$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: uzr/Rv4yoZakXjZB/SiYgdIcLEt8WlM6/jfQhlgk8Ek= Subject key identifier: 60:69:9A:1E:64:80:77:1C:17:30:07:33:2A:29:D6:67:AB:63:50:25 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 7B633E33E647D47EAE4DBA2BC349AB1646652653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 0158 Signing time: Wed 02 Jul 2025 13:01:59 +0000 Manifest this update: Wed 02 Jul 2025 12:56:59 +0000 Manifest next update: Sat 05 Jul 2025 19:36:59 +0000 Files and hashes: 1: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: 1jGIsjnRWKAjYEK7TSFGcWeXONe75N1qbPc54plvXY4=) 2: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: ASf+ce2GOgHBRVGHnzK31UI5Ddx+N8/kYFqCpgizzzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:63:3e:33:e6:47:d4:7e:ae:4d:ba:2b:c3:49:ab:16:46:65:26:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Jul 2 12:56:59 2025 GMT Not After : Jul 5 19:36:59 2025 GMT Subject: CN=60699A1E6480771C173007332A29D667AB635025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:8d:b1:e0:48:46:e9:85:2e:7d:a4:19:67: b7:67:c7:d2:e9:7c:ac:b2:b9:42:10:9d:46:e0:7d: 6d:f1:54:44:89:02:65:fb:44:22:5e:35:7a:f5:e0: 78:26:ae:f8:4e:67:43:5e:f2:9b:7d:7b:ac:d0:7c: 81:53:cb:57:9d:45:6a:44:63:fa:a8:70:73:9b:b6: f1:2f:2e:80:8a:e1:53:7d:d9:ad:cb:e7:f9:27:c6: 2f:60:d6:ab:5a:4a:d5:0d:1c:e4:57:9f:c3:5c:9d: 7c:f3:d1:c1:d0:9c:ca:7d:46:67:be:90:b8:4c:26: 82:ed:17:f2:1c:42:e3:97:38:34:6f:a7:66:92:e2: 62:af:fa:ee:04:32:3c:17:8c:86:87:e0:b3:28:eb: b3:32:df:4d:1a:76:fc:4b:3a:cf:a2:7e:57:17:48: a8:b3:e0:98:40:f6:6e:9b:7f:90:91:88:a6:41:cc: 8f:84:61:ab:1c:17:76:92:da:e9:a4:47:be:ba:5f: 20:18:59:60:01:65:40:08:ec:96:14:46:9b:f6:03: b8:89:08:dc:ef:ad:79:49:09:47:3b:16:97:0f:bd: 3e:2f:72:e1:85:11:28:ff:25:f6:9b:9a:e9:1d:0d: 2d:e4:a5:80:be:8c:24:97:ea:8e:e8:5b:e1:ce:c0: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:69:9A:1E:64:80:77:1C:17:30:07:33:2A:29:D6:67:AB:63:50:25 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c3:af:4c:d1:af:7a:4a:69:51:60:c4:bb:92:46:cd:8f:88: de:b4:e2:f6:6c:67:b3:80:69:07:e9:03:65:be:2a:5d:b0:33: ff:5d:e8:7a:23:7a:4c:db:84:3d:a0:78:a9:6c:cb:7d:64:f8: 51:5a:1f:f2:77:d3:e8:ae:a7:84:d5:ed:bb:65:be:5b:80:85: d3:b4:a2:70:55:b3:f1:76:98:cf:63:21:2c:e7:84:4d:a9:ea: de:36:b5:1e:3a:71:db:93:c4:4e:8c:92:94:98:45:2f:d3:92: 7f:f4:54:5f:ac:96:19:83:1a:a1:d3:f2:de:b7:54:98:30:69: bb:15:16:f2:b0:58:9f:fb:5e:25:bd:e8:0b:53:4a:2b:6d:5b: be:d3:a0:6c:e0:d7:f3:8b:08:55:f8:d5:36:9d:f1:2b:13:38: cf:07:bf:f1:a9:14:1c:96:9d:56:a4:f5:f8:6c:7c:19:1e:5a: f4:64:11:00:32:bb:c9:27:64:99:c3:44:bc:c2:65:6b:9e:ac: c8:06:a6:dc:1f:ae:65:95:e4:3a:ff:7b:f0:31:25:6e:f7:91: 31:b0:40:30:0e:4d:ab:37:b3:c8:6d:d9:79:d8:29:7c:ec:c2: fc:44:34:38:20:19:1f:d2:93:c5:dc:b4:55:8f:ae:a1:bd:89: fc:6e:8a:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2M+M+ZH1H6uTborw0mrFkZlJlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTA3MDIxMjU2NTlaFw0yNTA3MDUxOTM2NTlaMDMxMTAvBgNV BAMTKDYwNjk5QTFFNjQ4MDc3MUMxNzMwMDczMzJBMjlENjY3QUI2MzUwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOI2x4EhG6YUufaQZZ7dnx9Lp fKyyuUIQnUbgfW3xVESJAmX7RCJeNXr14HgmrvhOZ0Ne8pt9e6zQfIFTy1edRWpE Y/qocHObtvEvLoCK4VN92a3L5/knxi9g1qtaStUNHORXn8NcnXzz0cHQnMp9Rme+ kLhMJoLtF/IcQuOXODRvp2aS4mKv+u4EMjwXjIaH4LMo67My300advxLOs+iflcX SKiz4JhA9m6bf5CRiKZBzI+EYascF3aS2umkR766XyAYWWABZUAI7JYURpv2A7iJ CNzvrXlJCUc7FpcPvT4vcuGFESj/JfabmukdDS3kpYC+jCSX6o7oW+HOwNEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGmaHmSAdxwXMAczKinWZ6tjUCUwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7Dr0zRr3pKaVFgxLuSRs2PiN604vZsZ7OA aQfpA2W+Kl2wM/9d6HojekzbhD2geKlsy31k+FFaH/J30+iup4TV7btlvluAhdO0 onBVs/F2mM9jISznhE2p6t42tR46cduTxE6MkpSYRS/Tkn/0VF+slhmDGqHT8t63 VJgwabsVFvKwWJ/7XiW96AtTSittW77ToGzg1/OLCFX41Tad8SsTOM8Hv/GpFByW nVak9fhsfBkeWvRkEQAyu8knZJnDRLzCZWuerMgGptwfrmWV5Dr/e/AxJW73kTGw QDAOTas3s8ht2XnYKXzswvxENDggGR/Sk8XctFWPrqG9ifxuij0= -----END CERTIFICATE-----Generated at Wed Jul 2 14:53:01 2025 by rpki-client