$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft File: 35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json) Hash identifier: 8c6scFzFl33Gbipe0CCrnznH1gzahCLD+nqu1ec+Wi0= Subject key identifier: BD:D6:72:34:E8:6F:5F:0C:41:10:B8:DF:C6:FE:62:C8:90:9B:65:2F Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 7F30178478A89847A2946C4CF1847F4C188C3080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft Manifest number: 0156 Signing time: Tue 10 Jun 2025 13:11:07 +0000 Manifest this update: Tue 10 Jun 2025 13:06:07 +0000 Manifest next update: Fri 13 Jun 2025 18:48:07 +0000 Files and hashes: 1: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: Zyj+cmEJLF5ueQ1WHGcb/jz6upmbCBDhF01uw2n8mqU=) 2: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: 8CbNAuB81AhCVabgFiqmeXnvTEPXZt9laf74Nw28GWs=) 3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=) 4: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: vX6oIYot0ycD+h0R9asR+LMCFZ+FsK/gdUHsH6J7G3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 18:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:30:17:84:78:a8:98:47:a2:94:6c:4c:f1:84:7f:4c:18:8c:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: Jun 10 13:06:07 2025 GMT Not After : Jun 13 18:48:07 2025 GMT Subject: CN=BDD67234E86F5F0C4110B8DFC6FE62C8909B652F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:37:1b:2a:5b:fd:e3:32:ab:69:21:02:b1: 59:3a:2a:48:1e:cb:4e:08:84:db:a2:af:5c:13:2c: df:6d:7d:a7:00:ef:ea:aa:54:1f:8e:f8:98:9c:f4: 67:8e:87:fa:5c:6a:cb:6b:08:03:1a:4c:73:2a:1d: 1c:38:ac:01:3e:92:74:5a:f1:3e:48:e8:d8:32:58: 2f:93:d2:54:96:5f:32:8c:fb:d6:69:c6:56:08:01: b8:1e:b5:19:0e:b7:17:16:ed:3b:14:40:f3:c7:40: ba:4e:a0:e5:83:f4:df:93:77:06:28:6c:6a:b2:3c: d0:8c:02:e1:11:44:2e:6d:3a:aa:78:f6:ac:14:9f: 39:43:b8:0e:56:aa:2e:b3:dc:1e:67:22:91:2c:82: f8:45:74:9b:6b:7e:09:2d:f0:f2:da:ab:5e:25:d9: ef:e3:41:62:fb:fd:2e:d9:f8:25:8a:c7:74:af:1f: d5:de:47:8c:59:a4:86:70:59:96:32:51:2c:93:f6: 96:3f:cf:ac:3f:a3:0d:07:6e:82:81:c1:32:b7:e0: 72:0d:fa:99:91:ed:44:ae:9e:7f:a7:31:3d:7a:fa: fd:da:e1:f4:2b:75:91:b2:59:14:d9:e3:d6:86:dd: 0c:ad:f9:24:6b:bd:81:99:ae:f6:f7:fe:11:d3:23: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D6:72:34:E8:6F:5F:0C:41:10:B8:DF:C6:FE:62:C8:90:9B:65:2F X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e9:0a:bd:2f:56:b0:b3:9b:ca:6e:5d:55:3a:db:24:3e:b6: 9f:d0:bb:64:17:9d:12:74:50:3b:16:ff:c9:4b:b6:de:d2:78: 09:bc:59:f9:99:5b:18:fd:44:7b:4a:a1:0c:37:d3:47:6a:eb: 18:5d:48:41:7e:68:81:39:85:07:3b:f5:35:0a:97:47:5d:70: 48:73:69:1b:14:c8:19:95:de:54:bc:1c:db:d8:77:76:51:9d: 1b:60:62:69:1f:4b:a2:38:b8:dd:d3:6a:24:f9:bc:8a:a1:5b: 19:d1:a7:4b:56:cd:f7:90:ba:12:ef:a3:ae:71:e2:bf:ea:63: 3c:b7:91:f4:5d:f3:38:e5:d3:88:5c:f7:6b:cd:de:ed:81:51: dd:00:08:60:5b:13:5e:03:6f:70:c6:a4:91:97:91:29:91:56: aa:5d:05:a9:7a:0a:c1:f4:a5:3b:12:b4:81:94:08:9a:a0:26: f3:07:c7:9e:3d:67:06:b9:a2:b3:ca:f4:fa:42:5d:8a:66:2e: 83:a0:95:5b:03:98:91:f7:16:d3:38:3f:57:d9:c3:e2:6b:24: 67:ec:ec:2a:d6:3b:74:48:40:eb:6a:79:2e:3b:68:36:15:c0: bb:e1:6e:ac:43:18:19:31:ed:00:d2:a3:88:a0:9d:1d:92:6f: 88:8b:48:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzAXhHiomEeilGxM8YR/TBiMMIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNTA2MTAxMzA2MDdaFw0yNTA2MTMxODQ4MDdaMDMxMTAvBgNV BAMTKEJERDY3MjM0RTg2RjVGMEM0MTEwQjhERkM2RkU2MkM4OTA5QjY1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3TcbKlv94zKraSECsVk6Kkge y04IhNuir1wTLN9tfacA7+qqVB+O+Jic9GeOh/pcastrCAMaTHMqHRw4rAE+knRa 8T5I6NgyWC+T0lSWXzKM+9ZpxlYIAbgetRkOtxcW7TsUQPPHQLpOoOWD9N+TdwYo bGqyPNCMAuERRC5tOqp49qwUnzlDuA5Wqi6z3B5nIpEsgvhFdJtrfgkt8PLaq14l 2e/jQWL7/S7Z+CWKx3SvH9XeR4xZpIZwWZYyUSyT9pY/z6w/ow0HboKBwTK34HIN +pmR7USunn+nMT16+v3a4fQrdZGyWRTZ49aG3Qyt+SRrvYGZrvb3/hHTI6fHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvdZyNOhvXwxBELjfxv5iyJCbZS8wHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7pCr0vVrCzm8puXVU62yQ+tp/Qu2QXnRJ0 UDsW/8lLtt7SeAm8WfmZWxj9RHtKoQw300dq6xhdSEF+aIE5hQc79TUKl0ddcEhz aRsUyBmV3lS8HNvYd3ZRnRtgYmkfS6I4uN3TaiT5vIqhWxnRp0tWzfeQuhLvo65x 4r/qYzy3kfRd8zjl04hc92vN3u2BUd0ACGBbE14Db3DGpJGXkSmRVqpdBal6CsH0 pTsStIGUCJqgJvMHx549Zwa5orPK9PpCXYpmLoOglVsDmJH3FtM4P1fZw+JrJGfs 7CrWO3RIQOtqeS47aDYVwLvhbqxDGBkx7QDSo4ignR2Sb4iLSJY= -----END CERTIFICATE-----Generated at Thu Jun 12 01:39:56 2025 by rpki-client