$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: eMKUpEsFyHSv1d/AH13A19J/aRXTtsOuCvGwAbDl1Rc= Subject key identifier: 17:73:F6:BD:1C:D2:67:CD:78:08:F8:12:BB:BA:52:BC:B6:6A:1B:CA Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 274909569A1327CCB621568A1CAE288FFC389328 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: EF Signing time: Sat 18 Oct 2025 04:51:27 +0000 Manifest this update: Sat 18 Oct 2025 04:46:27 +0000 Manifest next update: Tue 21 Oct 2025 16:17:27 +0000 Files and hashes: 1: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: PwQrpTpHbd8RlT60fTZ+NDI3nXkcnZ7TPWgbHkRVukk=) 2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:49:09:56:9a:13:27:cc:b6:21:56:8a:1c:ae:28:8f:fc:38:93:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: Oct 18 04:46:27 2025 GMT Not After : Oct 21 16:17:27 2025 GMT Subject: CN=1773F6BD1CD267CD7808F812BBBA52BCB66A1BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:43:b3:6d:fb:2f:94:f0:53:4c:39:85:cf: 98:9d:ca:4e:63:9f:e6:c5:fb:5d:74:8a:30:48:cf: f0:de:37:8a:14:98:c0:20:fe:e3:7c:33:b8:71:04: 60:0a:b1:99:2f:45:55:90:87:0a:d1:7f:9f:5b:1d: 32:41:0e:27:4a:e2:d0:0a:de:fc:72:75:1a:23:5c: 0a:0f:a8:c1:63:47:43:4e:9e:0b:3a:37:b7:09:6b: cc:90:8c:1f:99:1c:52:7a:44:76:b0:ae:86:91:ab: 81:61:b8:14:49:94:06:da:8c:e6:4b:ba:60:e0:3a: 9f:38:8a:ca:8c:fb:ff:19:5a:5d:8d:d3:34:98:7b: d2:09:c5:21:35:4d:dc:8c:fa:13:4d:1d:95:92:f9: b6:e5:9b:da:26:8d:59:1c:8b:c0:44:54:d3:e9:29: 4f:67:8c:05:aa:8b:cb:0d:6c:85:4b:2c:88:36:61: 1d:8e:79:68:eb:1c:b1:2d:fd:d6:57:e6:86:5e:37: cc:10:71:b4:38:b2:98:31:95:aa:dc:91:e2:d8:01: 26:57:ff:07:25:c8:0b:05:8d:70:a7:52:17:04:49: 45:2e:d7:d2:f6:96:da:24:5e:ed:a3:dc:09:48:61: c8:a2:49:b6:fb:2e:1e:d5:34:50:64:e6:2e:c2:77: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:73:F6:BD:1C:D2:67:CD:78:08:F8:12:BB:BA:52:BC:B6:6A:1B:CA X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0f:38:93:12:c4:2b:41:45:4e:00:12:3b:05:ea:49:07:b1: 24:11:83:2e:81:83:da:45:55:6e:d5:6d:c8:54:cd:35:db:d1: b8:84:86:02:c2:10:a8:c8:a9:84:1c:ce:00:10:d2:c7:a5:7c: be:1e:41:b6:06:ae:f0:7d:e9:88:26:38:46:9b:c0:15:f3:b2: ad:1a:1d:a9:91:52:13:3a:7c:ea:c0:b9:67:66:02:55:2a:c3: 63:4c:87:f3:e3:21:7d:aa:49:7c:73:ec:e5:80:b7:85:f1:be: 1b:20:bd:40:88:55:fb:4f:3d:0c:f6:fa:73:76:35:50:e9:0b: 69:1d:1a:77:2b:67:e3:f3:5a:94:44:23:80:a7:e6:c3:87:ee: 2c:5c:6f:a7:83:a5:f9:82:f5:31:a9:05:48:fb:df:25:c3:23: 01:ad:41:44:4b:32:cc:db:06:e1:ee:17:d3:db:38:ce:5d:06: 1a:93:22:13:c6:02:89:b0:70:7f:2e:99:f9:dd:1a:dc:0d:8d: 85:ac:4d:5f:26:d2:27:fb:83:b5:2c:a8:0c:20:de:b6:2b:a5: 46:85:5d:07:75:b4:31:21:95:5e:b3:66:7b:c4:00:59:f4:b7: 50:69:b2:0f:19:ba:64:57:94:f3:ea:45:94:f1:02:5d:2f:b7: fc:a5:c0:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0kJVpoTJ8y2IVaKHK4oj/w4kygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNTEwMTgwNDQ2MjdaFw0yNTEwMjExNjE3MjdaMDMxMTAvBgNV BAMTKDE3NzNGNkJEMUNEMjY3Q0Q3ODA4RjgxMkJCQkE1MkJDQjY2QTFCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggUOzbfsvlPBTTDmFz5idyk5j n+bF+110ijBIz/DeN4oUmMAg/uN8M7hxBGAKsZkvRVWQhwrRf59bHTJBDidK4tAK 3vxydRojXAoPqMFjR0NOngs6N7cJa8yQjB+ZHFJ6RHawroaRq4FhuBRJlAbajOZL umDgOp84isqM+/8ZWl2N0zSYe9IJxSE1TdyM+hNNHZWS+bblm9omjVkci8BEVNPp KU9njAWqi8sNbIVLLIg2YR2OeWjrHLEt/dZX5oZeN8wQcbQ4spgxlarckeLYASZX /wclyAsFjXCnUhcESUUu19L2ltokXu2j3AlIYciiSbb7Lh7VNFBk5i7Cd3mRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3P2vRzSZ814CPgSu7pSvLZqG8owHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgPOJMSxCtBRU4AEjsF6kkHsSQRgy6Bg9pF VW7VbchUzTXb0biEhgLCEKjIqYQczgAQ0selfL4eQbYGrvB96YgmOEabwBXzsq0a HamRUhM6fOrAuWdmAlUqw2NMh/PjIX2qSXxz7OWAt4XxvhsgvUCIVftPPQz2+nN2 NVDpC2kdGncrZ+PzWpREI4Cn5sOH7ixcb6eDpfmC9TGpBUj73yXDIwGtQURLMszb BuHuF9PbOM5dBhqTIhPGAomwcH8umfndGtwNjYWsTV8m0if7g7UsqAwg3rYrpUaF XQd1tDEhlV6zZnvEAFn0t1Bpsg8ZumRXlPPqRZTxAl0vt/ylwNI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:01:39 2025 by rpki-client