$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: gXlGTY8gutfswnS9vFQQ8N4WGWxKQFTSMvGAd85rQ0U= Subject key identifier: 43:06:8A:02:01:40:95:64:86:5E:6E:EB:5A:5E:08:AE:F0:84:5F:5D Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 7861279D500D9568D6A0E4D8F099F07E4B21F8B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 0184 Signing time: Sat 19 Jul 2025 17:02:10 +0000 Manifest this update: Sat 19 Jul 2025 16:57:10 +0000 Manifest next update: Tue 22 Jul 2025 17:47:10 +0000 Files and hashes: 1: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 2: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: yKLTfzGBHn1JHbKUJ59LiCwn1x0CgkrcVA46QOmlkyE=) 3: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 4: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) 5: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 6: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:27:9d:50:0d:95:68:d6:a0:e4:d8:f0:99:f0:7e:4b:21:f8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Jul 19 16:57:10 2025 GMT Not After : Jul 22 17:47:10 2025 GMT Subject: CN=43068A0201409564865E6EEB5A5E08AEF0845F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:d9:c5:5d:5a:23:09:2b:2b:51:a8:28:99: 29:a8:86:3d:cd:fb:33:12:5a:6e:60:9a:57:20:8a: 2f:fb:f6:22:64:3a:27:0c:3d:0a:f6:3b:cc:50:cd: ed:66:6b:4e:fc:9a:83:ee:4e:9f:4a:cf:b7:1f:42: 5b:e1:2b:7a:89:1b:d6:0f:60:15:08:03:49:88:a5: 01:ba:b4:46:be:7c:17:2b:4f:a9:72:c6:39:31:08: 90:08:fc:d0:88:02:87:2a:cb:b6:5c:6e:f8:e8:c3: 15:f5:00:e2:f1:9c:fe:39:66:68:08:cb:88:a7:fb: 64:33:b1:c3:91:e7:76:46:7b:b5:ea:4c:0f:51:0b: 4f:f4:5f:2c:d4:81:2c:72:51:9b:e3:03:9e:2c:84: 7b:d2:6b:f6:af:da:52:b1:6d:1a:cc:53:57:5e:d7: 3c:e4:25:cf:c5:a8:58:3f:24:26:fe:c6:1c:47:e2: 57:5f:fd:87:15:47:38:61:ed:14:fa:f7:60:fc:a4: 12:5a:88:a4:00:f9:ed:a7:4b:8b:3f:78:7d:c6:f4: 88:8d:8f:47:02:f2:02:cc:70:40:59:2a:b0:9a:3a: 9f:7b:b0:81:3a:ad:e0:99:88:bd:98:3c:4b:bf:72: 6e:72:d7:4e:c6:d1:fa:25:fd:55:49:ee:69:39:60: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:8A:02:01:40:95:64:86:5E:6E:EB:5A:5E:08:AE:F0:84:5F:5D X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:67:d7:b3:9f:71:c3:f9:cb:a7:1f:9b:7b:16:c2:e7:ec:1b: 36:86:ca:79:a4:c3:71:db:01:44:93:f5:96:e7:20:71:a9:59: cb:e2:ec:4a:81:14:15:ad:18:e6:50:7c:a9:10:86:b0:a2:0c: f0:f2:0d:1b:3a:c0:e5:73:23:a0:6a:79:23:76:f5:bb:dd:20: 9a:21:88:a3:5a:ab:13:f1:2a:ee:fa:2f:22:5d:c0:16:4b:30: 15:7f:1f:2e:16:21:77:df:c6:b4:9f:4c:5a:f2:2d:96:ce:73: f9:91:48:14:1a:73:d9:45:99:23:72:d9:31:42:8e:bd:b3:24: a5:73:05:80:bd:6d:ad:b3:17:0f:1b:5d:0b:13:d1:b1:e4:0e: d0:bf:3f:65:07:98:9f:c3:c5:97:73:ac:91:c2:b6:52:31:92: 69:e4:85:e9:a5:67:fa:e2:25:e7:81:13:53:97:09:44:95:ca: f7:5c:02:1e:56:72:9a:c7:b8:d4:84:e8:28:89:e7:65:05:2f: 5f:a3:99:72:58:ce:68:22:83:3b:d1:12:bb:e4:a2:04:22:3a: 15:36:db:45:e6:d8:ef:13:94:04:21:63:8d:3a:2e:4e:da:ef: 8d:76:3c:bb:c6:5a:24:19:6d:ca:27:c4:1d:37:90:4d:4c:f0: eb:cc:d3:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGEnnVANlWjWoOTY8Jnwfksh+LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA3MTkxNjU3MTBaFw0yNTA3MjIxNzQ3MTBaMDMxMTAvBgNV BAMTKDQzMDY4QTAyMDE0MDk1NjQ4NjVFNkVFQjVBNUUwOEFFRjA4NDVGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SNnFXVojCSsrUagomSmohj3N +zMSWm5gmlcgii/79iJkOicMPQr2O8xQze1ma078moPuTp9Kz7cfQlvhK3qJG9YP YBUIA0mIpQG6tEa+fBcrT6lyxjkxCJAI/NCIAocqy7ZcbvjowxX1AOLxnP45ZmgI y4in+2QzscOR53ZGe7XqTA9RC0/0XyzUgSxyUZvjA54shHvSa/av2lKxbRrMU1de 1zzkJc/FqFg/JCb+xhxH4ldf/YcVRzhh7RT692D8pBJaiKQA+e2nS4s/eH3G9IiN j0cC8gLMcEBZKrCaOp97sIE6reCZiL2YPEu/cm5y107G0fol/VVJ7mk5YHQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQwaKAgFAlWSGXm7rWl4IrvCEX10wHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZn17OfccP5y6cfm3sWwufsGzaGynmkw3Hb AUST9ZbnIHGpWcvi7EqBFBWtGOZQfKkQhrCiDPDyDRs6wOVzI6BqeSN29bvdIJoh iKNaqxPxKu76LyJdwBZLMBV/Hy4WIXffxrSfTFryLZbOc/mRSBQac9lFmSNy2TFC jr2zJKVzBYC9ba2zFw8bXQsT0bHkDtC/P2UHmJ/DxZdzrJHCtlIxkmnkhemlZ/ri JeeBE1OXCUSVyvdcAh5WcprHuNSE6CiJ52UFL1+jmXJYzmgigzvRErvkogQiOhU2 20Xm2O8TlAQhY406Lk7a7412PLvGWiQZbconxB03kE1M8OvM0wU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:35 2025 by rpki-client