$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: p5A5a4VZ/u8Ch7xhucG2MzBT8rEDaPPwqzWtTV4MUJY= Subject key identifier: E2:2E:AF:DB:6D:3C:51:4A:7D:71:23:95:2E:7D:45:DA:0C:BA:11:21 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 3838E6A891D38599731A70ABABA27C0450A8BB04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04EF Signing time: Sun 20 Jul 2025 23:11:36 +0000 Manifest this update: Sun 20 Jul 2025 23:06:36 +0000 Manifest next update: Thu 24 Jul 2025 07:01:36 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 2: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 3: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 4: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 5: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: ChdCHoQWWf1WItc4huiSMsysac6AFBCzvXfIzvryDZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:38:e6:a8:91:d3:85:99:73:1a:70:ab:ab:a2:7c:04:50:a8:bb:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Jul 20 23:06:36 2025 GMT Not After : Jul 24 07:01:36 2025 GMT Subject: CN=E22EAFDB6D3C514A7D7123952E7D45DA0CBA1121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:d4:57:b6:a2:cb:5b:54:7f:bf:5a:75:ca: 4e:2e:41:d2:e7:51:10:d1:49:00:b4:51:73:7a:aa: cf:0e:4a:37:ac:c7:65:cf:a1:48:16:e5:50:1c:7a: a6:11:d1:f0:d3:ce:ed:0e:ac:be:0c:08:18:11:e1: 29:3f:58:50:87:47:6f:84:90:56:8c:39:36:d3:39: 07:e6:60:11:8e:4f:5f:49:14:77:fc:20:d8:5d:cb: ce:37:1e:b1:1e:3d:6c:42:5b:15:31:ff:df:0d:46: f8:8f:70:4c:ae:25:17:75:11:6a:df:49:15:0c:39: 5b:8d:22:d9:57:99:47:6f:e8:e3:91:59:24:ef:a4: 6a:25:cf:0f:90:a2:31:2f:34:a9:90:92:f8:d4:b8: fd:fe:75:62:73:43:9f:ee:c6:38:fc:c5:1c:f8:e1: d7:16:9b:06:6e:c0:c5:8f:7c:41:1e:1e:5a:82:5c: a2:d6:c5:3c:c5:f4:3f:d2:be:7a:94:66:c0:bc:d9: 51:83:c8:a8:c1:65:20:43:ae:47:17:9b:c5:60:f3: 29:cc:35:f2:70:9e:f2:06:1f:18:38:c1:3b:30:b4: 12:28:ef:21:ca:26:32:f4:3c:e0:f7:3d:6c:a2:9e: 93:9a:5d:8a:22:82:03:82:ac:99:e2:6b:ed:1b:a8: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2E:AF:DB:6D:3C:51:4A:7D:71:23:95:2E:7D:45:DA:0C:BA:11:21 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f0:bf:23:ca:e5:c1:92:e3:a7:8c:49:0f:14:32:8d:e4:13: 5e:43:f3:33:12:76:da:20:d0:ec:47:b1:71:73:43:c9:16:db: 7e:98:d6:e1:4a:48:bd:33:72:6b:f1:de:ac:4c:7d:ed:00:bb: 9b:40:14:b8:3a:b4:f7:98:b7:25:0b:8d:12:27:1f:52:e7:6a: 41:1a:5c:98:b7:bf:04:8b:36:88:46:3b:c6:c7:e6:e3:56:e6: 48:9b:b6:b4:00:65:70:e2:eb:18:71:57:6c:a1:55:3b:7a:4f: b9:4a:14:50:6c:d9:c3:ed:aa:d9:c1:39:19:0a:f0:49:0b:65: b0:78:b8:a1:15:ca:76:7b:a6:ba:91:bc:7f:1d:20:48:32:1e: f7:c0:99:db:bb:45:ff:c9:34:34:19:69:b6:c4:1f:6c:24:42: 34:b9:ae:22:15:1a:1e:34:2b:e9:e0:7b:8f:15:6e:a4:c5:11: 79:e1:5c:b5:a7:20:a4:df:f3:31:bf:2b:22:b6:ff:3f:d2:2f: 88:06:00:18:59:9c:13:27:52:d6:dd:d3:b1:d2:46:d0:a5:99: fc:31:3a:0b:35:55:55:5c:20:7d:e4:12:4c:b0:b7:7c:07:c9: ae:6a:72:e0:35:25:d8:0e:8c:24:98:24:7b:02:ac:55:26:16: 8b:97:9d:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODjmqJHThZlzGnCrq6J8BFCouwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA3MjAyMzA2MzZaFw0yNTA3MjQwNzAxMzZaMDMxMTAvBgNV BAMTKEUyMkVBRkRCNkQzQzUxNEE3RDcxMjM5NTJFN0Q0NURBMENCQTExMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/dRXtqLLW1R/v1p1yk4uQdLn URDRSQC0UXN6qs8OSjesx2XPoUgW5VAceqYR0fDTzu0OrL4MCBgR4Sk/WFCHR2+E kFaMOTbTOQfmYBGOT19JFHf8INhdy843HrEePWxCWxUx/98NRviPcEyuJRd1EWrf SRUMOVuNItlXmUdv6OORWSTvpGolzw+QojEvNKmQkvjUuP3+dWJzQ5/uxjj8xRz4 4dcWmwZuwMWPfEEeHlqCXKLWxTzF9D/SvnqUZsC82VGDyKjBZSBDrkcXm8Vg8ynM NfJwnvIGHxg4wTswtBIo7yHKJjL0POD3PWyinpOaXYoiggOCrJnia+0bqKezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4i6v2208UUp9cSOVLn1F2gy6ESEwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3wvyPK5cGS46eMSQ8UMo3kE15D8zMSdtog 0OxHsXFzQ8kW236Y1uFKSL0zcmvx3qxMfe0Au5tAFLg6tPeYtyULjRInH1LnakEa XJi3vwSLNohGO8bH5uNW5kibtrQAZXDi6xhxV2yhVTt6T7lKFFBs2cPtqtnBORkK 8EkLZbB4uKEVynZ7prqRvH8dIEgyHvfAmdu7Rf/JNDQZabbEH2wkQjS5riIVGh40 K+nge48VbqTFEXnhXLWnIKTf8zG/KyK2/z/SL4gGABhZnBMnUtbd07HSRtClmfwx Ogs1VVVcIH3kEkywt3wHya5qcuA1JdgOjCSYJHsCrFUmFouXnV0= -----END CERTIFICATE-----Generated at Tue Jul 22 20:22:03 2025 by rpki-client