$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: FxRhsu6oTQtnDCXTy4ldPixrjne0IDdsVM9vHdOEPG0= Subject key identifier: FD:49:41:75:C3:93:F2:18:C5:E2:4A:1F:BB:64:D9:2E:EC:47:63:15 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 21BB9CC3077B345CE4CA5BADED6824E22FFFDA64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 02B8 Signing time: Fri 06 Jun 2025 03:30:03 +0000 Manifest this update: Fri 06 Jun 2025 03:25:03 +0000 Manifest next update: Mon 09 Jun 2025 11:28:03 +0000 Files and hashes: 1: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: F9M4JE/BbL7KPtInfZ2De6C86BPHzRjVLxJovHmyJzk=) 2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: /rNqnQhLNaqVLN9Hq//q/+AhHgUOzogNFCC15aZgYGU=) 3: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: 3J6hvxgEVqyD6OymkoX4wg6aPVnMQfStqRhmiYMuRiY=) 4: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: +uO/m5yBZI/NJgkxFWO7SQy44KhWOqDtmCCJCHOh5KE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bb:9c:c3:07:7b:34:5c:e4:ca:5b:ad:ed:68:24:e2:2f:ff:da:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Jun 6 03:25:03 2025 GMT Not After : Jun 9 11:28:03 2025 GMT Subject: CN=FD494175C393F218C5E24A1FBB64D92EEC476315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:35:30:a5:33:00:f8:63:09:a0:5a:5d:df:76: 94:71:4a:ff:c5:53:2f:bd:69:5e:af:51:f8:2f:7f: 3d:0f:f8:a3:8b:e0:d7:e8:33:b5:13:c1:85:73:42: ca:24:42:83:53:d5:b3:78:b7:38:ae:2b:8e:82:59: b1:57:51:e7:43:66:44:b2:bf:f8:19:53:88:c6:de: 7c:67:94:54:48:eb:43:5d:f5:5c:57:1a:02:7e:80: db:7f:ee:d1:8e:d0:f9:c3:fb:21:a3:0c:bb:54:19: 2f:51:f9:75:71:8d:69:11:7f:aa:2e:19:5a:37:1d: ae:4a:9b:72:f6:d0:fa:2a:ff:a5:e4:ec:e5:13:09: cf:2b:49:9c:de:d6:4e:62:fe:1e:6c:19:7c:9e:ed: 27:ba:e6:96:52:ac:f6:da:64:9e:05:6f:26:83:6d: de:07:e3:6e:de:5f:6f:4e:bb:75:e1:4e:e5:2f:7f: fe:24:fe:d9:49:99:e5:ee:b3:7c:1f:04:78:c0:dd: 41:7d:75:88:fb:f5:a6:c3:4b:19:66:20:67:39:99: d0:c9:00:36:14:e4:c1:65:bf:e7:ee:cb:d2:c4:85: 39:b8:11:0d:b7:00:c8:a7:47:bc:8e:e3:5a:36:52: f7:41:b8:fd:0a:c9:ec:83:32:2f:3e:65:10:ff:eb: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:49:41:75:C3:93:F2:18:C5:E2:4A:1F:BB:64:D9:2E:EC:47:63:15 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:07:6a:35:63:93:ba:83:c3:75:1d:d9:27:fc:f0:8f:b1:43: 9b:ec:07:75:b6:f1:5c:8d:2c:fc:d2:d4:cf:42:1e:58:98:6f: 5b:be:ed:68:04:15:c5:fd:f5:46:8a:8e:41:9d:15:68:2a:4e: c6:ee:45:e3:4f:51:dd:13:48:1a:77:40:a6:63:22:77:c1:2d: 44:88:73:12:d0:83:82:b0:36:57:88:03:bb:b3:0f:0d:75:1e: 03:4a:e1:ff:6a:84:55:f0:f0:05:1a:72:03:1c:b7:cb:51:bd: 66:d7:a3:7e:f9:1b:bd:cc:13:84:fc:12:e8:42:7c:92:af:d8: b4:50:52:49:b6:3e:72:74:7c:49:ef:75:f4:fc:5f:2c:e7:5c: 45:d8:41:25:45:3a:f7:72:9b:e9:ab:73:91:3f:d7:fc:c6:81: 29:1c:63:cd:f6:84:67:e6:d4:4f:74:e9:90:0d:2c:4b:0b:56: fe:b0:05:39:92:d7:98:8c:70:f5:94:39:3f:12:ce:e5:5b:54: f3:56:cf:84:f3:40:87:e7:a7:ee:11:ba:96:7f:98:e8:2a:49: 9a:29:50:00:71:07:79:6a:21:69:80:5a:c4:24:d5:85:34:9c: 01:0b:02:1c:9d:cb:50:65:4b:1e:ae:23:40:47:3a:b4:bf:e8: ce:f4:e0:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbucwwd7NFzkylut7Wgk4i//2mQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTA2MDYwMzI1MDNaFw0yNTA2MDkxMTI4MDNaMDMxMTAvBgNV BAMTKEZENDk0MTc1QzM5M0YyMThDNUUyNEExRkJCNjREOTJFRUM0NzYzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNTClMwD4YwmgWl3fdpRxSv/F Uy+9aV6vUfgvfz0P+KOL4NfoM7UTwYVzQsokQoNT1bN4tziuK46CWbFXUedDZkSy v/gZU4jG3nxnlFRI60Nd9VxXGgJ+gNt/7tGO0PnD+yGjDLtUGS9R+XVxjWkRf6ou GVo3Ha5Km3L20Poq/6Xk7OUTCc8rSZze1k5i/h5sGXye7Se65pZSrPbaZJ4FbyaD bd4H427eX29Ou3XhTuUvf/4k/tlJmeXus3wfBHjA3UF9dYj79abDSxlmIGc5mdDJ ADYU5MFlv+fuy9LEhTm4EQ23AMinR7yO41o2UvdBuP0KyeyDMi8+ZRD/63DvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/UlBdcOT8hjF4kofu2TZLuxHYxUwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkHajVjk7qDw3Ud2Sf88I+xQ5vsB3W28VyN LPzS1M9CHliYb1u+7WgEFcX99UaKjkGdFWgqTsbuReNPUd0TSBp3QKZjInfBLUSI cxLQg4KwNleIA7uzDw11HgNK4f9qhFXw8AUacgMct8tRvWbXo375G73ME4T8EuhC fJKv2LRQUkm2PnJ0fEnvdfT8XyznXEXYQSVFOvdym+mrc5E/1/zGgSkcY832hGfm 1E906ZANLEsLVv6wBTmS15iMcPWUOT8SzuVbVPNWz4TzQIfnp+4RupZ/mOgqSZop UABxB3lqIWmAWsQk1YU0nAELAhydy1BlSx6uI0BHOrS/6M704Jo= -----END CERTIFICATE-----Generated at Sun Jun 8 01:33:41 2025 by rpki-client