$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: 8j+CmbcKID0LtCwYKc8WzrSiY1HGMcZW/GMmQUiWUeQ= Subject key identifier: 52:35:AF:42:D9:0E:6D:84:76:A4:9E:D7:F4:88:4A:8E:19:19:C1:4E Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 28BA540E6104B5294424330734CED6CC0801EBB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 02DD Signing time: Sat 23 Aug 2025 12:20:03 +0000 Manifest this update: Sat 23 Aug 2025 12:15:03 +0000 Manifest next update: Tue 26 Aug 2025 14:58:03 +0000 Files and hashes: 1: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 2: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: e1IxuBx2DE3iwv90PBsegAQtgviKzXkY3ikbFZjUGr8=) 3: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) 4: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ba:54:0e:61:04:b5:29:44:24:33:07:34:ce:d6:cc:08:01:eb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Aug 23 12:15:03 2025 GMT Not After : Aug 26 14:58:03 2025 GMT Subject: CN=5235AF42D90E6D8476A49ED7F4884A8E1919C14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:e7:38:ff:f6:6a:44:17:07:a0:a7:63:3e: 5c:a5:98:dd:a7:ca:8f:38:b2:e3:38:8a:12:da:57: 8f:b2:53:c2:44:75:ca:4b:07:60:fe:c2:51:27:32: 49:aa:a1:a9:a0:b8:53:c4:38:e6:08:a0:6f:9e:f7: 9f:09:36:f1:e6:f6:e6:b0:b9:53:7c:3b:fd:fc:89: 5b:b4:65:6a:6b:1f:e0:aa:f3:59:68:ac:99:34:b3: 63:99:3e:e1:45:8e:16:1f:47:91:36:4e:3d:3b:25: b7:dd:6b:05:dc:36:5d:00:68:46:7d:04:4c:51:52: 78:d5:51:13:11:56:fc:be:4c:ba:80:b5:43:05:47: 8f:bb:d3:38:aa:76:53:6c:ee:8f:9e:87:10:ce:7a: 0c:ab:9c:2c:8f:3f:dd:b8:60:d8:f2:ad:8b:69:53: 2a:69:d3:42:6d:36:ef:34:06:5a:3c:f1:e7:aa:33: d1:bc:ae:79:b9:94:50:03:93:bb:6e:a0:24:8f:4c: 68:ac:49:02:ff:49:22:58:e2:f3:3a:7a:91:95:38: 90:c1:39:49:2d:a6:53:7c:98:eb:8a:fe:07:e3:ac: f5:b3:47:dc:68:04:8d:b4:68:83:98:fa:9f:90:23: c4:6b:40:77:c6:c6:66:38:9a:1a:20:77:ee:40:1f: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:35:AF:42:D9:0E:6D:84:76:A4:9E:D7:F4:88:4A:8E:19:19:C1:4E X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:db:78:b5:cb:75:e0:34:d0:8a:4d:45:1e:1d:17:db:5e:4f: 89:cb:b6:26:7f:8a:cd:d6:32:f1:c3:b9:ea:b9:92:4a:b3:32: 39:1a:cc:e4:50:3b:ff:cd:5f:b5:0d:d5:65:39:7b:db:7d:f0: cf:db:7c:cb:6b:0f:da:1d:74:77:69:c7:77:95:f1:0b:59:78: 6b:17:f8:63:51:a4:51:7d:0e:3b:35:05:c1:15:d7:ee:73:8b: 93:a5:f7:82:98:2d:a3:0a:82:90:c8:3c:f6:f8:f0:c4:76:90: e0:0a:67:13:04:db:59:ae:b6:cc:f6:45:72:e5:ef:ac:ff:dd: 07:07:01:ef:ca:cb:4b:31:79:ac:b8:c2:90:8c:c5:7d:84:5f: 21:f6:e3:60:8b:64:d0:81:8d:88:b1:31:f5:d7:00:d3:6a:24: 3e:ea:27:36:d6:eb:23:35:27:c3:7c:4a:be:0d:3b:06:19:94: c9:b3:77:b1:49:8d:3a:8e:a2:c4:ef:4e:13:db:1c:d3:e3:90: 90:5c:8f:ea:02:ab:0b:8b:f7:de:38:1a:e1:8c:80:f5:32:ac: 46:3d:56:cc:74:9d:84:54:c8:33:18:d5:1b:93:9c:25:0a:1a: e0:6f:d1:70:48:57:61:ba:61:c0:9f:eb:e3:40:3e:b7:67:7b: a9:b5:25:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLpUDmEEtSlEJDMHNM7WzAgB67UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTA4MjMxMjE1MDNaFw0yNTA4MjYxNDU4MDNaMDMxMTAvBgNV BAMTKDUyMzVBRjQyRDkwRTZEODQ3NkE0OUVEN0Y0ODg0QThFMTkxOUMxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQOc4//ZqRBcHoKdjPlylmN2n yo84suM4ihLaV4+yU8JEdcpLB2D+wlEnMkmqoamguFPEOOYIoG+e958JNvHm9uaw uVN8O/38iVu0ZWprH+Cq81lorJk0s2OZPuFFjhYfR5E2Tj07JbfdawXcNl0AaEZ9 BExRUnjVURMRVvy+TLqAtUMFR4+70ziqdlNs7o+ehxDOegyrnCyPP924YNjyrYtp Uypp00JtNu80Blo88eeqM9G8rnm5lFADk7tuoCSPTGisSQL/SSJY4vM6epGVOJDB OUktplN8mOuK/gfjrPWzR9xoBI20aIOY+p+QI8RrQHfGxmY4mhogd+5AH9MjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjWvQtkObYR2pJ7X9IhKjhkZwU4wHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPbeLXLdeA00IpNRR4dF9teT4nLtiZ/is3W MvHDueq5kkqzMjkazORQO//NX7UN1WU5e9t98M/bfMtrD9oddHdpx3eV8QtZeGsX +GNRpFF9Djs1BcEV1+5zi5Ol94KYLaMKgpDIPPb48MR2kOAKZxME21mutsz2RXLl 76z/3QcHAe/Ky0sxeay4wpCMxX2EXyH242CLZNCBjYixMfXXANNqJD7qJzbW6yM1 J8N8Sr4NOwYZlMmzd7FJjTqOosTvThPbHNPjkJBcj+oCqwuL9944GuGMgPUyrEY9 Vsx0nYRUyDMY1RuTnCUKGuBv0XBIV2G6YcCf6+NAPrdne6m1Jek= -----END CERTIFICATE-----Generated at Sat Aug 23 21:10:53 2025 by rpki-client