$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: JwbTyUgpqDQU3UY8SdPmTrR8K8lUy5qcuJgh8uqZAQI= Subject key identifier: B6:DE:B1:25:24:3E:CB:7C:EE:06:C5:68:39:6E:C7:60:84:39:34:50 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 2A3110C7001A45D8F5856D5765DAD0FE43D8101B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 018E Signing time: Sat 06 Sep 2025 11:51:40 +0000 Manifest this update: Sat 06 Sep 2025 11:46:40 +0000 Manifest next update: Tue 09 Sep 2025 17:33:40 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 2: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 3: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: +/fkFEKdC1jFHCuikssY6a6jE1QC1U8bcmFDwDdJQdM=) 4: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:31:10:c7:00:1a:45:d8:f5:85:6d:57:65:da:d0:fe:43:d8:10:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Sep 6 11:46:40 2025 GMT Not After : Sep 9 17:33:40 2025 GMT Subject: CN=B6DEB125243ECB7CEE06C568396EC76084393450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:22:08:1c:b1:5c:7b:05:d5:7d:75:cf:ac: 95:f4:78:39:dd:b0:b0:22:e5:09:d1:73:e7:ab:e8: ea:40:03:13:45:8a:a7:36:23:36:60:96:88:a4:8c: 22:bb:70:8c:c4:a7:55:38:da:51:79:80:18:ef:b2: da:1d:d0:40:c0:1e:fe:f9:34:8a:11:0d:0b:13:3f: d4:8d:c0:ec:82:e0:0f:6c:8a:0a:36:d8:c5:d1:ae: 3f:d0:33:bd:a9:14:62:12:e9:11:6e:08:38:84:ce: 87:f7:de:a4:16:30:31:93:9c:a9:49:47:18:f9:1a: 8b:cf:5d:21:65:ac:4d:3b:f9:28:06:a7:2a:51:b5: 40:5b:24:bc:01:8a:6f:fe:5a:72:d7:8d:77:0c:d7: f2:82:3f:c2:fa:0a:14:c6:47:f4:b7:cf:00:2a:99: ab:c5:62:bf:e1:22:e8:29:96:2f:1d:13:5c:b6:0b: ec:00:99:53:d6:e3:ee:29:01:15:67:36:0a:13:9e: 50:ea:37:d2:ca:71:99:30:c7:b6:f4:16:86:07:28: 19:88:fc:59:bb:ac:83:74:9c:05:b3:df:7b:f2:66: 06:2f:bd:e7:b8:90:67:92:3c:a2:04:a0:a9:1b:91: ec:90:a1:ff:ec:69:a2:a2:7c:e8:a3:24:96:ee:15: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DE:B1:25:24:3E:CB:7C:EE:06:C5:68:39:6E:C7:60:84:39:34:50 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:89:44:00:f1:61:a3:e3:ef:32:9d:c0:98:6a:39:8a:30:7e: c0:cd:f0:ef:0e:fd:7b:d2:c8:07:b0:e0:34:aa:bd:7b:cc:a1: 08:8a:74:4c:38:ef:19:a0:77:de:69:79:40:18:69:51:81:33: 61:c2:6d:62:c8:82:9e:eb:16:c7:2e:67:0b:13:ea:e9:41:2a: d0:e7:10:4e:95:8c:05:05:2a:e8:17:9d:0e:3a:79:03:5d:78: 59:72:16:68:ef:24:cd:e8:50:91:e2:14:68:08:28:eb:dc:e8: c2:2c:43:a5:e5:a8:8b:11:c4:45:2b:e4:ff:26:97:00:83:8a: 38:69:64:ea:44:02:51:a9:6c:7d:fa:3e:92:ce:5d:bb:37:3e: 8f:50:18:96:19:7a:1f:d9:49:18:a0:5f:f3:94:f5:82:ef:ee: 7a:a3:c1:c9:47:bf:40:ff:2b:ff:04:f3:bb:b9:ec:f0:71:d8: 5b:fe:f1:8a:12:9b:5f:12:d4:2d:f5:be:f9:c3:6a:02:a9:bc: 4a:0a:4a:64:85:72:dd:98:95:50:07:61:ca:ac:7b:6a:3b:07: dd:6e:71:5a:c4:52:f6:68:5f:67:ff:b5:0b:e0:80:f1:52:04: c7:96:6b:03:6f:38:72:10:21:d4:0a:e0:cf:16:33:85:5b:09: 40:5d:9b:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjEQxwAaRdj1hW1XZdrQ/kPYEBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA5MDYxMTQ2NDBaFw0yNTA5MDkxNzMzNDBaMDMxMTAvBgNV BAMTKEI2REVCMTI1MjQzRUNCN0NFRTA2QzU2ODM5NkVDNzYwODQzOTM0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16iIIHLFcewXVfXXPrJX0eDnd sLAi5QnRc+er6OpAAxNFiqc2IzZgloikjCK7cIzEp1U42lF5gBjvstod0EDAHv75 NIoRDQsTP9SNwOyC4A9sigo22MXRrj/QM72pFGIS6RFuCDiEzof33qQWMDGTnKlJ Rxj5GovPXSFlrE07+SgGpypRtUBbJLwBim/+WnLXjXcM1/KCP8L6ChTGR/S3zwAq mavFYr/hIugpli8dE1y2C+wAmVPW4+4pARVnNgoTnlDqN9LKcZkwx7b0FoYHKBmI /Fm7rIN0nAWz33vyZgYvvee4kGeSPKIEoKkbkeyQof/saaKifOijJJbuFWBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtt6xJSQ+y3zuBsVoOW7HYIQ5NFAwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKJRADxYaPj7zKdwJhqOYowfsDN8O8O/XvS yAew4DSqvXvMoQiKdEw47xmgd95peUAYaVGBM2HCbWLIgp7rFscuZwsT6ulBKtDn EE6VjAUFKugXnQ46eQNdeFlyFmjvJM3oUJHiFGgIKOvc6MIsQ6XlqIsRxEUr5P8m lwCDijhpZOpEAlGpbH36PpLOXbs3Po9QGJYZeh/ZSRigX/OU9YLv7nqjwclHv0D/ K/8E87u57PBx2Fv+8YoSm18S1C31vvnDagKpvEoKSmSFct2YlVAHYcqse2o7B91u cVrEUvZoX2f/tQvggPFSBMeWawNvOHIQIdQK4M8WM4VbCUBdm8c= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:02 2025 by rpki-client