$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: GUsk6AXAPi1vbRr2c0X2cb5bmJ2vFkRLCAf0qi2Wz2o= Subject key identifier: BE:3F:C0:99:84:E5:3A:11:35:C0:D5:A2:C3:46:7D:90:29:11:AF:E0 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 3313A81B9880F4DC01F6B250453A3FC262277779 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: C7 Signing time: Tue 06 May 2025 01:21:45 +0000 Manifest this update: Tue 06 May 2025 01:16:45 +0000 Manifest next update: Fri 09 May 2025 12:09:45 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 2: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 4: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: 7Kf5sWfr2JcwBXGJRQIvVoNa3B0VuYuRlroRwIw5ViA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 12:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:13:a8:1b:98:80:f4:dc:01:f6:b2:50:45:3a:3f:c2:62:27:77:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: May 6 01:16:45 2025 GMT Not After : May 9 12:09:45 2025 GMT Subject: CN=BE3FC09984E53A1135C0D5A2C3467D902911AFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:8e:92:74:f2:01:71:63:9f:3b:c9:18:4a: 7f:61:4e:5b:94:dc:ba:35:4d:f7:66:c7:7a:13:35: 6a:dd:05:b3:b6:d2:b3:5f:6c:38:ec:bd:e1:b1:92: 03:db:68:41:74:5e:eb:1f:5f:43:a8:4b:98:13:60: a1:0e:20:e0:5d:05:68:19:23:6b:23:c2:b3:bd:44: 60:e6:5c:1c:d1:09:4e:c8:34:09:05:68:68:18:db: ac:12:62:58:de:3f:bb:c3:26:d6:5f:a5:04:57:0b: ab:70:4a:76:45:d0:38:38:df:0a:73:38:f8:c6:31: 24:6e:6a:9d:d8:6f:eb:c5:09:2e:5c:70:40:d9:ab: e5:31:7e:af:a9:cd:c7:f8:ca:a4:b5:97:2b:16:fc: f0:04:eb:fd:03:97:0e:f6:b7:e9:06:45:9c:57:c0: 40:c4:33:94:43:8f:a0:59:95:49:f7:e2:e7:15:e3: 2d:f5:a2:ed:f4:71:da:bc:2c:4b:0d:e0:44:34:35: 33:1a:ee:c8:8c:6b:d2:2b:5d:b2:66:91:c6:e8:76: 8e:bb:02:15:d4:cb:70:eb:85:0d:36:f2:18:cb:ae: 01:6f:47:17:6b:29:a6:4a:d9:a6:2e:ee:01:4a:21: e8:2d:a9:fe:47:12:b4:a3:c3:2a:42:16:9d:ee:2d: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3F:C0:99:84:E5:3A:11:35:C0:D5:A2:C3:46:7D:90:29:11:AF:E0 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8a:2d:64:05:16:d4:4c:32:35:e4:04:94:04:0d:e7:ae:de: 02:27:fd:61:a6:99:15:f7:f8:c0:1e:94:5f:4f:8b:ed:5d:9a: cf:af:a5:f0:c1:4e:7f:e3:94:fe:80:64:c4:24:67:4e:60:77: 68:b6:fa:d0:4c:2d:fc:86:4a:8b:82:6f:0d:6c:41:e5:76:f4: f1:0d:a9:65:ee:b2:9a:c7:16:61:d6:55:e2:3b:95:5a:ce:b2: ca:f2:70:e3:79:4d:70:8d:90:49:9a:cd:d2:00:6c:4f:d3:a3: f4:80:60:b4:1e:1b:31:8a:8a:0d:bc:6b:3e:45:ed:6f:ae:78: b3:3c:ca:9f:f7:ac:df:89:ca:5a:08:a8:d4:46:46:c0:39:a2: e7:62:1a:a4:73:34:17:0c:36:ad:6f:42:59:9c:fa:33:7a:60: 45:c8:61:ae:b1:96:3b:b0:20:7d:0b:d5:13:c7:3a:5b:23:3f: 67:55:cf:39:79:13:e4:a7:15:d5:f6:b7:59:7f:7b:b5:48:a8: c4:af:15:a9:d3:d7:86:16:12:2a:bd:08:6c:bc:fe:90:42:1e: a6:a7:6a:e6:2e:b9:72:66:b0:0f:bf:22:67:bc:ea:72:fa:51: 15:44:9a:cc:1c:dc:6b:e8:12:18:da:85:3b:2c:af:e2:a6:0d: a8:fb:b4:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxOoG5iA9NwB9rJQRTo/wmInd3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA1MDYwMTE2NDVaFw0yNTA1MDkxMjA5NDVaMDMxMTAvBgNV BAMTKEJFM0ZDMDk5ODRFNTNBMTEzNUMwRDVBMkMzNDY3RDkwMjkxMUFGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfn46SdPIBcWOfO8kYSn9hTluU 3Lo1Tfdmx3oTNWrdBbO20rNfbDjsveGxkgPbaEF0XusfX0OoS5gTYKEOIOBdBWgZ I2sjwrO9RGDmXBzRCU7INAkFaGgY26wSYljeP7vDJtZfpQRXC6twSnZF0Dg43wpz OPjGMSRuap3Yb+vFCS5ccEDZq+Uxfq+pzcf4yqS1lysW/PAE6/0Dlw72t+kGRZxX wEDEM5RDj6BZlUn34ucV4y31ou30cdq8LEsN4EQ0NTMa7siMa9IrXbJmkcbodo67 AhXUy3DrhQ028hjLrgFvRxdrKaZK2aYu7gFKIegtqf5HErSjwypCFp3uLS7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvj/AmYTlOhE1wNWiw0Z9kCkRr+AwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyKLWQFFtRMMjXkBJQEDeeu3gIn/WGmmRX3 +MAelF9Pi+1dms+vpfDBTn/jlP6AZMQkZ05gd2i2+tBMLfyGSouCbw1sQeV29PEN qWXusprHFmHWVeI7lVrOssrycON5TXCNkEmazdIAbE/To/SAYLQeGzGKig28az5F 7W+ueLM8yp/3rN+JyloIqNRGRsA5oudiGqRzNBcMNq1vQlmc+jN6YEXIYa6xljuw IH0L1RPHOlsjP2dVzzl5E+SnFdX2t1l/e7VIqMSvFanT14YWEiq9CGy8/pBCHqan auYuuXJmsA+/Ime86nL6URVEmswc3GvoEhjahTssr+KmDaj7tPo= -----END CERTIFICATE-----Generated at Thu May 8 02:36:03 2025 by rpki-client