$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: dkXyZp5C1QMLFLN89RYtt4ogQOHs4Qr0fDhUC7dpTkU= Subject key identifier: 3A:16:1C:DE:14:F4:48:E1:65:63:31:C6:0D:B3:DE:A9:D9:05:55:FE Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 2B45AF9A48D0C36A905AAA08DAC141E84F9F6647 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: A7 Signing time: Sat 10 May 2025 10:41:26 +0000 Manifest this update: Sat 10 May 2025 10:36:26 +0000 Manifest next update: Tue 13 May 2025 21:53:26 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=) 2: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: 57Bnppbzjn8KEBwHHX7dJ5QGEkzpWHTfxMOQ2PaXtSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 21:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:45:af:9a:48:d0:c3:6a:90:5a:aa:08:da:c1:41:e8:4f:9f:66:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: May 10 10:36:26 2025 GMT Not After : May 13 21:53:26 2025 GMT Subject: CN=3A161CDE14F448E1656331C60DB3DEA9D90555FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:63:36:68:a7:39:38:ea:71:d3:1c:7e:85:97: 3a:ff:1e:b3:b0:90:99:5c:dc:f2:f5:59:9e:45:21: 5e:a8:a8:46:5b:a5:ab:6a:64:5b:8e:7d:07:8a:2c: 8b:43:84:53:32:32:ea:bf:ad:ce:29:3c:07:44:42: 6a:d6:5e:13:ee:6d:99:0e:39:dc:7e:91:6a:94:30: 66:57:c8:4c:8b:53:b6:b4:bc:00:fb:a2:d7:7e:b5: 0b:d6:77:46:68:09:42:89:a8:43:f6:b0:02:4d:c6: 55:c3:e2:b3:f3:d9:ce:1a:09:67:39:03:18:c4:52: 3c:b6:4f:95:32:66:0f:ff:a2:62:e1:06:95:d9:d6: c4:89:a8:93:59:f7:da:77:a1:45:97:a2:8b:bc:9a: 37:5c:04:27:4d:18:98:d3:c3:fc:15:03:dc:a8:30: 9d:d1:5b:a0:16:5e:02:79:9e:75:dd:8c:97:89:d6: 10:85:f5:e7:d6:71:b4:d8:dd:a8:6e:71:9a:b9:2f: f6:eb:a4:13:e5:3c:62:a6:5c:c7:dc:2f:58:6e:7f: ad:c2:36:6b:fc:d8:01:32:33:78:be:ab:de:da:1c: 3d:7c:d3:88:bf:e8:c9:87:a2:f9:4e:61:a2:d7:c9: 6e:1a:f0:bb:1c:44:5a:43:ff:db:66:f8:ee:37:47: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:16:1C:DE:14:F4:48:E1:65:63:31:C6:0D:B3:DE:A9:D9:05:55:FE X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8b:65:46:f1:29:1d:23:35:8c:09:83:91:6f:d3:19:18:4a: c8:88:7d:07:50:bf:5f:ae:82:82:26:14:33:7b:5f:84:d8:4f: 2d:ae:be:31:c9:a2:5c:d0:d6:c8:c2:8b:a1:00:4d:d5:ae:bc: 32:4b:0f:2b:2c:19:6b:f8:8c:40:56:f6:85:09:57:ce:9d:c5: a9:c9:b7:4d:e1:a1:d9:ac:2a:66:14:62:1c:7e:1c:40:22:d3: 81:aa:10:c5:6f:e5:38:d4:20:bb:e9:b1:8d:d2:4c:2e:8d:b8: 0c:50:db:7e:e0:c0:da:84:82:ab:eb:49:99:ad:11:f7:a9:86: 53:fa:51:3c:87:8f:7c:20:03:07:29:03:92:40:fc:fb:0c:59: 9b:23:a7:73:4a:61:e5:82:4c:7d:a5:2c:32:ef:4a:91:75:cf: cb:5c:85:e0:21:d8:ec:cf:3c:fa:c8:ff:d1:0a:60:1a:3e:4d: ee:e4:6b:ec:f0:28:29:a9:d2:b2:73:ca:dd:59:d6:d6:be:7f: 05:d6:3a:30:9f:28:c2:af:83:c6:4e:0c:d9:35:85:10:e1:f9: 09:95:3b:cd:07:02:9d:67:06:8e:6a:75:46:20:22:b6:ef:07: 10:e2:25:dc:de:7e:41:da:9b:d4:45:13:a6:ee:95:25:02:30: 5d:ea:2b:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0WvmkjQw2qQWqoI2sFB6E+fZkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNTA1MTAxMDM2MjZaFw0yNTA1MTMyMTUzMjZaMDMxMTAvBgNV BAMTKDNBMTYxQ0RFMTRGNDQ4RTE2NTYzMzFDNjBEQjNERUE5RDkwNTU1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWYzZopzk46nHTHH6Flzr/HrOw kJlc3PL1WZ5FIV6oqEZbpatqZFuOfQeKLItDhFMyMuq/rc4pPAdEQmrWXhPubZkO Odx+kWqUMGZXyEyLU7a0vAD7otd+tQvWd0ZoCUKJqEP2sAJNxlXD4rPz2c4aCWc5 AxjEUjy2T5UyZg//omLhBpXZ1sSJqJNZ99p3oUWXoou8mjdcBCdNGJjTw/wVA9yo MJ3RW6AWXgJ5nnXdjJeJ1hCF9efWcbTY3ahucZq5L/brpBPlPGKmXMfcL1huf63C Nmv82AEyM3i+q97aHD1804i/6MmHovlOYaLXyW4a8LscRFpD/9tm+O43R8FjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhYc3hT0SOFlYzHGDbPeqdkFVf4wHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuLZUbxKR0jNYwJg5Fv0xkYSsiIfQdQv1+u goImFDN7X4TYTy2uvjHJolzQ1sjCi6EATdWuvDJLDyssGWv4jEBW9oUJV86dxanJ t03hodmsKmYUYhx+HEAi04GqEMVv5TjUILvpsY3STC6NuAxQ237gwNqEgqvrSZmt EfephlP6UTyHj3wgAwcpA5JA/PsMWZsjp3NKYeWCTH2lLDLvSpF1z8tcheAh2OzP PPrI/9EKYBo+Te7ka+zwKCmp0rJzyt1Z1ta+fwXWOjCfKMKvg8ZODNk1hRDh+QmV O80HAp1nBo5qdUYgIrbvBxDiJdzefkHam9RFE6bulSUCMF3qK7g= -----END CERTIFICATE-----Generated at Sun May 11 10:42:17 2025 by rpki-client