$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: tQ6e4+A2sk3f+/yTVjDM37uI7VLb5jmc/Epdkw+zqus= Subject key identifier: 3C:90:49:75:E5:27:0C:8B:7E:88:35:56:D0:9C:57:04:A2:43:02:A5 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 705728D8A07DBEC7813E94545CAA2FA982F09180 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 0189 Signing time: Sun 19 Oct 2025 13:12:03 +0000 Manifest this update: Sun 19 Oct 2025 13:07:03 +0000 Manifest next update: Wed 22 Oct 2025 21:44:03 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: 6CVYK6N1ftAGxpCUFz5Cem2k6XadNFO5uCG565mulmY=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: DvNJ8H1CJLvMIn5Y34NSV0YQmp6wM1aq7OtPFufJmPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:57:28:d8:a0:7d:be:c7:81:3e:94:54:5c:aa:2f:a9:82:f0:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Oct 19 13:07:03 2025 GMT Not After : Oct 22 21:44:03 2025 GMT Subject: CN=3C904975E5270C8B7E883556D09C5704A24302A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a5:3f:45:a3:b0:bc:a5:41:96:74:3f:e1:57: 0d:45:0a:5b:5a:1a:ae:0a:e4:b3:e7:f7:89:6a:3d: 23:26:c5:30:ad:eb:6f:b4:59:df:42:4c:ef:96:83: 84:10:04:cc:9b:13:81:e9:b3:c1:87:87:b0:91:80: ab:f9:1e:6e:b4:99:4e:97:92:4b:91:07:9a:33:6e: 12:56:50:c6:d2:3c:d4:33:31:90:95:78:a5:aa:2c: b0:ca:8d:63:a4:a5:4b:db:5d:81:23:76:0f:88:c4: ce:41:7c:80:6e:6d:b5:5e:f1:39:c5:00:81:c2:8e: 28:70:25:a4:90:b0:92:2b:eb:f7:f7:ea:15:42:0b: 0c:2b:b5:7c:2f:65:fb:e6:42:52:c9:91:ff:f5:5e: 5f:79:22:8f:af:6a:33:19:46:e2:99:00:41:d5:70: e5:aa:b0:94:5d:ef:32:68:0a:fa:80:81:14:9a:e0: 73:f7:54:24:fa:28:f8:9a:e5:62:92:05:f0:69:94: 9a:3e:8f:0e:67:95:4e:7a:c4:63:1f:0b:7b:d3:a4: b7:44:ad:c6:0d:a0:6a:35:48:8e:ae:51:7c:44:c8: 97:7f:8d:51:78:06:92:7f:1e:70:57:8d:b7:5b:5e: 9c:13:c5:34:e5:ed:e2:82:64:46:e2:19:00:ca:61: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:90:49:75:E5:27:0C:8B:7E:88:35:56:D0:9C:57:04:A2:43:02:A5 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0b:e5:90:57:be:f2:53:57:78:7b:c0:aa:7e:74:88:63:a4: 1d:3a:ff:c7:b9:41:4b:ad:41:76:9b:13:f9:2e:e0:3c:d3:b5: 6a:05:d4:42:04:1a:35:81:af:78:f4:46:6a:43:cd:23:86:e3: fe:16:d2:96:2d:db:11:75:ff:3e:93:45:79:90:4d:2a:7e:7c: eb:80:64:7c:32:8e:38:78:be:a5:6f:45:20:fb:52:ca:b2:9b: de:1c:35:63:32:94:1a:56:91:f3:98:21:d7:99:ff:ae:64:8b: 0c:f9:14:3d:86:ae:87:46:ed:70:f3:0e:f6:d8:61:7c:b1:9e: c3:06:eb:e1:ee:9d:40:38:05:72:d4:86:69:56:14:fa:5e:6c: ec:51:b4:c1:eb:c5:14:00:43:1f:fa:ac:d5:87:26:99:23:49: 25:b5:cf:70:32:20:2f:26:72:77:db:da:83:e6:fd:2b:a4:ed: 99:d3:70:d1:24:63:5e:11:08:47:2a:4d:03:c2:7e:54:44:ce: 46:18:58:8d:4e:ad:ff:2a:12:a9:f3:fd:da:61:17:32:b8:ab: 9c:56:d4:ad:cc:18:bf:0a:26:aa:e1:5f:29:f8:4a:15:03:31: 16:f4:b8:36:65:ed:2c:36:10:7c:8d:da:c9:90:19:b0:91:c5: 0a:91:12:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFco2KB9vseBPpRUXKovqYLwkYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTEwMTkxMzA3MDNaFw0yNTEwMjIyMTQ0MDNaMDMxMTAvBgNV BAMTKDNDOTA0OTc1RTUyNzBDOEI3RTg4MzU1NkQwOUM1NzA0QTI0MzAyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzpT9Fo7C8pUGWdD/hVw1FClta Gq4K5LPn94lqPSMmxTCt62+0Wd9CTO+Wg4QQBMybE4Hps8GHh7CRgKv5Hm60mU6X kkuRB5ozbhJWUMbSPNQzMZCVeKWqLLDKjWOkpUvbXYEjdg+IxM5BfIBubbVe8TnF AIHCjihwJaSQsJIr6/f36hVCCwwrtXwvZfvmQlLJkf/1Xl95Io+vajMZRuKZAEHV cOWqsJRd7zJoCvqAgRSa4HP3VCT6KPia5WKSBfBplJo+jw5nlU56xGMfC3vTpLdE rcYNoGo1SI6uUXxEyJd/jVF4BpJ/HnBXjbdbXpwTxTTl7eKCZEbiGQDKYfnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJBJdeUnDIt+iDVW0JxXBKJDAqUwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgL5ZBXvvJTV3h7wKp+dIhjpB06/8e5QUut QXabE/ku4DzTtWoF1EIEGjWBr3j0RmpDzSOG4/4W0pYt2xF1/z6TRXmQTSp+fOuA ZHwyjjh4vqVvRSD7Usqym94cNWMylBpWkfOYIdeZ/65kiwz5FD2GrodG7XDzDvbY YXyxnsMG6+HunUA4BXLUhmlWFPpebOxRtMHrxRQAQx/6rNWHJpkjSSW1z3AyIC8m cnfb2oPm/Suk7ZnTcNEkY14RCEcqTQPCflREzkYYWI1Orf8qEqnz/dphFzK4q5xW 1K3MGL8KJqrhXyn4ShUDMRb0uDZl7Sw2EHyN2smQGbCRxQqREtM= -----END CERTIFICATE-----Generated at Tue Oct 21 05:41:09 2025 by rpki-client