$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: 7elDxAfRVF0R401AgpGYScuFaXo9RY4FKx6nA+AzuKU= Subject key identifier: EC:80:C5:A4:D3:C6:40:D0:E8:65:35:17:B1:73:31:7B:FC:FC:3B:18 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 20177264E8F2E0F28F5595B809CBA2ACA84B5ED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 01F2 Signing time: Thu 03 Apr 2025 13:12:00 +0000 Manifest this update: Thu 03 Apr 2025 13:07:00 +0000 Manifest next update: Sun 06 Apr 2025 19:13:00 +0000 Files and hashes: 1: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: quclrDKWzXD/VK0iQX8CXpzyC8b5VyDA7MtvYadxB6Q=) 2: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: /sa4N19iB/o6G9OL5Szcq6Y4DsVMrF2Yrq0Ab1himGg=) 3: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: gov+8lERQceEfbRJlCEYxrAX+p+Uqcfqwo3MMxlUE04=) 4: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: 7H0GdHg7L7zkSDLiSxs3CkgDGlREYCGdHWl+JFsGgmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 19:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:17:72:64:e8:f2:e0:f2:8f:55:95:b8:09:cb:a2:ac:a8:4b:5e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Apr 3 13:07:00 2025 GMT Not After : Apr 6 19:13:00 2025 GMT Subject: CN=EC80C5A4D3C640D0E8653517B173317BFCFC3B18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:5a:64:f9:7c:74:75:6f:1e:6e:c9:57:89: 3e:33:bf:f4:e6:75:b0:0b:9b:ac:a0:62:2a:38:58: cc:d4:f8:e7:32:1c:6f:83:16:ec:e2:a6:a6:9d:09: ab:f4:a2:41:ec:1c:9f:49:00:3c:66:59:38:2e:ab: 69:e8:06:77:26:e9:62:c3:f9:ef:9d:39:08:0d:37: 59:1a:8f:d0:df:52:20:fc:f1:3a:38:43:dc:bc:57: 9c:bb:53:ee:06:55:60:22:a7:60:69:62:95:38:2a: d1:6a:1c:28:bf:f4:4e:3d:17:23:eb:2b:3b:6b:91: 44:a2:d7:04:72:b8:e8:5c:ba:df:b2:3d:0d:b4:16: 9d:03:31:aa:ba:25:7d:cf:0f:c2:d6:65:0b:93:d2: d3:a6:2c:a5:14:e5:30:6d:56:5b:dd:3e:c5:b1:8e: 56:d7:72:df:70:26:07:80:8d:f4:52:24:46:9d:66: d9:28:28:13:27:12:31:02:04:bd:1f:c7:79:e5:74: 80:1f:3c:50:80:26:35:82:62:a2:02:79:fc:65:81: 06:c4:03:07:47:26:3e:3d:54:d9:cf:3e:dd:95:ca: bf:8d:a0:b7:0c:ac:18:af:af:dc:77:26:2f:c6:56: 49:9e:f4:22:84:96:ee:33:60:b4:e2:3f:2e:f4:07: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:80:C5:A4:D3:C6:40:D0:E8:65:35:17:B1:73:31:7B:FC:FC:3B:18 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:24:ec:a4:52:ca:9e:e5:df:a5:c0:28:8e:32:51:cd:96:78: 83:d2:8f:f5:f3:36:71:d1:be:c9:03:47:68:f5:b7:9f:2b:ef: b6:34:f2:57:73:e3:81:0b:4b:1c:fc:26:26:ff:57:b4:33:cf: c2:b5:8b:58:ef:24:03:fc:e8:c9:dc:c0:bb:5e:60:7a:b7:dd: f1:a7:27:5f:9c:17:29:95:1a:f4:7b:5f:ba:8d:e7:7f:7f:89: 33:08:15:93:7a:37:65:43:a8:86:38:d2:71:d1:be:bf:24:e8: fa:31:aa:9f:af:01:89:32:40:55:d3:67:4e:4b:37:b2:4c:d8: 41:01:cb:78:80:b5:5b:6c:de:9d:10:d7:5a:07:4a:e6:49:0b: 09:40:3b:5a:40:55:13:76:a6:01:a3:3f:f7:a2:7e:a0:4c:c1: b5:1d:64:34:2d:0a:7e:5c:ad:59:af:84:80:1f:29:c0:c4:82: e5:af:fb:55:25:c3:97:4c:75:5a:d3:2d:fc:3f:7a:73:6e:d9: 3b:fe:1e:7f:c4:d4:05:30:46:dd:e0:5a:ef:16:35:1f:4a:e0: 3d:bf:ad:de:f0:ab:87:bc:57:90:63:fa:22:ad:fa:0a:bc:fb: 43:0c:73:f7:0a:e8:38:b2:66:2d:4f:73:3a:92:ac:7b:d8:fe: 90:15:c0:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBdyZOjy4PKPVZW4CcuirKhLXtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTA0MDMxMzA3MDBaFw0yNTA0MDYxOTEzMDBaMDMxMTAvBgNV BAMTKEVDODBDNUE0RDNDNjQwRDBFODY1MzUxN0IxNzMzMTdCRkNGQzNCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPFpk+Xx0dW8ebslXiT4zv/Tm dbALm6ygYio4WMzU+OcyHG+DFuzipqadCav0okHsHJ9JADxmWTguq2noBncm6WLD +e+dOQgNN1kaj9DfUiD88To4Q9y8V5y7U+4GVWAip2BpYpU4KtFqHCi/9E49FyPr KztrkUSi1wRyuOhcut+yPQ20Fp0DMaq6JX3PD8LWZQuT0tOmLKUU5TBtVlvdPsWx jlbXct9wJgeAjfRSJEadZtkoKBMnEjECBL0fx3nldIAfPFCAJjWCYqICefxlgQbE AwdHJj49VNnPPt2Vyr+NoLcMrBivr9x3Ji/GVkme9CKElu4zYLTiPy70B4B3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7IDFpNPGQNDoZTUXsXMxe/z8OxgwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4k7KRSyp7l36XAKI4yUc2WeIPSj/XzNnHR vskDR2j1t58r77Y08ldz44ELSxz8Jib/V7Qzz8K1i1jvJAP86MncwLteYHq33fGn J1+cFymVGvR7X7qN539/iTMIFZN6N2VDqIY40nHRvr8k6Poxqp+vAYkyQFXTZ05L N7JM2EEBy3iAtVts3p0Q11oHSuZJCwlAO1pAVRN2pgGjP/eifqBMwbUdZDQtCn5c rVmvhIAfKcDEguWv+1Ulw5dMdVrTLfw/enNu2Tv+Hn/E1AUwRt3gWu8WNR9K4D2/ rd7wq4e8V5Bj+iKt+gq8+0MMc/cK6DiyZi1PczqSrHvY/pAVwJA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:07 2025 by rpki-client