$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: 47Avu/dtXBg0gpr73P3gXTVZ5oA/LqaGo01z3w+6LQI= Subject key identifier: D6:21:59:0A:43:33:04:6E:82:CC:71:9B:22:10:A4:DE:EF:99:29:53 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 77406E12EF75318C4B312292240B18EB1B4B43B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 0165 Signing time: Thu 05 Jun 2025 10:52:09 +0000 Manifest this update: Thu 05 Jun 2025 10:47:09 +0000 Manifest next update: Sun 08 Jun 2025 21:32:09 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 2: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 3: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 4: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: zloDuFsc0tJx3tnKZR1vKfrfZbFPf02BlsTxcJOr3LY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:40:6e:12:ef:75:31:8c:4b:31:22:92:24:0b:18:eb:1b:4b:43:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Jun 5 10:47:09 2025 GMT Not After : Jun 8 21:32:09 2025 GMT Subject: CN=D621590A4333046E82CC719B2210A4DEEF992953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:e9:ba:0c:40:b4:ee:62:dd:ae:b9:d5:c6: 9e:4b:09:de:21:c1:d4:b0:7f:fa:59:b0:87:23:7c: 46:71:38:68:94:b2:1f:00:34:1b:c9:a1:1b:82:02: f5:33:99:3d:56:57:de:43:ba:28:18:fe:dc:fb:45: 96:ab:be:ba:31:a9:c4:a4:3d:e1:1c:d9:4f:aa:fb: dd:35:78:b7:10:61:bc:16:ee:29:dc:92:df:7b:f1: 92:25:32:ee:4e:2e:7d:66:bf:3d:38:41:65:1d:17: 4d:0f:c2:30:ad:d5:b6:69:95:e7:db:96:d9:32:d5: 70:93:80:1c:f0:34:aa:2b:7f:0d:fc:b0:b7:43:ed: 30:f7:88:0f:2e:74:20:9f:5d:b5:86:a1:5b:14:f1: 2a:85:b6:04:ec:8c:8f:8d:91:7a:01:56:05:c4:dd: 18:fa:bb:e5:ec:db:70:42:e1:54:5f:f8:de:7f:53: 5b:c4:e1:30:ba:bc:a7:06:e6:17:3d:40:a4:63:6e: a7:10:c1:f8:94:fa:48:98:66:01:07:43:e5:f9:6c: 10:92:7b:96:ef:bb:00:21:82:28:e4:1e:71:1e:fb: f4:a0:d6:92:a8:58:e4:34:4e:5b:1b:1f:fb:fc:f7: c4:f7:9e:b8:83:13:78:a3:67:de:e9:25:31:3c:66: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:59:0A:43:33:04:6E:82:CC:71:9B:22:10:A4:DE:EF:99:29:53 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:cc:78:77:cc:73:60:d4:7f:ec:cd:02:66:c4:f6:20:b5:7f: 9e:93:de:db:0e:f4:7f:d5:a8:72:30:4f:e1:67:93:01:5c:31: 97:4c:43:9a:51:92:55:19:5b:21:e0:4a:ad:01:77:bd:44:a8: 15:aa:68:7e:86:37:73:e1:8a:42:a6:82:4a:68:86:ae:bb:59: dd:93:64:b2:f0:7a:cf:13:04:db:e0:5b:bb:c4:e2:9d:a5:f5: ba:9d:2a:3e:8d:83:7a:3d:f5:65:d6:56:d7:66:a9:ea:f8:08: 0e:45:cb:83:fc:f2:b4:71:b6:3d:84:75:14:00:6b:91:cb:61: 1e:5a:98:9b:2e:0c:16:eb:5e:68:74:cd:55:e2:ee:d9:6c:4a: 85:f6:cc:90:a6:49:1c:89:3f:6e:88:cc:78:63:78:7a:a8:59: 69:4a:bd:19:11:af:f7:2e:85:7d:9f:37:b5:37:60:ca:b2:fe: 1a:07:15:fa:ff:fb:37:1c:4d:80:ba:39:d6:af:07:03:47:a8: ed:bb:79:a5:0d:54:6a:a0:97:f0:b0:12:33:b2:1d:9c:71:b7: 24:63:9a:4a:c8:0a:11:9d:37:b9:91:9d:7a:14:d4:7a:30:d1: 95:f3:a7:46:16:60:30:5f:0e:dd:78:13:1f:6c:1a:53:94:98: 2f:51:6d:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0BuEu91MYxLMSKSJAsY6xtLQ7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA2MDUxMDQ3MDlaFw0yNTA2MDgyMTMyMDlaMDMxMTAvBgNV BAMTKEQ2MjE1OTBBNDMzMzA0NkU4MkNDNzE5QjIyMTBBNERFRUY5OTI5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+em6DEC07mLdrrnVxp5LCd4h wdSwf/pZsIcjfEZxOGiUsh8ANBvJoRuCAvUzmT1WV95DuigY/tz7RZarvroxqcSk PeEc2U+q+901eLcQYbwW7inckt978ZIlMu5OLn1mvz04QWUdF00PwjCt1bZplefb ltky1XCTgBzwNKorfw38sLdD7TD3iA8udCCfXbWGoVsU8SqFtgTsjI+NkXoBVgXE 3Rj6u+Xs23BC4VRf+N5/U1vE4TC6vKcG5hc9QKRjbqcQwfiU+kiYZgEHQ+X5bBCS e5bvuwAhgijkHnEe+/Sg1pKoWOQ0TlsbH/v898T3nriDE3ijZ97pJTE8Zp1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1iFZCkMzBG6CzHGbIhCk3u+ZKVMwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPMeHfMc2DUf+zNAmbE9iC1f56T3tsO9H/V qHIwT+FnkwFcMZdMQ5pRklUZWyHgSq0Bd71EqBWqaH6GN3PhikKmgkpohq67Wd2T ZLLwes8TBNvgW7vE4p2l9bqdKj6Ng3o99WXWVtdmqer4CA5Fy4P88rRxtj2EdRQA a5HLYR5amJsuDBbrXmh0zVXi7tlsSoX2zJCmSRyJP26IzHhjeHqoWWlKvRkRr/cu hX2fN7U3YMqy/hoHFfr/+zccTYC6OdavBwNHqO27eaUNVGqgl/CwEjOyHZxxtyRj mkrIChGdN7mRnXoU1How0ZXzp0YWYDBfDt14Ex9sGlOUmC9RbTc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:58 2025 by rpki-client