$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: 0Z+3LHkH3TG8Th8i8gwD8mJ8s2qFXR7eY4Azcyey5TY= Subject key identifier: 4D:66:01:7D:94:6E:F3:11:D2:96:7D:32:E3:7F:06:9F:E2:A8:86:26 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 10F7A58DC5C40E530976E9A03DD48DA4E8663864 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: 010A Signing time: Thu 04 Sep 2025 09:41:39 +0000 Manifest this update: Thu 04 Sep 2025 09:36:39 +0000 Manifest next update: Sun 07 Sep 2025 17:44:39 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: UobZkoKPf/iLwm9HvkRxzJyMNmSTD2jUOqp4eBrMATs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f7:a5:8d:c5:c4:0e:53:09:76:e9:a0:3d:d4:8d:a4:e8:66:38:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Sep 4 09:36:39 2025 GMT Not After : Sep 7 17:44:39 2025 GMT Subject: CN=4D66017D946EF311D2967D32E37F069FE2A88626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:ba:c8:e4:22:fe:45:92:52:e6:97:e7:ec: 18:9b:fa:f4:12:7f:ab:07:1a:f6:68:8f:b1:01:7e: b7:83:23:40:aa:73:60:ed:ca:78:87:ac:ed:54:89: 7a:59:61:f7:98:ad:b5:f3:84:b6:d4:3a:1d:4f:50: 54:02:40:79:e4:01:0e:3d:41:82:48:09:29:83:06: da:70:24:c5:1a:a2:a3:01:60:6a:c9:24:86:66:88: ae:cc:f7:e1:e4:48:67:3b:09:0a:e2:b3:73:6f:6e: 59:5b:19:4c:c2:11:7f:bd:30:75:25:6c:c3:ce:50: 79:1a:86:c2:f1:14:25:e1:c0:74:1b:89:8d:27:e6: 20:74:c4:e5:d0:17:de:ab:a9:c4:73:39:62:d3:41: 9a:d3:81:a0:2e:53:b3:68:1d:c8:f6:e1:0b:d0:8d: 76:95:d5:a6:fb:ca:fd:fc:df:b0:b2:54:50:88:74: ba:81:79:61:71:9b:e9:cd:4a:70:81:80:b2:56:6c: fa:d3:4e:65:b5:5f:cb:fb:76:97:ce:c3:69:c2:a4: fb:80:3c:a4:9b:cc:a0:8c:de:df:cc:88:26:cc:8b: 58:b3:f4:1d:f6:47:6d:0b:5f:df:65:0f:03:7f:4e: a2:f4:c0:86:a3:88:f5:08:e7:38:b8:bc:34:7f:eb: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:66:01:7D:94:6E:F3:11:D2:96:7D:32:E3:7F:06:9F:E2:A8:86:26 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:df:94:91:06:58:2a:eb:17:ee:8f:3e:5d:6f:43:de:da:d2: 14:a5:61:de:6a:cb:aa:11:ff:fb:22:bb:44:a4:23:87:9d:b9: 5a:6c:a8:1b:0b:86:2d:58:a7:a6:c3:fa:b1:dc:0b:47:dc:ce: 52:46:9e:f2:c2:12:96:a5:21:78:e2:7d:76:05:98:ce:59:e6: fc:dd:23:87:49:d5:2d:69:7f:93:42:2e:90:22:b3:27:16:14: f5:02:25:69:be:1f:0f:32:a0:cf:61:4f:2b:6d:3e:0c:e6:89: 41:28:a4:b8:9a:2d:19:73:a9:11:18:a4:a6:3f:3f:6d:a8:fb: 3b:c4:c3:a7:5f:d3:ae:5d:e0:34:54:5b:7f:5e:40:ae:fd:7b: a4:e3:1e:f4:2c:1f:c4:9d:15:fd:3b:3f:f7:65:9e:2f:e6:8b: 15:56:6f:d8:a1:a6:35:2c:78:22:97:c7:ef:4f:a4:e9:d4:6c: d1:a9:22:36:f8:1c:87:ed:02:d0:33:d6:72:71:15:5a:a6:eb: 1f:c2:01:75:b7:d7:de:1a:6e:bd:75:ed:53:e3:65:65:54:2d: 8d:0a:42:7c:dc:dc:36:89:d8:77:92:13:7e:5c:27:52:95:dd: 2a:c1:8a:93:dd:5d:10:28:5a:e6:16:d9:7e:e5:33:b9:ab:e0: 5f:44:9a:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPeljcXEDlMJdumgPdSNpOhmOGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTA5MDQwOTM2MzlaFw0yNTA5MDcxNzQ0MzlaMDMxMTAvBgNV BAMTKDRENjYwMTdEOTQ2RUYzMTFEMjk2N0QzMkUzN0YwNjlGRTJBODg2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhbrI5CL+RZJS5pfn7Bib+vQS f6sHGvZoj7EBfreDI0Cqc2DtyniHrO1UiXpZYfeYrbXzhLbUOh1PUFQCQHnkAQ49 QYJICSmDBtpwJMUaoqMBYGrJJIZmiK7M9+HkSGc7CQris3NvbllbGUzCEX+9MHUl bMPOUHkahsLxFCXhwHQbiY0n5iB0xOXQF96rqcRzOWLTQZrTgaAuU7NoHcj24QvQ jXaV1ab7yv3837CyVFCIdLqBeWFxm+nNSnCBgLJWbPrTTmW1X8v7dpfOw2nCpPuA PKSbzKCM3t/MiCbMi1iz9B32R20LX99lDwN/TqL0wIajiPUI5zi4vDR/6/ZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWYBfZRu8xHSln0y438Gn+KohiYwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPflJEGWCrrF+6PPl1vQ97a0hSlYd5qy6oR //siu0SkI4eduVpsqBsLhi1Yp6bD+rHcC0fczlJGnvLCEpalIXjifXYFmM5Z5vzd I4dJ1S1pf5NCLpAisycWFPUCJWm+Hw8yoM9hTyttPgzmiUEopLiaLRlzqREYpKY/ P22o+zvEw6df065d4DRUW39eQK79e6TjHvQsH8SdFf07P/dlni/mixVWb9ihpjUs eCKXx+9PpOnUbNGpIjb4HIftAtAz1nJxFVqm6x/CAXW3194abr117VPjZWVULY0K Qnzc3DaJ2HeSE35cJ1KV3SrBipPdXRAoWuYW2X7lM7mr4F9EmtU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:14 2025 by rpki-client