$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: qcdRhtrMqby026hbduIeNe/GWv9civfFOf96MlVpun8= Subject key identifier: 37:1C:BD:EF:C3:32:06:79:2B:BB:B5:29:BB:E2:38:43:B7:80:45:3A Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 4049107529B3EB273ED0D2F855FAFB09BCCB63D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 01B5 Signing time: Sun 19 Oct 2025 14:40:02 +0000 Manifest this update: Sun 19 Oct 2025 14:35:02 +0000 Manifest next update: Wed 22 Oct 2025 23:37:02 +0000 Files and hashes: 1: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=) 2: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY=) 3: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: vc59WbSPU8yNfc8fvan9zpZdfS0zNXDZj/T02zVenG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:49:10:75:29:b3:eb:27:3e:d0:d2:f8:55:fa:fb:09:bc:cb:63:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Oct 19 14:35:02 2025 GMT Not After : Oct 22 23:37:02 2025 GMT Subject: CN=371CBDEFC33206792BBBB529BBE23843B780453A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:ea:43:84:d4:95:e6:85:6c:26:34:e9:75: c0:5e:32:14:16:26:43:8e:1f:ef:43:c5:ca:6d:27: 64:44:72:37:3d:dc:86:59:87:3a:b4:e3:5e:6c:fd: 0e:6f:dd:a9:2e:4b:43:87:40:ea:49:66:3e:f3:d1: b6:bc:73:78:34:30:1a:d6:c0:b7:42:a7:af:c3:ac: 33:34:f5:2f:dd:5f:3a:c9:10:8b:10:eb:ac:9f:82: 26:a8:01:9e:01:d6:71:4f:16:c7:65:a6:89:4d:71: 76:b6:21:c7:1b:b3:c7:26:45:b9:e0:6d:fa:8d:44: da:05:b8:08:b8:6e:29:9c:c0:a8:08:9e:04:c5:29: 62:7a:b2:9f:38:69:90:5f:c2:f0:a9:e5:5a:80:ad: a1:52:fa:ab:2f:fb:ec:0b:20:2a:6a:32:3e:60:68: 84:b7:e6:7a:62:3b:3b:a6:2d:80:aa:4e:14:c9:8a: b3:b6:59:10:4e:c0:92:1d:a2:d7:a9:b4:b7:d6:e2: d0:96:68:7e:f5:a4:0e:15:c3:b9:ce:91:1e:46:61: b2:76:8b:cd:64:61:61:47:0a:3c:7a:c8:9e:51:e7: b3:47:b7:1b:53:3a:4d:ff:dd:b1:95:b8:7f:d3:46: 1a:9a:85:70:9b:8c:a4:48:97:5d:5d:95:fa:f4:6b: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1C:BD:EF:C3:32:06:79:2B:BB:B5:29:BB:E2:38:43:B7:80:45:3A X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4d:18:e9:51:e7:93:0e:de:47:17:c3:a9:85:50:bd:50:15: 42:e8:f0:8f:86:ce:72:21:c3:0f:09:cb:29:e7:34:f8:50:9b: fb:5b:64:91:de:7c:4f:89:e1:b3:81:27:1c:08:f3:8e:c3:28: 1d:c8:eb:e9:d0:6f:2e:83:29:bf:19:7a:c5:d4:d1:b1:ba:7d: 1f:4a:f3:20:2f:ea:72:f2:5c:88:44:3d:54:e6:a4:de:d9:83: a1:05:f1:c0:42:61:d8:dd:a0:7f:b2:a4:28:c8:c5:f9:ac:d9: f5:f2:e1:89:66:71:81:d6:db:fa:91:20:d8:3c:59:93:7a:d9: 1a:1f:ab:0d:83:d9:73:91:21:02:d6:37:74:54:ab:0a:af:ee: 39:f8:ea:29:12:84:3d:de:d3:09:96:35:5f:93:4b:a7:1c:ec: 76:bc:d0:d9:8f:39:4b:17:04:17:98:09:cb:b6:aa:62:00:59: f0:a7:8d:41:b0:59:57:e1:13:81:40:84:e9:65:bc:0d:fd:3e: 36:62:bb:31:3f:1b:6e:45:f1:f8:a8:0e:78:33:cd:e1:d1:4d: a1:cd:38:41:e3:80:8a:f5:e0:7b:0d:7e:4e:06:2d:02:89:ce: a2:04:43:60:0f:ac:89:c6:9b:97:b0:12:22:47:15:4b:9b:c0: aa:53:16:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEkQdSmz6yc+0NL4Vfr7CbzLY9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTEwMTkxNDM1MDJaFw0yNTEwMjIyMzM3MDJaMDMxMTAvBgNV BAMTKDM3MUNCREVGQzMzMjA2NzkyQkJCQjUyOUJCRTIzODQzQjc4MDQ1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40+pDhNSV5oVsJjTpdcBeMhQW JkOOH+9DxcptJ2REcjc93IZZhzq0415s/Q5v3akuS0OHQOpJZj7z0ba8c3g0MBrW wLdCp6/DrDM09S/dXzrJEIsQ66yfgiaoAZ4B1nFPFsdlpolNcXa2Iccbs8cmRbng bfqNRNoFuAi4bimcwKgIngTFKWJ6sp84aZBfwvCp5VqAraFS+qsv++wLICpqMj5g aIS35npiOzumLYCqThTJirO2WRBOwJIdoteptLfW4tCWaH71pA4Vw7nOkR5GYbJ2 i81kYWFHCjx6yJ5R57NHtxtTOk3/3bGVuH/TRhqahXCbjKRIl11dlfr0a3/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxy978MyBnkru7Upu+I4Q7eARTowHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIy QTkwN0VFODY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtNGOlR55MO3kcXw6mFUL1QFULo8I+GznIh ww8JyynnNPhQm/tbZJHefE+J4bOBJxwI847DKB3I6+nQby6DKb8ZesXU0bG6fR9K 8yAv6nLyXIhEPVTmpN7Zg6EF8cBCYdjdoH+ypCjIxfms2fXy4YlmcYHW2/qRINg8 WZN62Rofqw2D2XORIQLWN3RUqwqv7jn46ikShD3e0wmWNV+TS6cc7Ha80NmPOUsX BBeYCcu2qmIAWfCnjUGwWVfhE4FAhOllvA39PjZiuzE/G25F8fioDngzzeHRTaHN OEHjgIr14HsNfk4GLQKJzqIEQ2APrInGm5ewEiJHFUubwKpTFvI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:07 2025 by rpki-client