$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: dl0oAAqT0e4+82YGDO2rhu6SpnGQT6CFrzjsf+bx3Io= Subject key identifier: 91:D8:DE:5E:8A:F7:06:41:FF:14:B4:03:DB:DD:F4:4F:71:2C:A8:C9 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 4A241CA67B88DD4EC8E243B2CD16B7E1981A7512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 0141 Signing time: Sun 11 May 2025 13:01:59 +0000 Manifest this update: Sun 11 May 2025 12:56:59 +0000 Manifest next update: Wed 14 May 2025 18:42:59 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: DScEoeZW4Sg+KzrCaeVU5QvyHjeteqbQhXSdS72Wlmk=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: 1jGIsjnRWKAjYEK7TSFGcWeXONe75N1qbPc54plvXY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 18:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:24:1c:a6:7b:88:dd:4e:c8:e2:43:b2:cd:16:b7:e1:98:1a:75:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: May 11 12:56:59 2025 GMT Not After : May 14 18:42:59 2025 GMT Subject: CN=91D8DE5E8AF70641FF14B403DBDDF44F712CA8C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:01:a4:03:b2:28:e1:3d:4c:87:86:e3:ea: 1c:b3:49:1e:c9:16:57:1e:23:3f:cb:75:be:79:83: b7:36:1f:2f:47:6d:f9:af:00:35:b9:7e:38:50:da: c7:50:48:2f:eb:0a:de:73:b4:a8:0b:fa:52:f3:ee: 9b:bf:4a:2f:5e:09:00:22:2e:29:a6:df:af:62:fd: ca:23:f7:6a:bd:05:c6:aa:ab:33:e5:55:5e:85:01: 8f:db:dc:18:c7:ee:ce:94:c7:b2:4d:ff:8e:d1:bf: 8d:d2:0b:3e:47:6d:90:b9:f3:44:ee:2e:d1:c4:2a: a6:29:f7:01:5e:7a:9f:dc:4d:54:29:f7:21:87:4c: ee:ca:03:b1:af:b1:ca:3a:72:59:8c:8b:05:e5:d1: c7:d2:e3:a7:84:07:9d:37:84:f6:b9:21:b6:31:9b: 32:2a:a6:8d:58:8f:aa:fc:f7:a9:65:1f:4b:41:59: 86:fa:46:10:d1:51:ef:9c:6d:a7:ec:78:66:4d:6b: 92:b3:76:93:e5:15:06:06:50:99:34:55:63:a5:34: 55:cd:73:af:2a:37:d4:56:83:6b:fd:b0:2b:87:e0: a1:42:11:a0:ae:7f:39:6b:6c:f0:71:a8:de:53:df: 65:54:56:55:e5:a3:a1:65:6f:ad:92:c3:f3:76:42: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:DE:5E:8A:F7:06:41:FF:14:B4:03:DB:DD:F4:4F:71:2C:A8:C9 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:02:3a:ea:30:fb:37:c7:95:5b:fe:e7:2c:58:65:79:63:db: a5:9f:22:d0:84:7b:66:9e:0b:16:71:a1:7a:d9:ef:ae:3d:eb: b7:73:37:f0:c2:49:74:72:07:d8:61:d7:cd:12:91:39:47:ac: 60:d6:a9:78:f5:0e:26:52:0d:3d:83:22:c5:bb:16:81:19:ae: 5c:fc:4f:af:89:da:ce:0d:38:6b:22:43:9f:e3:6e:73:63:99: e2:df:fe:e4:e8:08:70:5b:0d:3d:bb:25:56:50:02:21:07:62: c0:e0:1f:22:33:77:dc:0f:bd:34:59:85:9e:3d:ae:36:da:76: 0b:1c:39:ee:29:73:80:59:8d:3e:8e:e1:48:bb:cd:2e:e4:8c: 74:7b:4c:0c:0a:34:02:6e:6b:db:e2:5f:8a:68:f3:a9:6b:ce: 39:e2:fa:34:6c:dc:6f:24:b7:b2:35:63:37:f1:86:73:c7:7b: 2d:9b:73:67:13:5a:b4:ce:8b:17:5f:6e:81:ff:2b:c2:3c:4d: 49:97:ab:73:4c:87:00:34:80:93:37:a9:a6:6e:46:ab:01:22: 81:3b:d4:4b:48:ea:c0:ff:8c:f5:e5:1d:57:c9:40:2f:da:c4: d2:1a:46:72:9b:0f:0f:bc:7b:ee:a3:e7:62:7a:3b:b5:13:e5: 80:eb:d8:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiQcpnuI3U7I4kOyzRa34ZgadRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTA1MTExMjU2NTlaFw0yNTA1MTQxODQyNTlaMDMxMTAvBgNV BAMTKDkxRDhERTVFOEFGNzA2NDFGRjE0QjQwM0RCRERGNDRGNzEyQ0E4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLawGkA7Io4T1Mh4bj6hyzSR7J FlceIz/Ldb55g7c2Hy9HbfmvADW5fjhQ2sdQSC/rCt5ztKgL+lLz7pu/Si9eCQAi Limm369i/coj92q9BcaqqzPlVV6FAY/b3BjH7s6Ux7JN/47Rv43SCz5HbZC580Tu LtHEKqYp9wFeep/cTVQp9yGHTO7KA7Gvsco6clmMiwXl0cfS46eEB503hPa5IbYx mzIqpo1Yj6r896llH0tBWYb6RhDRUe+cbafseGZNa5KzdpPlFQYGUJk0VWOlNFXN c68qN9RWg2v9sCuH4KFCEaCufzlrbPBxqN5T32VUVlXlo6Flb62Sw/N2Qn0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdjeXor3BkH/FLQD2930T3EsqMkwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUCOuow+zfHlVv+5yxYZXlj26WfItCEe2ae CxZxoXrZ764967dzN/DCSXRyB9hh180SkTlHrGDWqXj1DiZSDT2DIsW7FoEZrlz8 T6+J2s4NOGsiQ5/jbnNjmeLf/uToCHBbDT27JVZQAiEHYsDgHyIzd9wPvTRZhZ49 rjbadgscOe4pc4BZjT6O4Ui7zS7kjHR7TAwKNAJua9viX4po86lrzjni+jRs3G8k t7I1YzfxhnPHey2bc2cTWrTOixdfboH/K8I8TUmXq3NMhwA0gJM3qaZuRqsBIoE7 1EtI6sD/jPXlHVfJQC/axNIaRnKbDw+8e+6j52J6O7UT5YDr2NQ= -----END CERTIFICATE-----Generated at Mon May 12 05:39:08 2025 by rpki-client