$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: crBawk4SbQJlvuMh3b50zCiwhF3ImLrFSRT8CLdZHXE= Subject key identifier: 3B:A8:D5:22:D9:2E:9D:CA:4A:54:2D:74:65:8B:2C:56:FB:CE:FA:2B Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 780A3792B541A5AF9BC81FD90A7097E1D4C93824 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 0505 Signing time: Mon 08 Sep 2025 04:21:36 +0000 Manifest this update: Mon 08 Sep 2025 04:16:36 +0000 Manifest next update: Thu 11 Sep 2025 10:04:36 +0000 Files and hashes: 1: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 2: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 3: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: 1qx3V/qGHBcXLbhBLE6yRZEFkeZyv0jzRBEi6j7k9qY=) 4: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 10:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0a:37:92:b5:41:a5:af:9b:c8:1f:d9:0a:70:97:e1:d4:c9:38:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Sep 8 04:16:36 2025 GMT Not After : Sep 11 10:04:36 2025 GMT Subject: CN=3BA8D522D92E9DCA4A542D74658B2C56FBCEFA2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e8:9e:9f:db:f0:22:22:3e:63:cd:46:91:3c: f5:6b:64:ea:ce:f3:38:64:0f:1e:dd:66:36:78:1e: 45:c2:86:ac:aa:8e:e3:34:5b:a0:de:be:c0:00:e7: ad:17:9a:c7:10:21:ae:6a:63:56:46:67:1a:ed:31: 33:d1:8c:3b:2a:cb:37:89:32:f4:57:83:94:3d:51: e7:01:19:0c:b7:63:6e:60:ed:c8:f0:1a:cb:b7:4e: 43:80:5b:69:f0:4e:ae:82:52:9f:c1:79:75:90:b3: 12:e6:0f:9e:0e:02:87:50:c3:12:99:32:ec:95:2e: 20:59:a4:88:12:3b:39:ff:05:3d:31:2f:bb:74:db: 1e:c7:d8:4d:2b:93:12:33:a8:b9:99:93:61:99:11: 3f:06:2f:3f:4e:7f:37:7c:86:3e:d8:e4:7a:73:ed: 4e:68:71:0b:98:93:db:80:16:c9:df:94:a3:40:1c: b9:0d:3d:16:6b:4a:29:5e:c4:4e:cb:de:f6:e1:ed: 9b:e0:98:3c:35:30:42:c9:40:c3:af:38:9e:18:06: 10:c5:36:e8:28:e2:1e:ee:74:fc:94:0d:23:e7:5c: 5f:16:67:c8:5c:72:ff:a7:38:6d:b8:d3:43:92:a4: 59:38:f5:39:ef:6b:6e:c5:a3:93:fa:fe:77:15:4f: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A8:D5:22:D9:2E:9D:CA:4A:54:2D:74:65:8B:2C:56:FB:CE:FA:2B X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:96:dd:aa:8a:dd:0c:0a:d7:83:e7:72:fd:16:4f:fb:3a:77: e2:7a:de:2c:77:75:53:5b:84:e6:45:72:94:e5:d4:0b:c5:54: b9:a7:2f:01:1f:3c:17:dd:d7:da:47:a9:32:30:2e:4f:e2:d1: 73:5b:4e:15:09:f2:5a:a2:a7:00:a8:84:d7:24:e4:c1:22:77: 70:2f:0c:c4:bf:a6:5f:14:91:10:de:3e:0d:1d:94:50:c5:e8: 0d:0d:67:58:f7:fa:94:d1:98:23:13:1e:e3:e4:c0:92:d2:ce: ef:25:e4:e1:ba:19:09:2c:6c:9b:64:0c:f8:2f:b3:a2:8c:1a: 30:7d:bf:7b:6f:fb:a0:fb:67:7f:15:42:39:10:df:57:ac:1d: 1d:b7:e4:3e:0b:06:7f:25:b8:b4:5a:4f:15:89:70:c2:de:5c: 38:a2:14:e2:2b:90:5e:db:c9:71:7e:37:81:d0:3d:57:8f:f6: 7b:5c:87:c4:b2:b6:60:1c:d9:d7:78:06:e3:6d:f0:ba:c4:71: 99:6f:91:99:7e:50:28:5f:01:89:6d:12:3b:c3:a5:3b:67:9c: dd:0b:49:52:76:29:d7:3d:e6:e8:3b:fc:bf:a0:73:dc:5d:61: 2a:9d:4c:1c:6d:9a:77:5c:9e:f4:4c:48:8c:ef:39:07:75:2e: c4:17:fe:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAo3krVBpa+byB/ZCnCX4dTJOCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA5MDgwNDE2MzZaFw0yNTA5MTExMDA0MzZaMDMxMTAvBgNV BAMTKDNCQThENTIyRDkyRTlEQ0E0QTU0MkQ3NDY1OEIyQzU2RkJDRUZBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD26J6f2/AiIj5jzUaRPPVrZOrO 8zhkDx7dZjZ4HkXChqyqjuM0W6DevsAA560XmscQIa5qY1ZGZxrtMTPRjDsqyzeJ MvRXg5Q9UecBGQy3Y25g7cjwGsu3TkOAW2nwTq6CUp/BeXWQsxLmD54OAodQwxKZ MuyVLiBZpIgSOzn/BT0xL7t02x7H2E0rkxIzqLmZk2GZET8GLz9Ofzd8hj7Y5Hpz 7U5ocQuYk9uAFsnflKNAHLkNPRZrSilexE7L3vbh7ZvgmDw1MELJQMOvOJ4YBhDF Nugo4h7udPyUDSPnXF8WZ8hccv+nOG2400OSpFk49Tnva27Fo5P6/ncVT/eHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO6jVItkuncpKVC10ZYssVvvO+iswHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmW3aqK3QwK14Pncv0WT/s6d+J63ix3dVNb hOZFcpTl1AvFVLmnLwEfPBfd19pHqTIwLk/i0XNbThUJ8lqipwCohNck5MEid3Av DMS/pl8UkRDePg0dlFDF6A0NZ1j3+pTRmCMTHuPkwJLSzu8l5OG6GQksbJtkDPgv s6KMGjB9v3tv+6D7Z38VQjkQ31esHR235D4LBn8luLRaTxWJcMLeXDiiFOIrkF7b yXF+N4HQPVeP9ntch8SytmAc2dd4BuNt8LrEcZlvkZl+UChfAYltEjvDpTtnnN0L SVJ2Kdc95ug7/L+gc9xdYSqdTBxtmndcnvRMSIzvOQd1LsQX/n4= -----END CERTIFICATE-----Generated at Tue Sep 9 01:23:29 2025 by rpki-client