$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: 1bcqYjexAVO8rb5+Xstrf45MWcg1P0dfQPB8lYrmvuk= Subject key identifier: 76:1C:7E:47:47:27:6B:6F:F1:5C:81:61:36:E5:20:E8:48:B9:BA:6C Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 3E792EE0407C1A8110517628F8625E2CAE9234AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: 0112 Signing time: Sat 18 Oct 2025 20:51:49 +0000 Manifest this update: Sat 18 Oct 2025 20:46:48 +0000 Manifest next update: Tue 21 Oct 2025 21:14:48 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 2: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: G1M4v8dA4Y3mwrzAFrJSHxk+7GO+/9XNsSUA8LsCQUQ=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:79:2e:e0:40:7c:1a:81:10:51:76:28:f8:62:5e:2c:ae:92:34:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Oct 18 20:46:48 2025 GMT Not After : Oct 21 21:14:48 2025 GMT Subject: CN=761C7E4747276B6FF15C816136E520E848B9BA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:ea:95:8b:be:b6:94:39:03:c4:7c:92:b9: 82:78:82:4d:9c:0a:b0:d1:df:d1:01:07:10:60:cc: 77:c8:ec:4f:16:21:bc:1e:3a:d0:0e:bd:1e:57:8e: 6d:f1:89:52:93:52:1c:0f:58:f6:95:c1:f7:d3:b6: 47:e8:f6:eb:72:81:46:11:ea:c6:60:fc:29:f5:2b: 3b:13:5e:89:86:cb:38:f1:70:e1:3c:9b:25:ec:31: b2:bb:5a:5d:7f:cb:d1:fb:67:70:a6:41:e7:b9:09: bb:e3:50:d9:ee:2d:e9:75:29:d6:b3:80:7a:1a:0a: 32:3c:7d:bd:c3:2c:89:e0:3c:23:73:57:eb:63:13: 2a:d8:0c:cb:cd:02:bb:63:13:c4:8b:cd:a4:6c:fc: f5:d9:f1:58:ae:b0:09:0c:aa:8a:44:1c:52:1c:ff: ae:16:fb:23:84:a0:97:ab:82:3d:8b:6f:5d:27:69: c0:cd:37:2e:11:f4:90:1c:cc:ee:cb:2d:a7:5b:4d: 89:92:7f:d3:e6:15:35:8f:8b:56:8b:19:e6:9d:cd: dc:5e:3a:c9:40:7b:f0:1f:a0:88:cb:1a:10:9f:e1: 69:fa:58:7a:c0:51:ab:6f:2a:0e:5b:a9:dc:09:6e: 12:e1:e7:dd:e2:98:28:53:f9:a9:3e:9b:a2:ba:aa: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:7E:47:47:27:6B:6F:F1:5C:81:61:36:E5:20:E8:48:B9:BA:6C X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:81:46:05:24:ed:f1:26:8f:e1:6e:23:c6:bf:af:23:96:93: 4b:11:0d:d0:c3:76:6e:d4:d7:39:5f:02:55:5a:99:c5:4d:7a: 5e:cf:21:38:71:ba:4e:19:ea:0a:a1:9f:a1:e3:d5:e0:59:f1: c2:06:25:a6:13:d6:5a:63:51:a3:f4:f7:16:9d:cc:6c:40:5b: 08:27:2b:8a:c5:40:3f:02:d5:0b:c1:8f:66:76:8f:ec:84:38: 73:b4:b9:8b:b3:cf:9e:ec:17:40:44:21:fc:b8:8c:7b:d1:1a: dc:2f:f4:18:e2:48:a9:a1:00:ac:4d:d0:15:a9:f3:37:09:39: 2a:42:f6:53:84:1e:a4:19:b7:ea:74:23:66:ed:6c:e5:a8:a3: 09:72:8f:71:f9:b6:28:8d:11:8e:f0:a6:06:bc:b2:8d:9e:0e: eb:00:9c:1e:f8:bf:a2:47:e4:fe:0c:13:e5:5b:92:9f:61:41: bf:f7:71:cd:7f:c9:29:aa:b3:73:ce:f2:ca:42:63:8e:5f:7c: a7:1b:7e:81:1a:c1:c9:03:03:f8:ad:e7:f9:a1:8f:a9:4d:ce: aa:98:da:12:45:eb:70:e1:b5:a9:6a:e4:37:5d:9a:03:53:67: 56:bc:15:9c:21:37:ec:7d:4b:4a:bf:14:2e:4c:ab:0e:36:84: 58:cb:cc:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnku4EB8GoEQUXYo+GJeLK6SNKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTEwMTgyMDQ2NDhaFw0yNTEwMjEyMTE0NDhaMDMxMTAvBgNV BAMTKDc2MUM3RTQ3NDcyNzZCNkZGMTVDODE2MTM2RTUyMEU4NDhCOUJBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2eqVi762lDkDxHySuYJ4gk2c CrDR39EBBxBgzHfI7E8WIbweOtAOvR5Xjm3xiVKTUhwPWPaVwffTtkfo9utygUYR 6sZg/Cn1KzsTXomGyzjxcOE8myXsMbK7Wl1/y9H7Z3CmQee5CbvjUNnuLel1Kdaz gHoaCjI8fb3DLIngPCNzV+tjEyrYDMvNArtjE8SLzaRs/PXZ8ViusAkMqopEHFIc /64W+yOEoJergj2Lb10nacDNNy4R9JAczO7LLadbTYmSf9PmFTWPi1aLGeadzdxe OslAe/AfoIjLGhCf4Wn6WHrAUatvKg5bqdwJbhLh593imChT+ak+m6K6qu05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdhx+R0cna2/xXIFhNuUg6Ei5umwwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeBRgUk7fEmj+FuI8a/ryOWk0sRDdDDdm7U 1zlfAlVamcVNel7PIThxuk4Z6gqhn6Hj1eBZ8cIGJaYT1lpjUaP09xadzGxAWwgn K4rFQD8C1QvBj2Z2j+yEOHO0uYuzz57sF0BEIfy4jHvRGtwv9BjiSKmhAKxN0BWp 8zcJOSpC9lOEHqQZt+p0I2btbOWoowlyj3H5tiiNEY7wpga8so2eDusAnB74v6JH 5P4ME+Vbkp9hQb/3cc1/ySmqs3PO8spCY45ffKcbfoEawckDA/it5/mhj6lNzqqY 2hJF63Dhtalq5DddmgNTZ1a8FZwhN+x9S0q/FC5Mqw42hFjLzNw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:10 2025 by rpki-client