$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: YF8isSJ9JLAdZDJMzuoyRP3uq59de3SagZIoaX1E0U4= Subject key identifier: 20:4C:B2:8A:F0:D2:6B:C0:69:A5:27:82:04:E5:8B:26:F7:B9:B3:DA Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 7AEE1EFBD321BEDB68119A53F7110724AFB12E8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: F6 Signing time: Sun 20 Jul 2025 19:31:43 +0000 Manifest this update: Sun 20 Jul 2025 19:26:43 +0000 Manifest next update: Wed 23 Jul 2025 20:56:43 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: 4fgVCJLrjyqFG67W0ICYNDU8KetCciVyd1e8XBt8oys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ee:1e:fb:d3:21:be:db:68:11:9a:53:f7:11:07:24:af:b1:2e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Jul 20 19:26:43 2025 GMT Not After : Jul 23 20:56:43 2025 GMT Subject: CN=204CB28AF0D26BC069A5278204E58B26F7B9B3DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:80:83:b9:15:6c:ba:e7:17:a6:93:5a:98: bd:51:64:f2:c9:31:0c:1a:3f:1f:7f:63:bf:ac:82: ed:55:ae:b2:76:6e:53:a1:ba:e0:d5:c5:cb:f1:c1: aa:2f:8a:24:a7:7b:f2:0b:12:09:aa:c0:7d:1e:8a: cd:5b:52:0e:15:c9:01:b4:0c:1e:10:12:8b:41:15: 64:3d:8e:b4:77:e3:8b:20:65:0c:28:49:f1:da:39: d6:11:ec:a2:b6:20:aa:05:b2:1e:6f:bd:f1:17:cf: 88:ad:2a:13:8f:29:09:a1:ec:db:6d:51:fe:8d:02: e3:7b:7d:da:da:0f:d0:ac:ef:d8:66:52:47:43:0f: 58:87:48:d9:4a:33:1b:5e:d8:8b:1f:8c:c7:ad:7a: c6:0c:35:4b:8e:74:0a:05:20:6a:83:51:16:27:c7: 44:a0:26:24:03:62:da:e0:0f:f3:d2:f8:97:b8:c6: 44:1f:9f:97:5c:ba:1c:4a:e8:bd:3e:00:7b:8b:24: 3a:f8:39:94:e0:3f:af:05:92:ad:a1:e3:58:8c:71: b0:ae:03:74:a7:94:4b:17:c0:43:84:2b:db:ee:df: 2e:36:ba:57:2a:67:22:f3:11:20:db:4a:eb:3d:b1: 95:6a:b9:aa:d0:5c:0e:79:ce:56:ce:1e:a2:0e:be: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:B2:8A:F0:D2:6B:C0:69:A5:27:82:04:E5:8B:26:F7:B9:B3:DA X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0d:b2:b7:1a:be:61:41:df:92:29:ed:9a:be:09:63:e6:2b: 01:63:64:29:12:12:ca:8e:ec:0a:2a:f0:a7:e4:1d:e1:34:f7: 19:3b:cd:3e:e0:02:09:9d:f8:9b:71:57:34:fa:62:c6:3c:f5: d8:b9:4b:4c:9f:2c:60:ee:dd:1c:ea:10:e6:3b:f5:d7:37:79: a3:56:1c:32:22:a5:c2:a2:87:2d:aa:f6:6d:24:5a:6a:6e:91: 27:49:f2:7d:b3:dd:30:d8:f8:f8:f3:dc:46:ac:fe:c7:86:f6: cf:00:e5:06:d6:ee:8b:0c:22:76:f8:4c:01:25:01:84:03:f3: 8b:b6:4e:19:75:13:da:72:8e:ce:37:42:e4:3e:21:97:9a:77: 90:8f:95:e7:67:f2:99:23:36:d5:a2:62:0d:40:c3:e9:98:79: 3a:75:75:4c:2a:0e:8a:7d:aa:9f:e8:a0:58:2c:54:32:82:fd: 45:50:c2:a8:e8:b9:d7:56:95:a5:f7:8c:9d:9b:c8:a3:8d:52: d3:1c:2e:b8:a7:48:84:d9:45:33:e2:3f:48:13:c1:06:5a:f6: be:43:5e:f7:c4:70:51:4e:a6:9a:f7:f0:71:a7:1d:f0:03:81: 5b:14:49:0b:08:57:f0:2c:7b:03:86:9d:a5:87:81:aa:48:a4: 72:ea:5e:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeu4e+9MhvttoEZpT9xEHJK+xLo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTA3MjAxOTI2NDNaFw0yNTA3MjMyMDU2NDNaMDMxMTAvBgNV BAMTKDIwNENCMjhBRjBEMjZCQzA2OUE1Mjc4MjA0RTU4QjI2RjdCOUIzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCof4CDuRVsuucXppNamL1RZPLJ MQwaPx9/Y7+sgu1VrrJ2blOhuuDVxcvxwaoviiSne/ILEgmqwH0eis1bUg4VyQG0 DB4QEotBFWQ9jrR344sgZQwoSfHaOdYR7KK2IKoFsh5vvfEXz4itKhOPKQmh7Ntt Uf6NAuN7fdraD9Cs79hmUkdDD1iHSNlKMxte2IsfjMetesYMNUuOdAoFIGqDURYn x0SgJiQDYtrgD/PS+Je4xkQfn5dcuhxK6L0+AHuLJDr4OZTgP68Fkq2h41iMcbCu A3SnlEsXwEOEK9vu3y42ulcqZyLzESDbSus9sZVquarQXA55zlbOHqIOvqTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEyyivDSa8BppSeCBOWLJve5s9owHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcNsrcavmFB35Ip7Zq+CWPmKwFjZCkSEsqO 7Aoq8KfkHeE09xk7zT7gAgmd+JtxVzT6YsY89di5S0yfLGDu3RzqEOY79dc3eaNW HDIipcKihy2q9m0kWmpukSdJ8n2z3TDY+Pjz3Eas/seG9s8A5QbW7osMInb4TAEl AYQD84u2Thl1E9pyjs43QuQ+IZead5CPledn8pkjNtWiYg1Aw+mYeTp1dUwqDop9 qp/ooFgsVDKC/UVQwqjouddWlaX3jJ2byKONUtMcLrinSITZRTPiP0gTwQZa9r5D XvfEcFFOppr38HGnHfADgVsUSQsIV/AsewOGnaWHgapIpHLqXlI= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:58 2025 by rpki-client