$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: hORzrmyCxOabODB6Bpan9BpYuHFjMLCFmj/W4ZZtijg= Subject key identifier: 7C:D4:5D:F4:EA:F6:0F:12:B3:FF:7D:3C:1B:BB:BA:E1:0F:DD:36:48 Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 58BF4D6DC63C079EFBC87961B3D212BDBE507993 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 0177 Signing time: Sun 01 Jun 2025 16:30:02 +0000 Manifest this update: Sun 01 Jun 2025 16:25:02 +0000 Manifest next update: Thu 05 Jun 2025 02:22:02 +0000 Files and hashes: 1: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: mMW/2teD8h8Z902g85DkDoWKhIubnjheCeDpOOgNGa4=) 2: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=) 3: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bf:4d:6d:c6:3c:07:9e:fb:c8:79:61:b3:d2:12:bd:be:50:79:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Jun 1 16:25:02 2025 GMT Not After : Jun 5 02:22:02 2025 GMT Subject: CN=7CD45DF4EAF60F12B3FF7D3C1BBBBAE10FDD3648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:fd:94:92:04:9e:fb:88:42:a6:d3:a3:cf: 72:25:8c:ff:fc:e0:7c:10:aa:77:62:aa:be:a9:c6: 96:3c:cb:f8:98:ca:8d:5d:a9:94:42:fc:25:6c:1b: 05:78:6c:ad:80:31:93:ed:a4:ab:e1:7c:4b:1d:84: 69:57:65:33:24:c9:68:8e:fb:27:0d:a2:cb:12:b3: f5:ba:e6:08:43:9d:7b:92:f0:47:fe:31:a3:8b:7b: 7f:f0:94:82:67:4c:91:c7:9f:ae:03:73:0e:e9:cd: bb:58:64:1e:cd:d8:09:b6:10:9d:a5:c6:7a:bd:72: dd:2f:b0:87:b4:bc:02:ec:99:cd:76:0b:43:fc:4c: 67:5f:1e:d5:da:ec:46:f1:47:37:dc:a2:6e:b0:19: f1:9f:f4:c1:c4:af:c8:43:f3:d4:4a:87:1f:3b:91: c8:13:69:eb:8c:a7:95:78:6c:12:7f:78:33:71:98: 7c:df:29:65:e8:4c:97:46:2e:2b:eb:9d:eb:e3:70: b4:81:2c:8c:dc:13:ca:fa:c1:49:c2:7c:f2:7c:b9: c5:2c:47:41:81:5d:e1:f9:f2:99:83:f0:a6:57:0c: 82:c2:cd:29:bc:d4:af:9e:92:59:7e:f2:25:6e:31: ec:14:ca:ab:71:0a:da:11:d2:25:ba:41:83:4a:4e: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D4:5D:F4:EA:F6:0F:12:B3:FF:7D:3C:1B:BB:BA:E1:0F:DD:36:48 X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ea:db:71:12:60:f0:66:fe:a5:a1:f6:c2:40:ff:f3:e0:59: 34:fc:cd:3f:8b:a5:eb:de:88:b3:7e:31:b0:cc:ff:2c:f5:e8: 9c:82:04:ca:ae:6b:f1:13:28:a4:ee:b7:aa:66:d7:da:28:a5: aa:7a:7a:d4:b0:e2:ce:b7:35:08:1d:d2:7c:00:2f:1c:5b:e6: bb:69:7e:1b:0a:a9:ef:7c:e8:53:4c:77:28:cc:14:42:18:e7: 9d:24:38:f2:87:63:62:fb:6f:90:16:2a:46:6f:44:1d:d9:fb: 2f:cf:8c:8f:e1:fb:0f:22:75:db:04:af:0d:76:db:7c:57:e0: 9a:cf:06:58:1a:ca:ad:37:96:40:3b:25:5f:de:87:bd:14:da: d9:dc:5d:4d:b0:bf:a1:33:44:32:49:37:10:f3:7c:fd:56:f8: fc:b4:2e:4b:a9:d5:88:2a:37:c0:d0:f9:ed:6d:8f:9a:89:11: 54:9d:c9:4c:25:18:f6:d8:1e:78:fc:39:80:0c:e3:91:74:c6: 2c:8d:1b:3f:77:e9:c8:8b:72:05:81:32:af:bd:ea:3f:5f:18: 35:7c:60:59:de:cb:31:9b:90:ff:8d:26:d4:1c:cd:63:9a:08: e5:c1:08:87:9e:30:e3:aa:7c:cd:3a:81:58:45:c2:1a:ce:0d: 17:16:ca:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWL9NbcY8B577yHlhs9ISvb5QeZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTA2MDExNjI1MDJaFw0yNTA2MDUwMjIyMDJaMDMxMTAvBgNV BAMTKDdDRDQ1REY0RUFGNjBGMTJCM0ZGN0QzQzFCQkJCQUUxMEZERDM2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFd/2UkgSe+4hCptOjz3IljP/8 4HwQqndiqr6pxpY8y/iYyo1dqZRC/CVsGwV4bK2AMZPtpKvhfEsdhGlXZTMkyWiO +ycNossSs/W65ghDnXuS8Ef+MaOLe3/wlIJnTJHHn64Dcw7pzbtYZB7N2Am2EJ2l xnq9ct0vsIe0vALsmc12C0P8TGdfHtXa7EbxRzfcom6wGfGf9MHEr8hD89RKhx87 kcgTaeuMp5V4bBJ/eDNxmHzfKWXoTJdGLivrnevjcLSBLIzcE8r6wUnCfPJ8ucUs R0GBXeH58pmD8KZXDILCzSm81K+ekll+8iVuMewUyqtxCtoR0iW6QYNKTs4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfNRd9Or2DxKz/308G7u64Q/dNkgwHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIy QTkwN0VFODY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvq23ESYPBm/qWh9sJA//PgWTT8zT+Lpeve iLN+MbDM/yz16JyCBMqua/ETKKTut6pm19oopap6etSw4s63NQgd0nwALxxb5rtp fhsKqe986FNMdyjMFEIY550kOPKHY2L7b5AWKkZvRB3Z+y/PjI/h+w8iddsErw12 23xX4JrPBlgayq03lkA7JV/eh70U2tncXU2wv6EzRDJJNxDzfP1W+Py0Lkup1Ygq N8DQ+e1tj5qJEVSdyUwlGPbYHnj8OYAM45F0xiyNGz936ciLcgWBMq+96j9fGDV8 YFneyzGbkP+NJtQczWOaCOXBCIeeMOOqfM06gVhFwhrODRcWyhY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:45 2025 by rpki-client