$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: REFqYDEZYfdPzCkVGrLX5TCao/oY8Khdkdo6F4f67hM= Subject key identifier: A5:6D:06:8F:A3:4C:08:D2:09:F9:F2:51:1F:4B:2E:05:85:4C:C6:F4 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 4B4C90D80E230237D9C558661FAB16EC66DDC90B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0228 Signing time: Thu 04 Sep 2025 23:21:11 +0000 Manifest this update: Thu 04 Sep 2025 23:16:11 +0000 Manifest next update: Mon 08 Sep 2025 07:41:11 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) 3: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: dIrvrui+rusNUxKIcNwY3H07YcOkLmHmH29sEzkvvqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4c:90:d8:0e:23:02:37:d9:c5:58:66:1f:ab:16:ec:66:dd:c9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Sep 4 23:16:11 2025 GMT Not After : Sep 8 07:41:11 2025 GMT Subject: CN=A56D068FA34C08D209F9F2511F4B2E05854CC6F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:06:ef:da:ec:b3:35:4d:02:00:20:b2:5d:b2: b2:cf:7c:08:09:e3:4e:45:2e:50:b6:4e:fa:2b:28: b7:6f:93:58:e8:b2:0f:0f:e3:dd:23:43:a5:fe:0a: 3c:80:aa:1b:fb:d9:2f:34:9f:76:3a:39:e5:7e:92: ba:33:54:5f:b9:ac:48:1e:52:00:c2:0a:c7:81:64: df:6d:cb:c9:2c:61:45:6b:90:9a:84:d2:de:fa:4f: bd:93:a4:f7:d9:96:68:94:37:72:b4:3b:66:42:11: 35:a7:0f:83:62:d1:4f:c1:67:89:6c:2c:28:5a:d4: f7:15:9d:6c:6b:7b:0e:06:3a:d2:2e:ec:1a:27:1b: 38:76:22:1e:4b:de:aa:54:71:79:5c:82:e7:f2:46: 00:3f:e9:6f:3f:fc:4b:7b:54:24:95:d2:d6:79:44: c0:92:84:85:32:bf:26:15:0e:15:57:42:08:28:96: 2c:de:e5:a5:2f:90:f4:d1:fd:83:f6:e6:12:94:f4: 9c:b0:28:a5:c1:41:aa:9a:69:78:e0:72:63:ca:c0: ca:78:1c:00:dd:0e:da:a3:5b:d1:a2:a7:d4:41:f1: 4b:4c:7b:a5:e4:d4:e7:bf:60:7a:df:3d:77:12:43: ae:89:92:b3:ad:49:4d:a9:28:04:15:9d:40:d4:19: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6D:06:8F:A3:4C:08:D2:09:F9:F2:51:1F:4B:2E:05:85:4C:C6:F4 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:62:c4:0a:35:bb:51:f7:0b:15:d3:e4:fb:83:29:de:21:91: 59:ea:e9:b3:cd:20:0e:e7:51:0b:dc:9b:97:1b:22:1b:d3:a9: d0:27:ea:84:e1:b7:60:99:e7:b3:6a:6a:a1:c7:16:da:83:99: 9b:31:3a:03:ae:3b:36:92:af:f3:22:60:e1:05:00:52:af:81: bf:90:c6:01:f0:dc:4f:36:96:8d:21:5a:f5:56:f6:93:27:07: d3:f4:d1:df:32:b7:86:96:2a:e1:2e:2e:95:38:3a:8e:6c:31: 7c:81:8e:6d:f4:f3:28:db:80:27:e2:1b:50:99:46:d7:26:5c: b1:13:95:6d:d6:6d:8c:11:a7:67:16:f7:07:b7:a0:ec:5e:c8: 17:00:7b:89:a6:a0:cb:bf:13:88:8c:8b:69:1b:1c:aa:fa:89: 45:5f:c9:57:db:bb:5a:1b:10:02:81:9b:6a:a6:9b:7e:60:a4: a4:3e:30:80:17:a2:b6:60:b3:f5:ae:5d:2f:29:15:f6:f5:62: de:41:26:3b:ad:8f:72:bf:67:f6:43:74:a2:be:d5:40:b6:9f: 02:46:58:14:ba:3f:60:12:e2:cb:95:cd:8f:5a:fa:6c:45:a1: 9f:3f:98:d4:81:de:f6:18:c9:87:ee:30:87:9c:3e:2c:84:cf: b6:fe:4e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0yQ2A4jAjfZxVhmH6sW7GbdyQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTA5MDQyMzE2MTFaFw0yNTA5MDgwNzQxMTFaMDMxMTAvBgNV BAMTKEE1NkQwNjhGQTM0QzA4RDIwOUY5RjI1MTFGNEIyRTA1ODU0Q0M2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBu/a7LM1TQIAILJdsrLPfAgJ 405FLlC2TvorKLdvk1josg8P490jQ6X+CjyAqhv72S80n3Y6OeV+krozVF+5rEge UgDCCseBZN9ty8ksYUVrkJqE0t76T72TpPfZlmiUN3K0O2ZCETWnD4Ni0U/BZ4ls LCha1PcVnWxrew4GOtIu7BonGzh2Ih5L3qpUcXlcgufyRgA/6W8//Et7VCSV0tZ5 RMCShIUyvyYVDhVXQggolize5aUvkPTR/YP25hKU9JywKKXBQaqaaXjgcmPKwMp4 HADdDtqjW9Gip9RB8UtMe6Xk1Oe/YHrfPXcSQ66JkrOtSU2pKAQVnUDUGaqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpW0Gj6NMCNIJ+fJRH0suBYVMxvQwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpixAo1u1H3CxXT5PuDKd4hkVnq6bPNIA7n UQvcm5cbIhvTqdAn6oTht2CZ57NqaqHHFtqDmZsxOgOuOzaSr/MiYOEFAFKvgb+Q xgHw3E82lo0hWvVW9pMnB9P00d8yt4aWKuEuLpU4Oo5sMXyBjm308yjbgCfiG1CZ RtcmXLETlW3WbYwRp2cW9we3oOxeyBcAe4mmoMu/E4iMi2kbHKr6iUVfyVfbu1ob EAKBm2qmm35gpKQ+MIAXorZgs/WuXS8pFfb1Yt5BJjutj3K/Z/ZDdKK+1UC2nwJG WBS6P2AS4suVzY9a+mxFoZ8/mNSB3vYYyYfuMIecPiyEz7b+Toc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:51 2025 by rpki-client