$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: iHhTPjG6FiuOAJxj0EuwzmVUM61zf0waN9itRF5S0GI= Subject key identifier: A8:79:5D:B7:3E:1A:B2:43:85:88:5E:F0:8A:44:87:65:F8:43:5F:72 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 1E0FFC18852081D8AB02A8D333D3C461D6CEEC0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04E2 Signing time: Sat 15 Nov 2025 23:02:15 +0000 Manifest this update: Sat 15 Nov 2025 22:57:15 +0000 Manifest next update: Wed 19 Nov 2025 05:39:15 +0000 Files and hashes: 1: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) 2: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) 3: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: YeVbCG30TLGiSnS3VR9bPXu+aa0Mq0fWLl42VDA3hz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 16:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0f:fc:18:85:20:81:d8:ab:02:a8:d3:33:d3:c4:61:d6:ce:ec:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Nov 15 22:57:15 2025 GMT Not After : Nov 19 05:39:15 2025 GMT Subject: CN=A8795DB73E1AB24385885EF08A448765F8435F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:95:67:0b:41:f6:ed:35:bb:10:13:3d:be: f2:70:ce:ba:24:0f:61:8a:14:54:8e:51:11:a0:67: ed:b7:e0:21:e5:be:91:2e:0d:2b:fd:2d:ad:9f:5f: 85:45:c6:c5:7b:61:b0:4d:c0:35:2e:84:54:0d:fb: b6:b1:48:c2:d7:95:47:67:7a:27:9c:fc:ab:b8:aa: f9:a5:39:c4:1a:c5:4d:08:8d:ce:ae:24:ec:99:44: 10:15:6d:9c:f0:46:6c:a6:23:ff:10:61:00:7c:c8: 60:9e:e5:17:ee:ef:d9:47:98:b8:2c:bd:36:63:30: 64:ea:3f:5c:88:8b:13:7f:c7:95:96:05:af:81:79: 91:a5:10:ce:2a:1c:52:0e:39:dd:1f:81:31:04:78: 9f:ed:5f:d1:20:d5:c4:b6:1e:e9:83:37:c6:24:51: f2:e7:3e:71:c7:81:a7:8a:25:8b:f9:a5:72:fa:c5: 09:8b:0a:da:d2:fe:f3:d6:d1:b5:eb:b5:14:63:7c: cb:1a:62:5d:69:93:4b:68:d5:68:87:8d:f3:8e:5a: 8e:20:2a:1f:5a:73:f2:ad:dc:2e:4c:8e:6f:22:48: c3:69:64:fd:d0:1f:e3:cf:2d:01:66:68:e5:3e:a4: 77:b9:e5:52:aa:5d:a5:2e:f5:ca:37:91:41:97:81: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:79:5D:B7:3E:1A:B2:43:85:88:5E:F0:8A:44:87:65:F8:43:5F:72 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ff:04:88:7b:2c:10:24:84:b8:b4:ff:c4:e6:ad:3c:89:2b: 3f:ee:1e:e5:c9:b4:52:2d:1b:c3:ce:12:04:4d:98:79:ca:b1: 72:24:2b:82:88:7f:11:d3:04:6b:4c:3b:93:30:37:26:99:a2: 90:13:99:b5:f4:9e:d7:f9:ae:0f:5b:91:68:37:f8:d3:eb:0e: 3f:f9:bd:40:ac:3d:e0:68:08:b0:00:30:56:de:d5:ef:a1:eb: d1:46:c8:ae:c8:d1:d3:dd:6f:2f:11:c6:cd:0f:44:41:55:94: 36:59:35:44:d0:7a:c9:a7:49:d3:41:df:c8:32:ca:f8:04:cc: a9:5a:a6:cb:eb:7e:ad:43:a4:f4:90:85:8b:39:d9:21:0f:e2: ca:de:c2:da:fc:4c:b5:95:ea:9b:0c:73:70:de:b4:78:e8:5a: 14:34:a9:6b:29:9d:c9:e3:49:fd:50:0a:be:18:f7:55:1f:c3: be:b6:bc:97:da:7f:d0:9f:65:18:5b:5f:47:00:d7:1c:f9:06: a6:c8:ba:20:cb:28:b2:f8:36:26:fb:9c:48:e8:18:66:cc:c2: cd:d1:07:e0:fd:bb:21:dc:66:e6:99:48:52:5f:6e:e0:17:f4: 9a:ff:2a:16:34:b8:49:38:e1:d5:f7:b7:d6:e7:83:bd:13:26: 6e:cc:60:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHg/8GIUggdirAqjTM9PEYdbO7AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTExMTUyMjU3MTVaFw0yNTExMTkwNTM5MTVaMDMxMTAvBgNV BAMTKEE4Nzk1REI3M0UxQUIyNDM4NTg4NUVGMDhBNDQ4NzY1Rjg0MzVGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmpVnC0H27TW7EBM9vvJwzrok D2GKFFSOURGgZ+234CHlvpEuDSv9La2fX4VFxsV7YbBNwDUuhFQN+7axSMLXlUdn eiec/Ku4qvmlOcQaxU0Ijc6uJOyZRBAVbZzwRmymI/8QYQB8yGCe5Rfu79lHmLgs vTZjMGTqP1yIixN/x5WWBa+BeZGlEM4qHFIOOd0fgTEEeJ/tX9Eg1cS2HumDN8Yk UfLnPnHHgaeKJYv5pXL6xQmLCtrS/vPW0bXrtRRjfMsaYl1pk0to1WiHjfOOWo4g Kh9ac/Kt3C5Mjm8iSMNpZP3QH+PPLQFmaOU+pHe55VKqXaUu9co3kUGXgVIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqHldtz4askOFiF7wikSHZfhDX3IwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACv/BIh7LBAkhLi0/8TmrTyJKz/uHuXJtFIt G8POEgRNmHnKsXIkK4KIfxHTBGtMO5MwNyaZopATmbX0ntf5rg9bkWg3+NPrDj/5 vUCsPeBoCLAAMFbe1e+h69FGyK7I0dPdby8Rxs0PREFVlDZZNUTQesmnSdNB38gy yvgEzKlapsvrfq1DpPSQhYs52SEP4srewtr8TLWV6psMc3DetHjoWhQ0qWspncnj Sf1QCr4Y91Ufw762vJfaf9CfZRhbX0cA1xz5BqbIuiDLKLL4Nib7nEjoGGbMws3R B+D9uyHcZuaZSFJfbuAX9Jr/KhY0uEk44dX3t9bng70TJm7MYDo= -----END CERTIFICATE-----Generated at Sun Nov 16 05:00:31 2025 by rpki-client