$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json) Hash identifier: +WedC5AFTOIjVbvYjOX9Z8jhppjglr2NUPmG5zI7QZ0= Subject key identifier: B5:7F:A9:91:E4:6B:94:58:52:83:33:4C:7E:27:B5:A5:E7:25:D7:3D Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Certificate serial: 5D5B1555580B4840B8A968577F7B5E45C0285D2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 07:01:17 +0000 Manifest this update: Fri 22 Aug 2025 06:56:17 +0000 Manifest next update: Mon 25 Aug 2025 16:33:17 +0000 Files and hashes: 1: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: GyTvAyiqDcz4HqvEtyjLwFP+vqa6W3Rz6dNaGJkDvBQ=) 2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: NswJoPlTbkW1QbykJdu3UOhV7IqDYlomNhuRwW/poHY=) 3: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: Xkph31LntzUaI1/CJr8Ltj+zXZ7Nq1uWNrqZKmCZlP8=) 4: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: /MazlTaa6me3cFviZc51PO2Zl3DmLypNWZBeuB1OeU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5b:15:55:58:0b:48:40:b8:a9:68:57:7f:7b:5e:45:c0:28:5d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Validity Not Before: Aug 22 06:56:17 2025 GMT Not After : Aug 25 16:33:17 2025 GMT Subject: CN=B57FA991E46B94585283334C7E27B5A5E725D73D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:91:fb:5d:84:a1:4a:7b:5f:cc:3f:46:0c: 50:53:7d:4a:a8:c9:dd:3f:13:c7:1d:86:61:cd:79: 52:89:06:d2:47:13:db:23:13:0d:1f:b4:ad:a7:58: 21:0c:d3:05:82:af:10:9f:c6:d0:6b:19:f9:eb:8e: a8:80:a4:2b:1b:3c:be:35:60:e8:61:87:9e:66:89: 62:9c:46:a1:42:12:d0:8e:9b:bc:fa:ab:70:ad:87: 84:ff:c9:2c:4a:ef:36:03:50:8e:11:09:40:26:d2: 80:9a:f8:c5:a6:6b:7c:9c:60:24:ad:fd:5c:0d:dc: 5f:0d:33:09:17:a0:9d:9e:2b:b2:47:60:45:2d:4e: 68:f3:97:dc:55:d6:66:b0:90:03:22:eb:f8:15:02: b2:00:e9:c6:31:6a:37:c3:54:c6:11:21:87:07:9f: b5:83:fd:29:8c:d1:56:d1:05:92:a2:5d:38:06:db: 27:cd:e8:4d:ee:fb:eb:74:be:aa:e2:5f:72:6a:d2: d4:53:dd:ec:05:9c:74:c6:c2:ce:7f:34:2d:0f:bd: 92:b2:fb:1d:4e:77:d2:9d:22:bc:5b:13:94:d2:fa: cb:c9:85:b1:d6:f0:67:eb:da:73:b3:79:cd:df:5a: e3:fd:4b:cd:b5:d0:67:34:23:8b:09:7a:2f:30:9e: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7F:A9:91:E4:6B:94:58:52:83:33:4C:7E:27:B5:A5:E7:25:D7:3D X509v3 Authority Key Identifier: keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f6:a4:2e:b2:ff:06:9f:1a:fc:d2:67:8c:6b:7f:26:00:e7: 17:44:f8:a0:3b:09:01:58:70:62:6a:17:61:1a:ff:24:45:50: ad:26:08:b8:a9:95:69:e3:07:a1:a3:ed:f0:78:c7:bb:95:29: 43:2b:d7:52:e8:f0:9d:7a:0c:10:6f:ae:dd:5d:3a:e1:af:18: aa:96:9a:b0:5f:e9:f1:b6:43:a4:62:ac:94:f1:d8:e7:38:57: e5:0f:bf:5a:14:bb:34:e5:11:f2:99:56:8a:6f:2f:06:a1:dd: ba:d2:44:9f:9f:e9:d9:5c:74:a9:12:27:81:46:f6:82:90:bc: 3b:5c:2a:38:14:bc:6a:62:71:d6:72:7a:14:e0:db:9f:ae:d1: 4c:ed:53:0c:98:8c:85:3f:1e:8f:8a:41:da:f8:e8:74:49:8b: 01:d9:b1:77:ad:05:1c:d1:df:43:1f:6a:7a:d6:de:5c:51:28: e8:3c:e1:df:37:a2:67:11:ed:85:91:53:dd:1d:4b:35:7c:85: 45:d7:30:f0:f1:99:3d:68:78:4b:9b:ee:5b:ef:cd:9a:26:0b: 89:7b:4b:e4:ae:3e:43:62:a1:68:55:5f:0d:72:bb:c6:fd:31: 65:72:02:f8:68:e4:96:8b:78:14:72:18:12:9f:aa:69:75:b6: 2f:dd:47:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVsVVVgLSEC4qWhXf3teRcAoXS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENC NUFEQkQyODAeFw0yNTA4MjIwNjU2MTdaFw0yNTA4MjUxNjMzMTdaMDMxMTAvBgNV BAMTKEI1N0ZBOTkxRTQ2Qjk0NTg1MjgzMzM0QzdFMjdCNUE1RTcyNUQ3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6pH7XYShSntfzD9GDFBTfUqo yd0/E8cdhmHNeVKJBtJHE9sjEw0ftK2nWCEM0wWCrxCfxtBrGfnrjqiApCsbPL41 YOhhh55miWKcRqFCEtCOm7z6q3Cth4T/ySxK7zYDUI4RCUAm0oCa+MWma3ycYCSt /VwN3F8NMwkXoJ2eK7JHYEUtTmjzl9xV1mawkAMi6/gVArIA6cYxajfDVMYRIYcH n7WD/SmM0VbRBZKiXTgG2yfN6E3u++t0vqriX3Jq0tRT3ewFnHTGws5/NC0PvZKy +x1Od9KdIrxbE5TS+svJhbHW8Gfr2nOzec3fWuP9S8210Gc0I4sJei8wnkT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtX+pkeRrlFhSgzNMfie1pecl1z0wHwYDVR0j BBgwFoAUNWa2zwDXsLZz+LUmxWrr3LWtvSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2I4YWU5Ny02ODE4LTQ4YTktYWJlNC1lZGI5NjA0OWYzYzgvMC8zNTY2QjZDRjAw RDdCMEI2NzNGOEI1MjZDNTZBRUJEQ0I1QURCRDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENCNUFE QkQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVC RENCNUFEQkQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEr2pC6y/wafGvzSZ4xrfyYA5xdE+KA7CQFY cGJqF2Ea/yRFUK0mCLiplWnjB6Gj7fB4x7uVKUMr11Lo8J16DBBvrt1dOuGvGKqW mrBf6fG2Q6RirJTx2Oc4V+UPv1oUuzTlEfKZVopvLwah3brSRJ+f6dlcdKkSJ4FG 9oKQvDtcKjgUvGpicdZyehTg25+u0UztUwyYjIU/Ho+KQdr46HRJiwHZsXetBRzR 30MfanrW3lxRKOg84d83omcR7YWRU90dSzV8hUXXMPDxmT1oeEub7lvvzZomC4l7 S+SuPkNioWhVXw1yu8b9MWVyAvho5JaLeBRyGBKfqml1ti/dR1k= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:58 2025 by rpki-client