$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: GApLpk2nf2R4JwxOwWqdJK2rzKnJ2qwcBJ6d2hXnMwI= Subject key identifier: 72:92:CF:7A:8E:63:6E:61:22:EF:08:7E:18:30:CF:17:1D:FE:42:EB Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 1450C0D078382A1507C9603383BD778B0720A1EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: FB Signing time: Thu 28 Aug 2025 04:11:48 +0000 Manifest this update: Thu 28 Aug 2025 04:06:48 +0000 Manifest next update: Sun 31 Aug 2025 11:13:48 +0000 Files and hashes: 1: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: GQExULWMc52DVdTSa1TIP0Q1+ZEqXKB9xqYSj0A/fV0=) 4: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 11:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:50:c0:d0:78:38:2a:15:07:c9:60:33:83:bd:77:8b:07:20:a1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Aug 28 04:06:48 2025 GMT Not After : Aug 31 11:13:48 2025 GMT Subject: CN=7292CF7A8E636E6122EF087E1830CF171DFE42EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:b6:c1:67:31:13:b0:c7:75:da:bd:88:55: 6d:25:f5:64:7e:1b:e4:77:ad:55:6f:e3:80:44:9c: bd:86:94:7f:7a:21:d2:96:be:dd:b3:eb:d7:83:58: 2e:95:6b:08:c9:59:08:28:ee:cd:9a:1f:21:18:a9: 61:99:5a:99:3f:4b:22:bb:dd:c3:96:c1:19:5a:df: cd:62:0c:c4:5f:88:f4:6a:93:75:23:0a:95:9a:4c: c7:d0:c8:fc:17:10:63:48:fe:02:33:22:c2:cf:a0: b9:3d:b1:d3:6c:db:25:13:90:3e:4e:03:18:2d:0e: 97:f2:55:96:53:5a:8a:9c:8b:62:71:89:04:f9:6c: 1c:a0:70:32:5e:3c:1d:fc:2c:1f:5e:5e:16:fe:6d: af:eb:e0:4a:16:7b:1c:fe:42:39:f1:a7:5a:8d:d2: c1:cb:1b:8a:fe:ed:a4:b4:02:73:7f:4b:7c:dd:a1: 36:c5:02:77:8c:4d:28:21:f7:6f:2b:c2:a7:14:47: 34:8b:6f:d3:85:bb:cf:9d:86:c2:e9:93:13:81:58: 25:e6:5d:f6:e0:30:4e:8a:a4:b0:ae:6b:a5:9a:fa: fa:72:95:58:f5:49:b1:e9:cb:9c:ba:4b:ab:4d:63: c1:3e:75:e4:32:b1:3a:23:e4:9d:81:ef:74:6d:65: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:92:CF:7A:8E:63:6E:61:22:EF:08:7E:18:30:CF:17:1D:FE:42:EB X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ed:bb:05:a6:5a:2b:e3:a6:2e:af:4c:31:41:ef:03:d0:83: dd:db:d4:7c:74:59:83:6b:93:f5:be:2f:a3:dc:6f:26:e7:30: de:67:82:b8:e6:e5:12:34:86:25:e4:9e:0c:f5:c0:45:6f:2f: 68:0e:7d:13:a8:a7:43:f8:ca:af:2d:cf:8c:0e:ba:d9:87:15: c4:f2:f5:49:20:a5:ce:b2:d6:d6:98:69:fe:21:10:93:50:f9: 96:61:b5:ec:63:4f:bd:13:75:f8:cb:5c:24:df:ef:7e:b7:b8: 09:da:2a:c9:eb:4a:63:62:1d:8a:16:00:d4:52:11:f7:c7:f7: 25:f2:c0:d2:99:54:39:2f:b7:a5:f1:f3:2c:15:ff:e3:d7:58: d5:5d:05:a7:25:06:8e:48:95:55:66:c2:fd:bd:38:d7:6c:4f: 6d:79:68:21:11:6f:9e:51:c9:6b:26:b5:c9:b9:86:22:c2:74: 50:b3:cd:e3:22:b9:c1:d7:1b:84:56:87:b8:5a:80:a6:d9:a7: fc:fd:ed:8e:73:4e:c4:cc:2e:06:9a:53:41:5a:4e:4d:18:43: 52:03:8e:be:5a:bd:db:fd:37:d2:b4:14:d1:65:13:f1:05:84: 6b:d6:ae:80:30:82:c8:3d:ca:28:44:96:13:6f:7c:c8:ab:b9: 1a:42:42:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFDA0Hg4KhUHyWAzg713iwcgoeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA4MjgwNDA2NDhaFw0yNTA4MzExMTEzNDhaMDMxMTAvBgNV BAMTKDcyOTJDRjdBOEU2MzZFNjEyMkVGMDg3RTE4MzBDRjE3MURGRTQyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOE7bBZzETsMd12r2IVW0l9WR+ G+R3rVVv44BEnL2GlH96IdKWvt2z69eDWC6VawjJWQgo7s2aHyEYqWGZWpk/SyK7 3cOWwRla381iDMRfiPRqk3UjCpWaTMfQyPwXEGNI/gIzIsLPoLk9sdNs2yUTkD5O AxgtDpfyVZZTWoqci2JxiQT5bBygcDJePB38LB9eXhb+ba/r4EoWexz+Qjnxp1qN 0sHLG4r+7aS0AnN/S3zdoTbFAneMTSgh928rwqcURzSLb9OFu8+dhsLpkxOBWCXm XfbgME6KpLCua6Wa+vpylVj1SbHpy5y6S6tNY8E+deQysToj5J2B73RtZcTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpLPeo5jbmEi7wh+GDDPFx3+QuswHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/tuwWmWivjpi6vTDFB7wPQg93b1Hx0WYNr k/W+L6PcbybnMN5ngrjm5RI0hiXkngz1wEVvL2gOfROop0P4yq8tz4wOutmHFcTy 9Ukgpc6y1taYaf4hEJNQ+ZZhtexjT70TdfjLXCTf7363uAnaKsnrSmNiHYoWANRS EffH9yXywNKZVDkvt6Xx8ywV/+PXWNVdBaclBo5IlVVmwv29ONdsT215aCERb55R yWsmtcm5hiLCdFCzzeMiucHXG4RWh7hagKbZp/z97Y5zTsTMLgaaU0FaTk0YQ1ID jr5avdv9N9K0FNFlE/EFhGvWroAwgsg9yihElhNvfMiruRpCQgQ= -----END CERTIFICATE-----Generated at Fri Aug 29 22:05:25 2025 by rpki-client