:e0:68:c5:09:76:63:c5:86:e7:05:df:8e:48: 46:03:fa:3c:30:bd:51:ed:5a:d8:26:13:aa:cf:2a:67:bc:20: 1e:26:74:77:70:6f:f8:60:a4:be:63:4e:9b:96:9a:c5:f1:19: 4c:00:3b:78:ce:35:fb:3e:bb:9d:aa:1e:f4:e3:b8:ca:1d:ad: 05:69:fe:e3:8b:ad:b2:6b:1e:de:1d:2d:ee:c6:78:f7:d0:00: c7:33:6c:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShZoON4Z19u5Dp9cEOxAZnysTOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA2MzAwOTI2NDdaFw0yNTA3MDMxNDQ4NDdaMDMxMTAvBgNV BAMTKDM3OTIzQ0VGMTYyNUMwQTQyREQ4ODJCREE1REY4RjcwNEZEQjY5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkrXUca6+on8fIK++PEgYgP4Z RpiHlg6SRWk4XnO4Ej0dcLRsvWOmPTecCS569dHO/bXZtXKwBs7xUmAQT3GVe1qk qJwnIxoL1mkkFWupNqnXl8t40P/WtDRHnZ3x7ACiYueh3PLJPggCIEoJ0+maAsfe jRjo0mqE9blYAiRvpDy7+YQ/LqUi7joUWoGJj670JWGFIeJKMUyRkncCj1eL/ieb GXCXq/mj3QuP7523/9FZK94Jhpmp52uK5DYuPacoJ8aUFCY/t/8ojgINXP+sN8a6 D4t3zscCGHimBV0MSOIkRWsMwnPwm1gaCO6OvHy63KNlqBw3eWv+unM3yJdhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5I87xYlwKQt2IK9pd+PcE/baRgwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvFIYvE6iCKGHkDnnrMpFGnUUK7x0ATrFsg QfQbtdRvGQyOO0kFcwRsbjqLqXX+rYfRi6d2I+Gv+az1uhPFpNnuME9u7Xa0/nuy HxpSI7GQ6SV4MjNon1dvGezw8IZskLZx5QZyYoMBYqBNrmtyuNXjRvk2JFpdlTA/ vKhYxI/OHJBReFQEZsSXVsBp/vHJyfhvA47mx3yI+MC9kCxYnHvXMBlRYetq4GjF CXZjxYbnBd+OSEYD+jwwvVHtWtgmE6rPKme8IB4mdHdwb/hgpL5jTpuWmsXxGUwA O3jONfs+u52qHvTjuModrQVp/uOLrbJrHt4dLe7GePfQAMczbCs= -----END CERTIFICATE-----Generated at Tue Jul 1 11:43:15 2025 by rpki-client