$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: 4zkMjmnAKeKS6vd01CU5jIVdP5+hKBSUw++kr3CtwiQ= Subject key identifier: 9B:0A:3E:37:82:8A:E4:72:F1:7E:BA:A6:09:52:A8:49:27:F8:DB:30 Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 707A291E18372EA9BD9FD2B055C665B831997C0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 01A1 Signing time: Fri 05 Sep 2025 00:30:02 +0000 Manifest this update: Fri 05 Sep 2025 00:25:02 +0000 Manifest next update: Mon 08 Sep 2025 07:07:02 +0000 Files and hashes: 1: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=) 2: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: FjaxDWbNnzpK/z7oHFv6581kz5lMs0PoD6EFWnniCzg=) 3: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7a:29:1e:18:37:2e:a9:bd:9f:d2:b0:55:c6:65:b8:31:99:7c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Sep 5 00:25:02 2025 GMT Not After : Sep 8 07:07:02 2025 GMT Subject: CN=9B0A3E37828AE472F17EBAA60952A84927F8DB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2b:d8:18:fd:4d:ba:40:c7:64:f8:0d:fa:94: c2:a2:8c:aa:3c:7d:45:60:85:bf:56:73:a1:d7:96: e5:48:24:04:3e:40:c7:55:1a:2f:a2:5a:4c:75:b1: ad:59:b7:d2:b3:89:ea:6d:5e:43:ff:11:6c:b6:56: 73:b6:87:90:e8:0d:d8:d6:f5:f5:69:bf:78:28:85: 75:f3:d0:80:a4:82:2e:ea:82:13:29:0d:25:c2:52: 63:2a:0d:b3:d1:10:ac:59:50:af:2b:91:95:48:86: 9e:24:cc:4b:e1:15:b3:d6:ce:2b:45:78:bb:76:a2: 4c:f6:8e:bd:7b:16:4f:7d:b7:67:0c:18:73:77:68: 93:fa:d2:a1:c7:13:a8:76:77:3e:17:ea:7d:64:3e: 6f:06:01:f4:31:8e:37:7e:bd:ab:a8:9c:79:24:ac: f1:63:32:9b:16:41:93:df:89:9e:c7:52:1b:47:9d: 31:c9:e0:1c:f0:30:10:38:9c:b5:a3:cf:61:a8:b6: d3:c0:5b:e8:88:e0:71:03:fc:55:57:51:3f:0f:7c: 0f:aa:1e:ad:11:cd:8a:a5:10:b4:1b:de:2e:12:c7: be:50:6a:84:03:9d:8e:f0:26:86:b3:80:1c:75:f0: 68:79:24:23:ba:5d:39:42:6e:67:93:fa:b0:0c:9f: 6f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0A:3E:37:82:8A:E4:72:F1:7E:BA:A6:09:52:A8:49:27:F8:DB:30 X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a4:74:d0:20:77:d6:08:74:e5:77:8d:6f:1e:cb:55:c9:cc: a9:39:44:a0:27:23:99:59:51:bf:d4:34:d4:9c:8f:bf:a7:22: 1b:41:8a:c0:f8:bf:a0:ad:fd:a8:e2:10:ee:2d:eb:d8:b0:f2: 02:5b:24:0e:a2:b7:94:58:bc:84:ba:d3:c5:0a:59:e1:db:0c: 50:f8:8c:49:27:94:c8:6e:94:98:59:fc:10:e6:35:29:28:fb: 75:2d:29:9a:de:6b:5e:d6:1b:44:d9:77:b9:bc:4c:71:5e:ad: d9:c8:4d:e5:2d:5e:b8:d6:10:ac:eb:63:1f:4e:84:46:55:3d: 08:73:cd:c5:2b:1d:37:72:23:e1:be:97:2a:e0:c5:a9:36:fb: 7e:69:23:39:04:65:87:95:45:a5:e0:36:ad:c0:05:ae:fd:32: ea:e6:54:9e:1d:e7:69:ea:d5:07:78:8f:0d:77:55:14:50:e3: df:87:e3:85:40:bf:fb:66:d5:05:b4:9b:ff:6b:74:4d:33:48: b9:95:36:42:b4:55:f7:09:ec:4e:a3:b0:12:bb:14:d4:8c:d8: fc:8d:41:9b:81:ea:3b:14:04:66:8a:48:41:a5:d7:de:34:d2: 8e:08:6b:dc:7a:50:17:fd:d1:b7:f7:ff:10:dc:cd:79:d2:21: 48:3d:47:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHopHhg3Lqm9n9KwVcZluDGZfAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTA5MDUwMDI1MDJaFw0yNTA5MDgwNzA3MDJaMDMxMTAvBgNV BAMTKDlCMEEzRTM3ODI4QUU0NzJGMTdFQkFBNjA5NTJBODQ5MjdGOERCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnK9gY/U26QMdk+A36lMKijKo8 fUVghb9Wc6HXluVIJAQ+QMdVGi+iWkx1sa1Zt9KzieptXkP/EWy2VnO2h5DoDdjW 9fVpv3gohXXz0ICkgi7qghMpDSXCUmMqDbPREKxZUK8rkZVIhp4kzEvhFbPWzitF eLt2okz2jr17Fk99t2cMGHN3aJP60qHHE6h2dz4X6n1kPm8GAfQxjjd+vauonHkk rPFjMpsWQZPfiZ7HUhtHnTHJ4BzwMBA4nLWjz2GottPAW+iI4HED/FVXUT8PfA+q Hq0RzYqlELQb3i4Sx75QaoQDnY7wJoazgBx18Gh5JCO6XTlCbmeT+rAMn2/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmwo+N4KK5HLxfrqmCVKoSSf42zAwHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIy QTkwN0VFODY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmkdNAgd9YIdOV3jW8ey1XJzKk5RKAnI5lZ Ub/UNNScj7+nIhtBisD4v6Ct/ajiEO4t69iw8gJbJA6it5RYvIS608UKWeHbDFD4 jEknlMhulJhZ/BDmNSko+3UtKZrea17WG0TZd7m8THFerdnITeUtXrjWEKzrYx9O hEZVPQhzzcUrHTdyI+G+lyrgxak2+35pIzkEZYeVRaXgNq3ABa79MurmVJ4d52nq 1Qd4jw13VRRQ49+H44VAv/tm1QW0m/9rdE0zSLmVNkK0VfcJ7E6jsBK7FNSM2PyN QZuB6jsUBGaKSEGl19400o4Ia9x6UBf90bf3/xDczXnSIUg9R6U= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:42 2025 by rpki-client