$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: wqrrLkQvdMuvXgX7VD5kWhxKR3uvko4XzuLWfHyOxho= Subject key identifier: A4:1A:FE:33:39:69:AD:52:DA:04:5F:38:5F:9F:20:8A:39:19:0A:39 Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 648CC107FA99BDA3180020CF6A4ED476BAA49E82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0256 Signing time: Sat 23 Aug 2025 01:20:41 +0000 Manifest this update: Sat 23 Aug 2025 01:15:41 +0000 Manifest next update: Tue 26 Aug 2025 03:11:41 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: IWrbCaUEFKVR9ynmX+aHQz2GHDgUnz4kbYdjrgLE6JA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8c:c1:07:fa:99:bd:a3:18:00:20:cf:6a:4e:d4:76:ba:a4:9e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Aug 23 01:15:41 2025 GMT Not After : Aug 26 03:11:41 2025 GMT Subject: CN=A41AFE333969AD52DA045F385F9F208A39190A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:58:b6:8c:0b:ca:2a:02:44:02:6a:29:2e: ce:6c:e7:76:d1:57:e3:9a:e0:dd:02:1a:01:ad:e6: 31:68:99:f5:05:40:9b:1f:74:4c:1c:f9:72:f3:91: 14:f2:4b:51:19:f5:72:58:f4:03:15:ff:64:31:d3: b7:b4:f0:09:6c:40:c3:39:1e:3a:9f:8d:fc:7e:f7: 51:7f:d0:b7:9a:b1:1c:27:e0:2b:48:b8:29:91:a5: 8c:c7:0e:3a:07:bc:38:26:d5:49:c7:07:e6:f7:13: 4f:59:5b:57:8f:63:16:51:79:d3:07:16:86:25:b0: b0:d8:b9:31:3f:f3:c4:1f:f4:50:2a:74:21:b4:4f: e1:f8:72:5a:1b:87:2a:c3:53:6b:97:00:80:16:01: 36:aa:a6:c8:a6:78:83:e6:90:03:53:e3:71:76:ba: d7:da:49:39:81:65:35:f4:ed:19:1c:75:41:79:84: 01:bc:87:27:dc:e8:4b:d4:63:d1:05:9f:17:33:16: ca:7c:51:1a:fb:d3:b4:6f:fa:4c:47:c2:b1:a8:ba: 64:9e:7a:f7:c8:dd:0a:f0:5f:6e:5f:a2:7b:97:96: 93:68:18:50:44:d3:42:ca:38:46:f7:a4:bd:c3:d0: 11:af:b3:0a:5e:f7:07:7e:df:b1:7e:86:1e:f5:71: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:FE:33:39:69:AD:52:DA:04:5F:38:5F:9F:20:8A:39:19:0A:39 X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:af:ba:35:10:f1:71:6c:3e:72:7e:50:18:10:8b:b4:39:31: 7c:c9:de:29:c5:c5:24:65:50:7b:e8:f0:af:4c:7e:e2:19:4e: 6b:64:8b:e9:43:35:6a:d2:41:41:5d:ad:f5:f8:fc:a0:54:1e: f2:2d:69:d7:3d:17:e2:9d:98:f5:3a:2b:ba:99:66:6d:57:9f: 67:3b:83:85:bf:0a:0e:71:9d:97:0d:2f:00:ab:5d:31:e3:4c: 9a:b0:f8:4a:68:a8:c2:c3:99:75:b0:46:ff:e2:a5:b8:7a:98: da:8a:de:e7:f8:e3:bc:0e:6e:69:b5:c6:f7:cc:a5:17:ac:61: 3f:d5:f5:90:74:bb:bb:83:7a:bf:0e:1a:fb:24:9e:dd:c0:e4: aa:2f:78:6b:bd:16:2c:77:99:56:e7:9a:e6:62:10:67:3d:e7: aa:00:33:50:9c:9f:1f:2c:a0:cd:f0:c9:1c:0e:a1:7c:4e:b8: 00:93:d8:c4:1b:2e:89:a2:a1:59:bd:dc:6f:47:91:50:34:b6: ef:a5:c0:7a:79:73:78:dd:ee:95:cc:a9:4f:b5:12:09:89:38: cb:ae:fb:f4:0b:4e:19:f4:90:f1:8b:c9:a1:b4:bb:56:a6:1f: ae:db:a3:5a:e6:4b:41:9f:48:87:82:08:a2:30:38:00:35:e8: b7:e9:4e:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIzBB/qZvaMYACDPak7UdrqknoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA4MjMwMTE1NDFaFw0yNTA4MjYwMzExNDFaMDMxMTAvBgNV BAMTKEE0MUFGRTMzMzk2OUFENTJEQTA0NUYzODVGOUYyMDhBMzkxOTBBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlli2jAvKKgJEAmopLs5s53bR V+Oa4N0CGgGt5jFomfUFQJsfdEwc+XLzkRTyS1EZ9XJY9AMV/2Qx07e08AlsQMM5 Hjqfjfx+91F/0LeasRwn4CtIuCmRpYzHDjoHvDgm1UnHB+b3E09ZW1ePYxZRedMH FoYlsLDYuTE/88Qf9FAqdCG0T+H4clobhyrDU2uXAIAWATaqpsimeIPmkANT43F2 utfaSTmBZTX07RkcdUF5hAG8hyfc6EvUY9EFnxczFsp8URr707Rv+kxHwrGoumSe evfI3QrwX25fonuXlpNoGFBE00LKOEb3pL3D0BGvswpe9wd+37F+hh71cYJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpBr+MzlprVLaBF84X58gijkZCjkwHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOvujUQ8XFsPnJ+UBgQi7Q5MXzJ3inFxSRl UHvo8K9MfuIZTmtki+lDNWrSQUFdrfX4/KBUHvItadc9F+KdmPU6K7qZZm1Xn2c7 g4W/Cg5xnZcNLwCrXTHjTJqw+EpoqMLDmXWwRv/ipbh6mNqK3uf447wObmm1xvfM pResYT/V9ZB0u7uDer8OGvsknt3A5KoveGu9Fix3mVbnmuZiEGc956oAM1Ccnx8s oM3wyRwOoXxOuACT2MQbLomioVm93G9HkVA0tu+lwHp5c3jd7pXMqU+1EgmJOMuu +/QLThn0kPGLyaG0u1amH67bo1rmS0GfSIeCCKIwOAA16LfpTqc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:04 2025 by rpki-client