$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: cLXX8I+60m7E5OB2cHMBrUeYfbLxwiJUSzxm5fuMAr4= Subject key identifier: 64:E6:29:7B:8D:7F:D7:D7:5E:76:B4:04:71:4E:35:79:3C:0C:FE:BA Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 2A21B3D54C6DDD71DA1EC7E78866ECF8B4D0D3CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 01E4 Signing time: Fri 04 Apr 2025 03:31:10 +0000 Manifest this update: Fri 04 Apr 2025 03:26:10 +0000 Manifest next update: Mon 07 Apr 2025 11:30:10 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 2: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: qdRvU1CU4rdRoAHsTadzOdl5qmVgjfOdFNsE8PMRd0A=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:21:b3:d5:4c:6d:dd:71:da:1e:c7:e7:88:66:ec:f8:b4:d0:d3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Apr 4 03:26:10 2025 GMT Not After : Apr 7 11:30:10 2025 GMT Subject: CN=64E6297B8D7FD7D75E76B404714E35793C0CFEBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:82:fb:9f:d0:53:37:b2:2f:c4:1c:2b:78: 37:34:0a:dc:48:36:74:7a:47:5b:88:66:ea:9d:52: 5e:88:11:89:48:cc:31:48:a1:82:f2:e3:cd:f8:6e: c5:8c:bc:a9:40:85:2b:5c:ec:58:43:35:be:73:b8: bf:3c:d4:ab:de:c5:bd:71:ae:65:52:b8:29:5e:b5: c8:74:e5:56:c2:08:3b:37:23:dc:4e:08:ca:07:a6: 65:2a:11:a2:2e:d8:a3:86:71:77:7a:0d:c7:b4:49: ca:ba:0a:86:6a:e9:75:5b:dc:8e:40:b1:3b:0f:d3: a9:c0:9e:a8:64:58:7b:28:10:6a:76:a3:fd:96:65: 0a:c9:2d:65:01:17:05:0e:53:ed:c5:0f:63:1a:f1: ad:31:2d:62:12:02:b7:6d:60:c2:88:0b:2a:ef:5c: 21:d1:9d:81:0b:1c:d4:df:e1:95:96:9b:e5:3f:3c: af:a7:a8:fa:4d:6c:60:73:24:05:1d:56:8e:40:fe: a5:36:84:eb:d3:d6:3d:ef:74:50:34:83:25:f7:0d: 24:83:81:dd:b7:c3:ef:79:1f:59:ca:5e:12:a4:e1: 41:69:1a:f3:08:b5:d5:29:67:00:da:e1:b7:3b:e6: ce:98:01:f0:83:9e:01:49:73:50:1b:e7:b2:a0:04: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E6:29:7B:8D:7F:D7:D7:5E:76:B4:04:71:4E:35:79:3C:0C:FE:BA X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:98:fc:34:c1:bb:76:81:b2:99:8a:98:4d:1d:1d:77:0b:95: 5d:90:1e:e1:af:b7:04:aa:2e:b1:4c:a8:1b:92:f9:66:ff:2c: 50:6a:f0:b4:72:9b:02:99:49:59:76:ce:df:02:02:27:b7:15: d7:d1:a0:90:3c:5b:8d:b2:f9:36:20:cd:77:ce:9b:a5:f3:61: 4a:78:52:dc:37:ae:84:89:ed:ed:6d:bb:99:9d:98:90:f1:2e: 59:6d:2c:84:79:ff:b3:c2:e2:92:e3:ce:bc:5b:01:02:fb:0d: 45:5c:27:f0:c2:df:dc:69:71:c1:ad:20:29:79:11:0e:b6:71: a1:4d:57:b9:21:cb:00:6c:6a:a9:a9:90:54:3b:96:51:bc:29: c1:15:c4:70:4b:5b:b8:8b:78:cd:60:08:66:f2:4d:a2:00:8c: dc:35:6c:24:0c:e4:58:09:2b:0f:16:7a:47:cc:d7:55:66:3f: 24:77:2d:80:fe:5e:c4:8f:01:53:d8:74:31:fc:f3:51:a6:da: 86:ad:60:fb:cc:74:34:c7:fa:7e:eb:e4:76:8e:d4:43:84:af: b2:78:2f:9c:be:8b:a2:20:b5:92:c8:9f:81:2e:ed:68:52:5d: 14:38:3b:82:8b:55:d9:cb:e4:bd:3f:2f:1b:89:7f:5e:5e:a4: 2f:93:0c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiGz1Uxt3XHaHsfniGbs+LTQ080wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTA0MDQwMzI2MTBaFw0yNTA0MDcxMTMwMTBaMDMxMTAvBgNV BAMTKDY0RTYyOTdCOEQ3RkQ3RDc1RTc2QjQwNDcxNEUzNTc5M0MwQ0ZFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStoL7n9BTN7IvxBwreDc0CtxI NnR6R1uIZuqdUl6IEYlIzDFIoYLy4834bsWMvKlAhStc7FhDNb5zuL881Kvexb1x rmVSuCletch05VbCCDs3I9xOCMoHpmUqEaIu2KOGcXd6Dce0Scq6CoZq6XVb3I5A sTsP06nAnqhkWHsoEGp2o/2WZQrJLWUBFwUOU+3FD2Ma8a0xLWISArdtYMKICyrv XCHRnYELHNTf4ZWWm+U/PK+nqPpNbGBzJAUdVo5A/qU2hOvT1j3vdFA0gyX3DSSD gd23w+95H1nKXhKk4UFpGvMItdUpZwDa4bc75s6YAfCDngFJc1Ab57KgBCRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZOYpe41/19dedrQEcU41eTwM/rowHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCY/DTBu3aBspmKmE0dHXcLlV2QHuGvtwSq LrFMqBuS+Wb/LFBq8LRymwKZSVl2zt8CAie3FdfRoJA8W42y+TYgzXfOm6XzYUp4 Utw3roSJ7e1tu5mdmJDxLlltLIR5/7PC4pLjzrxbAQL7DUVcJ/DC39xpccGtICl5 EQ62caFNV7khywBsaqmpkFQ7llG8KcEVxHBLW7iLeM1gCGbyTaIAjNw1bCQM5FgJ Kw8WekfM11VmPyR3LYD+XsSPAVPYdDH881Gm2oatYPvMdDTH+n7r5HaO1EOEr7J4 L5y+i6IgtZLIn4Eu7WhSXRQ4O4KLVdnL5L0/LxuJf15epC+TDGA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:20:54 2025 by rpki-client