$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: +/lgMY8ZqOg24Zqnf+e+4RL1WE7DR89gxmLhbFVpHa8= Subject key identifier: AD:AB:0E:89:4A:69:ED:3C:90:B5:9D:FA:7C:EC:2F:1C:9C:92:6F:A3 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 3BF44F02818E2E56ED824C63AB047D74226362B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: F9 Signing time: Sat 23 Aug 2025 18:51:49 +0000 Manifest this update: Sat 23 Aug 2025 18:46:49 +0000 Manifest next update: Wed 27 Aug 2025 00:02:49 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 2: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 4: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: fBqz6mrw1PnORNJzEV9PchHm+YjPrPmaEvizi/ipMgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f4:4f:02:81:8e:2e:56:ed:82:4c:63:ab:04:7d:74:22:63:62:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Aug 23 18:46:49 2025 GMT Not After : Aug 27 00:02:49 2025 GMT Subject: CN=ADAB0E894A69ED3C90B59DFA7CEC2F1C9C926FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:d5:5c:e4:b3:c0:1c:a9:7a:36:09:4c:ae: cc:56:d2:09:b8:39:f7:07:5e:16:9e:2b:3e:ad:41: 7c:63:39:70:88:07:f0:87:17:4d:8e:0a:74:e9:47: f6:9b:80:89:e0:cd:cd:54:27:28:01:0a:e6:99:0d: 55:4a:5c:1d:8c:57:c9:8d:e2:d9:a2:68:ed:6f:0f: 19:ec:5e:1b:dd:3f:7e:6f:48:15:97:dd:98:9e:96: 6b:7b:cf:86:3b:d4:9e:65:96:9e:12:f9:01:d0:c2: 90:16:b4:01:cf:20:b4:4e:a2:38:79:95:0b:25:c1: 09:cf:ad:15:ad:35:4f:b4:12:af:e0:85:10:ca:2d: 5c:0d:9c:69:c1:b8:fe:2f:61:02:d3:0b:b7:32:59: 6a:3d:01:09:9e:83:43:9a:9b:4b:4e:45:f2:bd:5c: 5b:6b:4d:ff:2d:4b:f7:ba:7b:86:eb:4a:e6:c0:a3: 28:80:9e:42:03:9d:e4:a8:9d:24:69:3b:63:f7:04: 8e:ea:d6:f3:0a:01:25:f3:48:a5:9a:72:a8:04:1d: 8a:1b:fd:4d:fe:39:60:56:5b:24:a5:5c:2e:31:bc: 2b:09:fd:b0:23:f3:0b:eb:40:ac:5a:a4:3d:c3:d9: 8a:5b:f4:eb:e3:af:21:7d:06:85:4d:ab:ae:21:72: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AB:0E:89:4A:69:ED:3C:90:B5:9D:FA:7C:EC:2F:1C:9C:92:6F:A3 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:42:dd:02:d6:54:e2:1f:c6:9c:cb:10:4f:2b:ca:6f:55:13: 36:95:1a:a8:fd:d5:bc:9d:3c:f3:4a:6b:93:e4:14:ca:ac:60: 14:78:38:3f:ef:a5:f4:a1:73:4f:a7:76:cf:db:4c:98:80:98: 5a:c7:38:24:56:09:ff:a1:fa:22:b3:9b:67:cf:d6:97:69:09: 5c:fb:8e:a1:8d:fe:1e:f8:91:9d:88:06:7f:82:a2:4f:1c:77: 0c:e0:c6:e7:79:66:80:ab:78:62:7c:d6:00:15:f4:d3:1b:76: 62:43:3f:95:b1:2d:a6:51:6d:a5:8d:09:01:dc:7b:37:f9:67: 3c:90:4c:d2:bb:28:80:3e:23:5f:6d:0a:19:97:23:00:e9:3e: 15:f4:bf:c6:4d:3a:1c:10:94:aa:f2:52:61:1e:d2:ac:f6:72: 75:bd:0c:0e:7d:16:1d:1b:1e:06:14:c4:0e:c7:60:4a:13:ed: 6b:e9:4c:ae:f5:6a:8d:71:50:d3:32:e2:cc:a4:e3:de:fa:3c: 9f:e6:70:6d:34:6f:5d:c4:97:04:0f:d3:4e:67:53:3b:c1:e4: 00:ac:b8:a6:c8:4e:fb:e9:8b:cc:6a:3e:fb:57:f3:e8:6d:e4: 95:f0:97:83:d2:e5:4a:31:eb:d6:bb:40:ae:f1:ed:7f:36:97: 15:78:3f:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/RPAoGOLlbtgkxjqwR9dCJjYrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA4MjMxODQ2NDlaFw0yNTA4MjcwMDAyNDlaMDMxMTAvBgNV BAMTKEFEQUIwRTg5NEE2OUVEM0M5MEI1OURGQTdDRUMyRjFDOUM5MjZGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJdVc5LPAHKl6NglMrsxW0gm4 OfcHXhaeKz6tQXxjOXCIB/CHF02OCnTpR/abgIngzc1UJygBCuaZDVVKXB2MV8mN 4tmiaO1vDxnsXhvdP35vSBWX3Zielmt7z4Y71J5llp4S+QHQwpAWtAHPILROojh5 lQslwQnPrRWtNU+0Eq/ghRDKLVwNnGnBuP4vYQLTC7cyWWo9AQmeg0Oam0tORfK9 XFtrTf8tS/e6e4brSubAoyiAnkIDneSonSRpO2P3BI7q1vMKASXzSKWacqgEHYob /U3+OWBWWySlXC4xvCsJ/bAj8wvrQKxapD3D2Ypb9OvjryF9BoVNq64hct7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrasOiUpp7TyQtZ36fOwvHJySb6MwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFC3QLWVOIfxpzLEE8rym9VEzaVGqj91byd PPNKa5PkFMqsYBR4OD/vpfShc0+nds/bTJiAmFrHOCRWCf+h+iKzm2fP1pdpCVz7 jqGN/h74kZ2IBn+Cok8cdwzgxud5ZoCreGJ81gAV9NMbdmJDP5WxLaZRbaWNCQHc ezf5ZzyQTNK7KIA+I19tChmXIwDpPhX0v8ZNOhwQlKryUmEe0qz2cnW9DA59Fh0b HgYUxA7HYEoT7WvpTK71ao1xUNMy4syk4976PJ/mcG00b13ElwQP005nUzvB5ACs uKbITvvpi8xqPvtX8+ht5JXwl4PS5Uox69a7QK7x7X82lxV4Pz0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:17 2025 by rpki-client