$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: CT/kiMz+VyJlsnUKXGu2hJrvx4p0eGeaIN0IW9JtmBw= Subject key identifier: 8A:5C:B7:1D:42:7A:5F:C1:BF:F1:B8:3B:81:43:A3:9A:0A:8B:CD:25 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 7DA99DFC0E59A6013FB4BBAE3F05F41F45028C92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 013A Signing time: Fri 25 Apr 2025 12:02:02 +0000 Manifest this update: Fri 25 Apr 2025 11:57:02 +0000 Manifest next update: Mon 28 Apr 2025 17:37:02 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: Ay7yfwcX4lrqz1qctOzT6S6EjKqyI3ytZo7AZk/UIsY=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: 1jGIsjnRWKAjYEK7TSFGcWeXONe75N1qbPc54plvXY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 17:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a9:9d:fc:0e:59:a6:01:3f:b4:bb:ae:3f:05:f4:1f:45:02:8c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Apr 25 11:57:02 2025 GMT Not After : Apr 28 17:37:02 2025 GMT Subject: CN=8A5CB71D427A5FC1BFF1B83B8143A39A0A8BCD25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:5c:2a:1a:1d:d0:79:ea:89:5f:dd:6e:35: a3:c0:a7:cd:0f:07:77:f5:27:db:41:02:b8:7b:6c: 0c:6e:e9:4a:71:b4:6c:86:f2:78:84:bc:6f:f0:d7: d1:26:8e:fe:47:26:4f:02:2b:3b:0f:64:74:ee:c3: 8b:88:f5:21:29:99:0e:10:3d:65:f2:e0:50:59:17: 45:13:ae:40:42:80:2a:38:95:59:24:bd:da:bd:77: 2d:46:71:7e:b1:c6:c4:09:d0:37:af:0b:2e:5a:1a: 06:2e:84:28:e2:c9:34:ff:ab:30:3b:61:b4:39:99: 03:d2:bf:c4:73:d1:7e:11:a3:b0:b6:e9:dd:a2:88: 2a:16:66:84:1b:ba:63:af:86:52:cc:db:9f:bb:f8: 22:2d:8f:c0:6a:03:76:8b:16:40:6c:96:39:e6:26: 8c:4f:23:35:68:c3:a4:29:1c:3e:5c:a2:2e:a3:bd: 90:9f:1b:28:d3:3b:f9:ea:f4:3f:55:a5:17:6d:2c: d4:36:14:33:e7:5a:6b:d1:d9:bf:4e:f7:57:94:48: 0e:72:84:18:ea:91:8d:5c:82:b4:d5:0d:13:eb:44: 10:f0:1e:ac:8b:f3:1d:12:37:50:c6:72:ab:15:19: 9a:f2:68:cb:ad:cf:26:ca:9c:13:68:fd:51:26:91: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5C:B7:1D:42:7A:5F:C1:BF:F1:B8:3B:81:43:A3:9A:0A:8B:CD:25 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:da:87:7b:26:41:1d:89:c3:10:bc:6b:3d:7d:7f:02:b9: 5f:15:a8:0b:8e:65:77:40:87:7d:b1:c5:69:75:eb:a0:e0:94: 6d:3a:9d:c8:51:b0:2f:41:a2:40:ab:7d:3e:4b:a7:4e:70:57: 61:dc:78:f7:45:cd:a4:04:aa:30:1c:fc:8f:de:03:c9:32:31: 9f:fd:19:9f:07:85:52:43:c6:40:5c:94:5f:95:f8:74:98:e9: 4e:ad:d7:ba:f2:63:4e:21:14:37:61:7f:34:c4:d4:d0:65:06: cb:f2:d6:9f:f1:96:cf:18:ef:6d:da:1c:1c:39:5e:96:bc:b0: 27:0a:0f:0e:b1:aa:48:b0:52:a2:14:a8:28:53:9a:55:cd:90: f4:cb:b6:d6:1f:29:46:f3:fe:3d:57:c2:eb:ca:2b:ca:76:3e: 35:c1:bd:15:5b:55:15:fc:42:1b:7a:87:b1:76:3f:bf:53:75: b4:f8:00:46:de:4f:1e:6a:53:df:ea:4f:63:ac:34:5e:28:22: 78:fe:15:ad:fb:8d:1a:f8:54:9c:2d:cc:ba:0f:80:39:47:19: d9:7e:f2:7f:32:f6:2b:6f:e0:0e:e0:2c:92:42:9b:b3:79:49: 56:17:f0:38:27:53:e3:4d:ac:cb:bd:ab:64:de:9b:48:d8:32: 94:f9:af:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfamd/A5ZpgE/tLuuPwX0H0UCjJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTA0MjUxMTU3MDJaFw0yNTA0MjgxNzM3MDJaMDMxMTAvBgNV BAMTKDhBNUNCNzFENDI3QTVGQzFCRkYxQjgzQjgxNDNBMzlBMEE4QkNEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcVwqGh3QeeqJX91uNaPAp80P B3f1J9tBArh7bAxu6UpxtGyG8niEvG/w19Emjv5HJk8CKzsPZHTuw4uI9SEpmQ4Q PWXy4FBZF0UTrkBCgCo4lVkkvdq9dy1GcX6xxsQJ0DevCy5aGgYuhCjiyTT/qzA7 YbQ5mQPSv8Rz0X4Ro7C26d2iiCoWZoQbumOvhlLM25+7+CItj8BqA3aLFkBsljnm JoxPIzVow6QpHD5coi6jvZCfGyjTO/nq9D9VpRdtLNQ2FDPnWmvR2b9O91eUSA5y hBjqkY1cgrTVDRPrRBDwHqyL8x0SN1DGcqsVGZryaMutzybKnBNo/VEmkQS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUily3HUJ6X8G/8bg7gUOjmgqLzSUwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgr2od7JkEdicMQvGs9fX8CuV8VqAuOZXdA h32xxWl166DglG06nchRsC9BokCrfT5Lp05wV2HcePdFzaQEqjAc/I/eA8kyMZ/9 GZ8HhVJDxkBclF+V+HSY6U6t17ryY04hFDdhfzTE1NBlBsvy1p/xls8Y723aHBw5 Xpa8sCcKDw6xqkiwUqIUqChTmlXNkPTLttYfKUbz/j1XwuvKK8p2PjXBvRVbVRX8 Qht6h7F2P79TdbT4AEbeTx5qU9/qT2OsNF4oInj+Fa37jRr4VJwtzLoPgDlHGdl+ 8n8y9itv4A7gLJJCm7N5SVYX8DgnU+NNrMu9q2Tem0jYMpT5r8c= -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net