$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: FeSgcBMS84+JQgWV04EIUkQbiGv5aK7S1LQhL7CpXH0= Subject key identifier: 80:7A:92:58:A5:FE:E8:33:92:D9:C2:8A:6A:AA:2F:90:84:B0:5A:7C Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 248AE87445612E6FD84A336A6450A17F4382AC3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 014C Signing time: Thu 05 Jun 2025 07:42:02 +0000 Manifest this update: Thu 05 Jun 2025 07:37:02 +0000 Manifest next update: Sun 08 Jun 2025 15:16:02 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: s6bTCpd6JeuqQ8oe/eP33cbng7/PnONAoavB7XlQq20=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: 1jGIsjnRWKAjYEK7TSFGcWeXONe75N1qbPc54plvXY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8a:e8:74:45:61:2e:6f:d8:4a:33:6a:64:50:a1:7f:43:82:ac:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Jun 5 07:37:02 2025 GMT Not After : Jun 8 15:16:02 2025 GMT Subject: CN=807A9258A5FEE83392D9C28A6AAA2F9084B05A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9c:6e:fc:68:be:84:ba:d3:aa:41:94:31:dc: 8f:45:3a:ac:91:ee:c5:97:4e:bf:ae:84:65:7c:3c: 1d:4f:b9:43:bf:53:a4:4f:c8:3d:39:e3:e2:f2:54: 92:35:0f:1f:66:ef:19:e2:06:fb:4a:d1:76:1f:26: f9:6f:8d:85:e3:a4:24:3e:78:4e:8e:6b:e0:8c:82: 7a:08:82:ef:cd:ce:56:58:e2:1b:5e:50:b5:81:a3: d4:69:f5:d2:d0:fc:26:60:83:27:66:f7:b9:8c:50: 17:26:e2:ac:b0:7e:09:fd:20:21:f9:ac:13:4f:a4: 83:4c:68:cc:4a:4c:1b:cc:15:84:10:41:72:6d:7e: 2b:25:4a:98:7f:f9:cf:af:a3:6d:88:13:d7:b6:c7: 90:97:06:57:44:f7:ed:70:d0:1a:07:6c:d2:c1:d9: bd:b8:21:3b:f2:ae:99:f9:58:5b:5f:29:58:c3:f4: 16:24:16:4f:b4:7d:f9:15:be:57:90:c3:ca:10:69: e1:ea:a2:14:d3:c3:40:87:53:d0:30:f0:c4:cf:2c: 85:33:f5:15:c9:ba:37:a9:9a:c6:b3:30:19:ac:ca: db:14:8e:ec:27:00:aa:ff:5e:0a:31:d9:ee:63:f6: b9:44:3f:aa:ec:c6:61:98:20:8c:5e:d8:90:09:ac: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7A:92:58:A5:FE:E8:33:92:D9:C2:8A:6A:AA:2F:90:84:B0:5A:7C X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:43:8e:fe:66:3c:a5:50:e4:8c:94:5b:5a:26:f7:59:b8:e8: ae:00:1f:f4:e7:f6:ac:15:41:51:56:c8:ce:d7:38:06:6b:f5: dc:28:0d:bc:af:ab:38:c0:6b:20:13:4e:c1:68:0f:b9:c8:09: 30:bc:ef:7b:b9:af:84:e6:e7:22:18:17:4a:14:1e:ce:17:cf: b6:e5:2c:cb:e6:01:d0:ee:b2:ec:ba:dd:d7:f3:a2:2c:96:ae: 4c:3f:2c:4d:2e:71:78:be:f8:84:34:b8:a5:e8:c0:ee:c0:4b: a3:73:ff:12:cc:8f:f5:27:cc:ab:e4:4a:41:66:9d:6b:8b:b7: 8f:15:63:f3:93:f7:10:d1:e0:48:cb:34:05:f9:a7:1b:86:91: d9:25:ae:e4:d5:64:46:31:52:93:e7:a5:c2:d1:0f:a7:81:24: 3f:87:94:26:f2:cd:66:43:77:d5:7d:c4:b5:e0:8c:8f:b5:a6: f6:9d:f5:b6:54:fb:f4:e2:a1:dd:ea:7c:2e:08:98:d5:73:a4: aa:a8:16:f5:48:e4:b9:7a:ff:d4:a5:56:32:58:73:49:5e:d9: cd:13:2c:65:ef:8e:f5:23:c2:da:3d:c2:0a:54:34:e2:86:d2: b8:1f:67:92:60:4f:83:51:17:c4:91:83:f7:b4:7c:c9:dc:64: b0:d1:30:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIrodEVhLm/YSjNqZFChf0OCrD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTA2MDUwNzM3MDJaFw0yNTA2MDgxNTE2MDJaMDMxMTAvBgNV BAMTKDgwN0E5MjU4QTVGRUU4MzM5MkQ5QzI4QTZBQUEyRjkwODRCMDVBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvnG78aL6EutOqQZQx3I9FOqyR 7sWXTr+uhGV8PB1PuUO/U6RPyD054+LyVJI1Dx9m7xniBvtK0XYfJvlvjYXjpCQ+ eE6Oa+CMgnoIgu/NzlZY4hteULWBo9Rp9dLQ/CZggydm97mMUBcm4qywfgn9ICH5 rBNPpINMaMxKTBvMFYQQQXJtfislSph/+c+vo22IE9e2x5CXBldE9+1w0BoHbNLB 2b24ITvyrpn5WFtfKVjD9BYkFk+0ffkVvleQw8oQaeHqohTTw0CHU9Aw8MTPLIUz 9RXJujepmsazMBmsytsUjuwnAKr/Xgox2e5j9rlEP6rsxmGYIIxe2JAJrCrZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgHqSWKX+6DOS2cKKaqovkISwWnwwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1Djv5mPKVQ5IyUW1om91m46K4AH/Tn9qwV QVFWyM7XOAZr9dwoDbyvqzjAayATTsFoD7nICTC873u5r4Tm5yIYF0oUHs4Xz7bl LMvmAdDusuy63dfzoiyWrkw/LE0ucXi++IQ0uKXowO7AS6Nz/xLMj/UnzKvkSkFm nWuLt48VY/OT9xDR4EjLNAX5pxuGkdklruTVZEYxUpPnpcLRD6eBJD+HlCbyzWZD d9V9xLXgjI+1pvad9bZU+/Tiod3qfC4ImNVzpKqoFvVI5Ll6/9SlVjJYc0le2c0T LGXvjvUjwto9wgpUNOKG0rgfZ5JgT4NRF8SRg/e0fMncZLDRMEg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:59:48 2025 by rpki-client