$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: sDnOubX9885tJ0cQmVJ9785sws7loKGRnrRcFPJB4QE= Subject key identifier: E5:7F:DE:2D:39:A1:B3:7E:3B:26:05:03:F9:BB:99:98:67:3C:5D:E7 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 0D592B4F07CA183FD04DA2D70A6CF3641AEF3636 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04DA Signing time: Mon 02 Jun 2025 02:03:10 +0000 Manifest this update: Mon 02 Jun 2025 01:58:10 +0000 Manifest next update: Thu 05 Jun 2025 13:30:10 +0000 Files and hashes: 1: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: sETzBegtQS+ark6K0ES9vYp5YwKHopMYJ+2q06O7CJU=) 2: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 3: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 4: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 5: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:59:2b:4f:07:ca:18:3f:d0:4d:a2:d7:0a:6c:f3:64:1a:ef:36:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Jun 2 01:58:10 2025 GMT Not After : Jun 5 13:30:10 2025 GMT Subject: CN=E57FDE2D39A1B37E3B260503F9BB9998673C5DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:91:be:df:fd:d2:a9:ce:13:37:d9:ca:40: 68:06:48:7c:96:7c:1d:d2:dd:31:f8:83:d5:11:2d: 93:ec:24:19:fc:74:70:14:37:c0:ff:bb:f7:c1:bf: ac:9c:a6:e4:4d:83:c0:a1:8c:84:7b:82:3f:b3:2b: 3e:a5:b9:f2:b6:9e:8f:45:12:cf:3d:35:12:2a:fc: dd:0b:76:f0:25:69:f2:2b:70:19:c6:94:01:0d:f3: 06:41:0c:ca:17:b5:cd:99:25:94:97:38:cc:9a:61: 13:76:8b:e2:e7:7c:dd:4a:10:fb:06:6f:b9:7a:d6: ef:f4:7c:fe:0e:42:90:27:d1:d9:0f:ae:1d:42:a3: 98:92:bb:11:67:ff:59:ac:35:89:d2:d3:bc:56:32: 7d:8e:32:0f:f5:8a:ca:e9:9d:9c:60:86:be:62:7f: fc:8a:61:78:51:36:f1:2b:46:dc:dd:d2:46:42:b5: 1c:cd:aa:06:a5:b0:4a:49:c0:37:84:ed:fc:4d:3b: 72:37:bb:3f:a9:3a:49:b8:4d:92:62:1a:87:a5:cd: a3:a5:9e:84:db:a8:70:64:cd:47:d6:59:92:a4:19: 01:b1:35:0d:50:94:a2:ab:c8:fe:a3:18:34:a3:9d: a8:f8:13:e5:64:72:6c:0e:c1:d7:4d:76:5c:51:a0: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7F:DE:2D:39:A1:B3:7E:3B:26:05:03:F9:BB:99:98:67:3C:5D:E7 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fb:92:1d:b8:b6:88:9f:f1:66:da:b7:9d:b2:be:c8:cb:80: 39:03:31:32:5c:8b:71:28:fc:07:6f:94:54:e9:7a:d4:84:19: 55:d7:39:a5:2b:45:ab:7f:42:08:7d:f1:04:6f:3c:d3:7a:66: 19:b9:4b:8f:a3:b9:83:e8:48:fe:74:c8:3d:99:89:3e:1e:b8: 35:d8:2f:85:71:6b:87:47:e7:60:87:97:c2:6d:77:39:5f:38: e4:c8:87:78:21:4e:a9:93:67:72:e4:3c:f7:ee:a2:21:f0:ee: f8:0e:84:a8:aa:95:d1:01:47:87:8a:b5:8c:c2:96:d4:33:95: a9:4c:cf:33:b7:90:ab:f9:0e:9a:a2:3c:a3:37:88:1c:29:71: 8c:42:4b:c2:ec:8f:23:c7:55:19:c6:6d:78:4c:c9:aa:5f:2e: f9:29:9e:2e:ec:dc:07:eb:88:c4:45:ec:3d:63:dc:52:31:cc: 38:65:d4:1f:f4:c2:9f:68:d1:24:0e:49:65:e0:11:d1:2f:a8: 7d:c5:9f:56:51:5f:6d:e0:b6:d8:f7:1f:58:14:d6:6a:e0:bd: 63:bd:7e:19:d3:26:88:7b:5a:cf:9d:c7:bb:e6:bd:41:69:c7: 00:a7:42:f6:b8:a8:fb:1e:bf:e8:ba:bb:ff:0a:4e:3f:88:ff: ba:f4:38:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVkrTwfKGD/QTaLXCmzzZBrvNjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA2MDIwMTU4MTBaFw0yNTA2MDUxMzMwMTBaMDMxMTAvBgNV BAMTKEU1N0ZERTJEMzlBMUIzN0UzQjI2MDUwM0Y5QkI5OTk4NjczQzVERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGJG+3/3Sqc4TN9nKQGgGSHyW fB3S3TH4g9URLZPsJBn8dHAUN8D/u/fBv6ycpuRNg8ChjIR7gj+zKz6lufK2no9F Es89NRIq/N0LdvAlafIrcBnGlAEN8wZBDMoXtc2ZJZSXOMyaYRN2i+LnfN1KEPsG b7l61u/0fP4OQpAn0dkPrh1Co5iSuxFn/1msNYnS07xWMn2OMg/1isrpnZxghr5i f/yKYXhRNvErRtzd0kZCtRzNqgalsEpJwDeE7fxNO3I3uz+pOkm4TZJiGoelzaOl noTbqHBkzUfWWZKkGQGxNQ1QlKKryP6jGDSjnaj4E+VkcmwOwddNdlxRoANpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5X/eLTmhs347JgUD+buZmGc8XecwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz7kh24toif8Wbat52yvsjLgDkDMTJci3Eo /AdvlFTpetSEGVXXOaUrRat/Qgh98QRvPNN6Zhm5S4+juYPoSP50yD2ZiT4euDXY L4Vxa4dH52CHl8JtdzlfOOTIh3ghTqmTZ3LkPPfuoiHw7vgOhKiqldEBR4eKtYzC ltQzlalMzzO3kKv5DpqiPKM3iBwpcYxCS8LsjyPHVRnGbXhMyapfLvkpni7s3Afr iMRF7D1j3FIxzDhl1B/0wp9o0SQOSWXgEdEvqH3Fn1ZRX23gttj3H1gU1mrgvWO9 fhnTJoh7Ws+dx7vmvUFpxwCnQva4qPsev+i6u/8KTj+I/7r0OAg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:45 2025 by rpki-client