$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: E8pLXlN/y/M9HvPttgme7jJ2ICSnCIzc5XbLRl4iaKk= Subject key identifier: 43:D6:DB:52:F1:C0:92:EE:78:88:6C:A0:4D:8F:EB:ED:C5:9B:B3:70 Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 55DD07FB8F1B388E303136EE36254FCB035C60C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: 90 Signing time: Sat 06 Sep 2025 08:41:10 +0000 Manifest this update: Sat 06 Sep 2025 08:36:10 +0000 Manifest next update: Tue 09 Sep 2025 11:42:10 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: 7COXhuFYeYmWgazwQOZyHDVamUdSGzJobVBT7CvC2E8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dd:07:fb:8f:1b:38:8e:30:31:36:ee:36:25:4f:cb:03:5c:60:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Sep 6 08:36:10 2025 GMT Not After : Sep 9 11:42:10 2025 GMT Subject: CN=43D6DB52F1C092EE78886CA04D8FEBEDC59BB370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:4d:fc:d6:0c:cb:14:d9:ee:a1:75:aa:e9: b2:5f:03:db:6d:f7:e3:69:89:e0:11:b2:a1:df:7b: 0d:be:7f:14:5d:2a:7a:10:14:b9:aa:13:37:2e:02: 62:44:ff:24:2b:26:c3:2a:b2:3e:24:03:c6:10:e3: b0:fe:99:84:9b:e0:bc:ce:55:8f:7d:d9:af:d8:1d: b4:c1:fa:30:49:42:86:7e:8f:a5:f8:9b:cd:df:24: 34:58:60:8e:6c:23:10:6b:f1:1d:d4:d9:f9:42:f7: 14:42:8a:de:a6:f0:7e:6c:40:bc:73:fa:4c:71:fb: 1f:e3:e0:c7:e2:f6:d2:44:d4:fd:11:86:04:c5:ee: 5d:5f:47:d6:e3:9c:73:cf:6a:bc:0c:4e:b3:0c:e4: 36:cc:11:fc:db:82:06:7b:f8:2e:19:7a:d8:d9:66: c9:05:b9:b6:7a:e4:74:c7:a1:cc:26:dc:1c:57:aa: fb:28:76:bc:40:e9:c6:a7:6b:79:27:a7:31:68:2c: e7:66:b6:7b:e1:90:10:41:ce:66:e3:ec:3e:1d:7e: 45:e9:1a:5f:86:fb:b3:cb:be:f2:ba:11:b5:c6:7e: e4:65:14:97:53:2e:d8:fc:a7:a9:03:4e:4f:48:2c: 40:62:96:49:b0:df:37:46:09:23:99:53:98:ac:52: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D6:DB:52:F1:C0:92:EE:78:88:6C:A0:4D:8F:EB:ED:C5:9B:B3:70 X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:45:ef:19:23:bd:ad:f1:ef:b0:ce:49:1c:5a:5e:dd:dd:43: 5e:2f:b2:4d:31:d5:5d:e3:d4:e1:d3:dc:30:dd:65:d5:b5:42: 7c:56:89:fb:78:a2:de:21:c2:e5:ac:28:ed:32:4a:b9:79:c2: 0e:16:6d:7a:3a:33:a3:c4:5e:db:78:e8:37:81:27:79:da:c1: b0:8a:6d:f4:0a:85:83:38:95:2a:e9:2d:bc:e4:7b:8c:a6:04: d8:67:77:d1:f7:4c:36:2f:7f:ed:2e:5c:cc:6c:bd:61:6c:50: 27:60:c4:72:5b:4d:b3:3e:97:d6:e5:6b:e0:7b:0e:c9:da:a6: 98:8e:59:4d:06:b3:17:17:aa:4a:3f:da:58:f6:d7:db:51:0d: e6:39:59:67:7b:27:cb:ea:4a:d5:54:70:f9:b6:50:e5:72:94: 45:4e:9c:0b:dd:a6:eb:db:e6:a7:32:c0:da:d4:b6:95:7e:3d: 48:a4:c3:9e:ad:bb:e9:59:00:ae:30:ba:5c:c5:c5:ef:cb:9a: f1:8d:45:c5:d8:76:b1:a8:07:17:cd:e0:86:da:6a:43:ec:65: 02:37:7e:e9:71:65:2a:7b:27:88:23:76:64:b5:ef:8c:ff:f1: 41:f1:f1:46:c8:84:36:a8:a0:1a:24:ec:e1:f2:80:09:e0:38: 6a:92:e5:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVd0H+48bOI4wMTbuNiVPywNcYMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTA5MDYwODM2MTBaFw0yNTA5MDkxMTQyMTBaMDMxMTAvBgNV BAMTKDQzRDZEQjUyRjFDMDkyRUU3ODg4NkNBMDREOEZFQkVEQzU5QkIzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHU381gzLFNnuoXWq6bJfA9tt 9+NpieARsqHfew2+fxRdKnoQFLmqEzcuAmJE/yQrJsMqsj4kA8YQ47D+mYSb4LzO VY992a/YHbTB+jBJQoZ+j6X4m83fJDRYYI5sIxBr8R3U2flC9xRCit6m8H5sQLxz +kxx+x/j4Mfi9tJE1P0RhgTF7l1fR9bjnHPParwMTrMM5DbMEfzbggZ7+C4ZetjZ ZskFubZ65HTHocwm3BxXqvsodrxA6cana3knpzFoLOdmtnvhkBBBzmbj7D4dfkXp Gl+G+7PLvvK6EbXGfuRlFJdTLtj8p6kDTk9ILEBilkmw3zdGCSOZU5isUiulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9bbUvHAku54iGygTY/r7cWbs3AwHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxF7xkjva3x77DOSRxaXt3dQ14vsk0x1V3j 1OHT3DDdZdW1QnxWift4ot4hwuWsKO0ySrl5wg4WbXo6M6PEXtt46DeBJ3nawbCK bfQKhYM4lSrpLbzke4ymBNhnd9H3TDYvf+0uXMxsvWFsUCdgxHJbTbM+l9bla+B7 DsnappiOWU0GsxcXqko/2lj219tRDeY5WWd7J8vqStVUcPm2UOVylEVOnAvdpuvb 5qcywNrUtpV+PUikw56tu+lZAK4wulzFxe/LmvGNRcXYdrGoBxfN4IbaakPsZQI3 fulxZSp7J4gjdmS174z/8UHx8UbIhDaooBok7OHygAngOGqS5do= -----END CERTIFICATE-----Generated at Mon Sep 8 05:40:39 2025 by rpki-client