$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: aL5qmt6sQrRUL1aJFJSdlkLxYQ4iS2kx3cpSfs28V/E= Subject key identifier: A8:14:03:5B:76:E2:53:E2:0A:D3:8D:0C:7C:D6:F7:88:13:EC:C0:A9 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 5B2E8CFCE97E7E01598E72B57D2EE352F63B0792 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 024A Signing time: Sat 18 Oct 2025 00:52:05 +0000 Manifest this update: Sat 18 Oct 2025 00:47:05 +0000 Manifest next update: Tue 21 Oct 2025 05:47:05 +0000 Files and hashes: 1: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: bF52+8MacKEpSENbnvRtcT/3HmyqMflaKGcqGmT0KyA=) 2: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: gov+8lERQceEfbRJlCEYxrAX+p+Uqcfqwo3MMxlUE04=) 3: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: /sa4N19iB/o6G9OL5Szcq6Y4DsVMrF2Yrq0Ab1himGg=) 4: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: 7H0GdHg7L7zkSDLiSxs3CkgDGlREYCGdHWl+JFsGgmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 05:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2e:8c:fc:e9:7e:7e:01:59:8e:72:b5:7d:2e:e3:52:f6:3b:07:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Oct 18 00:47:05 2025 GMT Not After : Oct 21 05:47:05 2025 GMT Subject: CN=A814035B76E253E20AD38D0C7CD6F78813ECC0A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:ee:cb:ef:6e:7a:bf:52:fc:a2:3b:3b:8f: c3:19:3a:b3:7e:a7:46:aa:6e:d5:3e:af:7f:f3:5c: a8:63:a5:b9:51:c5:71:e7:d1:99:de:57:8b:e7:31: 85:d0:68:17:a7:fc:27:0d:85:ec:f2:51:9d:00:2e: d4:2b:74:2f:21:43:14:21:fa:eb:03:ff:fa:7d:30: 4c:cb:20:99:9f:cd:9b:12:dc:2f:aa:d3:68:29:4f: 85:32:b6:fa:54:77:e3:1e:79:f7:2e:83:1c:d1:ed: 5f:1e:df:42:57:28:d4:03:03:93:3b:e7:a5:15:cb: 93:c7:4e:d2:25:ac:6e:e5:8c:e2:b9:18:15:90:d4: c4:07:1a:f6:6b:8c:42:cc:23:44:60:f0:2c:4a:d6: ac:8d:9f:df:0c:e3:e7:04:64:39:8d:ff:8f:5a:91: 11:68:75:35:a5:76:05:ac:86:ed:e6:97:0b:68:04: 21:e7:da:a1:55:6c:8d:df:1f:72:9c:f6:4b:51:b1: 02:0c:43:7c:c6:b2:86:87:6b:6f:4a:30:aa:04:fb: 22:b4:bb:f7:1a:59:b0:93:7f:49:b6:29:a0:6a:76: 2f:ae:f6:01:c7:82:73:0c:c8:e0:03:c5:f2:23:59: 0a:16:3c:0f:ba:fc:ad:61:c4:5c:c8:d7:07:af:c1: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:03:5B:76:E2:53:E2:0A:D3:8D:0C:7C:D6:F7:88:13:EC:C0:A9 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:eb:76:75:1c:48:6d:e5:41:f3:8e:2e:cb:e5:5d:22:12:72: 6c:09:43:79:71:07:ed:45:2c:0e:27:17:39:28:8c:bf:58:ad: 2e:43:b0:49:7c:2b:bd:93:80:b1:80:07:fd:04:aa:09:ec:b9: 3d:5f:43:87:2c:e1:c8:bb:59:9b:28:73:f0:e1:b3:14:3b:04: ae:ef:14:d1:8a:aa:e2:01:0e:1c:29:42:ea:eb:4a:2a:5c:4a: 27:58:39:e6:34:70:1f:ee:b0:69:be:c2:b1:45:98:72:d4:7f: 7e:ca:cf:ed:3e:9b:d1:8d:07:99:c6:f3:69:2e:e5:f0:a3:65: cd:a9:12:bb:45:ff:3e:13:22:67:04:e1:7a:12:33:e5:42:ce: 06:26:d3:fa:d8:5f:cc:31:1e:49:e3:d3:40:38:c7:cb:5d:c1: 32:e1:ff:fb:fb:18:cf:fd:f7:90:32:17:0a:fa:05:39:18:2c: 03:24:9c:71:16:d5:0b:41:5f:ee:d1:63:ec:b5:a2:61:bc:11: f0:1b:07:37:fe:7a:af:20:6c:8e:0f:6a:68:fb:27:bf:f9:6f: 41:0d:2a:5c:ff:5f:3f:72:40:f6:75:d2:f8:68:70:5b:40:54: 57:55:ff:b4:3d:77:1f:77:cc:ba:ad:f7:0d:58:81:c3:62:b9: 3c:1a:68:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWy6M/Ol+fgFZjnK1fS7jUvY7B5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTEwMTgwMDQ3MDVaFw0yNTEwMjEwNTQ3MDVaMDMxMTAvBgNV BAMTKEE4MTQwMzVCNzZFMjUzRTIwQUQzOEQwQzdDRDZGNzg4MTNFQ0MwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1te7L7256v1L8ojs7j8MZOrN+ p0aqbtU+r3/zXKhjpblRxXHn0ZneV4vnMYXQaBen/CcNhezyUZ0ALtQrdC8hQxQh +usD//p9MEzLIJmfzZsS3C+q02gpT4UytvpUd+MeefcugxzR7V8e30JXKNQDA5M7 56UVy5PHTtIlrG7ljOK5GBWQ1MQHGvZrjELMI0Rg8CxK1qyNn98M4+cEZDmN/49a kRFodTWldgWshu3mlwtoBCHn2qFVbI3fH3Kc9ktRsQIMQ3zGsoaHa29KMKoE+yK0 u/caWbCTf0m2KaBqdi+u9gHHgnMMyOADxfIjWQoWPA+6/K1hxFzI1wevwSszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqBQDW3biU+IK040MfNb3iBPswKkwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfrdnUcSG3lQfOOLsvlXSIScmwJQ3lxB+1F LA4nFzkojL9YrS5DsEl8K72TgLGAB/0EqgnsuT1fQ4cs4ci7WZsoc/DhsxQ7BK7v FNGKquIBDhwpQurrSipcSidYOeY0cB/usGm+wrFFmHLUf37Kz+0+m9GNB5nG82ku 5fCjZc2pErtF/z4TImcE4XoSM+VCzgYm0/rYX8wxHknj00A4x8tdwTLh//v7GM/9 95AyFwr6BTkYLAMknHEW1QtBX+7RY+y1omG8EfAbBzf+eq8gbI4Pamj7J7/5b0EN Klz/Xz9yQPZ10vhocFtAVFdV/7Q9dx93zLqt9w1YgcNiuTwaaF8= -----END CERTIFICATE-----Generated at Sun Oct 19 18:02:51 2025 by rpki-client