$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: 8mrtc60RL+UywLSO+xx6pcfUQsFpJI2H1Wm6ymVF8VE= Subject key identifier: 67:7B:D9:1A:9A:8F:8C:C1:A0:9B:49:81:16:A5:95:B3:2A:E4:8B:EE Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 6F69E557DE20AFF6102B5AD2AD445729249B2098 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 02F6 Signing time: Sun 19 Oct 2025 05:20:04 +0000 Manifest this update: Sun 19 Oct 2025 05:15:04 +0000 Manifest next update: Wed 22 Oct 2025 13:05:04 +0000 Files and hashes: 1: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) 2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) 3: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 4: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: GMPGZf4BO2A3BPrOZU2tVJr6Cg30i3qtDO8QwbO9B7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:69:e5:57:de:20:af:f6:10:2b:5a:d2:ad:44:57:29:24:9b:20:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Oct 19 05:15:04 2025 GMT Not After : Oct 22 13:05:04 2025 GMT Subject: CN=677BD91A9A8F8CC1A09B498116A595B32AE48BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:8c:4e:d9:59:66:a7:d6:1b:9a:c1:63:6f: 30:65:a1:3c:dc:ce:21:46:22:ba:27:b9:bc:6c:c0: be:c1:53:df:c9:47:83:7e:77:f4:60:fc:68:56:e8: e4:a0:e1:bb:b1:48:63:55:58:8f:b7:b7:56:a7:0e: 75:a6:87:3f:bf:8d:c2:45:f8:62:e2:f4:da:53:18: 6d:05:0f:ad:c0:0e:93:24:dd:a7:b7:2f:08:78:5f: b9:a4:e1:32:19:34:4e:13:96:41:c6:ce:d1:6d:a5: 31:ff:9f:ef:54:9b:13:a8:80:19:89:09:d9:dc:27: a2:34:a8:56:01:be:cd:33:0e:1c:62:73:0f:c1:5e: 47:63:fb:27:f2:14:b6:d9:a5:f7:70:ff:ae:d8:d3: 2e:ae:06:0d:45:f3:0f:41:31:8b:29:c4:07:f3:e0: 06:52:82:74:b0:9c:94:82:47:94:e5:f3:e3:4b:e5: 63:88:53:35:ed:22:cf:61:c3:d1:0b:99:38:1f:fa: 47:86:3d:d4:de:e9:7f:9b:a0:0d:66:e2:f7:61:a7: ba:68:8b:4d:ac:be:77:84:28:55:de:36:f3:9d:51: 70:b2:52:4a:d6:69:24:7a:3b:d6:e4:c7:10:b4:24: df:52:67:b7:5c:d4:a0:63:2b:0c:06:07:9d:97:10: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:D9:1A:9A:8F:8C:C1:A0:9B:49:81:16:A5:95:B3:2A:E4:8B:EE X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:98:75:a1:b4:60:35:b5:31:1c:53:d9:35:4e:05:5d:e3:b2: 53:d1:f5:57:ac:5b:e8:54:01:af:cf:72:1f:19:6b:fe:27:3e: 2e:9c:3e:b7:38:c1:91:78:de:1b:f8:2c:38:85:bc:1d:4a:73: 11:bd:a4:ec:da:fe:7f:21:d7:8e:10:cb:21:50:b9:b8:91:47: 7b:5b:67:ce:ca:75:c7:4b:be:9f:ec:3a:b3:cd:c5:9d:55:d6: 3a:b6:1f:0c:cb:62:42:0a:da:92:1d:fc:01:80:fc:13:79:a2: be:a5:13:9e:b8:d5:5a:da:05:15:aa:d3:3b:e6:43:d5:24:61: bf:e2:bf:d4:53:54:55:3d:e1:67:bd:a0:9d:00:7c:4e:3b:22: 58:96:5b:79:74:f6:9c:dc:d4:20:d9:4b:5f:df:7a:d2:40:ff: 46:07:de:eb:53:ef:17:ef:0e:12:6c:eb:af:5b:ff:46:8a:ee: f2:58:f8:a1:e1:86:9f:5f:1f:8b:7b:07:64:3d:a4:41:22:46: b9:ee:19:8c:95:21:a4:fa:1e:ae:2b:7e:33:49:91:f0:a3:74: 11:a9:0e:20:d8:ac:79:c8:a8:62:7d:80:41:e9:59:5e:db:fa: 53:4f:bf:2c:d6:b8:d6:3a:78:20:d2:b4:e3:17:a3:e1:d9:47: 91:80:69:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2nlV94gr/YQK1rSrURXKSSbIJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTEwMTkwNTE1MDRaFw0yNTEwMjIxMzA1MDRaMDMxMTAvBgNV BAMTKDY3N0JEOTFBOUE4RjhDQzFBMDlCNDk4MTE2QTU5NUIzMkFFNDhCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKoxO2Vlmp9YbmsFjbzBloTzc ziFGIronubxswL7BU9/JR4N+d/Rg/GhW6OSg4buxSGNVWI+3t1anDnWmhz+/jcJF +GLi9NpTGG0FD63ADpMk3ae3Lwh4X7mk4TIZNE4TlkHGztFtpTH/n+9UmxOogBmJ CdncJ6I0qFYBvs0zDhxicw/BXkdj+yfyFLbZpfdw/67Y0y6uBg1F8w9BMYspxAfz 4AZSgnSwnJSCR5Tl8+NL5WOIUzXtIs9hw9ELmTgf+keGPdTe6X+boA1m4vdhp7po i02svneEKFXeNvOdUXCyUkrWaSR6O9bkxxC0JN9SZ7dc1KBjKwwGB52XEOKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ3vZGpqPjMGgm0mBFqWVsyrki+4wHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6YdaG0YDW1MRxT2TVOBV3jslPR9VesW+hU Aa/Pch8Za/4nPi6cPrc4wZF43hv4LDiFvB1KcxG9pOza/n8h144QyyFQubiRR3tb Z87KdcdLvp/sOrPNxZ1V1jq2HwzLYkIK2pId/AGA/BN5or6lE5641VraBRWq0zvm Q9UkYb/iv9RTVFU94We9oJ0AfE47IliWW3l09pzc1CDZS1/fetJA/0YH3utT7xfv DhJs669b/0aK7vJY+KHhhp9fH4t7B2Q9pEEiRrnuGYyVIaT6Hq4rfjNJkfCjdBGp DiDYrHnIqGJ9gEHpWV7b+lNPvyzWuNY6eCDStOMXo+HZR5GAaQk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:47 2025 by rpki-client