$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft File: 35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json) Hash identifier: jDVc03ykUaPkrLkpOlDRTYfQwzL9W1W93zGjEFJ3lFw= Subject key identifier: 7A:A6:6E:29:3A:2C:AB:08:55:76:57:6B:0D:54:F5:0C:A1:8E:35:20 Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 60033653BE7472C4530831BD9EAE0041A6248A30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft Manifest number: 017D Signing time: Fri 05 Sep 2025 00:41:06 +0000 Manifest this update: Fri 05 Sep 2025 00:36:06 +0000 Manifest next update: Mon 08 Sep 2025 02:06:06 +0000 Files and hashes: 1: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=) 2: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: Zyj+cmEJLF5ueQ1WHGcb/jz6upmbCBDhF01uw2n8mqU=) 3: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: vX6oIYot0ycD+h0R9asR+LMCFZ+FsK/gdUHsH6J7G3g=) 4: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: k5f9hejsOAv09ZcQgcEl6CJsG62/5xhbQ/jir+ngluc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:03:36:53:be:74:72:c4:53:08:31:bd:9e:ae:00:41:a6:24:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: Sep 5 00:36:06 2025 GMT Not After : Sep 8 02:06:06 2025 GMT Subject: CN=7AA66E293A2CAB085576576B0D54F50CA18E3520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:ab:c1:44:0f:2d:a3:2a:13:13:b9:7d:34: 41:fc:00:0e:1c:5b:41:d9:a4:ed:33:8a:05:6b:42: c0:bc:df:d8:4d:8f:3e:5e:b0:ae:7d:6d:2e:67:be: 71:d7:ca:ab:d0:9d:a6:59:99:a2:08:c5:ce:c8:1a: 18:69:07:68:ec:8a:da:12:f8:de:36:3d:fb:7f:53: 41:a4:f0:d8:14:31:e7:21:72:ac:03:a4:e7:65:08: 07:e7:ec:80:7a:8c:d9:20:02:5d:f7:d6:b1:2a:9a: 42:4d:5d:89:36:9c:da:61:83:d2:16:cd:43:49:e7: fc:08:8e:83:9e:6f:af:c1:d9:44:48:7f:d2:6b:87: db:cd:ec:8f:56:6a:e7:9b:06:ee:af:b6:08:34:27: 57:a7:90:38:36:14:07:ae:da:a4:09:ab:f0:be:31: e9:91:2a:02:75:e8:7d:e4:52:06:68:c4:98:94:c8: a4:59:86:ee:8c:98:09:f5:0e:37:82:3f:7a:0f:83: b3:e4:24:08:19:44:5b:9e:59:ef:ce:1f:4e:1d:6b: 81:ff:8e:77:cf:39:54:a2:00:20:c5:22:59:c3:a0: f1:ed:9e:7b:44:84:b5:60:2a:ae:0b:4c:94:e1:a9: d7:f2:1a:73:08:b1:6b:9e:e3:db:d0:9e:9d:3f:4d: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A6:6E:29:3A:2C:AB:08:55:76:57:6B:0D:54:F5:0C:A1:8E:35:20 X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c7:d3:03:04:cf:93:31:f6:1a:1a:d3:1d:f8:aa:ce:a5:a5: ee:27:3d:67:e3:31:c9:d9:5e:fe:1b:bb:c4:14:3c:96:de:46: c9:0c:19:a9:c0:f6:54:36:56:83:d3:b5:ee:16:c5:98:7d:37: 59:fc:45:60:48:88:1a:d1:ea:b9:68:16:33:76:f1:92:f7:5b: b4:6a:92:e7:a7:a2:b5:25:ed:1b:aa:3f:48:bb:ff:be:8c:5d: b2:59:00:9c:dc:3f:e1:c7:98:e1:b1:4e:d2:27:b4:7a:84:d8: d8:cb:91:56:5e:bc:69:d0:41:63:42:3d:d8:9e:d1:33:37:c6: 2f:3f:8e:ca:c4:f9:1e:8f:06:3a:9c:e1:e0:3e:e0:2c:5a:98: ef:56:27:85:b2:7e:4e:55:51:a4:06:55:60:71:a5:8b:72:1c: 7d:99:08:a7:e7:c7:1c:58:9f:ff:01:65:f8:51:ea:5a:db:7c: 5e:c0:81:d1:7b:da:1a:9c:79:ff:46:f1:76:49:e4:13:22:ff: d9:59:ac:75:df:8e:72:f7:82:39:40:b5:fc:81:8c:0e:f0:78: 3d:5f:1d:77:30:fa:9a:be:a1:36:b3:20:55:6e:e2:79:cb:5e: 28:8f:4e:74:48:86:6d:23:8d:c8:2c:ba:c9:46:9e:93:31:8a: 59:2b:df:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAM2U750csRTCDG9nq4AQaYkijAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNTA5MDUwMDM2MDZaFw0yNTA5MDgwMjA2MDZaMDMxMTAvBgNV BAMTKDdBQTY2RTI5M0EyQ0FCMDg1NTc2NTc2QjBENTRGNTBDQTE4RTM1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKqvBRA8toyoTE7l9NEH8AA4c W0HZpO0zigVrQsC839hNjz5esK59bS5nvnHXyqvQnaZZmaIIxc7IGhhpB2jsitoS +N42Pft/U0Gk8NgUMechcqwDpOdlCAfn7IB6jNkgAl331rEqmkJNXYk2nNphg9IW zUNJ5/wIjoOeb6/B2URIf9Jrh9vN7I9WauebBu6vtgg0J1enkDg2FAeu2qQJq/C+ MemRKgJ16H3kUgZoxJiUyKRZhu6MmAn1DjeCP3oPg7PkJAgZRFueWe/OH04da4H/ jnfPOVSiACDFIlnDoPHtnntEhLVgKq4LTJThqdfyGnMIsWue49vQnp0/TQwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqZuKTosqwhVdldrDVT1DKGONSAwHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrH0wMEz5Mx9hoa0x34qs6lpe4nPWfjMcnZ Xv4bu8QUPJbeRskMGanA9lQ2VoPTte4WxZh9N1n8RWBIiBrR6rloFjN28ZL3W7Rq kuenorUl7RuqP0i7/76MXbJZAJzcP+HHmOGxTtIntHqE2NjLkVZevGnQQWNCPdie 0TM3xi8/jsrE+R6PBjqc4eA+4CxamO9WJ4Wyfk5VUaQGVWBxpYtyHH2ZCKfnxxxY n/8BZfhR6lrbfF7AgdF72hqcef9G8XZJ5BMi/9lZrHXfjnL3gjlAtfyBjA7weD1f HXcw+pq+oTazIFVu4nnLXiiPTnRIhm0jjcgsuslGnpMxilkr3+s= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client