$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: S/FxU8btCHvWfUK5hgkrKRWdYcIIsukPPsaGrym2mps= Subject key identifier: 19:BD:C4:85:6D:E2:AF:EC:2E:E5:20:7B:94:7A:BF:EF:42:33:42:8E Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 677C94661C0A342A80A83FC17514C304CB1673E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 023E Signing time: Sun 29 Jun 2025 02:00:40 +0000 Manifest this update: Sun 29 Jun 2025 01:55:40 +0000 Manifest next update: Wed 02 Jul 2025 13:16:40 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: yvHBuAm89CNNTgLoHrZFnI4czO3UHLWHLT010KBZ+CE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 13:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7c:94:66:1c:0a:34:2a:80:a8:3f:c1:75:14:c3:04:cb:16:73:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Jun 29 01:55:40 2025 GMT Not After : Jul 2 13:16:40 2025 GMT Subject: CN=19BDC4856DE2AFEC2EE5207B947ABFEF4233428E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:dc:82:38:d6:c5:a5:cd:fc:1a:bb:2d:a8: 8d:42:72:8a:57:b7:c4:3b:a5:4b:e3:a4:18:c7:cf: e6:60:85:63:aa:86:33:59:6c:c4:a2:72:f8:de:b2: b0:5a:43:58:ad:08:eb:ef:7e:29:d3:b6:fe:9a:bc: aa:9e:3a:6c:e8:b9:0a:c2:ee:ba:3a:10:2c:b1:6b: 67:ca:75:4c:da:9b:1b:04:79:c4:0d:82:41:0c:29: ce:e8:80:52:52:24:60:1b:2d:ac:c0:0e:e8:f0:66: c6:1d:99:e4:4f:86:f2:16:4e:57:c8:91:26:51:ec: db:9f:b3:ab:51:d7:07:bf:74:dd:be:30:86:4d:bd: 47:69:01:7d:65:71:57:13:a4:2b:ee:f7:82:86:ab: ac:94:77:ab:c7:57:4b:c5:88:69:0c:91:c0:e8:d5: e1:bf:8d:e9:a0:f8:ca:7d:7c:e2:ee:7e:f6:6a:00: 4c:be:93:da:3c:cf:92:98:c9:ef:00:94:e7:f4:a9: e6:7f:b0:96:e8:02:97:7c:e7:55:48:ff:d4:9d:c8: 3c:44:dc:ae:3a:57:a4:a0:d8:6e:92:b2:41:bd:99: 14:e0:8e:27:d7:99:bd:44:53:16:b2:68:d4:2f:43: fd:f2:5d:13:57:2f:3c:3a:29:67:08:da:97:fc:04: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BD:C4:85:6D:E2:AF:EC:2E:E5:20:7B:94:7A:BF:EF:42:33:42:8E X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b3:83:2c:c4:1e:24:38:dc:73:47:83:f0:ef:d6:54:a0:00: 48:ce:7c:0d:d7:09:ca:99:e4:9b:62:0a:09:d3:9e:87:78:59: b9:53:11:b4:33:69:43:44:c2:cd:4a:bb:b6:60:1d:fb:30:58: f0:1e:f1:c1:6f:47:7f:07:c1:84:cb:e9:51:56:b1:59:1d:30: a1:e6:8b:82:fe:1e:21:8d:e0:11:f5:1f:21:92:22:d8:50:90: c3:2e:58:0b:ee:bc:db:c4:94:b2:f1:7a:44:11:8a:88:b4:42: b5:b0:55:5a:94:69:26:9e:d8:b9:4c:a5:9a:01:4b:51:56:78: d4:19:06:04:08:27:cc:06:0a:9d:b4:8e:48:f5:e9:55:3e:59: 74:65:b1:8d:eb:5e:fe:87:06:fc:c0:16:6c:cb:86:bf:ed:fa: f0:93:50:f6:94:bb:0c:5f:dc:99:be:d5:7c:39:0d:3b:16:02: d7:c0:88:9c:4b:fc:b7:f4:11:f6:c3:fd:b5:00:e7:23:01:e0: 75:52:f4:3c:1f:73:fc:8a:b1:93:28:8f:61:61:17:6c:55:21: 76:ac:8a:c6:d2:de:1b:3d:cb:82:03:61:60:cd:d0:bb:98:a9: 2c:83:b4:34:81:89:df:da:e8:5f:be:b4:04:4d:8d:7c:e9:74: 3b:d4:c8:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3yUZhwKNCqAqD/BdRTDBMsWc+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA2MjkwMTU1NDBaFw0yNTA3MDIxMzE2NDBaMDMxMTAvBgNV BAMTKDE5QkRDNDg1NkRFMkFGRUMyRUU1MjA3Qjk0N0FCRkVGNDIzMzQyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJ9yCONbFpc38GrstqI1CcopX t8Q7pUvjpBjHz+ZghWOqhjNZbMSicvjesrBaQ1itCOvvfinTtv6avKqeOmzouQrC 7ro6ECyxa2fKdUzamxsEecQNgkEMKc7ogFJSJGAbLazADujwZsYdmeRPhvIWTlfI kSZR7Nufs6tR1we/dN2+MIZNvUdpAX1lcVcTpCvu94KGq6yUd6vHV0vFiGkMkcDo 1eG/jemg+Mp9fOLufvZqAEy+k9o8z5KYye8AlOf0qeZ/sJboApd851VI/9SdyDxE 3K46V6Sg2G6SskG9mRTgjifXmb1EUxayaNQvQ/3yXRNXLzw6KWcI2pf8BBGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGb3EhW3ir+wu5SB7lHq/70IzQo4wHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2zgyzEHiQ43HNHg/Dv1lSgAEjOfA3XCcqZ 5JtiCgnTnod4WblTEbQzaUNEws1Ku7ZgHfswWPAe8cFvR38HwYTL6VFWsVkdMKHm i4L+HiGN4BH1HyGSIthQkMMuWAvuvNvElLLxekQRioi0QrWwVVqUaSae2LlMpZoB S1FWeNQZBgQIJ8wGCp20jkj16VU+WXRlsY3rXv6HBvzAFmzLhr/t+vCTUPaUuwxf 3Jm+1Xw5DTsWAtfAiJxL/Lf0EfbD/bUA5yMB4HVS9Dwfc/yKsZMoj2FhF2xVIXas isbS3hs9y4IDYWDN0LuYqSyDtDSBid/a6F++tARNjXzpdDvUyFY= -----END CERTIFICATE-----Generated at Mon Jun 30 08:42:00 2025 by rpki-client