$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: ttekGgfAOgm38O1CANe6th5M0CdRphH9nw0LMnVYNiM= Subject key identifier: 45:82:AA:62:53:8C:ED:2E:FB:81:CD:4B:B2:A8:FC:C9:0E:B4:15:EF Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 389DC63375488D07598C933C3D9FFD715966EE21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 025C Signing time: Fri 05 Sep 2025 07:30:41 +0000 Manifest this update: Fri 05 Sep 2025 07:25:41 +0000 Manifest next update: Mon 08 Sep 2025 16:10:41 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: lMUdYSZ+58LOnBS0YvBw7S13zObD9VKjneYyPC062HU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9d:c6:33:75:48:8d:07:59:8c:93:3c:3d:9f:fd:71:59:66:ee:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Sep 5 07:25:41 2025 GMT Not After : Sep 8 16:10:41 2025 GMT Subject: CN=4582AA62538CED2EFB81CD4BB2A8FCC90EB415EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:20:9a:34:3e:33:f0:00:90:c4:8c:7c:97:15: f0:2b:3a:0e:77:5e:10:fa:98:65:d6:36:20:50:9a: b6:3a:35:da:69:58:8d:05:01:c5:17:57:fe:7b:8f: da:fe:3b:2b:42:19:fd:b2:6a:8b:4f:c0:c3:86:8a: 07:ec:07:cd:07:c9:04:9f:57:4d:4a:98:94:19:87: 41:63:00:f4:36:05:46:cf:28:7d:a2:44:bb:ee:6d: dc:67:71:ed:68:5b:39:ae:1e:61:49:fc:63:fe:ed: 5a:de:72:99:bc:65:c6:a7:02:bb:0d:bb:a7:19:b7: fe:0c:be:f0:d7:1f:cc:ce:a2:e5:0a:19:8c:f0:b6: 22:9f:5d:3d:44:94:5d:24:cc:eb:7d:a3:3e:be:7f: 49:ac:76:eb:85:5c:76:de:a7:8c:42:00:c5:31:99: 6b:8f:66:06:a6:9f:2f:13:4c:18:da:f6:49:66:f8: 88:1c:cd:78:be:4c:77:9b:0a:5e:01:82:28:93:2a: 6d:e4:d4:ee:19:58:36:4e:be:c7:bf:f2:bc:fa:2f: c5:84:a2:8c:88:92:71:55:8c:f6:60:b5:8e:9c:bd: 9d:4e:a0:ff:d8:27:a1:39:ed:68:7c:fc:1f:98:15: 0a:7a:ab:af:b2:03:06:c9:3e:84:ca:7d:fa:cb:7f: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:82:AA:62:53:8C:ED:2E:FB:81:CD:4B:B2:A8:FC:C9:0E:B4:15:EF X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:67:98:ae:f7:f5:e6:33:b8:92:95:0f:3b:01:80:70:a7:e5: f1:57:91:d0:a0:59:42:07:f2:ed:68:b8:b1:6d:32:43:10:b4: 0d:80:65:bd:5e:0c:99:97:b7:95:72:e6:b3:20:5c:83:bb:42: 37:2d:50:7e:db:52:8c:0d:be:8d:0f:65:a3:6f:3b:a0:96:1e: d6:96:8b:d9:7f:f9:e5:fa:38:ba:c3:e5:ad:66:5c:0a:70:58: d9:fb:67:2d:41:5a:41:fb:99:30:4a:c9:bb:7f:e3:16:aa:11: 40:6b:1e:d8:6f:38:dd:c5:9f:c2:f8:a7:6f:ca:50:4f:2b:5a: 40:3d:50:ca:0e:4a:ff:c6:74:40:2b:de:50:21:c4:4d:87:dd: 46:3c:5e:78:38:07:40:53:f9:f6:a4:59:dd:3f:9e:de:d7:27: 2e:a0:35:3b:7b:bb:34:45:57:8a:06:49:24:f2:15:48:93:e6: 55:5f:ba:0b:1a:fb:b8:1f:4e:4c:6f:14:9a:e7:e5:d1:04:38: 6f:be:d8:c3:1b:d1:a7:f9:c0:f9:09:1f:bb:60:d3:e3:7b:28: 6d:08:79:03:26:87:96:36:fd:29:a1:33:c9:66:5d:df:ea:e6: ff:e2:06:f9:51:24:48:e3:7c:e5:78:f7:7f:c0:61:d0:25:34: f9:2b:6b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJ3GM3VIjQdZjJM8PZ/9cVlm7iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA5MDUwNzI1NDFaFw0yNTA5MDgxNjEwNDFaMDMxMTAvBgNV BAMTKDQ1ODJBQTYyNTM4Q0VEMkVGQjgxQ0Q0QkIyQThGQ0M5MEVCNDE1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIJo0PjPwAJDEjHyXFfArOg53 XhD6mGXWNiBQmrY6NdppWI0FAcUXV/57j9r+OytCGf2yaotPwMOGigfsB80HyQSf V01KmJQZh0FjAPQ2BUbPKH2iRLvubdxnce1oWzmuHmFJ/GP+7Vrecpm8ZcanArsN u6cZt/4MvvDXH8zOouUKGYzwtiKfXT1ElF0kzOt9oz6+f0msduuFXHbep4xCAMUx mWuPZgamny8TTBja9klm+IgczXi+THebCl4BgiiTKm3k1O4ZWDZOvse/8rz6L8WE ooyIknFVjPZgtY6cvZ1OoP/YJ6E57Wh8/B+YFQp6q6+yAwbJPoTKffrLf8g9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYKqYlOM7S77gc1Lsqj8yQ60Fe8wHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5nmK739eYzuJKVDzsBgHCn5fFXkdCgWUIH 8u1ouLFtMkMQtA2AZb1eDJmXt5Vy5rMgXIO7QjctUH7bUowNvo0PZaNvO6CWHtaW i9l/+eX6OLrD5a1mXApwWNn7Zy1BWkH7mTBKybt/4xaqEUBrHthvON3Fn8L4p2/K UE8rWkA9UMoOSv/GdEAr3lAhxE2H3UY8Xng4B0BT+fakWd0/nt7XJy6gNTt7uzRF V4oGSSTyFUiT5lVfugsa+7gfTkxvFJrn5dEEOG++2MMb0af5wPkJH7tg0+N7KG0I eQMmh5Y2/SmhM8lmXd/q5v/iBvlRJEjjfOV493/AYdAlNPkra0c= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:59 2025 by rpki-client