$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: U9D8baf3mEXzzmceow7bvdfkYZDEwmlgE8d4zB0VrEw= Subject key identifier: 8F:90:82:12:FC:DB:D7:93:1F:A0:2F:8D:CB:8A:11:6C:60:07:DA:C6 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 7CDFBEFA1F08A70E997A8C62D28FB50BF6F9EAB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04E6 Signing time: Mon 30 Jun 2025 04:11:36 +0000 Manifest this update: Mon 30 Jun 2025 04:06:36 +0000 Manifest next update: Thu 03 Jul 2025 13:12:36 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 2: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 3: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 4: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: g4TEzJKevnMjwX3YDBOaDmo0k5CSf5xSCpPl/sxtWWg=) 5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:df:be:fa:1f:08:a7:0e:99:7a:8c:62:d2:8f:b5:0b:f6:f9:ea:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Jun 30 04:06:36 2025 GMT Not After : Jul 3 13:12:36 2025 GMT Subject: CN=8F908212FCDBD7931FA02F8DCB8A116C6007DAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:79:c4:de:21:c8:41:4c:4d:93:34:31:4e: 62:c7:ad:57:c0:cf:77:17:77:30:77:26:9c:30:e8: 13:87:d4:64:e5:02:0f:71:d3:30:b2:2e:99:8d:c5: 26:f6:b3:1e:48:04:d6:9d:ba:e7:0d:82:b7:57:11: d6:1a:b8:49:8a:70:d2:4e:5e:f2:80:dd:94:91:38: 36:b3:d3:61:0a:13:44:7d:72:44:2d:75:04:60:16: 94:02:92:22:1d:6c:78:f7:5a:1f:1b:ca:e5:81:68: cd:d6:85:b1:92:ae:cf:16:9c:0b:cb:e9:c4:ac:cf: b6:f3:01:3c:01:00:8f:35:72:1d:4b:16:66:84:1e: 97:56:54:3e:a3:13:f4:2b:19:1e:03:70:6d:95:c0: 7b:ac:8b:cf:6e:c9:5d:8f:f3:8b:7a:87:f7:26:30: ca:ae:89:6a:ef:01:36:f2:d3:ca:73:ae:b6:ae:fb: 30:8d:7f:fd:12:2e:a1:db:03:bf:12:88:aa:00:d6: 56:d9:6c:62:ab:76:2d:aa:ca:3c:99:01:e0:eb:ba: 1e:6b:f7:b6:aa:39:49:5a:a5:f8:10:b0:f7:ab:4a: 0a:f9:52:c7:27:5e:ee:d8:a2:8a:2c:2a:45:22:9d: 92:d2:f1:85:f9:97:34:13:0b:cb:e5:34:16:d2:64: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:82:12:FC:DB:D7:93:1F:A0:2F:8D:CB:8A:11:6C:60:07:DA:C6 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a5:6b:fe:1a:70:f3:5d:a6:83:50:dc:9c:58:e6:18:2d:9e: 38:ad:c7:ba:d9:7f:fc:a8:a3:8f:87:f4:53:8e:13:9a:bb:0d: 46:c7:b3:e8:ec:70:80:24:df:6d:03:9b:2a:3e:c2:e3:4c:d3: 85:14:8b:02:81:6c:d3:eb:d6:31:e2:b1:12:98:24:d6:a7:68: d1:14:36:f3:b4:cc:54:43:d7:f5:bc:94:7e:69:cd:31:1a:4d: 33:7c:4f:50:fe:89:e8:e6:b2:e9:72:ba:7f:45:b5:9a:02:ad: be:57:c6:ae:f3:d7:f8:d1:b1:ff:7b:c2:96:e1:c2:ce:a3:d2: d2:3c:4d:cb:70:8a:1b:84:38:10:b6:95:ff:39:c9:1f:13:58: 81:e9:69:f1:00:94:03:70:fe:d4:71:5b:81:de:91:5b:05:ff: 9b:d0:53:80:31:cf:40:4a:bb:8e:75:dd:f9:6b:3b:d6:03:f5: 37:d7:74:da:74:2a:33:cc:3e:a2:ad:25:45:41:9b:f8:12:21: fb:5a:bb:b3:62:2a:89:92:d6:bf:cf:a1:99:10:ec:2d:af:e6: f3:b3:a9:f3:fd:ce:6c:51:63:30:53:92:f8:15:7a:51:90:e0: 52:0b:83:52:a4:e1:55:33:6f:1d:ac:80:26:bf:17:11:97:ba: c3:89:96:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfN+++h8Ipw6Zeoxi0o+1C/b56rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA2MzAwNDA2MzZaFw0yNTA3MDMxMzEyMzZaMDMxMTAvBgNV BAMTKDhGOTA4MjEyRkNEQkQ3OTMxRkEwMkY4RENCOEExMTZDNjAwN0RBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3knnE3iHIQUxNkzQxTmLHrVfA z3cXdzB3Jpww6BOH1GTlAg9x0zCyLpmNxSb2sx5IBNaduucNgrdXEdYauEmKcNJO XvKA3ZSRODaz02EKE0R9ckQtdQRgFpQCkiIdbHj3Wh8byuWBaM3WhbGSrs8WnAvL 6cSsz7bzATwBAI81ch1LFmaEHpdWVD6jE/QrGR4DcG2VwHusi89uyV2P84t6h/cm MMquiWrvATby08pzrrau+zCNf/0SLqHbA78SiKoA1lbZbGKrdi2qyjyZAeDruh5r 97aqOUlapfgQsPerSgr5UscnXu7YooosKkUinZLS8YX5lzQTC8vlNBbSZGXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj5CCEvzb15MfoC+Ny4oRbGAH2sYwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2la/4acPNdpoNQ3JxY5hgtnjitx7rZf/yo o4+H9FOOE5q7DUbHs+jscIAk320Dmyo+wuNM04UUiwKBbNPr1jHisRKYJNanaNEU NvO0zFRD1/W8lH5pzTEaTTN8T1D+iejmsulyun9FtZoCrb5Xxq7z1/jRsf97wpbh ws6j0tI8TctwihuEOBC2lf85yR8TWIHpafEAlANw/tRxW4HekVsF/5vQU4Axz0BK u4513flrO9YD9TfXdNp0KjPMPqKtJUVBm/gSIftau7NiKomS1r/PoZkQ7C2v5vOz qfP9zmxRYzBTkvgVelGQ4FILg1Kk4VUzbx2sgCa/FxGXusOJlsU= -----END CERTIFICATE-----Generated at Tue Jul 1 09:20:00 2025 by rpki-client