$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: Mb0a/GlOgqpf1J6aagdJ1g1LWH+KKiddu4PV+2RJDa8= Subject key identifier: E6:98:35:E5:8F:5B:7C:F8:E8:15:1A:7F:01:17:BD:7D:DA:FE:99:9E Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 7069C9EACBD73173FF32566B864DCD8BD271A5EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0228 Signing time: Sun 11 May 2025 00:40:40 +0000 Manifest this update: Sun 11 May 2025 00:35:40 +0000 Manifest next update: Wed 14 May 2025 07:45:40 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: hXC41CfxTfVRy9sm4Hn50V/6b8yNOvoyvL0RC6poxwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:69:c9:ea:cb:d7:31:73:ff:32:56:6b:86:4d:cd:8b:d2:71:a5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: May 11 00:35:40 2025 GMT Not After : May 14 07:45:40 2025 GMT Subject: CN=E69835E58F5B7CF8E8151A7F0117BD7DDAFE999E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:d5:7f:a1:3b:57:60:7c:21:ab:11:dc:b3: 4d:19:aa:f3:05:df:32:2c:13:2d:19:55:89:8c:cf: 7d:8a:de:d5:dc:f8:7d:66:ae:cf:02:e3:28:7b:34: 2c:5f:05:99:56:e3:7d:9b:88:13:9e:45:6c:ff:40: 7f:3d:6e:43:98:67:ab:c8:08:a4:e3:3e:51:34:82: 91:09:37:99:67:4f:8a:3f:fe:9d:1d:6b:ec:a3:76: fd:a7:24:43:2a:fb:5c:67:45:e4:37:c2:ec:5f:56: 3c:8a:c7:a6:38:e5:c5:ff:ce:40:3e:80:5d:8a:36: c2:e7:c5:bd:85:83:29:f2:00:fe:c7:b5:8e:64:4a: 69:36:b3:33:22:88:26:02:fb:45:3b:b0:1a:af:93: e3:c8:e3:dd:4d:42:bc:f1:64:dc:b6:fc:6d:29:bd: 3c:e4:af:98:8d:67:86:2f:43:79:6a:85:0f:80:72: ca:bc:89:55:3b:45:d1:d9:8c:49:c1:1b:bd:df:fe: 83:f8:1a:7d:32:5a:47:93:64:11:7e:72:9f:51:6e: 06:ae:c5:ea:fd:1a:96:47:09:15:40:4b:50:e7:7b: db:62:7d:d1:63:dd:3d:05:57:b8:e9:4a:c9:b6:e1: bc:5e:6d:1c:92:a4:5e:91:90:3f:bd:8f:f9:0a:23: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:98:35:E5:8F:5B:7C:F8:E8:15:1A:7F:01:17:BD:7D:DA:FE:99:9E X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2d:76:12:54:3f:6b:e6:dd:a0:da:6f:3c:ca:5a:f5:30:23: 6f:f1:06:40:a7:18:ff:47:16:9f:eb:d3:9c:13:b2:3d:20:d1: c9:11:a9:84:63:49:59:94:64:13:1a:40:bc:da:f0:c3:7d:2e: 48:97:7c:d1:a4:5e:83:bb:25:e8:43:b1:21:c2:aa:50:0b:ee: 2c:2d:cb:01:9b:1b:c5:5c:59:15:d0:6e:ac:a7:78:02:c6:29: 08:86:a7:7a:30:9c:85:a8:40:6f:7b:5c:7e:f7:00:3f:b9:e9: 0a:3a:1b:0b:9f:f7:77:66:f7:15:21:4d:3e:b6:86:9b:01:f4: 8f:00:92:a5:7c:9d:e8:39:96:67:03:16:5f:b8:82:37:83:41: 17:db:83:93:d1:bc:e5:73:47:bc:e0:77:0c:61:a6:7e:48:fc: 84:59:79:48:8e:08:6d:a3:5b:c3:b2:5c:ba:24:43:24:cb:f7: c5:2a:ad:48:f8:a6:59:a4:10:ec:50:07:3b:ff:11:0c:d9:7d: bc:57:b7:5c:d9:d2:d8:17:93:79:42:57:09:ef:7f:3d:ab:99: 65:99:16:77:13:6d:28:c2:52:d5:42:f9:88:35:ce:85:fb:c2: 53:bc:74:4a:67:65:95:83:3d:c0:1c:a9:72:e2:ad:57:9d:10: 99:2d:a8:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGnJ6svXMXP/MlZrhk3Ni9Jxpe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA1MTEwMDM1NDBaFw0yNTA1MTQwNzQ1NDBaMDMxMTAvBgNV BAMTKEU2OTgzNUU1OEY1QjdDRjhFODE1MUE3RjAxMTdCRDdEREFGRTk5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYcNV/oTtXYHwhqxHcs00ZqvMF 3zIsEy0ZVYmMz32K3tXc+H1mrs8C4yh7NCxfBZlW432biBOeRWz/QH89bkOYZ6vI CKTjPlE0gpEJN5lnT4o//p0da+yjdv2nJEMq+1xnReQ3wuxfVjyKx6Y45cX/zkA+ gF2KNsLnxb2FgynyAP7HtY5kSmk2szMiiCYC+0U7sBqvk+PI491NQrzxZNy2/G0p vTzkr5iNZ4YvQ3lqhQ+Acsq8iVU7RdHZjEnBG73f/oP4Gn0yWkeTZBF+cp9Rbgau xer9GpZHCRVAS1Dne9tifdFj3T0FV7jpSsm24bxebRySpF6RkD+9j/kKI0QVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5pg15Y9bfPjoFRp/ARe9fdr+mZ4wHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIktdhJUP2vm3aDabzzKWvUwI2/xBkCnGP9H Fp/r05wTsj0g0ckRqYRjSVmUZBMaQLza8MN9LkiXfNGkXoO7JehDsSHCqlAL7iwt ywGbG8VcWRXQbqyneALGKQiGp3ownIWoQG97XH73AD+56Qo6Gwuf93dm9xUhTT62 hpsB9I8AkqV8neg5lmcDFl+4gjeDQRfbg5PRvOVzR7zgdwxhpn5I/IRZeUiOCG2j W8OyXLokQyTL98UqrUj4plmkEOxQBzv/EQzZfbxXt1zZ0tgXk3lCVwnvfz2rmWWZ FncTbSjCUtVC+Yg1zoX7wlO8dEpnZZWDPcAcqXLirVedEJktqAs= -----END CERTIFICATE-----Generated at Sun May 11 11:33:03 2025 by rpki-client