$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: CoVNyro/t2hV1gddzIZ+vuirLHNvRM6PL5GqgF9zYDM= Subject key identifier: 5B:47:1A:2E:A5:64:CB:D4:EC:03:91:F8:59:A1:0C:4E:71:56:CD:62 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 0CFE44DDAAB7F48509B9928747CB6CD1AA4E8067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 02E3 Signing time: Sat 06 Sep 2025 05:30:03 +0000 Manifest this update: Sat 06 Sep 2025 05:25:03 +0000 Manifest next update: Tue 09 Sep 2025 11:17:03 +0000 Files and hashes: 1: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 2: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: yw3KLGic1rMQ8LNFYALdaz5QicZqKI2G/4XT/1gjOGs=) 3: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) 4: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fe:44:dd:aa:b7:f4:85:09:b9:92:87:47:cb:6c:d1:aa:4e:80:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Sep 6 05:25:03 2025 GMT Not After : Sep 9 11:17:03 2025 GMT Subject: CN=5B471A2EA564CBD4EC0391F859A10C4E7156CD62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6f:4d:fc:4d:63:da:b7:e5:6c:b7:0e:32:f8: 69:e2:c2:c0:6e:73:50:ab:04:67:09:e9:b5:e2:1a: 87:80:9d:7b:1e:bf:8d:1e:90:ad:36:f2:b0:38:e1: 41:ed:2a:97:99:4b:bf:b7:30:48:46:a1:c7:f1:18: b1:29:68:00:31:c5:d7:1e:37:18:c0:a3:db:f9:9e: 7a:f9:23:22:f5:f3:d4:e8:e2:b3:cc:da:8e:20:dc: 63:c5:3c:a7:ac:2d:c5:12:5e:76:a9:65:b2:fa:5d: 0c:f8:9a:86:0a:37:88:89:b1:ad:f3:b2:26:80:e2: 86:f7:7a:a2:2c:d2:22:f3:56:00:79:22:34:e2:67: 72:f7:8c:f3:a5:c4:c9:0a:20:51:c4:e8:a0:0e:56: 85:ff:13:21:00:e8:a5:ea:e4:35:59:23:39:2f:13: df:7e:8d:51:ea:e8:5b:4f:89:45:f0:5f:4b:56:20: 8b:b1:2a:26:80:62:bf:ce:38:8a:8b:8f:69:f5:c0: 40:3e:18:8e:ab:ad:e4:5c:ae:52:df:b1:5f:a1:cf: 99:31:7f:d8:14:c4:8d:64:33:15:36:fd:2e:fb:d8: 44:60:de:10:e7:62:52:02:66:3c:e1:94:75:78:3d: 1a:e0:04:f0:2c:11:0f:ca:ef:79:ef:46:d0:60:fd: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:47:1A:2E:A5:64:CB:D4:EC:03:91:F8:59:A1:0C:4E:71:56:CD:62 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:40:e8:27:83:a8:fd:92:bf:80:f0:c4:b0:4a:20:b8:e7:ee: da:18:e7:4e:81:ba:92:56:93:a3:01:c9:4d:5f:fb:54:e8:2d: 0a:f6:2a:8a:72:b6:81:d7:3c:c3:1a:0a:60:19:fb:da:38:10: 13:fa:3e:ca:d8:ba:86:86:3b:98:59:a1:65:f3:03:50:2e:91: 83:9c:d2:bf:30:1a:78:e9:f0:e1:b1:cb:9a:e4:b8:6d:5f:9e: 5a:32:5e:80:7f:c8:42:7c:30:fc:24:61:a9:91:5f:f7:d8:f8: af:9a:78:f4:f7:d2:95:84:ca:56:e4:b9:c9:50:43:9e:7e:3d: df:39:d6:5b:a2:03:e1:ba:36:2d:f9:9a:e8:eb:a8:12:3a:18: 95:33:cb:70:1c:ff:7b:6a:79:1a:2b:09:dc:db:ed:fe:cd:eb: f7:a5:4d:0c:db:19:1d:27:ec:08:b7:45:ed:24:e3:a7:67:52: 38:c6:79:55:40:27:0c:06:87:4c:1d:6f:72:46:a9:7f:e3:da: 25:00:be:5b:4c:d1:c5:53:2c:fc:38:9f:bf:2c:2e:dc:c7:bd: 03:cb:82:1b:36:71:08:cf:a0:ca:2b:7c:a5:d6:11:1b:ee:20: bb:45:c1:b6:52:b5:5a:1a:b7:64:b2:0d:bd:75:1b:99:71:d2: 3a:db:fd:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDP5E3aq39IUJuZKHR8ts0apOgGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTA5MDYwNTI1MDNaFw0yNTA5MDkxMTE3MDNaMDMxMTAvBgNV BAMTKDVCNDcxQTJFQTU2NENCRDRFQzAzOTFGODU5QTEwQzRFNzE1NkNENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3b038TWPat+Vstw4y+GniwsBu c1CrBGcJ6bXiGoeAnXsev40ekK028rA44UHtKpeZS7+3MEhGocfxGLEpaAAxxdce NxjAo9v5nnr5IyL189To4rPM2o4g3GPFPKesLcUSXnapZbL6XQz4moYKN4iJsa3z siaA4ob3eqIs0iLzVgB5IjTiZ3L3jPOlxMkKIFHE6KAOVoX/EyEA6KXq5DVZIzkv E99+jVHq6FtPiUXwX0tWIIuxKiaAYr/OOIqLj2n1wEA+GI6rreRcrlLfsV+hz5kx f9gUxI1kMxU2/S772ERg3hDnYlICZjzhlHV4PRrgBPAsEQ/K73nvRtBg/VBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0caLqVky9TsA5H4WaEMTnFWzWIwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9A6CeDqP2Sv4DwxLBKILjn7toY506BupJW k6MByU1f+1ToLQr2KopytoHXPMMaCmAZ+9o4EBP6PsrYuoaGO5hZoWXzA1AukYOc 0r8wGnjp8OGxy5rkuG1fnloyXoB/yEJ8MPwkYamRX/fY+K+aePT30pWEylbkuclQ Q55+Pd851luiA+G6Ni35mujrqBI6GJUzy3Ac/3tqeRorCdzb7f7N6/elTQzbGR0n 7Ai3Re0k46dnUjjGeVVAJwwGh0wdb3JGqX/j2iUAvltM0cVTLPw4n78sLtzHvQPL ghs2cQjPoMorfKXWERvuILtFwbZStVoat2SyDb11G5lx0jrb/Qw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:21 2025 by rpki-client