$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: YqBrIJQT+ChxhgzCHzikEu3ex6gjW+Xjo6C7CIVNUps= Subject key identifier: 76:44:F8:35:84:35:C7:4F:F0:51:98:C8:68:EC:87:2D:36:7F:D8:2C Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 6F3B9F64C8520694E18F77D8A92B55191E97B878 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 0223 Signing time: Tue 22 Jul 2025 18:32:02 +0000 Manifest this update: Tue 22 Jul 2025 18:27:02 +0000 Manifest next update: Sat 26 Jul 2025 02:31:02 +0000 Files and hashes: 1: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: gov+8lERQceEfbRJlCEYxrAX+p+Uqcfqwo3MMxlUE04=) 2: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: /sa4N19iB/o6G9OL5Szcq6Y4DsVMrF2Yrq0Ab1himGg=) 3: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: 7H0GdHg7L7zkSDLiSxs3CkgDGlREYCGdHWl+JFsGgmA=) 4: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: zZsK8yPumPYdoAJDbIYAZO7Hvkb6v9O+Qk710LlNmfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3b:9f:64:c8:52:06:94:e1:8f:77:d8:a9:2b:55:19:1e:97:b8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Jul 22 18:27:02 2025 GMT Not After : Jul 26 02:31:02 2025 GMT Subject: CN=7644F8358435C74FF05198C868EC872D367FD82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bb:e6:a8:bc:c5:9f:63:06:18:97:50:ea:7e: fe:b4:0b:52:67:8b:c9:5f:d4:4d:7b:ea:e6:b1:66: de:d3:27:f9:5f:db:76:ef:8e:95:74:1a:3f:2a:c5: f2:d9:05:6c:1f:ff:16:4f:38:a1:ca:4e:45:8c:85: 61:17:d1:3b:3c:a3:ad:17:8b:ed:45:90:7d:72:39: 39:97:95:0d:0d:4d:8b:51:e5:60:3c:76:89:02:8d: 20:1b:14:61:11:7f:dd:ab:c6:fe:79:9a:ad:a2:1e: 02:21:b0:f6:07:ce:1c:dc:a4:49:cd:8f:74:04:7b: 55:9b:87:60:c2:5a:76:20:1d:09:a9:ad:d2:25:e7: b8:7f:14:22:ad:fe:54:83:eb:62:bb:28:6d:bc:c5: 24:e3:8b:f0:16:dc:91:d0:0f:9e:58:d0:c5:d5:08: bb:7e:6e:82:d1:db:80:87:a5:3e:09:e6:8e:88:fb: ea:a6:21:96:2f:23:26:e6:fd:42:8d:22:df:17:fe: 49:bc:8e:f2:c5:53:03:fb:df:06:8c:2d:48:7d:3b: 04:3d:48:91:b7:9a:b2:79:4d:f8:57:33:50:0f:3d: 72:f7:76:f8:99:9d:a9:95:11:39:58:08:6e:75:e4: e9:47:62:2b:05:a8:e9:26:10:f9:1a:8c:f3:5f:64: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:44:F8:35:84:35:C7:4F:F0:51:98:C8:68:EC:87:2D:36:7F:D8:2C X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:45:e6:49:16:e4:b6:25:38:55:9e:b2:e0:41:42:71:ca:ee: 37:61:1b:ca:73:31:f4:90:e7:93:cb:f2:eb:a1:da:6b:79:b4: da:12:88:2b:66:b2:0c:e2:3b:51:00:79:d2:3e:b5:d5:5b:db: 60:be:58:b5:62:7b:06:06:4e:4b:9c:85:08:6d:d9:35:30:26: 30:d0:97:67:39:c7:7b:8b:80:57:1a:7a:49:c6:a2:d8:ee:86: e2:87:f4:85:a0:b2:fd:16:b4:9c:5c:d3:1d:c6:d8:e8:19:6c: 56:1f:7c:b0:4d:46:f9:14:18:ce:48:d6:ab:9d:71:5a:1a:5e: 9d:3c:92:b1:91:2b:71:02:98:d8:09:d7:d2:88:b1:56:0c:8a: ae:ec:e3:65:be:e0:2d:a8:93:78:ae:3a:74:72:f8:fe:b6:ed: f6:a6:92:79:08:e5:d2:94:71:63:09:9f:80:7b:e2:7f:ae:ef: 92:67:4a:af:78:20:f8:83:51:ce:f7:c5:b2:d8:67:15:1c:6a: 16:7c:bc:78:c4:bc:92:79:b1:e1:68:f1:77:8b:ca:5d:b9:ad: da:8b:d4:54:c9:49:c5:a1:46:f7:8f:a7:77:ac:49:1a:ec:69: e5:ee:c6:4c:00:31:95:c6:eb:76:57:3d:fa:ee:bc:7f:c2:30: f6:2b:f6:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzufZMhSBpThj3fYqStVGR6XuHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTA3MjIxODI3MDJaFw0yNTA3MjYwMjMxMDJaMDMxMTAvBgNV BAMTKDc2NDRGODM1ODQzNUM3NEZGMDUxOThDODY4RUM4NzJEMzY3RkQ4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhu+aovMWfYwYYl1Dqfv60C1Jn i8lf1E176uaxZt7TJ/lf23bvjpV0Gj8qxfLZBWwf/xZPOKHKTkWMhWEX0Ts8o60X i+1FkH1yOTmXlQ0NTYtR5WA8dokCjSAbFGERf92rxv55mq2iHgIhsPYHzhzcpEnN j3QEe1Wbh2DCWnYgHQmprdIl57h/FCKt/lSD62K7KG28xSTji/AW3JHQD55Y0MXV CLt+boLR24CHpT4J5o6I++qmIZYvIybm/UKNIt8X/km8jvLFUwP73waMLUh9OwQ9 SJG3mrJ5TfhXM1APPXL3dviZnamVETlYCG515OlHYisFqOkmEPkajPNfZH35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdkT4NYQ1x0/wUZjIaOyHLTZ/2CwwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBF5kkW5LYlOFWesuBBQnHK7jdhG8pzMfSQ 55PL8uuh2mt5tNoSiCtmsgziO1EAedI+tdVb22C+WLViewYGTkuchQht2TUwJjDQ l2c5x3uLgFcaeknGotjuhuKH9IWgsv0WtJxc0x3G2OgZbFYffLBNRvkUGM5I1qud cVoaXp08krGRK3ECmNgJ19KIsVYMiq7s42W+4C2ok3iuOnRy+P627famknkI5dKU cWMJn4B74n+u75JnSq94IPiDUc73xbLYZxUcahZ8vHjEvJJ5seFo8XeLyl25rdqL 1FTJScWhRvePp3esSRrsaeXuxkwAMZXG63ZXPfruvH/CMPYr9k8= -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:39 2025 by rpki-client