$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: 3UnGUBwYhU4iwoRllmkn2ywLzaa9KjhntU7iIaH8gTA= Subject key identifier: FC:43:11:19:63:61:16:93:6E:6D:2D:7F:3E:0B:D9:B9:3F:7B:95:A5 Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 45FA9E2DE8AA5B24D6E7C5C3F811CC506734F276 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 016D Signing time: Sun 11 May 2025 20:40:02 +0000 Manifest this update: Sun 11 May 2025 20:35:02 +0000 Manifest next update: Thu 15 May 2025 06:26:02 +0000 Files and hashes: 1: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=) 2: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: +/TtbybBLLkbvxGt0308W4mU2n2gaQmcrGY+Nmy9sxs=) 3: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: nDSHJLkitlb1GME6lEBPPHUWslDjiPtZnQkf1oppio0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 21:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fa:9e:2d:e8:aa:5b:24:d6:e7:c5:c3:f8:11:cc:50:67:34:f2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: May 11 20:35:02 2025 GMT Not After : May 15 06:26:02 2025 GMT Subject: CN=FC431119636116936E6D2D7F3E0BD9B93F7B95A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:bd:c3:ec:ce:ef:58:9d:a4:e3:32:6d:1c: 03:be:d3:21:6a:0c:7c:3d:ca:da:9d:84:df:f5:c0: 25:34:37:1e:43:84:31:75:ab:c9:3e:09:a3:b7:a1: f4:80:82:7b:a4:3d:cd:50:52:31:86:40:d7:ad:3d: db:89:17:9f:6a:a3:e7:ea:36:94:bc:05:31:b0:7c: 2d:d6:15:d2:9c:f2:1e:df:73:44:0c:b0:63:a5:46: b3:9f:85:2b:fb:57:13:98:87:26:5b:ed:79:21:c0: 81:34:6a:8b:50:79:12:79:5d:26:3e:be:12:63:c3: 4b:9b:c5:fb:94:b4:df:18:9c:23:d6:a9:7a:67:9f: e5:38:90:15:8a:0d:91:20:78:fa:e6:60:0b:c7:5d: 80:1c:01:ab:d8:d2:11:6a:4b:d1:b1:d6:20:6c:9d: 30:f5:4a:12:5b:63:65:2d:30:bd:75:dd:27:94:30: 15:71:c7:e4:e8:69:3b:13:cb:37:71:f2:bc:4b:d8: e2:13:4e:71:e2:6c:8b:4e:3f:dc:59:2f:81:56:10: 89:63:ff:00:98:83:d6:c1:52:19:6f:38:91:71:5f: ff:64:5b:0f:eb:ff:b5:02:80:d0:a8:8a:06:82:90: 7a:ca:14:57:54:02:c9:99:94:8b:81:4d:13:f5:55: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:11:19:63:61:16:93:6E:6D:2D:7F:3E:0B:D9:B9:3F:7B:95:A5 X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fa:72:a4:c5:3b:87:a6:87:01:94:18:35:71:01:4e:5d:d6: 75:75:79:51:f6:bd:47:34:3b:c1:7d:75:c1:2f:03:45:a6:05: ec:ba:8e:25:7c:6e:74:d6:b3:4c:12:aa:7e:29:95:ab:93:c7: 42:51:bc:dc:87:35:0f:e9:6b:48:9d:67:e6:79:a9:33:9d:54: a0:af:94:c3:f8:49:38:c8:d0:5b:41:90:23:d1:8d:25:a3:7b: ca:67:f7:da:2f:61:38:f1:d0:71:ca:50:1e:de:6d:4a:12:e1: 95:cf:3e:93:fb:7d:35:c5:d0:0f:9e:78:9a:f2:c4:f5:21:05: 15:cd:e2:4f:23:05:ca:74:04:d9:2c:df:6e:8e:8e:da:2b:02: 7b:b8:63:78:55:1b:22:ac:f5:bc:63:ec:a7:17:64:5a:77:bc: af:7d:a1:62:7e:c6:3d:e5:0c:b4:03:b5:35:8f:62:6a:f1:42: 49:d8:e0:f8:31:8f:d0:e7:d6:eb:7e:9c:33:cd:e3:93:52:e0: 3a:98:4d:b3:c3:91:d0:95:2a:b3:8d:e7:5b:00:ef:24:6a:3c: 02:c2:a8:70:f1:37:b4:58:4e:ec:4d:b7:eb:2f:d3:ad:71:b4: 9b:7c:10:ba:54:7c:ac:81:61:a5:30:24:c8:f5:27:c6:8f:18: e6:c8:d5:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfqeLeiqWyTW58XD+BHMUGc08nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTA1MTEyMDM1MDJaFw0yNTA1MTUwNjI2MDJaMDMxMTAvBgNV BAMTKEZDNDMxMTE5NjM2MTE2OTM2RTZEMkQ3RjNFMEJEOUI5M0Y3Qjk1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvb3D7M7vWJ2k4zJtHAO+0yFq DHw9ytqdhN/1wCU0Nx5DhDF1q8k+CaO3ofSAgnukPc1QUjGGQNetPduJF59qo+fq NpS8BTGwfC3WFdKc8h7fc0QMsGOlRrOfhSv7VxOYhyZb7XkhwIE0aotQeRJ5XSY+ vhJjw0ubxfuUtN8YnCPWqXpnn+U4kBWKDZEgePrmYAvHXYAcAavY0hFqS9Gx1iBs nTD1ShJbY2UtML113SeUMBVxx+ToaTsTyzdx8rxL2OITTnHibItOP9xZL4FWEIlj /wCYg9bBUhlvOJFxX/9kWw/r/7UCgNCoigaCkHrKFFdUAsmZlIuBTRP1VUJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/EMRGWNhFpNubS1/PgvZuT97laUwHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIy QTkwN0VFODY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj6cqTFO4emhwGUGDVxAU5d1nV1eVH2vUc0 O8F9dcEvA0WmBey6jiV8bnTWs0wSqn4plauTx0JRvNyHNQ/pa0idZ+Z5qTOdVKCv lMP4STjI0FtBkCPRjSWje8pn99ovYTjx0HHKUB7ebUoS4ZXPPpP7fTXF0A+eeJry xPUhBRXN4k8jBcp0BNks326OjtorAnu4Y3hVGyKs9bxj7KcXZFp3vK99oWJ+xj3l DLQDtTWPYmrxQknY4Pgxj9Dn1ut+nDPN45NS4DqYTbPDkdCVKrON51sA7yRqPALC qHDxN7RYTuxNt+sv061xtJt8ELpUfKyBYaUwJMj1J8aPGObI1Zo= -----END CERTIFICATE-----Generated at Mon May 12 00:01:28 2025 by rpki-client