$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: DtyQptSP82EAecMFVBLK6OzPOyWfIGYPQ3k7WGyep14= Subject key identifier: 4B:B9:01:D3:D7:87:0F:5B:6D:AB:04:13:30:5A:DE:3A:9E:70:61:26 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 37B976C8505000ADB7A9638F8357D28894CEB4AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 0170 Signing time: Thu 05 Jun 2025 11:12:12 +0000 Manifest this update: Thu 05 Jun 2025 11:07:12 +0000 Manifest next update: Sun 08 Jun 2025 17:58:12 +0000 Files and hashes: 1: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 2: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 3: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) 4: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) 5: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: ZoWNBVcL+boQvM+0XG8j406Kj/gW9ehMHBamFU5kHWU=) 6: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 17:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b9:76:c8:50:50:00:ad:b7:a9:63:8f:83:57:d2:88:94:ce:b4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Jun 5 11:07:12 2025 GMT Not After : Jun 8 17:58:12 2025 GMT Subject: CN=4BB901D3D7870F5B6DAB0413305ADE3A9E706126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:5e:8b:b6:3a:4a:f8:28:58:70:91:77:d8: 58:87:15:60:33:8f:59:83:c9:48:b9:77:38:d2:64: f5:da:22:82:be:87:24:2e:17:48:58:47:a2:18:21: 6e:b6:3c:e1:95:0f:4a:fa:d2:eb:0b:6b:42:0e:da: 0d:af:06:5d:8b:07:fb:fd:2f:7f:ef:c7:79:be:3b: 75:19:61:6b:ce:a1:5a:31:4a:ff:19:63:23:73:2d: a7:cf:f0:6c:09:28:be:4b:bc:e0:8d:c1:19:f2:cc: dc:de:b8:a5:38:d3:0a:49:64:a9:f5:ec:76:44:82: ff:fa:20:b8:ce:40:cc:9f:28:6e:b1:75:93:bd:f5: de:17:e4:3b:9c:6e:cc:aa:57:77:c8:d0:3e:99:a1: 05:3f:3a:da:b5:ee:30:0d:89:18:28:cd:cd:bb:fe: 27:3a:f9:42:09:90:63:49:95:28:4e:51:fa:05:25: e5:f5:ee:2b:e6:ff:05:19:58:91:9b:3e:f2:e2:db: a7:44:51:c7:c2:6a:02:39:31:76:65:be:63:df:f0: f6:33:ee:e5:ed:d1:f2:08:75:b6:04:55:b8:46:cb: a8:1b:1a:46:bb:cc:bf:c7:b2:f9:f5:cf:4e:25:15: f5:10:c6:df:09:38:d0:13:aa:31:fe:da:88:d7:55: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B9:01:D3:D7:87:0F:5B:6D:AB:04:13:30:5A:DE:3A:9E:70:61:26 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fb:82:39:2e:5a:e1:91:2e:bf:7d:af:68:b1:cf:1a:5f:5c: 0e:eb:9c:29:53:b5:f6:fc:c3:2d:36:f6:c3:0e:89:a0:a9:b8: 40:0c:7e:af:67:1d:38:0f:69:82:bb:8e:5c:f7:db:c8:76:f5: bd:c3:68:df:bc:47:0f:96:4b:a4:40:bc:80:50:60:8e:6a:5d: 2e:13:6c:e3:fa:09:a1:39:a9:03:7e:0e:7e:46:1e:13:49:ec: 40:09:8c:c0:4f:3f:73:00:b8:ff:64:1f:df:c0:45:1b:43:de: 18:5e:94:cb:86:7d:8c:ba:21:85:6d:1b:88:2a:4c:b2:56:0e: ca:2e:82:d2:c1:16:0d:14:e4:ed:c5:e6:15:36:f5:8e:81:27: 27:8f:41:a8:c6:bc:90:1a:71:80:5a:85:1c:0e:ee:f4:8f:02: 16:39:1b:e8:54:48:dc:0e:79:f4:a2:90:69:0c:66:3d:38:70: 04:2d:17:22:5f:cc:ce:ca:4a:bd:0e:82:eb:9a:4c:f2:16:96: 87:76:83:3b:6f:97:a2:99:01:b6:6d:cf:5a:77:ad:ae:b0:d8: db:83:7c:3c:13:03:64:55:de:b4:ed:1a:3e:e1:43:2e:a2:11: 9c:97:62:7d:e4:e8:61:1a:0a:73:7b:be:93:1c:b0:1b:0b:b7: 8c:91:b0:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7l2yFBQAK23qWOPg1fSiJTOtK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA2MDUxMTA3MTJaFw0yNTA2MDgxNzU4MTJaMDMxMTAvBgNV BAMTKDRCQjkwMUQzRDc4NzBGNUI2REFCMDQxMzMwNUFERTNBOUU3MDYxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sV6LtjpK+ChYcJF32FiHFWAz j1mDyUi5dzjSZPXaIoK+hyQuF0hYR6IYIW62POGVD0r60usLa0IO2g2vBl2LB/v9 L3/vx3m+O3UZYWvOoVoxSv8ZYyNzLafP8GwJKL5LvOCNwRnyzNzeuKU40wpJZKn1 7HZEgv/6ILjOQMyfKG6xdZO99d4X5DucbsyqV3fI0D6ZoQU/Otq17jANiRgozc27 /ic6+UIJkGNJlShOUfoFJeX17ivm/wUZWJGbPvLi26dEUcfCagI5MXZlvmPf8PYz 7uXt0fIIdbYEVbhGy6gbGka7zL/Hsvn1z04lFfUQxt8JONATqjH+2ojXVffDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS7kB09eHD1ttqwQTMFreOp5wYSYwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb7gjkuWuGRLr99r2ixzxpfXA7rnClTtfb8 wy029sMOiaCpuEAMfq9nHTgPaYK7jlz328h29b3DaN+8Rw+WS6RAvIBQYI5qXS4T bOP6CaE5qQN+Dn5GHhNJ7EAJjMBPP3MAuP9kH9/ARRtD3hhelMuGfYy6IYVtG4gq TLJWDsougtLBFg0U5O3F5hU29Y6BJyePQajGvJAacYBahRwO7vSPAhY5G+hUSNwO efSikGkMZj04cAQtFyJfzM7KSr0OguuaTPIWlod2gztvl6KZAbZtz1p3ra6w2NuD fDwTA2RV3rTtGj7hQy6iEZyXYn3k6GEaCnN7vpMcsBsLt4yRsM4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:10 2025 by rpki-client