$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: JMHCniwpqcjJVwuICMLmxB+TmUZa6w0kz0q8T8vTj60= Subject key identifier: 81:E3:2C:2E:EA:A2:1D:F2:CE:6E:65:E8:98:E3:58:02:79:4F:6C:E1 Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 038FAF54A2F40B042E3A7AA558C23F947FE96D5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 04BE Signing time: Sat 06 Sep 2025 03:01:09 +0000 Manifest this update: Sat 06 Sep 2025 02:56:09 +0000 Manifest next update: Tue 09 Sep 2025 04:41:09 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: QqrR/IWyTr2r+nuvbMdyqfDx0sdwtIdG9BlyhVEYdfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8f:af:54:a2:f4:0b:04:2e:3a:7a:a5:58:c2:3f:94:7f:e9:6d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Sep 6 02:56:09 2025 GMT Not After : Sep 9 04:41:09 2025 GMT Subject: CN=81E32C2EEAA21DF2CE6E65E898E35802794F6CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:51:c6:ae:eb:31:6c:0e:c2:c8:11:ff:e8: 00:e1:20:75:fe:63:cd:ad:63:a8:6f:88:5e:8e:ce: 9e:97:9a:0d:7f:ea:fe:0e:0c:86:f5:8d:22:01:ec: 9b:73:1b:f9:d2:14:22:71:75:14:7e:9a:23:a9:c4: 1a:1e:fd:ba:9c:14:58:69:3b:56:17:84:f1:97:73: 94:9f:c7:42:49:c4:2f:ac:fa:52:08:09:ba:72:01: de:49:43:bc:14:1a:bb:3f:bc:2e:ba:6a:a5:66:34: ea:91:11:0b:22:d7:1f:1d:f1:37:e2:33:ed:de:23: 89:35:5f:d5:7f:af:b9:2c:b9:17:88:19:e0:2e:9e: 0b:0e:0b:31:64:30:71:e2:51:ca:68:b6:53:16:fe: 08:d0:dc:dd:9d:90:4b:38:2c:09:44:bc:14:68:55: 06:cc:d1:7b:21:fe:8a:2f:b9:1d:47:a0:77:ba:0c: 6e:91:d4:97:d6:73:dc:2b:0a:0c:7f:8d:69:62:4b: 38:21:9d:10:9b:78:4d:5d:8e:19:38:c3:63:d1:89: 0a:77:f3:2e:52:27:b8:35:e3:9e:e8:c4:18:48:2d: c9:a7:bf:30:c3:ca:15:57:2d:fc:6c:2a:cd:21:82: f2:f6:56:81:36:8c:d1:dd:57:ab:cf:c7:46:7e:d4: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E3:2C:2E:EA:A2:1D:F2:CE:6E:65:E8:98:E3:58:02:79:4F:6C:E1 X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:09:5a:17:00:84:6e:df:42:36:4b:13:cc:00:7a:bb:07:a4: 80:ed:59:e1:7d:d5:37:54:5b:d0:51:bb:bd:f6:e9:7d:14:08: c4:ed:ce:55:52:70:b4:c9:c6:3b:e6:4e:11:bd:1f:2c:01:74: 35:a6:19:a5:b3:42:ce:f7:cb:e0:f8:85:68:d7:d0:d8:2a:b0: d0:43:62:36:6b:b1:8c:df:b6:88:bd:ed:17:cf:39:64:7b:23: c0:6b:08:98:c9:6f:0a:9e:7a:9d:78:69:d2:a9:8e:b5:3a:52: 7c:37:7c:21:e7:c8:60:1d:74:96:c9:1f:bb:b0:49:ed:d8:ed: 6e:f1:ff:6d:72:15:33:f0:8b:3d:79:4f:59:2f:6b:25:ca:92: 15:86:9c:82:7e:ab:80:06:08:c8:7d:90:3f:a5:0b:fb:f2:9d: 7f:2c:d7:8b:9d:29:cc:a7:14:dc:5d:ad:39:9c:6b:3e:61:2d: 54:9c:73:12:85:c5:ee:9d:7b:3d:9d:4f:66:a6:a6:d5:1f:38: bf:8a:88:64:f8:31:2b:23:73:9f:d0:7c:e1:40:3f:39:d8:71: 1d:af:a4:8f:88:61:34:b6:09:f9:a0:f8:e6:ef:bb:36:6c:78: 86:d0:2b:ff:01:21:15:29:87:40:8b:f6:76:67:e1:fc:06:82: d4:b0:c5:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4+vVKL0CwQuOnqlWMI/lH/pbVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTA5MDYwMjU2MDlaFw0yNTA5MDkwNDQxMDlaMDMxMTAvBgNV BAMTKDgxRTMyQzJFRUFBMjFERjJDRTZFNjVFODk4RTM1ODAyNzk0RjZDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxlHGrusxbA7CyBH/6ADhIHX+ Y82tY6hviF6Ozp6Xmg1/6v4ODIb1jSIB7JtzG/nSFCJxdRR+miOpxBoe/bqcFFhp O1YXhPGXc5Sfx0JJxC+s+lIICbpyAd5JQ7wUGrs/vC66aqVmNOqREQsi1x8d8Tfi M+3eI4k1X9V/r7ksuReIGeAungsOCzFkMHHiUcpotlMW/gjQ3N2dkEs4LAlEvBRo VQbM0Xsh/oovuR1HoHe6DG6R1JfWc9wrCgx/jWliSzghnRCbeE1djhk4w2PRiQp3 8y5SJ7g1457oxBhILcmnvzDDyhVXLfxsKs0hgvL2VoE2jNHdV6vPx0Z+1GUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgeMsLuqiHfLObmXomONYAnlPbOEwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAJWhcAhG7fQjZLE8wAersHpIDtWeF91TdU W9BRu7326X0UCMTtzlVScLTJxjvmThG9HywBdDWmGaWzQs73y+D4hWjX0NgqsNBD YjZrsYzftoi97RfPOWR7I8BrCJjJbwqeep14adKpjrU6Unw3fCHnyGAddJbJH7uw Se3Y7W7x/21yFTPwiz15T1kvayXKkhWGnIJ+q4AGCMh9kD+lC/vynX8s14udKcyn FNxdrTmcaz5hLVSccxKFxe6dez2dT2amptUfOL+KiGT4MSsjc5/QfOFAPznYcR2v pI+IYTS2Cfmg+ObvuzZseIbQK/8BIRUph0CL9nZn4fwGgtSwxRY= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:44 2025 by rpki-client