$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: 905AfFPVUHqVO1iBECJHN5NY6FWEJXu5ZLkXqAx2Pso= Subject key identifier: 85:5F:CD:8E:2A:EA:02:59:2E:B4:00:E0:E6:39:00:02:F7:E1:2F:31 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 48A4D8A6F17C4463BA4E5488A373A9A32F4D8D93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 049A Signing time: Sat 07 Jun 2025 09:52:09 +0000 Manifest this update: Sat 07 Jun 2025 09:47:09 +0000 Manifest next update: Tue 10 Jun 2025 21:11:09 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: rzjnKVoPcvg8LoYYqlAPNG8z+kcZAMAEA1cgciQRlhI=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: XqWIDcod31e38VgeahW9dRMzM4JKlsw/6vSF5Hd9Xv4=) 3: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: KlZeT3xdPYIlZUjyifRgK8nwsMINFlEN6Qx9+BXGUig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a4:d8:a6:f1:7c:44:63:ba:4e:54:88:a3:73:a9:a3:2f:4d:8d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Jun 7 09:47:09 2025 GMT Not After : Jun 10 21:11:09 2025 GMT Subject: CN=855FCD8E2AEA02592EB400E0E6390002F7E12F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:e7:53:ca:a1:8a:e3:df:fc:65:ae:51:60: 28:45:c3:7a:43:a7:b4:4e:15:6c:e3:d9:20:a6:a5: 2b:d2:f0:d0:24:c1:b6:b9:17:a9:a2:89:6d:25:0c: 95:1b:5a:45:55:d4:b3:6f:39:ca:2c:7c:e3:9d:d5: aa:0d:ea:7e:70:61:c1:67:78:6d:34:87:71:11:84: 0b:c6:dc:50:dd:37:f4:2c:0e:c9:b1:53:dd:eb:27: 6e:26:5c:f5:58:03:40:e8:d8:da:c7:ea:a4:b7:55: f8:63:cf:ae:6a:c4:c1:be:b2:34:55:8e:c3:bb:fa: 63:91:d2:60:09:81:59:0a:18:03:03:33:23:b8:6b: ef:d1:86:21:39:de:5c:83:3d:d2:39:c8:4b:8a:f3: 68:15:ed:fa:1c:ba:24:62:b6:d5:b8:14:8c:5e:7d: e4:df:cc:d1:98:c0:0b:05:0d:17:1b:be:67:b5:e5: 7e:b8:13:bd:a5:22:c3:d8:99:97:0e:90:6b:28:13: bc:62:79:6a:ce:2e:e1:d5:31:b7:34:b2:24:8b:68: 41:02:a9:e1:12:3a:7e:1f:de:c9:99:da:a2:e4:aa: 2e:f1:36:9e:19:fb:35:b5:09:df:5e:3b:59:9b:fd: 09:95:f8:da:07:dc:da:6d:da:98:a9:ed:5c:d1:06: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:CD:8E:2A:EA:02:59:2E:B4:00:E0:E6:39:00:02:F7:E1:2F:31 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d5:1b:25:aa:56:b2:52:0d:2e:cb:e4:90:15:ac:76:be:fd: 6e:84:62:3b:13:42:9e:83:07:2c:98:e0:b0:88:0a:a1:80:76: be:34:05:fe:c0:24:52:b8:3e:f5:4c:c8:41:d7:d2:69:8a:9d: 1f:9a:1b:48:88:cd:45:49:46:8f:7c:0a:38:d2:7e:2f:d9:68: b4:0d:f8:e1:3a:de:53:26:6d:74:08:ce:e9:37:73:ea:73:2d: 82:26:31:c1:ac:35:f5:b9:00:12:4e:68:10:cd:68:0e:50:f8: 31:72:bf:ca:b3:15:6f:6f:e9:7a:4f:09:4c:dc:80:7a:34:8c: 90:9d:35:81:ed:c2:02:68:de:ee:cb:83:14:21:22:d8:aa:fb: 44:16:21:6c:e1:95:93:5d:7e:f3:27:34:d8:99:e6:9c:3d:2a: fc:7b:66:aa:fc:04:44:69:49:f7:fa:d6:e2:38:ef:cc:c7:95: 6f:0d:6d:35:8a:51:c8:59:c3:17:19:4a:b5:5c:8e:63:e4:16: c0:85:d6:53:33:42:61:98:67:8b:48:49:96:59:71:42:80:97: cd:b8:97:39:48:94:36:a9:e4:57:0c:cd:18:e0:72:42:b8:15: 7a:58:19:94:bb:86:8f:fe:97:c7:8d:10:18:8b:8c:6d:ee:1a: 9b:ba:9d:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKTYpvF8RGO6TlSIo3Opoy9NjZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA2MDcwOTQ3MDlaFw0yNTA2MTAyMTExMDlaMDMxMTAvBgNV BAMTKDg1NUZDRDhFMkFFQTAyNTkyRUI0MDBFMEU2MzkwMDAyRjdFMTJGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27+dTyqGK49/8Za5RYChFw3pD p7ROFWzj2SCmpSvS8NAkwba5F6miiW0lDJUbWkVV1LNvOcosfOOd1aoN6n5wYcFn eG00h3ERhAvG3FDdN/QsDsmxU93rJ24mXPVYA0Do2NrH6qS3Vfhjz65qxMG+sjRV jsO7+mOR0mAJgVkKGAMDMyO4a+/RhiE53lyDPdI5yEuK82gV7focuiRittW4FIxe feTfzNGYwAsFDRcbvme15X64E72lIsPYmZcOkGsoE7xieWrOLuHVMbc0siSLaEEC qeESOn4f3smZ2qLkqi7xNp4Z+zW1Cd9eO1mb/QmV+NoH3Npt2pip7VzRBjz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhV/NjirqAlkutADg5jkAAvfhLzEwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErVGyWqVrJSDS7L5JAVrHa+/W6EYjsTQp6D ByyY4LCICqGAdr40Bf7AJFK4PvVMyEHX0mmKnR+aG0iIzUVJRo98CjjSfi/ZaLQN +OE63lMmbXQIzuk3c+pzLYImMcGsNfW5ABJOaBDNaA5Q+DFyv8qzFW9v6XpPCUzc gHo0jJCdNYHtwgJo3u7LgxQhItiq+0QWIWzhlZNdfvMnNNiZ5pw9Kvx7Zqr8BERp Sff61uI478zHlW8NbTWKUchZwxcZSrVcjmPkFsCF1lMzQmGYZ4tISZZZcUKAl824 lzlIlDap5FcMzRjgckK4FXpYGZS7ho/+l8eNEBiLjG3uGpu6nag= -----END CERTIFICATE-----Generated at Mon Jun 9 07:09:17 2025 by rpki-client