$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: Yak4p+Zmp7pu587nd0LurdD+uA1ZDX6byimk9lS5QZA= Subject key identifier: 62:AE:1D:63:5B:B1:FB:33:05:7A:AA:A8:B7:BD:EE:B7:68:6B:34:9B Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 6A8065347355F143733CE92A6048A32051B623C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: DB Signing time: Wed 03 Sep 2025 12:21:27 +0000 Manifest this update: Wed 03 Sep 2025 12:16:27 +0000 Manifest next update: Sun 07 Sep 2025 00:10:27 +0000 Files and hashes: 1: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: y8nMAt7KTK4hLfh5MafuZo2Ga03OqNeyrcQrGaTyMRI=) 2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 00:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:80:65:34:73:55:f1:43:73:3c:e9:2a:60:48:a3:20:51:b6:23:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: Sep 3 12:16:27 2025 GMT Not After : Sep 7 00:10:27 2025 GMT Subject: CN=62AE1D635BB1FB33057AAAA8B7BDEEB7686B349B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:7e:bc:5b:c5:74:17:ee:46:c0:4c:93:19: 8d:dd:c1:67:a7:fc:52:bf:dd:8f:82:10:b6:6c:90: 8b:56:99:d5:8e:f2:92:5c:64:ba:8f:0b:a4:af:5e: ef:d1:4c:0b:64:13:ea:82:9f:ff:f2:29:e3:07:b0: 97:f4:5d:51:31:91:99:45:5d:4e:76:61:0d:ae:00: 12:0d:7b:84:f2:04:f3:d7:8a:3c:4e:b4:4b:d5:90: 36:9f:2e:1f:7f:c0:f6:2c:d7:d8:17:4d:d4:79:a1: 3a:5b:89:45:b9:2b:a4:f8:07:72:41:00:e8:21:46: dc:aa:4d:4f:f4:3e:de:1c:4d:1d:b5:90:66:ac:9d: 55:fe:d4:04:d9:11:99:11:5d:e7:93:df:a7:96:15: d2:a2:f3:8a:2c:f8:a5:c6:55:9f:8b:44:51:23:20: cf:e3:b2:ae:ee:58:1e:6b:a8:08:6e:1d:bf:c4:5f: 62:0f:f2:c9:35:02:8f:b6:4c:84:89:d6:80:eb:b1: 5d:ac:49:87:2b:ec:39:8d:8b:91:7d:8c:35:15:ca: 5a:7d:fb:e7:0a:99:5a:77:be:b4:da:c7:69:c1:80: e2:a1:43:5f:96:7a:8c:d7:27:a9:76:7e:54:f0:a0: d7:d4:ab:e6:6f:a7:9d:48:2c:2c:1d:36:35:a8:4d: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AE:1D:63:5B:B1:FB:33:05:7A:AA:A8:B7:BD:EE:B7:68:6B:34:9B X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:de:13:3a:e2:61:6a:84:b6:50:cd:57:7d:31:9b:95:76:95: c4:b7:69:92:1b:68:c4:11:7d:c9:7d:33:75:1d:d0:e8:a5:90: c2:97:66:1d:07:f7:9a:99:1a:96:c6:37:06:5f:e7:5a:6a:1b: b8:0f:d2:ce:68:75:fa:6e:af:d7:f7:aa:a9:d6:76:93:29:ec: 86:43:ee:3d:88:cc:a1:20:66:34:f2:6a:ad:d0:99:ae:22:79: c9:bb:24:f6:34:3e:d7:fc:bb:be:4a:36:f5:ca:26:70:63:24: 26:68:7e:70:49:d2:c4:c2:10:7e:31:43:49:82:62:a4:af:05: 9a:3d:33:00:bf:af:c2:8f:c3:01:90:cc:af:ac:8c:26:2f:4e: 59:71:26:7b:38:94:34:71:5a:e8:51:d6:c7:39:8f:15:73:49: 4d:8c:e4:81:6d:5b:1a:97:d8:83:a7:8f:6d:b2:41:17:65:aa: e3:e4:07:a3:77:39:10:75:8f:eb:e3:52:b9:f4:97:df:e4:be: bb:80:03:d2:8c:8d:6f:12:c7:7d:a3:f1:49:56:4c:cc:86:d5: 7e:64:7d:3a:45:4c:ea:26:0f:86:b2:2b:8a:1e:91:f8:74:d9: 6e:56:6d:e2:cd:5f:5c:b6:9f:56:37:df:bf:3e:08:d3:7e:54: 6e:03:8d:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoBlNHNV8UNzPOkqYEijIFG2I8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNTA5MDMxMjE2MjdaFw0yNTA5MDcwMDEwMjdaMDMxMTAvBgNV BAMTKDYyQUUxRDYzNUJCMUZCMzMwNTdBQUFBOEI3QkRFRUI3Njg2QjM0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLn68W8V0F+5GwEyTGY3dwWen /FK/3Y+CELZskItWmdWO8pJcZLqPC6SvXu/RTAtkE+qCn//yKeMHsJf0XVExkZlF XU52YQ2uABINe4TyBPPXijxOtEvVkDafLh9/wPYs19gXTdR5oTpbiUW5K6T4B3JB AOghRtyqTU/0Pt4cTR21kGasnVX+1ATZEZkRXeeT36eWFdKi84os+KXGVZ+LRFEj IM/jsq7uWB5rqAhuHb/EX2IP8sk1Ao+2TISJ1oDrsV2sSYcr7DmNi5F9jDUVylp9 ++cKmVp3vrTax2nBgOKhQ1+WeozXJ6l2flTwoNfUq+Zvp51ILCwdNjWoTQF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYq4dY1ux+zMFeqqot73ut2hrNJswHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXeEzriYWqEtlDNV30xm5V2lcS3aZIbaMQR fcl9M3Ud0OilkMKXZh0H95qZGpbGNwZf51pqG7gP0s5odfpur9f3qqnWdpMp7IZD 7j2IzKEgZjTyaq3Qma4iecm7JPY0Ptf8u75KNvXKJnBjJCZofnBJ0sTCEH4xQ0mC YqSvBZo9MwC/r8KPwwGQzK+sjCYvTllxJns4lDRxWuhR1sc5jxVzSU2M5IFtWxqX 2IOnj22yQRdlquPkB6N3ORB1j+vjUrn0l9/kvruAA9KMjW8Sx32j8UlWTMyG1X5k fTpFTOomD4ayK4oekfh02W5WbeLNX1y2n1Y3378+CNN+VG4DjZE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:55 2025 by rpki-client