$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: jiiWZrhSt+Ksf3QW4bOXAGgoQgM7BdRaYhjckHPYEwA= Subject key identifier: 70:D2:E6:42:8C:42:13:AB:0A:72:F6:97:98:0F:07:5F:99:35:F0:84 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 3009F49616013818527994D61D8AD0CA94746430 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 019A Signing time: Sun 07 Sep 2025 07:52:11 +0000 Manifest this update: Sun 07 Sep 2025 07:47:11 +0000 Manifest next update: Wed 10 Sep 2025 16:48:11 +0000 Files and hashes: 1: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: /kj2xmgI/nZsfPlc29hgMVz9Ib0iztYKqtdNioenjfM=) 2: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 3: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 4: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) 5: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 6: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:09:f4:96:16:01:38:18:52:79:94:d6:1d:8a:d0:ca:94:74:64:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Sep 7 07:47:11 2025 GMT Not After : Sep 10 16:48:11 2025 GMT Subject: CN=70D2E6428C4213AB0A72F697980F075F9935F084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:2b:96:61:dc:42:d9:2c:b2:d0:0f:84:f3: 94:42:cf:5e:e6:14:f7:39:00:d8:07:c2:a3:a8:d4: e8:a3:64:cf:9a:67:9f:5d:cc:03:a4:fa:61:d5:f3: d7:0c:00:93:9e:18:c0:b2:8e:a0:ee:cb:21:b1:86: 8a:ef:dd:5d:9f:a3:82:d1:19:c1:cb:ac:6f:c8:51: 0f:75:a0:c3:c7:2a:48:67:fc:9a:ee:ac:d5:73:33: 1b:b7:08:d9:29:63:31:e5:b0:e4:47:8d:f7:c3:e2: 15:72:22:1f:c8:a3:00:ac:98:2a:68:aa:52:81:b2: fd:d1:c0:7d:04:fd:c3:1f:ce:ff:4e:e3:1e:44:82: 91:5b:b9:65:c7:5b:54:33:ca:20:8c:1a:26:c1:52: 25:f9:bc:1f:0f:d9:3e:56:f5:31:29:00:85:09:e9: cb:56:f1:c7:de:b5:e9:5e:b4:2f:0d:8f:29:e5:6c: 9a:93:9b:13:44:d2:26:f2:ec:40:74:7b:23:96:e1: 3a:9e:5c:0b:d8:a5:92:b2:0b:64:06:c7:8f:69:42: ae:ae:d0:19:f9:e9:da:ef:36:b7:e5:16:3e:af:6e: 9b:95:b7:95:2f:77:d6:1c:ad:e9:fe:97:1a:e4:76: f7:d6:61:3b:00:00:68:96:ea:b7:db:8e:06:22:21: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D2:E6:42:8C:42:13:AB:0A:72:F6:97:98:0F:07:5F:99:35:F0:84 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:72:6d:f0:7e:33:d9:1a:ec:c8:75:30:48:43:11:65:2b:5c: 58:76:95:d4:c7:50:ac:ac:86:4e:73:b6:54:39:18:0d:22:46: 61:e0:fd:b2:43:ef:17:1f:19:67:27:db:30:6a:20:b7:39:9d: 1b:45:d6:eb:1f:d9:75:01:71:c7:16:88:c9:e5:37:dc:8f:8b: 76:6d:e2:d0:a0:cb:82:45:cf:07:18:6c:a6:b8:98:8b:bd:45: f3:9c:95:01:16:62:b8:1c:14:63:6b:39:d8:01:9c:7d:8f:9d: 91:83:96:8a:70:46:da:97:4d:70:ec:a3:19:63:70:d3:0d:3a: 49:e8:23:c7:a6:fd:a9:5d:6b:10:9a:2e:a4:da:19:7e:c2:40: 79:16:8f:22:2c:9e:4a:8c:cb:ad:14:24:bd:ff:84:2a:12:78: 32:f1:fd:6a:c4:c5:34:ae:4d:b1:8e:11:c8:36:bd:04:f5:01: be:c9:39:95:d7:08:f3:c9:8d:5b:81:26:66:a3:07:3d:74:05: 56:eb:5e:ae:2a:e3:a2:d6:14:9b:3d:ef:90:3a:50:78:10:89: 30:84:49:28:81:71:cb:3d:a6:bc:3c:eb:a5:a7:6c:f3:fb:0f: 85:45:48:03:72:fd:45:e3:e4:d1:6a:78:dd:02:d7:d4:6a:cf: 40:92:f0:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAn0lhYBOBhSeZTWHYrQypR0ZDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA5MDcwNzQ3MTFaFw0yNTA5MTAxNjQ4MTFaMDMxMTAvBgNV BAMTKDcwRDJFNjQyOEM0MjEzQUIwQTcyRjY5Nzk4MEYwNzVGOTkzNUYwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8byuWYdxC2Syy0A+E85RCz17m FPc5ANgHwqOo1OijZM+aZ59dzAOk+mHV89cMAJOeGMCyjqDuyyGxhorv3V2fo4LR GcHLrG/IUQ91oMPHKkhn/JrurNVzMxu3CNkpYzHlsORHjffD4hVyIh/IowCsmCpo qlKBsv3RwH0E/cMfzv9O4x5EgpFbuWXHW1QzyiCMGibBUiX5vB8P2T5W9TEpAIUJ 6ctW8cfeteletC8NjynlbJqTmxNE0iby7EB0eyOW4TqeXAvYpZKyC2QGx49pQq6u 0Bn56drvNrflFj6vbpuVt5Uvd9Ycren+lxrkdvfWYTsAAGiW6rfbjgYiIcAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcNLmQoxCE6sKcvaXmA8HX5k18IQwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhybfB+M9ka7Mh1MEhDEWUrXFh2ldTHUKys hk5ztlQ5GA0iRmHg/bJD7xcfGWcn2zBqILc5nRtF1usf2XUBcccWiMnlN9yPi3Zt 4tCgy4JFzwcYbKa4mIu9RfOclQEWYrgcFGNrOdgBnH2PnZGDlopwRtqXTXDsoxlj cNMNOknoI8em/aldaxCaLqTaGX7CQHkWjyIsnkqMy60UJL3/hCoSeDLx/WrExTSu TbGOEcg2vQT1Ab7JOZXXCPPJjVuBJmajBz10BVbrXq4q46LWFJs975A6UHgQiTCE SSiBccs9prw866WnbPP7D4VFSANy/UXj5NFqeN0C19Rqz0CS8Go= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:45 2025 by rpki-client