$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: vGJVwE5q0uEEKPnNqmYKxroVHe1l89Ubo6U6ATnqtH4= Subject key identifier: 9E:66:C2:52:64:8D:F3:2F:A9:AE:0D:D0:F1:A4:A2:2F:54:63:22:FC Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 49BF50B5AE34A048E4D1283435F84F1CB762CDE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0270 Signing time: Sun 19 Oct 2025 23:10:41 +0000 Manifest this update: Sun 19 Oct 2025 23:05:41 +0000 Manifest next update: Thu 23 Oct 2025 00:12:41 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: IzIfZ7ZAGhSjpb6uV/YOe483qGOjTjJajg8sqz4yh48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bf:50:b5:ae:34:a0:48:e4:d1:28:34:35:f8:4f:1c:b7:62:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Oct 19 23:05:41 2025 GMT Not After : Oct 23 00:12:41 2025 GMT Subject: CN=9E66C252648DF32FA9AE0DD0F1A4A22F546322FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:43:37:67:db:1e:d8:af:ac:c5:c8:8b:35: 65:43:00:ec:6d:54:5b:28:ed:c7:50:37:30:3d:44: 0c:48:d9:b4:63:59:30:1f:bf:fd:49:1d:fe:41:cc: 82:63:63:96:f2:06:74:67:3b:5e:67:f8:00:90:56: 45:3c:c1:63:16:92:49:bd:8c:57:2c:bd:06:cd:e4: 7b:c9:1e:ad:b1:e0:4f:ce:d7:44:ab:d1:9e:71:8f: 1c:9a:32:e7:eb:48:19:c2:63:8a:ad:b6:44:b9:cf: 06:0a:08:76:37:c7:48:fe:7d:38:57:d0:d8:f6:e4: 51:f4:95:6c:14:7f:99:1f:3e:e5:b7:ec:b6:0a:89: 24:f4:22:f8:28:07:d9:e1:23:8f:be:d5:f3:fd:72: 76:5a:23:a9:bd:44:0b:37:9b:2e:f9:e5:c8:db:c3: 8a:4c:41:62:46:14:11:dd:95:56:3b:79:28:b4:5d: 63:36:ea:53:18:bf:5e:b9:03:09:5b:46:67:22:2a: db:24:0d:c5:f1:b8:d9:23:b5:80:6b:6e:18:b6:38: 93:80:a0:31:81:2e:da:91:2e:31:52:85:09:84:dc: 31:75:9c:cc:64:9f:be:a6:09:72:18:a1:1f:20:10: 1b:56:81:a5:46:d6:e7:1d:f1:d3:2c:93:bf:a7:06: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:66:C2:52:64:8D:F3:2F:A9:AE:0D:D0:F1:A4:A2:2F:54:63:22:FC X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f3:67:13:cd:a4:69:9c:51:c2:d2:32:14:e3:14:6d:cb:fb: d2:30:e4:8c:7a:ed:b4:ff:9a:ae:a5:7f:e5:fd:c2:42:d8:ad: 2a:8e:fe:6b:15:76:82:0d:5b:6e:c7:7c:fe:94:e1:7e:22:08: 64:16:2f:24:a6:27:6d:20:36:94:dc:78:c9:0f:19:b5:dc:d5: 68:64:9b:2b:ae:a9:6f:5e:4d:cc:ca:80:96:1d:17:33:46:6e: d4:0c:11:78:69:9a:37:f2:0a:10:e9:72:c2:e0:c5:1b:62:ab: aa:46:86:c8:99:76:00:c5:1b:38:eb:1c:45:78:7b:22:5a:af: 77:57:b4:06:68:8d:27:67:9c:48:9c:49:bf:ef:3c:85:9e:6e: ac:bd:87:ee:b6:56:89:be:4b:89:7e:72:99:58:3c:e0:51:1a: 96:36:d3:2a:7e:67:ca:7d:67:00:0a:3b:dc:fe:5c:b7:15:e7: 3a:ed:41:5c:c1:e7:02:a7:93:11:34:a9:83:ca:41:57:53:94: 55:50:b0:93:cb:b1:55:ae:f3:95:82:e7:66:30:6d:ee:69:7b: de:89:d2:66:8a:9a:98:c2:50:69:e8:61:83:47:5b:71:79:8f: 15:ba:4c:1f:d3:af:ec:12:7b:6d:42:d7:a4:50:bb:d0:95:0e: 1c:c0:cc:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSb9Qta40oEjk0Sg0NfhPHLdizeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTEwMTkyMzA1NDFaFw0yNTEwMjMwMDEyNDFaMDMxMTAvBgNV BAMTKDlFNjZDMjUyNjQ4REYzMkZBOUFFMEREMEYxQTRBMjJGNTQ2MzIyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gkM3Z9se2K+sxciLNWVDAOxt VFso7cdQNzA9RAxI2bRjWTAfv/1JHf5BzIJjY5byBnRnO15n+ACQVkU8wWMWkkm9 jFcsvQbN5HvJHq2x4E/O10Sr0Z5xjxyaMufrSBnCY4qttkS5zwYKCHY3x0j+fThX 0Nj25FH0lWwUf5kfPuW37LYKiST0IvgoB9nhI4++1fP9cnZaI6m9RAs3my755cjb w4pMQWJGFBHdlVY7eSi0XWM26lMYv165AwlbRmciKtskDcXxuNkjtYBrbhi2OJOA oDGBLtqRLjFShQmE3DF1nMxkn76mCXIYoR8gEBtWgaVG1ucd8dMsk7+nBhLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmbCUmSN8y+prg3Q8aSiL1RjIvwwHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXzZxPNpGmcUcLSMhTjFG3L+9Iw5Ix67bT/ mq6lf+X9wkLYrSqO/msVdoINW27HfP6U4X4iCGQWLySmJ20gNpTceMkPGbXc1Whk myuuqW9eTczKgJYdFzNGbtQMEXhpmjfyChDpcsLgxRtiq6pGhsiZdgDFGzjrHEV4 eyJar3dXtAZojSdnnEicSb/vPIWebqy9h+62Vom+S4l+cplYPOBRGpY20yp+Z8p9 ZwAKO9z+XLcV5zrtQVzB5wKnkxE0qYPKQVdTlFVQsJPLsVWu85WC52Ywbe5pe96J 0maKmpjCUGnoYYNHW3F5jxW6TB/Tr+wSe21C16RQu9CVDhzAzAE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:25 2025 by rpki-client