$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: ffiCizsiBNj1JRaOcQtKXEgq+afGSIIKtI42wZpr7W8= Subject key identifier: 30:2E:91:F0:0F:8B:9B:82:67:AD:72:E4:AF:09:97:22:E0:5E:08:FA Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 3EDAA9F28A09C8C6AAFCDAD12C5B460D8E7741B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 16:41:36 +0000 Manifest this update: Thu 21 Aug 2025 16:36:36 +0000 Manifest next update: Sun 24 Aug 2025 19:43:36 +0000 Files and hashes: 1: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: gt5XRlq019FiO3wlGXLMGls9QciiMADYm3TMCSIsMzA=) 2: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 3: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 4: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 5: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:da:a9:f2:8a:09:c8:c6:aa:fc:da:d1:2c:5b:46:0d:8e:77:41:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Aug 21 16:36:36 2025 GMT Not After : Aug 24 19:43:36 2025 GMT Subject: CN=302E91F00F8B9B8267AD72E4AF099722E05E08FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:12:5f:a3:72:22:d7:ab:b2:9a:1e:5d:57:e0: b4:e1:52:8a:51:b3:be:e6:dd:5d:d8:3e:6c:1e:cb: ad:3b:c9:e0:e8:6a:dd:20:25:2d:0e:0e:6f:0d:1b: c6:89:1c:4a:89:dc:c5:d2:f5:03:af:f2:e4:10:2a: f9:ff:70:08:ee:e1:04:50:44:e4:ea:7f:85:75:38: 10:bb:98:5f:9e:f7:8c:23:5f:b9:f6:2f:bc:51:bf: 02:d5:cc:79:7f:a8:af:db:3c:f9:04:f4:58:ae:c2: a6:12:f5:91:bf:56:c5:27:ff:46:27:13:e7:ff:60: 16:5a:42:5a:e7:c7:69:6f:e6:0b:62:83:af:bd:28: 98:e7:01:8c:c5:6c:e5:e5:36:b8:a9:2a:00:46:26: ff:62:2a:14:d7:e0:69:78:bf:1c:60:92:33:83:a6: 51:27:9b:62:d6:72:64:52:fd:21:3a:08:30:f7:c9: 5c:09:06:37:5a:b4:a4:33:8f:91:67:22:83:9e:34: aa:e0:cb:2f:4f:5e:f1:10:fe:b2:09:a1:61:47:91: 1e:bc:27:44:5b:0a:33:d4:24:1d:aa:ce:2b:3f:92: a0:f1:20:99:e3:06:10:92:1b:2d:12:36:e5:9b:14: ec:76:2e:8b:54:01:69:d7:02:49:ae:7d:e4:c8:9a: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2E:91:F0:0F:8B:9B:82:67:AD:72:E4:AF:09:97:22:E0:5E:08:FA X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:aa:95:dd:92:80:7a:25:bb:c2:0d:ed:a4:11:80:db:93: f5:ba:db:de:a0:bf:a0:09:e0:9b:e4:9e:a2:c0:80:72:99:4d: 2d:c0:aa:e1:9f:1f:f8:5c:6e:1a:be:8d:83:66:22:e8:62:b1: 6d:d9:fe:70:e5:3b:ac:2d:52:fb:3e:ae:99:c2:65:fa:42:1a: 96:20:a6:50:9e:3a:d0:aa:c2:9c:93:1b:89:b4:62:87:e8:bc: c6:c7:40:07:45:4b:31:da:0f:79:c3:f3:02:ad:fb:92:1b:1e: e7:5f:2b:63:68:5e:a2:fa:e0:a3:95:00:10:20:8e:69:8a:d7: 46:45:f9:da:32:75:ec:b9:e7:29:23:ba:15:cc:75:19:95:38: 16:bf:ed:a2:14:d6:d6:02:37:55:1e:d0:a1:3c:4b:6c:1c:b4: e1:98:a4:cb:b3:8d:42:5e:b8:ce:48:d1:38:d0:65:ec:e9:f9: da:03:59:a6:b7:b9:86:1d:e3:7d:77:ff:90:5c:50:77:f6:a9: fc:73:6a:b8:87:a6:a8:04:6e:75:c9:65:17:30:31:bc:fa:c8: 3c:58:6c:9c:56:4c:36:06:c8:c9:81:ec:aa:7f:0b:c4:66:f8: 7d:c9:3e:98:ba:c1:a3:ff:6f:e0:0a:76:bf:0f:0d:61:c5:fc: fe:b6:0b:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtqp8ooJyMaq/NrRLFtGDY53QbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA4MjExNjM2MzZaFw0yNTA4MjQxOTQzMzZaMDMxMTAvBgNV BAMTKDMwMkU5MUYwMEY4QjlCODI2N0FENzJFNEFGMDk5NzIyRTA1RTA4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxEl+jciLXq7KaHl1X4LThUopR s77m3V3YPmwey607yeDoat0gJS0ODm8NG8aJHEqJ3MXS9QOv8uQQKvn/cAju4QRQ ROTqf4V1OBC7mF+e94wjX7n2L7xRvwLVzHl/qK/bPPkE9FiuwqYS9ZG/VsUn/0Yn E+f/YBZaQlrnx2lv5gtig6+9KJjnAYzFbOXlNripKgBGJv9iKhTX4Gl4vxxgkjOD plEnm2LWcmRS/SE6CDD3yVwJBjdatKQzj5FnIoOeNKrgyy9PXvEQ/rIJoWFHkR68 J0RbCjPUJB2qzis/kqDxIJnjBhCSGy0SNuWbFOx2LotUAWnXAkmufeTImsQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMC6R8A+Lm4JnrXLkrwmXIuBeCPowHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmXqpXdkoB6JbvCDe2kEYDbk/W6296gv6AJ 4JvknqLAgHKZTS3AquGfH/hcbhq+jYNmIuhisW3Z/nDlO6wtUvs+rpnCZfpCGpYg plCeOtCqwpyTG4m0YofovMbHQAdFSzHaD3nD8wKt+5IbHudfK2NoXqL64KOVABAg jmmK10ZF+doydey55ykjuhXMdRmVOBa/7aIU1tYCN1Ue0KE8S2wctOGYpMuzjUJe uM5I0TjQZezp+doDWaa3uYYd4313/5BcUHf2qfxzariHpqgEbnXJZRcwMbz6yDxY bJxWTDYGyMmB7Kp/C8Rm+H3JPpi6waP/b+AKdr8PDWHF/P62C44= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:43 2025 by rpki-client