$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.mft (raw, json) Hash identifier: D0svXTdQeyvMlYXz1j/qcelYjXRCqAr+2Cg3CD0CYkE= Subject key identifier: F2:B8:78:F8:15:D8:1A:13:C0:4C:04:D5:33:02:16:C7:47:7A:9F:70 Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Certificate serial: 7DCEAB188E9CAE9BF4196776D87321C11B8A193F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft Manifest number: 019A Signing time: Thu 05 Jun 2025 14:21:41 +0000 Manifest this update: Thu 05 Jun 2025 14:16:41 +0000 Manifest next update: Sun 08 Jun 2025 16:57:41 +0000 Files and hashes: 1: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: nt+NFSr6szLyHYGILwVwvkW31SXQGA1m1TiFhW68YG0=) 2: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: WrHOV9CkqWwA6e9g8Np4hlwu3J/FQXMp6TSsn1N3W7M=) 3: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: k7Ees2MuDZL3isOrDBSm9fm5rw/2tfy3j8q75632Vk8=) 4: 35E6B2357C98B974C14BA8A5DE46B519083666C6.crl (hash: 9LXLAGuTuP7HbDEKDPlpPZJ/bpSsTY2FEN10z8mI0Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 16:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ce:ab:18:8e:9c:ae:9b:f4:19:67:76:d8:73:21:c1:1b:8a:19:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Validity Not Before: Jun 5 14:16:41 2025 GMT Not After : Jun 8 16:57:41 2025 GMT Subject: CN=F2B878F815D81A13C04C04D5330216C7477A9F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:9e:c1:ab:47:a4:f9:f4:1e:74:55:6a:e6: f7:12:9c:aa:2b:60:07:1c:c1:5a:4f:65:8e:8c:2f: fe:82:1f:5e:74:6d:f3:01:f5:10:c0:80:47:6a:10: e3:2d:b0:08:3e:b8:37:b1:17:6f:b4:66:1f:99:a2: 83:e9:ec:89:9a:b0:f1:2e:15:ee:6a:10:43:27:ab: 92:e6:4d:71:67:1a:52:31:23:93:c4:0a:66:47:2f: b5:fa:de:f5:ef:03:3d:7d:f8:de:69:5d:3a:e9:0a: 52:0d:ff:84:ca:3b:f6:7c:23:dc:cb:66:a8:89:e5: eb:61:46:7c:72:34:b9:2b:ef:ae:5e:e5:e3:79:7b: 67:e8:47:e9:44:87:b9:36:bd:60:aa:b7:4b:d6:96: b8:7d:35:3c:2e:65:29:25:9e:f8:cd:32:85:2a:91: 93:b4:1c:51:d0:4d:42:11:f4:11:47:04:34:57:f4: 8a:a1:4b:2c:2d:19:a2:1d:db:fb:1e:ae:dd:a6:8f: 93:a2:b9:7a:39:65:3f:7f:cd:e4:09:34:a9:58:a5: 16:ac:06:61:b3:a1:83:b9:34:34:b3:b9:24:e9:16: 4c:6d:2a:67:82:f5:c7:f4:e9:f5:67:5d:60:05:8d: e6:9e:53:d2:8d:80:6a:db:72:cd:29:5d:94:44:c7: a6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:78:F8:15:D8:1A:13:C0:4C:04:D5:33:02:16:C7:47:7A:9F:70 X509v3 Authority Key Identifier: keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:68:4f:8b:c6:3a:68:f0:02:b8:8e:94:3a:cb:04:c6:ce:60: 03:b1:e8:bd:81:a4:a1:0e:54:2a:2a:cb:b6:6b:1b:c6:69:b0: 14:e9:05:c9:82:1b:44:11:bd:6f:d7:7f:0b:81:b1:de:db:61: b8:e1:5b:07:a7:01:5c:cf:06:c6:1d:cc:29:73:e1:70:04:25: 90:d4:95:2f:a1:7c:64:7f:36:d0:66:50:10:6e:01:3f:b4:71: 56:ff:a6:ad:cb:6a:53:3e:c2:9a:21:6c:5d:85:55:4a:e1:49: a2:22:36:6a:71:9f:59:6c:0f:70:c0:e3:d4:ef:bf:24:9d:31: b6:e5:92:16:d5:9f:28:0f:c6:5d:27:1c:f5:ed:b9:33:ea:a4: 9c:65:e8:70:ad:51:78:97:14:4f:ae:3b:d8:e1:4f:fe:29:d6: fd:99:b1:5c:ed:04:44:e0:2a:b5:7f:cd:67:02:db:bc:7c:d6: b0:18:c9:00:3c:7b:47:26:37:8b:7a:5f:b9:2b:e1:7e:ab:38: c8:d5:2b:41:e1:f5:34:da:8f:6a:e2:66:3d:be:18:cb:46:cd: c2:9c:db:1d:61:7e:ba:2f:0a:d4:2f:48:fc:b5:8c:73:c7:cb: fe:5e:77:cd:32:08:23:35:0f:3b:2e:51:b9:46:6e:49:13:85: 23:97:41:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfc6rGI6crpv0GWd22HMhwRuKGT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkw ODM2NjZDNjAeFw0yNTA2MDUxNDE2NDFaFw0yNTA2MDgxNjU3NDFaMDMxMTAvBgNV BAMTKEYyQjg3OEY4MTVEODFBMTNDMDRDMDRENTMzMDIxNkM3NDc3QTlGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndZ7Bq0ek+fQedFVq5vcSnKor YAccwVpPZY6ML/6CH150bfMB9RDAgEdqEOMtsAg+uDexF2+0Zh+ZooPp7ImasPEu Fe5qEEMnq5LmTXFnGlIxI5PECmZHL7X63vXvAz19+N5pXTrpClIN/4TKO/Z8I9zL ZqiJ5ethRnxyNLkr765e5eN5e2foR+lEh7k2vWCqt0vWlrh9NTwuZSklnvjNMoUq kZO0HFHQTUIR9BFHBDRX9IqhSywtGaId2/sert2mj5OiuXo5ZT9/zeQJNKlYpRas BmGzoYO5NDSzuSTpFkxtKmeC9cf06fVnXWAFjeaeU9KNgGrbcs0pXZREx6bhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rh4+BXYGhPATATVMwIWx0d6n3AwHwYDVR0j BBgwFoAUNeayNXyYuXTBS6il3ka1GQg2ZsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMC8zNUU2QjIzNTdD OThCOTc0QzE0QkE4QTVERTQ2QjUxOTA4MzY2NkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkwODM2 NjZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAwNzMxNjQtODAwOC00OWM2LWIx ODYtM2M3ZmU5YjgwYTE3LzAvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1 MTkwODM2NjZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBoT4vGOmjwAriOlDrLBMbOYAOx6L2BpKEO VCoqy7ZrG8ZpsBTpBcmCG0QRvW/XfwuBsd7bYbjhWwenAVzPBsYdzClz4XAEJZDU lS+hfGR/NtBmUBBuAT+0cVb/pq3LalM+wpohbF2FVUrhSaIiNmpxn1lsD3DA49Tv vySdMbblkhbVnygPxl0nHPXtuTPqpJxl6HCtUXiXFE+uO9jhT/4p1v2ZsVztBETg KrV/zWcC27x81rAYyQA8e0cmN4t6X7kr4X6rOMjVK0Hh9TTaj2riZj2+GMtGzcKc 2x1hfrovCtQvSPy1jHPHy/5ed80yCCM1DzsuUblGbkkThSOXQXM= -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:25 2025 by rpki-client