$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: XSd0gCONxaxRhjknaGZoZtZ37RIbicpcfsacQ8Nd/hY= Subject key identifier: E4:5A:25:FD:73:CE:AB:0D:41:75:9D:64:FF:1C:32:A9:8F:8A:97:34 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 27F769767F65C9E38859EAEB12B04DFEA32E4749 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 016E Signing time: Thu 21 Aug 2025 09:52:04 +0000 Manifest this update: Thu 21 Aug 2025 09:47:04 +0000 Manifest next update: Sun 24 Aug 2025 20:57:04 +0000 Files and hashes: 1: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: 1jGIsjnRWKAjYEK7TSFGcWeXONe75N1qbPc54plvXY4=) 2: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: 0XxCdpWbRP/FLbu94cL1wy4I6kjQaZ0n9pcjQ6BTfYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f7:69:76:7f:65:c9:e3:88:59:ea:eb:12:b0:4d:fe:a3:2e:47:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Aug 21 09:47:04 2025 GMT Not After : Aug 24 20:57:04 2025 GMT Subject: CN=E45A25FD73CEAB0D41759D64FF1C32A98F8A9734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:04:85:fd:b5:98:9e:3a:c1:58:0e:8c:f5: 1b:a9:c0:ad:9b:5c:e1:b9:b7:26:47:b0:ed:90:20: 89:fc:32:6c:d7:38:e6:af:9b:88:05:a8:02:e1:f1: bc:65:81:92:d5:e2:b9:91:cf:46:ea:ca:06:cd:89: a6:d8:d4:55:20:8d:e3:d4:ae:75:82:d9:8a:13:05: 14:3a:6d:3f:72:2a:1d:5f:1a:16:fd:93:54:7e:dd: 7c:3a:0b:ef:ec:e1:af:56:ae:65:09:e3:2f:8a:d4: 46:64:44:02:55:01:ef:9d:47:77:be:da:36:6b:bc: 06:8f:71:c5:da:ad:2b:00:4d:6c:cf:14:be:5d:d4: 8f:39:8e:da:84:bb:84:99:d2:8f:08:d9:47:87:3e: a3:37:fe:53:76:7c:6d:51:de:b4:b2:dd:87:ea:ac: 4d:49:f3:b4:71:f7:89:9f:f6:05:f4:55:a5:c7:c0: bd:89:ec:8d:f4:d8:3d:f6:c5:95:fa:3c:bf:20:44: 12:26:ea:4e:00:a1:94:96:1b:8e:43:bd:59:cf:d1: dd:50:1c:0a:2e:b7:bd:fb:84:3f:a0:6d:d5:74:18: 66:3d:90:9b:43:f7:06:42:11:4a:f7:ce:6b:fe:0b: 26:dd:ed:95:e5:91:c0:33:68:fd:84:2c:0d:79:c2: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:25:FD:73:CE:AB:0D:41:75:9D:64:FF:1C:32:A9:8F:8A:97:34 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3e:f3:3c:6c:b4:33:64:df:ca:e5:8c:1a:35:4a:20:dd:2a: 5c:12:f9:47:c1:38:89:4d:98:23:97:1f:43:c1:aa:9f:72:cb: 59:43:43:88:b8:55:e6:76:fa:17:03:35:84:91:9c:81:53:53: 02:02:7d:7a:32:00:cb:da:a5:50:7e:4c:36:28:6b:98:89:c1: ff:e2:03:af:89:27:5b:d7:71:4b:35:f6:6a:75:b5:22:fd:c6: 3c:ac:41:e1:51:3c:c5:41:dd:88:4c:d4:81:d1:a6:dc:4d:39: 39:ca:c8:8f:de:c6:82:a2:9f:86:eb:19:46:64:54:d4:7d:9e: a7:73:12:7f:ca:ff:64:38:64:23:d0:12:4d:62:16:ec:3a:9a: 9c:b3:61:b5:67:65:0b:c9:81:12:a2:6f:38:8f:c9:ee:9a:0a: 2e:d4:2d:ee:45:86:ef:22:b7:8d:4a:d0:d4:f6:a8:8c:5c:5a: ec:f6:cf:d8:b3:2c:0c:f9:e8:88:8d:d1:5d:44:94:94:cb:c3: ce:9a:dc:ae:7c:42:53:84:e3:7a:d6:51:0f:dc:63:6e:45:97: b2:32:92:22:9f:e0:7c:ed:1b:0d:86:b8:7b:17:48:90:8c:48: 15:7f:05:f1:c1:ce:df:1b:9c:fe:ee:07:db:83:02:ea:f0:b7: df:b2:b9:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/dpdn9lyeOIWerrErBN/qMuR0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTA4MjEwOTQ3MDRaFw0yNTA4MjQyMDU3MDRaMDMxMTAvBgNV BAMTKEU0NUEyNUZENzNDRUFCMEQ0MTc1OUQ2NEZGMUMzMkE5OEY4QTk3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6QSF/bWYnjrBWA6M9RupwK2b XOG5tyZHsO2QIIn8MmzXOOavm4gFqALh8bxlgZLV4rmRz0bqygbNiabY1FUgjePU rnWC2YoTBRQ6bT9yKh1fGhb9k1R+3Xw6C+/s4a9WrmUJ4y+K1EZkRAJVAe+dR3e+ 2jZrvAaPccXarSsATWzPFL5d1I85jtqEu4SZ0o8I2UeHPqM3/lN2fG1R3rSy3Yfq rE1J87Rx94mf9gX0VaXHwL2J7I302D32xZX6PL8gRBIm6k4AoZSWG45DvVnP0d1Q HAout737hD+gbdV0GGY9kJtD9wZCEUr3zmv+Cybd7ZXlkcAzaP2ELA15wmNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Fol/XPOqw1BdZ1k/xwyqY+KlzQwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI+8zxstDNk38rljBo1SiDdKlwS+UfBOIlN mCOXH0PBqp9yy1lDQ4i4VeZ2+hcDNYSRnIFTUwICfXoyAMvapVB+TDYoa5iJwf/i A6+JJ1vXcUs19mp1tSL9xjysQeFRPMVB3YhM1IHRptxNOTnKyI/exoKin4brGUZk VNR9nqdzEn/K/2Q4ZCPQEk1iFuw6mpyzYbVnZQvJgRKibziPye6aCi7ULe5Fhu8i t41K0NT2qIxcWuz2z9izLAz56IiN0V1ElJTLw86a3K58QlOE43rWUQ/cY25Fl7Iy kiKf4HztGw2GuHsXSJCMSBV/BfHBzt8bnP7uB9uDAurwt9+yuTA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:25 2025 by rpki-client