$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: l3FDj8wPDlgQ4HjUs5Hl9G6caEk+6qSVEWHi48O69XY= Subject key identifier: 24:65:2D:47:46:EE:C3:D8:C4:A0:75:7A:40:1E:B8:AA:7D:F8:7F:56 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 43FEED6D4C75206A353BC07BD2D9A4EF91DE82B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01AD Signing time: Sat 18 Oct 2025 23:02:13 +0000 Manifest this update: Sat 18 Oct 2025 22:57:13 +0000 Manifest next update: Wed 22 Oct 2025 07:24:13 +0000 Files and hashes: 1: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 2: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) 3: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 4: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: wHzBGGgxqNqri2pHyfnVcf2Ld1mE1PatwhwIEVgU3kw=) 5: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 6: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fe:ed:6d:4c:75:20:6a:35:3b:c0:7b:d2:d9:a4:ef:91:de:82:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Oct 18 22:57:13 2025 GMT Not After : Oct 22 07:24:13 2025 GMT Subject: CN=24652D4746EEC3D8C4A0757A401EB8AA7DF87F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:5f:ac:ce:47:88:c7:3b:ce:4c:36:c5:c2: 98:02:ac:57:c9:69:f8:de:60:c1:7b:dc:8c:4d:66: e7:0e:c7:91:d5:62:e4:3a:85:26:d1:b3:f3:3d:66: e1:9e:6c:ab:8e:f0:2c:42:ca:38:dd:21:e5:48:65: 6b:eb:39:66:ae:be:c4:85:ab:77:6d:ec:72:90:89: 74:21:1d:63:59:c0:5d:b6:83:97:ff:ec:49:2d:68: 45:ba:28:83:fd:60:39:28:cc:9d:cd:8f:6a:cb:67: 80:f7:5f:67:77:4b:ce:63:31:98:8a:05:bb:54:ec: f8:42:83:ac:c2:cf:06:bc:5b:be:c3:80:1b:e1:9b: c4:73:92:81:49:22:ed:ba:b8:22:46:0c:c8:05:41: 73:b2:68:58:d2:64:28:49:1c:e4:2a:0d:94:f4:07: 0d:82:be:d4:68:46:b2:75:fd:63:cd:63:c6:1c:86: 03:7b:fd:f6:16:16:88:58:13:6b:4f:a2:18:a3:60: 60:5f:15:84:15:14:74:e1:23:fc:e1:8f:63:92:7c: 40:91:d4:1c:50:cb:02:b5:b2:d6:cd:49:84:21:34: b6:e9:66:70:62:c4:3a:10:d1:d6:7d:69:9a:dd:fc: bc:7a:fe:32:81:52:e6:79:1e:04:a1:e6:05:37:ff: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:65:2D:47:46:EE:C3:D8:C4:A0:75:7A:40:1E:B8:AA:7D:F8:7F:56 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0a:55:00:ee:94:eb:0b:a6:90:5e:c6:e0:be:34:7f:91:5b: 23:f1:bf:66:db:b0:2f:04:f6:56:a3:24:9f:36:ee:b4:a1:a6: c7:10:91:4a:3b:8c:31:f9:8e:28:22:c0:84:67:00:36:87:25: cd:85:29:09:c9:d4:b0:d8:bc:4b:fc:a5:29:a1:70:84:fb:71: ba:ad:ba:7b:31:39:6f:ea:3e:34:d7:f4:ad:3e:fa:ca:c5:d4: fd:27:4d:8b:ed:d7:54:7f:ee:a0:fe:30:31:d9:44:1e:2d:1a: 51:f3:6e:6d:7d:f9:f1:3f:8c:f0:94:1b:74:6c:8d:63:b3:23: 77:95:8a:40:14:e9:21:d5:d1:af:87:98:14:6f:29:a2:34:08: e4:53:c3:39:5b:93:c3:29:e5:fd:bd:2e:fb:2d:dd:31:00:21: 15:c7:2d:ed:8b:b2:48:74:42:42:f4:d8:54:aa:63:fb:ec:5b: 3f:9e:ec:55:f8:9e:ee:35:6e:0e:db:9b:9a:aa:63:eb:4a:83: dd:6a:66:38:e4:f4:9e:86:1a:56:f0:af:ea:a3:5b:ae:dc:aa: 24:6a:51:14:10:c9:e2:1d:2a:48:15:a0:f7:92:0a:12:01:d3: 92:ce:72:45:89:81:ef:f8:f8:5e:fc:13:d9:4b:c1:fb:f7:df: cc:7c:7f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/7tbUx1IGo1O8B70tmk75HegrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTEwMTgyMjU3MTNaFw0yNTEwMjIwNzI0MTNaMDMxMTAvBgNV BAMTKDI0NjUyRDQ3NDZFRUMzRDhDNEEwNzU3QTQwMUVCOEFBN0RGODdGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChb1+szkeIxzvOTDbFwpgCrFfJ afjeYMF73IxNZucOx5HVYuQ6hSbRs/M9ZuGebKuO8CxCyjjdIeVIZWvrOWauvsSF q3dt7HKQiXQhHWNZwF22g5f/7EktaEW6KIP9YDkozJ3Nj2rLZ4D3X2d3S85jMZiK BbtU7PhCg6zCzwa8W77DgBvhm8RzkoFJIu26uCJGDMgFQXOyaFjSZChJHOQqDZT0 Bw2CvtRoRrJ1/WPNY8YchgN7/fYWFohYE2tPohijYGBfFYQVFHThI/zhj2OSfECR 1BxQywK1stbNSYQhNLbpZnBixDoQ0dZ9aZrd/Lx6/jKBUuZ5HgSh5gU3/+YHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJGUtR0buw9jEoHV6QB64qn34f1YwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAKVQDulOsLppBexuC+NH+RWyPxv2bbsC8E 9lajJJ827rShpscQkUo7jDH5jigiwIRnADaHJc2FKQnJ1LDYvEv8pSmhcIT7cbqt unsxOW/qPjTX9K0++srF1P0nTYvt11R/7qD+MDHZRB4tGlHzbm19+fE/jPCUG3Rs jWOzI3eVikAU6SHV0a+HmBRvKaI0CORTwzlbk8Mp5f29Lvst3TEAIRXHLe2Lskh0 QkL02FSqY/vsWz+e7FX4nu41bg7bm5qqY+tKg91qZjjk9J6GGlbwr+qjW67cqiRq URQQyeIdKkgVoPeSChIB05LOckWJge/4+F78E9lLwfv338x8fzs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:42 2025 by rpki-client