$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: BWkDgYLMZ4M+w6LQRCY9138sE5Ml3PsdR60qvVfiBnc= Subject key identifier: F4:CA:33:B7:90:AD:D3:F3:0C:0E:9D:8C:38:44:99:A2:E2:BF:18:CF Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 70113186D1854739FBC2529738D387954760454A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 02C3 Signing time: Sat 28 Jun 2025 18:50:03 +0000 Manifest this update: Sat 28 Jun 2025 18:45:03 +0000 Manifest next update: Wed 02 Jul 2025 00:34:03 +0000 Files and hashes: 1: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 2: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: I2snG+Bzwxexc8ZBeshbWf6eYKl83kwZ5yFYPfi8UC4=) 3: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: /rNqnQhLNaqVLN9Hq//q/+AhHgUOzogNFCC15aZgYGU=) 4: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: F9M4JE/BbL7KPtInfZ2De6C86BPHzRjVLxJovHmyJzk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:11:31:86:d1:85:47:39:fb:c2:52:97:38:d3:87:95:47:60:45:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Jun 28 18:45:03 2025 GMT Not After : Jul 2 00:34:03 2025 GMT Subject: CN=F4CA33B790ADD3F30C0E9D8C384499A2E2BF18CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:3d:46:04:e9:2a:99:04:cd:50:91:1d:22: e1:20:6f:c6:31:57:ea:a8:66:a0:40:a2:49:03:fc: 07:9f:a6:ef:46:ec:aa:3f:38:4d:d7:82:e8:9f:d2: ed:95:db:af:e1:38:82:90:84:2f:88:3c:22:0a:a5: be:bb:e4:64:23:e8:b1:81:03:4a:4e:a9:68:1f:f3: 03:ae:2a:a0:a4:3a:47:26:cf:e7:b4:d0:6c:31:42: 6c:73:ab:2e:e0:bb:e1:9c:1a:94:52:3a:82:9c:f2: b4:7a:91:0a:00:e2:a2:6c:aa:70:1a:f8:25:cd:3c: ce:22:22:71:ac:85:f4:cd:43:a6:a0:55:03:2e:ce: 89:63:7d:e6:45:e8:df:db:46:6b:d8:dc:38:6f:88: 3d:66:22:d7:bc:1c:93:02:35:9b:11:de:bd:92:ee: 9f:fc:8a:6f:cb:ce:7b:f1:69:1e:55:49:f8:07:d0: 1a:d4:d2:ae:3f:d2:3f:f7:c5:80:02:c3:9f:b1:1a: ef:24:d3:25:1d:52:cb:bd:90:06:42:9e:16:53:98: c7:63:1d:9f:d5:ed:65:10:60:48:f3:7f:b5:08:a1: 09:e1:e8:07:8d:e6:77:14:0a:7f:90:ca:99:00:90: 94:0d:81:8f:96:09:5c:dd:25:42:79:ee:64:8d:4a: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CA:33:B7:90:AD:D3:F3:0C:0E:9D:8C:38:44:99:A2:E2:BF:18:CF X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:73:d5:17:c3:f0:8f:6d:06:59:8e:1f:50:d3:ed:4c:9c:ab: 30:e3:67:49:a9:82:f3:db:3e:0d:6d:4e:6a:aa:c6:b6:5e:d3: 53:42:9f:1e:06:6f:8f:43:cf:7e:93:4f:dc:cb:41:eb:3b:2c: 16:bb:d6:5f:84:28:f8:7a:8b:1f:51:96:9e:19:4e:fc:a8:78: 6b:49:a1:8e:b0:b2:e7:06:fd:3d:4d:3e:1c:93:af:b8:09:eb: 37:b1:6d:77:86:87:8b:7f:01:72:7c:14:54:99:7f:de:89:ea: ae:41:9d:2c:48:f8:18:7b:6e:2a:99:18:ab:87:21:55:d9:1e: 2c:eb:bc:db:24:95:35:d6:9f:5f:95:45:db:7f:30:8a:73:b2: 0f:8f:25:fe:80:fb:d9:70:1f:83:e7:af:24:8f:69:5e:67:7b: 45:c1:b0:e8:54:db:ec:9c:40:d0:cc:b8:d4:8d:9a:0b:45:34: 02:64:51:39:a8:84:62:8d:cd:04:8e:91:c7:29:bb:b4:a7:44: 49:e3:05:72:bf:da:bf:a9:1e:2e:7d:0a:5e:85:c3:b0:e9:2f: fb:b8:67:61:22:15:93:8d:3e:95:b5:eb:11:e7:69:8b:3d:4a: 43:5c:d8:87:9c:d3:52:17:93:4c:94:2f:4b:2e:e5:4a:ee:eb: d9:fa:07:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBExhtGFRzn7wlKXONOHlUdgRUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTA2MjgxODQ1MDNaFw0yNTA3MDIwMDM0MDNaMDMxMTAvBgNV BAMTKEY0Q0EzM0I3OTBBREQzRjMwQzBFOUQ4QzM4NDQ5OUEyRTJCRjE4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyT1GBOkqmQTNUJEdIuEgb8Yx V+qoZqBAokkD/Aefpu9G7Ko/OE3Xguif0u2V26/hOIKQhC+IPCIKpb675GQj6LGB A0pOqWgf8wOuKqCkOkcmz+e00GwxQmxzqy7gu+GcGpRSOoKc8rR6kQoA4qJsqnAa +CXNPM4iInGshfTNQ6agVQMuzoljfeZF6N/bRmvY3DhviD1mIte8HJMCNZsR3r2S 7p/8im/LznvxaR5VSfgH0BrU0q4/0j/3xYACw5+xGu8k0yUdUsu9kAZCnhZTmMdj HZ/V7WUQYEjzf7UIoQnh6AeN5ncUCn+QypkAkJQNgY+WCVzdJUJ57mSNSmTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Mozt5Ct0/MMDp2MOESZouK/GM8wHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtz1RfD8I9tBlmOH1DT7UycqzDjZ0mpgvPb Pg1tTmqqxrZe01NCnx4Gb49Dz36TT9zLQes7LBa71l+EKPh6ix9Rlp4ZTvyoeGtJ oY6wsucG/T1NPhyTr7gJ6zexbXeGh4t/AXJ8FFSZf96J6q5BnSxI+Bh7biqZGKuH IVXZHizrvNsklTXWn1+VRdt/MIpzsg+PJf6A+9lwH4PnrySPaV5ne0XBsOhU2+yc QNDMuNSNmgtFNAJkUTmohGKNzQSOkccpu7SnREnjBXK/2r+pHi59Cl6Fw7DpL/u4 Z2EiFZONPpW16xHnaYs9SkNc2Iec01IXk0yUL0su5Uru69n6B/s= -----END CERTIFICATE-----Generated at Sun Jun 29 18:11:45 2025 by rpki-client