$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: HUsSo+FnvUpei1HuM1eBYKd6akpBw8pIrT9yAUZzJzY= Subject key identifier: 98:74:13:15:06:FB:20:D1:F0:97:74:D0:EE:F5:97:C1:9E:14:B7:8B Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 20E59D4181CD666FC4FCE85C191E21CBB2C36892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0218 Signing time: Sat 05 Apr 2025 11:00:38 +0000 Manifest this update: Sat 05 Apr 2025 10:55:38 +0000 Manifest next update: Tue 08 Apr 2025 16:12:38 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: JfUNFMK77k3HmtSbh93qgthYY2e/VlTIb2NPfnSA2Ck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e5:9d:41:81:cd:66:6f:c4:fc:e8:5c:19:1e:21:cb:b2:c3:68:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Apr 5 10:55:38 2025 GMT Not After : Apr 8 16:12:38 2025 GMT Subject: CN=9874131506FB20D1F09774D0EEF597C19E14B78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:b1:b9:9e:4a:9b:23:ac:39:69:f2:34:ec: 6e:5a:fa:db:6b:a8:d8:61:0c:d6:5f:58:38:bd:10: 4b:e8:57:fe:08:32:71:de:c9:fa:d8:99:15:a6:d4: 3d:2a:ee:08:69:e1:eb:d8:1f:12:62:55:55:f4:58: 25:12:06:85:f5:bb:9d:97:15:4e:e1:0b:b6:d5:f1: f0:92:9a:ce:99:12:50:66:fd:e4:0c:b8:c9:e7:00: ff:27:5b:87:3f:12:ea:a1:06:7f:ec:af:91:a2:2b: a8:8e:b2:c4:5f:95:62:bd:d3:eb:48:60:ce:7f:ea: aa:7d:ff:32:db:c8:73:03:af:23:2b:5b:2f:16:68: 55:72:f3:08:8b:a5:27:65:3b:b8:6a:78:d7:b7:93: 60:b8:7e:c5:3d:ee:b6:96:4c:e7:4b:e9:70:dd:95: 52:e4:5b:53:a2:3d:f3:bf:16:f0:17:53:ac:43:7f: 13:6f:9b:ea:18:a3:f3:54:f6:99:89:35:3f:d1:66: 9a:e4:95:ee:51:bd:10:3c:6b:f2:bc:c6:73:ec:36: af:97:b2:12:d5:bf:db:9e:6b:1e:f2:dc:91:4a:6e: b3:d7:aa:5a:f7:63:df:54:7c:51:03:26:4e:27:a8: a8:26:cb:9d:3b:44:0e:39:3c:11:da:76:52:78:65: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:13:15:06:FB:20:D1:F0:97:74:D0:EE:F5:97:C1:9E:14:B7:8B X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:66:28:19:79:1c:52:b6:9f:d3:72:33:62:1b:68:ce:4e:a9: f8:18:51:d0:33:86:d4:e8:cb:9f:4d:40:5a:77:c0:b2:f5:b5: f6:4b:a3:8f:1c:0d:a5:80:16:d4:0c:3c:16:d0:cc:cd:e5:11: 84:83:c2:0a:fc:0a:65:19:b9:d1:61:8a:62:54:c5:d9:a9:e7: b6:5f:e3:5e:20:33:bf:f8:06:5b:14:a5:d1:f5:15:6b:af:f2: cd:11:71:a9:64:fe:11:45:e6:a7:f7:90:92:47:00:42:ec:26: 1c:86:70:c5:8f:c9:18:b4:b1:99:29:29:02:3c:61:be:7c:ba: 14:94:5f:5c:7a:7a:40:78:c7:14:0d:20:22:f4:ef:ba:bb:35: 40:cb:97:50:98:51:91:97:dd:8c:c1:84:44:ea:bf:1f:1a:86: 4b:ce:8e:01:19:29:69:64:89:8a:d0:e7:b8:bd:4b:ab:cc:e9: 0c:69:c1:d5:b4:93:96:5b:22:f2:88:80:a7:eb:62:63:ec:7f: 0f:89:f9:93:d6:34:bb:c6:ec:bb:86:b8:fd:db:57:8a:d8:06: 98:db:13:ad:dc:68:98:af:8f:cc:78:b7:32:d8:fc:cc:85:5f: 13:9a:80:c5:12:5d:18:4f:3f:b8:f7:ca:86:85:d1:77:69:36: 12:b0:e5:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOWdQYHNZm/E/OhcGR4hy7LDaJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA0MDUxMDU1MzhaFw0yNTA0MDgxNjEyMzhaMDMxMTAvBgNV BAMTKDk4NzQxMzE1MDZGQjIwRDFGMDk3NzREMEVFRjU5N0MxOUUxNEI3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHLG5nkqbI6w5afI07G5a+ttr qNhhDNZfWDi9EEvoV/4IMnHeyfrYmRWm1D0q7ghp4evYHxJiVVX0WCUSBoX1u52X FU7hC7bV8fCSms6ZElBm/eQMuMnnAP8nW4c/EuqhBn/sr5GiK6iOssRflWK90+tI YM5/6qp9/zLbyHMDryMrWy8WaFVy8wiLpSdlO7hqeNe3k2C4fsU97raWTOdL6XDd lVLkW1OiPfO/FvAXU6xDfxNvm+oYo/NU9pmJNT/RZprkle5RvRA8a/K8xnPsNq+X shLVv9ueax7y3JFKbrPXqlr3Y99UfFEDJk4nqKgmy507RA45PBHadlJ4ZbQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmHQTFQb7INHwl3TQ7vWXwZ4Ut4swHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdmKBl5HFK2n9NyM2IbaM5OqfgYUdAzhtTo y59NQFp3wLL1tfZLo48cDaWAFtQMPBbQzM3lEYSDwgr8CmUZudFhimJUxdmp57Zf 414gM7/4BlsUpdH1FWuv8s0Rcalk/hFF5qf3kJJHAELsJhyGcMWPyRi0sZkpKQI8 Yb58uhSUX1x6ekB4xxQNICL077q7NUDLl1CYUZGX3YzBhETqvx8ahkvOjgEZKWlk iYrQ57i9S6vM6QxpwdW0k5ZbIvKIgKfrYmPsfw+J+ZPWNLvG7LuGuP3bV4rYBpjb E63caJivj8x4tzLY/MyFXxOagMUSXRhPP7j3yoaF0XdpNhKw5V8= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:06 2025 by rpki-client