$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: S0srf3Rz60KWtCS2u0p0cNbvTnPqhQZRVJxyIDu0sq8= Subject key identifier: 5A:9F:57:6A:B1:C2:E9:AC:B4:CD:25:1C:58:68:03:CE:B4:A8:9D:09 Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 08B1464693557132CC741A13123AC5B288349824 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 7B Signing time: Mon 21 Jul 2025 05:31:09 +0000 Manifest this update: Mon 21 Jul 2025 05:26:09 +0000 Manifest next update: Thu 24 Jul 2025 10:40:09 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: 1W/6TDF5CeSKM621eO8NopapJXKycfc7mOPAXEXIYJM=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b1:46:46:93:55:71:32:cc:74:1a:13:12:3a:c5:b2:88:34:98:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Jul 21 05:26:09 2025 GMT Not After : Jul 24 10:40:09 2025 GMT Subject: CN=5A9F576AB1C2E9ACB4CD251C586803CEB4A89D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:6d:ed:56:c3:a3:10:8d:1c:76:a9:12:f2: 46:eb:40:ff:69:b6:f3:91:e6:01:5e:95:0b:67:9a: 2f:3b:e6:5e:3f:d8:f8:bb:85:d9:9a:fe:e1:d1:eb: 91:14:58:60:3d:a4:e1:5b:f1:a8:62:ae:bf:c5:18: 72:2e:9e:6b:7c:b0:01:75:10:83:39:d5:c8:94:36: 1f:4b:94:2a:b8:23:80:ea:1e:4f:78:bc:30:bb:3f: 2c:e6:87:69:7e:09:73:86:ea:0e:47:7a:66:e0:7e: b5:29:27:a8:61:a1:ff:86:88:53:3e:73:64:91:58: 4e:81:c8:f8:00:d3:83:c3:29:f5:d2:3d:9b:e0:85: 2a:22:5e:0f:fa:04:47:3b:46:dc:e2:64:79:7d:79: 65:43:9d:a4:ff:12:48:9f:69:30:6a:91:be:09:3a: c0:e1:71:d8:42:66:00:0b:d8:c0:ca:12:ba:12:bc: 4f:d5:64:7f:8d:be:52:e3:f7:40:ed:e7:f2:3d:3a: b1:f0:86:72:36:cd:a1:a2:36:ee:8a:be:2f:8f:fc: e5:6e:10:38:67:13:9f:89:7a:81:ef:37:f9:3a:19: 8d:d8:a2:d4:24:8d:97:52:ce:d6:3b:92:42:63:97: 9c:5d:13:3f:6a:55:57:9d:23:27:46:2a:81:69:62: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:57:6A:B1:C2:E9:AC:B4:CD:25:1C:58:68:03:CE:B4:A8:9D:09 X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:b8:fa:0a:e0:1b:50:38:b7:93:29:97:b4:82:4a:f6:bc: c1:67:5d:f8:e4:23:2d:0c:64:67:ee:15:d0:8c:6e:cc:66:32: 09:aa:c1:8d:d4:4d:d0:0f:f5:62:ab:65:76:11:42:73:5b:bf: fb:2c:ea:4f:0c:39:a2:c3:1a:87:59:06:06:8c:b2:e8:01:93: fd:c9:76:c4:e5:f3:92:88:40:7f:94:8e:31:6a:a5:70:d9:9a: 5b:10:dc:4f:27:2e:25:e1:4d:74:e1:cd:88:8f:b5:0a:cd:23: 3f:72:f7:1d:ec:cd:1e:cb:88:34:c6:76:96:2f:70:e0:a6:3d: bc:0d:cc:23:23:c7:7c:ff:d0:cf:3e:e7:8d:b0:66:6d:fa:10: 9d:f1:00:7b:a0:c4:59:14:07:14:d8:1b:9b:2a:eb:2d:7e:3f: 7c:86:13:b4:6a:58:19:68:6b:43:8d:b4:d1:e4:88:64:fe:c7: 9a:3d:8d:19:72:0b:33:5a:a5:eb:0e:b4:34:21:cf:12:0c:3b: e2:49:68:ba:b6:09:8b:cf:13:8c:f9:d8:ec:bc:71:f9:7b:51: 89:35:67:b2:d6:dd:21:dd:e1:17:cc:74:80:b5:85:0c:f7:18: 78:1b:06:e0:24:30:66:4a:69:38:13:f0:21:ea:71:71:1c:6e: 27:af:9b:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLFGRpNVcTLMdBoTEjrFsog0mCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTA3MjEwNTI2MDlaFw0yNTA3MjQxMDQwMDlaMDMxMTAvBgNV BAMTKDVBOUY1NzZBQjFDMkU5QUNCNENEMjUxQzU4NjgwM0NFQjRBODlEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFM23tVsOjEI0cdqkS8kbrQP9p tvOR5gFelQtnmi875l4/2Pi7hdma/uHR65EUWGA9pOFb8ahirr/FGHIunmt8sAF1 EIM51ciUNh9LlCq4I4DqHk94vDC7Pyzmh2l+CXOG6g5HembgfrUpJ6hhof+GiFM+ c2SRWE6ByPgA04PDKfXSPZvghSoiXg/6BEc7RtziZHl9eWVDnaT/EkifaTBqkb4J OsDhcdhCZgAL2MDKEroSvE/VZH+NvlLj90Dt5/I9OrHwhnI2zaGiNu6Kvi+P/OVu EDhnE5+JeoHvN/k6GY3YotQkjZdSztY7kkJjl5xdEz9qVVedIydGKoFpYuPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp9XarHC6ay0zSUcWGgDzrSonQkwHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiouPoK4BtQOLeTKZe0gkr2vMFnXfjkIy0M ZGfuFdCMbsxmMgmqwY3UTdAP9WKrZXYRQnNbv/ss6k8MOaLDGodZBgaMsugBk/3J dsTl85KIQH+UjjFqpXDZmlsQ3E8nLiXhTXThzYiPtQrNIz9y9x3szR7LiDTGdpYv cOCmPbwNzCMjx3z/0M8+542wZm36EJ3xAHugxFkUBxTYG5sq6y1+P3yGE7RqWBlo a0ONtNHkiGT+x5o9jRlyCzNapesOtDQhzxIMO+JJaLq2CYvPE4z52Oy8cfl7UYk1 Z7LW3SHd4RfMdIC1hQz3GHgbBuAkMGZKaTgT8CHqcXEcbievm48= -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:20 2025 by rpki-client