$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: FAjUY64ID2D73VZrxhRmTQwNPfLa8Ngy9eC/K+iTGik= Subject key identifier: 7D:72:DD:F7:E6:71:92:4B:13:E9:32:B7:D7:C2:59:0B:47:B1:2E:65 Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 671F5C61F671570D5E09876C336961124FB23317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 0184 Signing time: Tue 01 Jul 2025 00:10:02 +0000 Manifest this update: Tue 01 Jul 2025 00:05:02 +0000 Manifest next update: Fri 04 Jul 2025 02:59:02 +0000 Files and hashes: 1: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY=) 2: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=) 3: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: 5Yl9exC7ncJkPxzypZyMYn4BS+GAgFgnpjbRhdnaaW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1f:5c:61:f6:71:57:0d:5e:09:87:6c:33:69:61:12:4f:b2:33:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Jul 1 00:05:02 2025 GMT Not After : Jul 4 02:59:02 2025 GMT Subject: CN=7D72DDF7E671924B13E932B7D7C2590B47B12E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:a1:5c:4a:d1:4b:d9:e3:3f:6a:f0:67:43: 40:10:99:3b:c2:88:b0:55:ce:19:cf:07:69:1e:5a: 29:2d:bc:6e:ca:f9:2b:7c:78:ff:25:ce:e3:2d:10: dd:7b:e1:8e:9b:cf:54:09:88:76:ed:08:9c:d3:ae: 08:23:30:c7:70:75:37:a6:bf:d0:05:52:b2:8c:bd: 2b:3e:0c:2d:56:fd:5a:35:0f:49:6b:dd:f9:d5:1f: 9c:6c:d5:82:5b:18:de:fd:49:83:27:79:1b:f2:16: d9:64:91:a6:76:63:ae:a8:07:f9:a6:7f:38:1a:0a: ae:80:bd:10:00:78:78:b2:37:ad:9d:42:3a:0b:fa: e9:13:94:62:e4:4e:f4:7a:c4:51:c4:5a:9d:51:aa: d2:14:35:94:6d:4f:8e:eb:dd:74:a3:bd:fb:07:99: 0c:fd:13:71:8e:31:cb:c0:d9:4b:59:ee:2f:8f:89: dd:4b:cd:ef:63:ca:31:69:7f:27:19:4b:38:00:dd: 91:99:bc:41:0c:93:0e:f2:f3:09:2c:10:12:b3:4d: 03:80:0d:68:ff:38:4b:d2:c9:04:b8:cb:25:3d:9e: a6:85:0b:7e:21:24:8e:df:4f:98:e8:9f:b3:cc:d6: 84:92:e8:b9:7d:0c:fa:98:a7:ed:7d:2e:46:8e:08: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:72:DD:F7:E6:71:92:4B:13:E9:32:B7:D7:C2:59:0B:47:B1:2E:65 X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:37:30:b0:1d:9a:d2:8a:7b:02:82:5e:73:95:1a:83:78:33: 26:fa:3f:c6:c5:1d:3a:20:e4:c6:75:cd:07:42:24:15:70:4b: a8:2f:1b:3c:2f:f8:19:4f:b2:05:43:f3:37:82:c0:9a:86:32: 03:7a:f1:33:5f:0c:3b:89:ef:c7:13:3e:76:75:58:51:7d:97: 8e:76:b7:81:55:ca:55:36:9a:0e:65:fb:08:58:f0:5c:07:cd: 8c:3b:65:70:ff:b5:1d:2f:25:71:e4:f5:42:30:48:78:55:bd: 4c:9b:a3:65:6d:a4:65:10:09:78:7f:38:70:95:4b:9b:9a:5a: cb:47:23:58:d6:0c:69:2a:bb:b3:92:d6:85:37:dc:10:3e:20: 99:a9:56:49:9c:46:9c:3e:f7:33:12:b0:dd:e7:6c:88:94:d1: 15:28:67:e9:4d:48:5a:10:78:36:de:8a:51:34:2c:76:6e:f2: 7b:67:51:0f:e9:41:b1:8f:f4:08:b8:bb:07:e8:51:e3:b5:dd: d7:77:52:56:c7:23:82:c8:b6:c4:58:5c:17:61:2c:4e:90:7f: c7:c3:19:36:e1:8f:29:7e:3c:93:57:11:ba:2d:42:f3:56:40: 06:fa:47:8e:cd:fb:ce:57:58:ce:93:f7:6b:57:7d:4c:4f:61: b9:de:62:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZx9cYfZxVw1eCYdsM2lhEk+yMxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTA3MDEwMDA1MDJaFw0yNTA3MDQwMjU5MDJaMDMxMTAvBgNV BAMTKDdENzJEREY3RTY3MTkyNEIxM0U5MzJCN0Q3QzI1OTBCNDdCMTJFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+qFcStFL2eM/avBnQ0AQmTvC iLBVzhnPB2keWiktvG7K+St8eP8lzuMtEN174Y6bz1QJiHbtCJzTrggjMMdwdTem v9AFUrKMvSs+DC1W/Vo1D0lr3fnVH5xs1YJbGN79SYMneRvyFtlkkaZ2Y66oB/mm fzgaCq6AvRAAeHiyN62dQjoL+ukTlGLkTvR6xFHEWp1RqtIUNZRtT47r3XSjvfsH mQz9E3GOMcvA2UtZ7i+Pid1Lze9jyjFpfycZSzgA3ZGZvEEMkw7y8wksEBKzTQOA DWj/OEvSyQS4yyU9nqaFC34hJI7fT5jon7PM1oSS6Ll9DPqYp+19LkaOCNInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfXLd9+ZxkksT6TK318JZC0exLmUwHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIy QTkwN0VFODY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ83MLAdmtKKewKCXnOVGoN4Myb6P8bFHTog 5MZ1zQdCJBVwS6gvGzwv+BlPsgVD8zeCwJqGMgN68TNfDDuJ78cTPnZ1WFF9l452 t4FVylU2mg5l+whY8FwHzYw7ZXD/tR0vJXHk9UIwSHhVvUybo2VtpGUQCXh/OHCV S5uaWstHI1jWDGkqu7OS1oU33BA+IJmpVkmcRpw+9zMSsN3nbIiU0RUoZ+lNSFoQ eDbeilE0LHZu8ntnUQ/pQbGP9Ai4uwfoUeO13dd3UlbHI4LItsRYXBdhLE6Qf8fD GTbhjyl+PJNXEbotQvNWQAb6R47N+85XWM6T92tXfUxPYbneYkM= -----END CERTIFICATE-----Generated at Tue Jul 1 05:21:55 2025 by rpki-client