$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json) Hash identifier: ikvpTxlEmGevmTsWvMsB2wp7KR/OLn/M/4CpZxO0GBM= Subject key identifier: 81:C8:33:59:DB:7D:19:3B:DF:57:4A:6A:F8:D9:AE:A5:D1:6C:55:57 Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Certificate serial: 085E359C914707DA09CBD1A29EE7EC173B98DF8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft Manifest number: 0504 Signing time: Thu 04 Sep 2025 12:21:42 +0000 Manifest this update: Thu 04 Sep 2025 12:16:42 +0000 Manifest next update: Sun 07 Sep 2025 13:54:42 +0000 Files and hashes: 1: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: NswJoPlTbkW1QbykJdu3UOhV7IqDYlomNhuRwW/poHY=) 2: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: GyTvAyiqDcz4HqvEtyjLwFP+vqa6W3Rz6dNaGJkDvBQ=) 3: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: Xkph31LntzUaI1/CJr8Ltj+zXZ7Nq1uWNrqZKmCZlP8=) 4: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: 1EQfw0FptQhECOk5hYvJSkDd+TqdgkRc3BIrFRGj7W4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5e:35:9c:91:47:07:da:09:cb:d1:a2:9e:e7:ec:17:3b:98:df:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Validity Not Before: Sep 4 12:16:42 2025 GMT Not After : Sep 7 13:54:42 2025 GMT Subject: CN=81C83359DB7D193BDF574A6AF8D9AEA5D16C5557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:c6:e5:35:c5:41:b8:bb:94:89:a5:bb:17: 18:58:04:c1:08:cf:03:90:fb:fb:33:17:16:50:35: 6a:e7:32:a7:ad:94:d5:93:30:ca:7d:a9:db:a3:2d: fb:5e:fc:73:d3:4b:4d:8b:6b:5b:71:b2:59:7b:31: 29:55:c0:63:6d:a2:4b:f3:2a:3c:ee:35:3d:e7:5a: 94:65:04:43:24:75:37:7a:14:a2:77:f6:90:b5:11: 89:60:e0:80:4b:f8:3b:11:f3:b9:c3:91:8f:fb:5c: 0e:20:01:4b:7c:ca:24:1b:e2:b7:73:fb:6c:7e:56: b8:61:06:dc:f4:be:eb:ab:20:85:1a:90:af:17:6f: 5c:d5:b2:fe:6a:1a:52:b6:92:0f:c7:8f:1d:b6:be: 3c:ec:0a:b7:86:e6:a6:82:8d:65:50:65:d8:af:ad: c8:5a:c9:0f:f7:0d:72:13:d4:5e:47:65:8d:ba:30: 84:2b:3f:dc:db:8b:82:a6:81:80:0d:ec:47:63:bd: 54:0b:7e:87:5f:8d:84:5a:1a:83:d1:32:85:b7:e5: 6a:29:4f:9b:1b:64:8b:bb:6a:8a:a4:2f:54:3a:64: 5d:89:a9:04:4d:21:04:7a:7e:b1:bc:3b:90:45:ba: 11:e7:44:67:bf:d9:fa:a5:be:2d:31:ff:4a:e6:3b: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C8:33:59:DB:7D:19:3B:DF:57:4A:6A:F8:D9:AE:A5:D1:6C:55:57 X509v3 Authority Key Identifier: keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0e:1a:5c:0f:60:29:4c:1f:b9:05:c0:76:dd:88:94:8f:1f: a9:10:39:dc:21:ca:1a:a3:6d:a3:8f:f0:60:61:29:8b:3d:7e: 88:2d:e7:13:f0:fb:7d:b2:96:c3:f5:a1:21:6e:90:3e:95:b6: 98:9f:70:63:2b:ed:7b:45:b3:48:09:78:2c:a5:3d:e1:e8:d6: e5:8a:1a:cd:1d:33:da:69:cf:20:81:44:98:3a:77:4f:76:62: f1:e0:0f:ba:88:80:96:6a:7e:c1:5e:10:8f:65:34:41:de:3b: a9:c3:a0:f8:5c:6b:b4:1a:9c:ea:6e:be:97:df:db:5a:94:f5: 69:01:22:90:97:ba:80:86:f2:a3:fb:b4:47:81:c6:9c:08:de: 54:17:e3:31:4b:af:6a:90:30:73:ac:98:35:e7:9c:53:01:db: bd:c9:8c:b6:13:45:a3:6a:59:e6:de:18:15:27:6c:8c:ba:81: 47:1c:7d:b4:f6:03:11:34:c5:87:6f:eb:9d:0b:f2:e6:6a:20: 75:ab:d2:67:5a:c9:26:f2:64:0f:c2:19:5d:d4:b3:26:9e:16: 8e:b5:89:2d:44:60:8c:7b:00:cb:f8:c7:d4:7f:d5:bf:d5:4f: 5b:3d:1d:f0:0a:a5:84:db:a1:37:8a:0a:a5:6b:b0:18:b6:6d: 0b:54:b7:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCF41nJFHB9oJy9GinufsFzuY348wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENC NUFEQkQyODAeFw0yNTA5MDQxMjE2NDJaFw0yNTA5MDcxMzU0NDJaMDMxMTAvBgNV BAMTKDgxQzgzMzU5REI3RDE5M0JERjU3NEE2QUY4RDlBRUE1RDE2QzU1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvcblNcVBuLuUiaW7FxhYBMEI zwOQ+/szFxZQNWrnMqetlNWTMMp9qdujLfte/HPTS02La1txsll7MSlVwGNtokvz KjzuNT3nWpRlBEMkdTd6FKJ39pC1EYlg4IBL+DsR87nDkY/7XA4gAUt8yiQb4rdz +2x+VrhhBtz0vuurIIUakK8Xb1zVsv5qGlK2kg/Hjx22vjzsCreG5qaCjWVQZdiv rchayQ/3DXIT1F5HZY26MIQrP9zbi4KmgYAN7EdjvVQLfodfjYRaGoPRMoW35Wop T5sbZIu7aoqkL1Q6ZF2JqQRNIQR6frG8O5BFuhHnRGe/2fqlvi0x/0rmO/iXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgcgzWdt9GTvfV0pq+NmupdFsVVcwHwYDVR0j BBgwFoAUNWa2zwDXsLZz+LUmxWrr3LWtvSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2I4YWU5Ny02ODE4LTQ4YTktYWJlNC1lZGI5NjA0OWYzYzgvMC8zNTY2QjZDRjAw RDdCMEI2NzNGOEI1MjZDNTZBRUJEQ0I1QURCRDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENCNUFE QkQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVC RENCNUFEQkQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcOGlwPYClMH7kFwHbdiJSPH6kQOdwhyhqj baOP8GBhKYs9fogt5xPw+32ylsP1oSFukD6VtpifcGMr7XtFs0gJeCylPeHo1uWK Gs0dM9ppzyCBRJg6d092YvHgD7qIgJZqfsFeEI9lNEHeO6nDoPhca7QanOpuvpff 21qU9WkBIpCXuoCG8qP7tEeBxpwI3lQX4zFLr2qQMHOsmDXnnFMB273JjLYTRaNq WebeGBUnbIy6gUccfbT2AxE0xYdv650L8uZqIHWr0mdaySbyZA/CGV3UsyaeFo61 iS1EYIx7AMv4x9R/1b/VT1s9HfAKpYTboTeKCqVrsBi2bQtUtyc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client