$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: Vu4v9N0EcEsMYYq4/ttLIoLI2kwOnAZuOqMTk3IUSl0= Subject key identifier: 13:07:86:67:86:41:4B:DD:4B:C2:4A:3E:2A:D7:59:34:BC:0F:6A:3A Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 0AEE86E4D0CE29CA5169D287CBEBD991F468CB8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0247 Signing time: Sat 19 Jul 2025 16:40:41 +0000 Manifest this update: Sat 19 Jul 2025 16:35:41 +0000 Manifest next update: Wed 23 Jul 2025 03:38:41 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: RnENW8VlkyStoHZKwapqbpkuXoZBVwHIU6XQ+tP2KPo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ee:86:e4:d0:ce:29:ca:51:69:d2:87:cb:eb:d9:91:f4:68:cb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Jul 19 16:35:41 2025 GMT Not After : Jul 23 03:38:41 2025 GMT Subject: CN=1307866786414BDD4BC24A3E2AD75934BC0F6A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:8d:97:30:4c:0f:14:5b:86:86:f8:b3:37: 64:0c:b8:df:7f:d9:dc:48:0b:7b:6e:67:76:48:86: 82:ec:2b:55:0f:a3:74:59:54:6e:45:22:48:56:33: 3f:ff:4e:57:8b:f0:ea:76:8d:08:11:94:29:1d:ab: 7c:96:80:32:d4:59:02:9f:77:d8:80:85:d0:72:a9: 97:03:64:75:5d:3c:68:a9:87:65:57:12:db:95:92: 3e:d8:65:25:36:cf:ba:b0:1e:96:4a:60:f2:b2:e2: 60:8d:aa:f2:9b:cf:7c:f2:64:8a:e8:48:1c:65:b3: db:26:4b:04:f4:1b:79:80:0f:1f:02:8b:2e:ac:44: 4e:4d:f7:f4:36:26:5e:92:bc:79:34:b3:c0:2a:38: c2:9c:65:d3:43:3c:26:ce:09:09:f0:e2:bb:e5:d4: 1b:f1:40:97:d5:87:e3:22:75:80:67:d7:e8:61:66: da:3a:98:53:a2:20:da:6b:2a:73:9f:d7:05:da:04: eb:71:c9:4a:56:1d:79:e9:bd:7a:83:20:9a:49:c2: 4d:11:e2:3f:08:13:1b:db:37:a0:e9:25:52:dc:ad: c3:f8:c7:c2:25:d9:68:af:9a:80:0e:d2:b4:5a:ca: 01:f9:0c:cd:de:28:36:bb:93:6c:8a:4f:b0:a6:78: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:86:67:86:41:4B:DD:4B:C2:4A:3E:2A:D7:59:34:BC:0F:6A:3A X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:60:dd:69:c7:cf:15:e2:59:40:b7:fe:59:7f:9f:fc:9e:1d: 4e:c2:7d:3a:19:ed:00:74:52:bf:ee:55:81:94:ae:76:62:2b: 71:e0:d1:68:e0:c6:31:b7:91:ca:07:e2:b4:aa:51:3d:ec:6b: f8:65:81:c4:c2:90:04:91:42:96:91:57:35:ce:7c:b0:1a:a6: 9d:cd:eb:8a:c0:17:63:eb:3f:9a:07:71:de:95:4d:02:fb:40: 0d:3c:3a:7e:3b:87:1f:9e:5a:31:4b:9b:a7:ae:e7:58:4f:4a: 4c:49:f7:e6:be:ec:a6:e3:85:73:b8:99:c0:bc:cc:8b:73:16: f4:bc:0d:24:3e:c2:64:37:52:1a:2c:f9:31:d5:eb:86:52:ef: 60:2c:56:70:1c:90:9f:89:09:3e:64:40:b2:7f:cb:d1:b1:23: d0:62:c3:6c:28:11:79:9b:6d:1c:e5:7b:25:fc:eb:94:23:34: 45:04:6f:ab:06:b3:5d:d9:73:3c:cf:9d:7f:6b:fd:bb:df:b8: 4b:e9:ee:10:61:0f:c8:0a:63:8b:75:a3:9d:82:2b:bb:16:7b: 27:e6:84:5d:d3:26:a6:15:87:13:55:f7:4d:ce:85:15:66:fa: e8:ec:ad:31:91:be:68:42:2c:e6:d1:aa:6c:51:eb:63:16:dd: 47:7a:b2:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCu6G5NDOKcpRadKHy+vZkfRoy4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA3MTkxNjM1NDFaFw0yNTA3MjMwMzM4NDFaMDMxMTAvBgNV BAMTKDEzMDc4NjY3ODY0MTRCREQ0QkMyNEEzRTJBRDc1OTM0QkMwRjZBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5I2XMEwPFFuGhvizN2QMuN9/ 2dxIC3tuZ3ZIhoLsK1UPo3RZVG5FIkhWMz//TleL8Op2jQgRlCkdq3yWgDLUWQKf d9iAhdByqZcDZHVdPGiph2VXEtuVkj7YZSU2z7qwHpZKYPKy4mCNqvKbz3zyZIro SBxls9smSwT0G3mADx8Ciy6sRE5N9/Q2Jl6SvHk0s8AqOMKcZdNDPCbOCQnw4rvl 1BvxQJfVh+MidYBn1+hhZto6mFOiINprKnOf1wXaBOtxyUpWHXnpvXqDIJpJwk0R 4j8IExvbN6DpJVLcrcP4x8Il2WivmoAO0rRaygH5DM3eKDa7k2yKT7CmePiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEweGZ4ZBS91Lwko+KtdZNLwPajowHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhg3WnHzxXiWUC3/ll/n/yeHU7CfToZ7QB0 Ur/uVYGUrnZiK3Hg0WjgxjG3kcoH4rSqUT3sa/hlgcTCkASRQpaRVzXOfLAapp3N 64rAF2PrP5oHcd6VTQL7QA08On47hx+eWjFLm6eu51hPSkxJ9+a+7KbjhXO4mcC8 zItzFvS8DSQ+wmQ3Uhos+THV64ZS72AsVnAckJ+JCT5kQLJ/y9GxI9Biw2woEXmb bRzleyX865QjNEUEb6sGs13ZczzPnX9r/bvfuEvp7hBhD8gKY4t1o52CK7sWeyfm hF3TJqYVhxNV903OhRVm+ujsrTGRvmhCLObRqmxR62MW3Ud6slc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:24:18 2025 by rpki-client