$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft File: 35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json) Hash identifier: lJb2X+fj8EbKTPTZeZkkIFQS/r3vMQlWWIQzfsHXtxU= Subject key identifier: 3B:FF:60:2F:50:16:10:6F:22:3B:80:CD:1D:67:44:86:18:AC:80:1A Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 6A4A03FD0EF6ECD11C6E4D158371BBAC0CC7BB3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft Manifest number: 0140 Signing time: Tue 22 Apr 2025 07:41:03 +0000 Manifest this update: Tue 22 Apr 2025 07:36:03 +0000 Manifest next update: Fri 25 Apr 2025 14:00:03 +0000 Files and hashes: 1: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: NXrfoIGmt87gFH+5fOCQaWhwz8PmN9teepwOuqHNFZ8=) 2: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: vX6oIYot0ycD+h0R9asR+LMCFZ+FsK/gdUHsH6J7G3g=) 3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=) 4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: Zyj+cmEJLF5ueQ1WHGcb/jz6upmbCBDhF01uw2n8mqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 14:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4a:03:fd:0e:f6:ec:d1:1c:6e:4d:15:83:71:bb:ac:0c:c7:bb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: Apr 22 07:36:03 2025 GMT Not After : Apr 25 14:00:03 2025 GMT Subject: CN=3BFF602F5016106F223B80CD1D67448618AC801A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:71:b7:25:d6:b4:1e:6a:f0:cc:9f:73:67: 23:d4:03:4c:c4:69:4a:66:59:f3:1e:b8:7f:90:12: 10:d5:6d:04:75:47:2b:9a:7d:67:42:ba:34:9c:ce: 78:9f:49:f5:81:d8:d9:0a:38:87:cb:53:87:f5:9f: 3b:e4:b8:26:70:3d:69:98:22:13:8e:ad:fd:fe:89: 29:50:5a:82:04:56:54:d6:9e:42:d4:57:49:69:77: 3b:cd:7a:8c:43:5e:9c:45:06:8e:5c:d3:d9:52:1a: ed:e4:8d:df:cf:d2:0d:75:cf:bc:f7:1d:73:dd:78: e7:6b:33:f2:8d:98:c2:0b:20:6b:da:63:53:54:18: 42:28:ce:47:31:61:37:19:c2:41:c1:99:a9:5a:ec: 9a:70:8d:84:d0:9a:63:d3:94:bf:ea:63:f4:8d:48: 27:a2:fd:3b:23:7e:c5:5a:37:a2:51:81:e0:05:30: 91:c0:e2:10:d3:1c:bc:80:a7:97:43:dc:7c:8e:f8: af:89:14:5e:48:11:5b:a6:5b:67:64:d3:65:ef:c9: 40:2e:3c:3b:51:b6:6b:ea:24:4c:03:ff:17:03:c1: 0c:fd:91:d3:d9:8a:f6:80:a8:ae:80:0d:1c:d3:dc: a5:72:26:b2:99:1b:bd:cf:63:b9:22:7c:6c:72:23: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:60:2F:50:16:10:6F:22:3B:80:CD:1D:67:44:86:18:AC:80:1A X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:dd:ed:59:3d:17:bf:8a:3e:fd:58:57:7a:f3:ff:57:80:cc: 91:1b:46:41:c2:af:bd:c6:96:5c:28:47:43:82:7a:91:b3:8b: a7:ec:7e:55:5d:0c:58:60:0e:82:42:08:2f:e6:c8:0f:5a:e2: c7:5f:d6:9c:89:39:78:4b:61:57:52:c8:0f:a2:64:07:16:80: 07:9b:d2:ba:cf:c0:b5:d8:42:b0:ba:7a:c5:27:04:67:7f:aa: e4:67:08:e7:d4:31:2e:d9:c7:35:2f:6a:a7:5b:68:03:eb:cd: a2:79:0a:50:e5:1d:a6:50:f2:f7:f7:9f:63:fd:55:31:21:be: fc:fd:b6:00:d0:5d:52:af:d0:82:cf:16:6f:84:6b:cb:3d:80: c5:88:ec:6f:0e:53:b7:15:e5:32:a0:10:51:4b:af:94:36:cb: 23:fd:97:94:23:ca:d3:f4:9d:4e:ac:09:ca:4b:41:bc:ac:ca: 2a:f9:21:15:ed:d4:75:f8:7a:fc:08:53:74:67:5a:08:aa:70: f1:dd:b3:1e:e1:9d:3c:46:6d:b7:31:64:a8:bf:42:a3:48:5a: cd:8c:21:09:bf:f3:fc:da:c4:4b:5c:43:f2:f7:88:c9:1f:74: a1:68:46:1b:c7:c8:5c:da:34:92:96:42:e2:32:a6:f5:8a:87: 1d:15:06:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUakoD/Q727NEcbk0Vg3G7rAzHuz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNTA0MjIwNzM2MDNaFw0yNTA0MjUxNDAwMDNaMDMxMTAvBgNV BAMTKDNCRkY2MDJGNTAxNjEwNkYyMjNCODBDRDFENjc0NDg2MThBQzgwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxHG3Jda0HmrwzJ9zZyPUA0zE aUpmWfMeuH+QEhDVbQR1RyuafWdCujScznifSfWB2NkKOIfLU4f1nzvkuCZwPWmY IhOOrf3+iSlQWoIEVlTWnkLUV0lpdzvNeoxDXpxFBo5c09lSGu3kjd/P0g11z7z3 HXPdeOdrM/KNmMILIGvaY1NUGEIozkcxYTcZwkHBmala7JpwjYTQmmPTlL/qY/SN SCei/TsjfsVaN6JRgeAFMJHA4hDTHLyAp5dD3HyO+K+JFF5IEVumW2dk02XvyUAu PDtRtmvqJEwD/xcDwQz9kdPZivaAqK6ADRzT3KVyJrKZG73PY7kifGxyI6SlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/9gL1AWEG8iO4DNHWdEhhisgBowHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTd7Vk9F7+KPv1YV3rz/1eAzJEbRkHCr73G llwoR0OCepGzi6fsflVdDFhgDoJCCC/myA9a4sdf1pyJOXhLYVdSyA+iZAcWgAeb 0rrPwLXYQrC6esUnBGd/quRnCOfUMS7ZxzUvaqdbaAPrzaJ5ClDlHaZQ8vf3n2P9 VTEhvvz9tgDQXVKv0ILPFm+Ea8s9gMWI7G8OU7cV5TKgEFFLr5Q2yyP9l5QjytP0 nU6sCcpLQbysyir5IRXt1HX4evwIU3RnWgiqcPHdsx7hnTxGbbcxZKi/QqNIWs2M IQm/8/zaxEtcQ/L3iMkfdKFoRhvHyFzaNJKWQuIypvWKhx0VBuQ= -----END CERTIFICATE-----Generated at Tue Apr 22 22:37:52 2025 by rpki-client