$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: sH5SsbwZ6scbn1f4UWI5y8kTfV0uwbgQuoGdGhfR7SI= Subject key identifier: 66:05:DF:20:30:B4:44:C7:8A:52:9F:AD:37:5F:C1:AD:EC:F9:21:0D Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 25281AE24F3A7DA0CACEEEE4F3F03A57509606B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: D5 Signing time: Fri 06 Jun 2025 12:11:49 +0000 Manifest this update: Fri 06 Jun 2025 12:06:49 +0000 Manifest next update: Mon 09 Jun 2025 14:56:49 +0000 Files and hashes: 1: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) 2: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: SBpYnnX3L7KxPh72SEghU4+aMKulPT8G7yQ40jre6w8=) 3: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 4: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:1a:e2:4f:3a:7d:a0:ca:ce:ee:e4:f3:f0:3a:57:50:96:06:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Jun 6 12:06:49 2025 GMT Not After : Jun 9 14:56:49 2025 GMT Subject: CN=6605DF2030B444C78A529FAD375FC1ADECF9210D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:b3:f6:ac:71:91:06:bd:fb:51:8c:c9:77: 75:1c:92:b7:1c:23:5f:ce:2b:4f:8d:12:20:d0:3c: b4:92:ff:e4:9a:9e:14:07:c0:42:2c:70:bc:ed:1b: 14:a6:0a:d8:74:a8:4a:52:0b:bf:99:c9:75:01:30: 37:44:77:f1:58:92:d2:d2:6f:4d:e7:a6:28:ef:fb: f5:8a:e4:34:57:7c:d1:7d:f3:5f:88:b6:a2:8d:cc: 51:01:bf:f0:36:6d:88:84:03:6f:71:25:8c:2e:c3: ed:32:af:f8:85:06:3d:b9:93:01:4e:52:ba:05:7b: 35:68:1c:d0:b6:ba:0f:66:40:81:d3:19:2f:6e:e0: 13:35:cb:f8:c0:32:dc:d3:7e:85:d1:5f:14:b6:1a: 4a:a8:35:16:e1:e7:a1:3a:ba:90:be:99:c9:3e:7b: b9:59:ae:72:9d:1a:74:7f:f3:3c:f4:eb:0c:d1:27: ba:41:71:3c:42:71:f6:d7:07:ca:55:c8:c2:1f:40: b9:83:ec:66:cb:c8:ee:9a:fc:08:7a:c0:3c:3c:15: 8d:e9:9c:5a:ec:ff:8e:01:7e:42:c1:e7:d1:24:86: 63:d3:6f:47:39:5d:04:b3:1c:c6:2d:00:9b:9d:09: b3:31:6f:b8:33:8a:8c:07:ac:87:30:49:e1:0a:21: 04:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:05:DF:20:30:B4:44:C7:8A:52:9F:AD:37:5F:C1:AD:EC:F9:21:0D X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:43:e0:62:7b:87:49:3c:91:8e:bd:68:ff:d9:69:11:c8: 4f:5e:17:b2:d6:22:14:d4:6c:aa:ac:52:af:86:cd:f1:05:b7: 7d:5b:99:cc:cb:96:a4:7d:7d:dc:60:70:ff:e2:cb:b7:27:b3: 5c:54:3d:3c:f1:cc:65:c9:af:17:73:37:04:5e:c9:72:3c:11: dd:f1:1f:e8:a2:57:f0:dc:56:cf:cb:83:2f:a2:8e:15:86:c9: 3c:d5:5f:51:43:d4:4a:11:56:d7:87:06:16:fa:15:05:5f:86: 61:b9:af:fa:1c:df:1e:66:94:d2:2a:9b:84:08:05:30:69:57: fc:63:b8:fc:bb:0a:2d:e7:4c:1e:2c:83:63:ce:6a:8b:fe:fd: 27:51:ee:42:2f:3c:00:a0:49:76:d8:42:62:f1:48:45:bf:28: ae:4b:d0:6b:b9:74:8a:f7:65:2b:47:88:17:36:a6:1a:cf:a7: 23:02:27:18:8c:c1:bc:f5:d2:11:91:17:d6:69:03:a1:89:02: 82:7e:c0:ce:e6:1d:a2:aa:92:7d:9d:36:91:50:04:ab:ad:a0: c6:d8:cd:e6:ec:44:f3:6a:06:ab:ea:28:7a:7b:88:bd:7f:80: e3:8f:37:7e:1d:4a:cb:21:bf:02:0a:93:3c:e0:af:58:c5:f4: 8d:d9:8e:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSga4k86faDKzu7k8/A6V1CWBrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA2MDYxMjA2NDlaFw0yNTA2MDkxNDU2NDlaMDMxMTAvBgNV BAMTKDY2MDVERjIwMzBCNDQ0Qzc4QTUyOUZBRDM3NUZDMUFERUNGOTIxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwbP2rHGRBr37UYzJd3Uckrcc I1/OK0+NEiDQPLSS/+SanhQHwEIscLztGxSmCth0qEpSC7+ZyXUBMDdEd/FYktLS b03npijv+/WK5DRXfNF981+ItqKNzFEBv/A2bYiEA29xJYwuw+0yr/iFBj25kwFO UroFezVoHNC2ug9mQIHTGS9u4BM1y/jAMtzTfoXRXxS2GkqoNRbh56E6upC+mck+ e7lZrnKdGnR/8zz06wzRJ7pBcTxCcfbXB8pVyMIfQLmD7GbLyO6a/Ah6wDw8FY3p nFrs/44BfkLB59EkhmPTb0c5XQSzHMYtAJudCbMxb7gziowHrIcwSeEKIQSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgXfIDC0RMeKUp+tN1/Brez5IQ0wHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+DQ+Bie4dJPJGOvWj/2WkRyE9eF7LWIhTU bKqsUq+GzfEFt31bmczLlqR9fdxgcP/iy7cns1xUPTzxzGXJrxdzNwReyXI8Ed3x H+iiV/DcVs/Lgy+ijhWGyTzVX1FD1EoRVteHBhb6FQVfhmG5r/oc3x5mlNIqm4QI BTBpV/xjuPy7Ci3nTB4sg2POaov+/SdR7kIvPACgSXbYQmLxSEW/KK5L0Gu5dIr3 ZStHiBc2phrPpyMCJxiMwbz10hGRF9ZpA6GJAoJ+wM7mHaKqkn2dNpFQBKutoMbY zebsRPNqBqvqKHp7iL1/gOOPN34dSsshvwIKkzzgr1jF9I3ZjiM= -----END CERTIFICATE-----Generated at Sat Jun 7 04:23:26 2025 by rpki-client