$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: ZLVvubxKpx1W5VlRBwTPAOI+1Gqpp6bbv7OAiGVNVf8= Subject key identifier: 6C:66:B6:41:CB:59:40:EC:CD:8F:EC:0E:B8:D4:A2:0D:A4:22:AE:63 Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 4C8DC53782867D4B1031D64B0F446175298CECAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0232 Signing time: Sun 01 Jun 2025 23:00:39 +0000 Manifest this update: Sun 01 Jun 2025 22:55:39 +0000 Manifest next update: Thu 05 Jun 2025 01:21:39 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: CxxrBCTcEnGjaGYc0vJRU2/3zKNMYKBcDckhMHuLDHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 01:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8d:c5:37:82:86:7d:4b:10:31:d6:4b:0f:44:61:75:29:8c:ec:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Jun 1 22:55:39 2025 GMT Not After : Jun 5 01:21:39 2025 GMT Subject: CN=6C66B641CB5940ECCD8FEC0EB8D4A20DA422AE63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:af:8c:cb:70:fc:36:bc:f5:f6:aa:22:65: a9:da:2c:51:16:6b:d3:d3:7a:46:6e:48:42:21:75: 1d:64:80:bc:db:69:a6:90:22:6d:3b:e2:0e:6e:a7: 4c:29:0a:02:e8:1d:e9:3d:7a:22:2d:b9:fe:a6:46: 1e:eb:94:c5:b5:89:e3:98:db:46:8d:37:7c:cb:7f: c9:6f:9e:f9:4b:36:49:9f:76:8b:a2:d0:48:ca:c5: 3a:32:5a:bc:8f:7b:22:f7:5f:9a:02:2c:fa:85:38: 62:aa:d9:28:93:f9:87:a5:12:9a:5e:d3:27:e1:5b: 76:85:2d:ed:17:38:73:5a:50:96:b9:2e:97:85:47: 0c:66:31:79:0b:1e:01:a3:68:62:eb:4a:a5:89:89: 54:c3:ed:bf:14:a0:9e:de:b4:28:70:5f:53:da:eb: 24:7a:68:ed:62:7a:6d:e8:5e:2d:80:a3:8d:91:1d: 38:3f:a3:40:23:44:a3:4c:02:6e:1f:12:ca:d3:15: b7:5c:b0:b6:46:db:c6:13:de:b8:23:38:b4:26:cc: 57:80:f8:08:a3:ac:cf:b3:2f:05:88:9d:05:0e:12: 24:f1:bc:fc:82:a6:ed:cd:9a:7a:31:30:97:f3:0d: 1c:bf:eb:a1:14:7b:e2:58:41:a8:f4:be:f1:0e:a7: e5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:66:B6:41:CB:59:40:EC:CD:8F:EC:0E:B8:D4:A2:0D:A4:22:AE:63 X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:43:ee:57:88:e4:d5:cb:a1:8a:c9:fd:1c:dc:94:13:4b:0f: 0f:21:57:c9:a3:ea:24:c6:b3:4d:6c:10:6f:a9:e3:f2:ac:94: 27:f4:65:08:68:11:b2:3e:16:77:e4:d9:5a:c5:d6:16:37:fe: 16:61:d5:c3:7c:e4:f2:0d:9f:96:5d:6d:d3:62:c4:61:48:ce: af:be:66:7a:82:77:85:75:b7:a4:c2:84:7b:89:0d:e5:23:89: e4:f3:dd:26:0a:6f:77:67:ba:e5:5a:1f:43:6c:94:d1:f9:43: 6a:17:ad:7a:78:6c:3c:95:87:d0:cc:1c:0f:3a:db:fb:72:dd: cd:92:7c:37:b3:8d:9a:be:6e:17:53:8d:dd:10:c2:82:2d:04: ad:31:73:0b:23:94:ac:7d:53:ef:e4:58:cb:b4:01:5c:6e:65: f8:2a:a5:0a:21:bc:bd:5f:22:19:23:7f:83:f5:ed:ea:b5:36: 2c:d0:0a:ba:44:fa:e7:e8:77:6a:ee:71:d6:3c:d4:3a:ec:55: 53:eb:0c:e5:8f:d7:23:e4:a1:8c:dd:4f:78:96:f5:05:83:e7: d4:0f:41:72:7c:3b:44:69:96:a3:1b:c2:59:c4:22:1c:e7:cc: d8:a4:39:b4:6d:47:04:35:97:c1:8d:56:70:57:47:ba:aa:c2: 58:df:f9:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTI3FN4KGfUsQMdZLD0RhdSmM7K4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA2MDEyMjU1MzlaFw0yNTA2MDUwMTIxMzlaMDMxMTAvBgNV BAMTKDZDNjZCNjQxQ0I1OTQwRUNDRDhGRUMwRUI4RDRBMjBEQTQyMkFFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m6+My3D8Nrz19qoiZanaLFEW a9PTekZuSEIhdR1kgLzbaaaQIm074g5up0wpCgLoHek9eiItuf6mRh7rlMW1ieOY 20aNN3zLf8lvnvlLNkmfdoui0EjKxToyWryPeyL3X5oCLPqFOGKq2SiT+YelEppe 0yfhW3aFLe0XOHNaUJa5LpeFRwxmMXkLHgGjaGLrSqWJiVTD7b8UoJ7etChwX1Pa 6yR6aO1iem3oXi2Ao42RHTg/o0AjRKNMAm4fEsrTFbdcsLZG28YT3rgjOLQmzFeA +AijrM+zLwWInQUOEiTxvPyCpu3NmnoxMJfzDRy/66EUe+JYQaj0vvEOp+WLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGa2QctZQOzNj+wOuNSiDaQirmMwHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpD7leI5NXLoYrJ/RzclBNLDw8hV8mj6iTG s01sEG+p4/KslCf0ZQhoEbI+Fnfk2VrF1hY3/hZh1cN85PINn5ZdbdNixGFIzq++ ZnqCd4V1t6TChHuJDeUjieTz3SYKb3dnuuVaH0NslNH5Q2oXrXp4bDyVh9DMHA86 2/ty3c2SfDezjZq+bhdTjd0QwoItBK0xcwsjlKx9U+/kWMu0AVxuZfgqpQohvL1f Ihkjf4P17eq1NizQCrpE+ufod2rucdY81DrsVVPrDOWP1yPkoYzdT3iW9QWD59QP QXJ8O0RplqMbwlnEIhznzNikObRtRwQ1l8GNVnBXR7qqwljf+Y4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:21 2025 by rpki-client