$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: duybMOdn3dXX/V84AnMzOgjhOlVSFwmRKWq/4LZvigQ= Subject key identifier: 13:EF:DE:D4:9F:2F:BE:AA:E0:B3:11:B2:D6:3F:E2:91:52:08:F6:0B Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 23E6B166F429E15058E16490F8BDF04C8A0C9829 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 017A Signing time: Fri 27 Jun 2025 17:52:10 +0000 Manifest this update: Fri 27 Jun 2025 17:47:10 +0000 Manifest next update: Tue 01 Jul 2025 02:59:10 +0000 Files and hashes: 1: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) 2: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 3: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: NQs8SJmJZwnwR7V0X84I/X+y3GPz21Omk6oQwzdV+JE=) 4: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 5: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 6: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 02:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e6:b1:66:f4:29:e1:50:58:e1:64:90:f8:bd:f0:4c:8a:0c:98:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Jun 27 17:47:10 2025 GMT Not After : Jul 1 02:59:10 2025 GMT Subject: CN=13EFDED49F2FBEAAE0B311B2D63FE2915208F60B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:00:1a:1f:d3:92:bd:43:ee:48:bd:e3:b1: 35:78:ee:a7:cd:e8:a7:43:04:eb:e8:78:6b:a5:76: a4:87:a6:41:8d:18:ae:a8:c2:38:07:a8:c7:42:24: f4:6b:d0:b2:45:98:42:d5:48:3e:e3:24:ec:9d:b7: e8:e2:f5:b3:2d:8d:f5:81:12:bd:71:12:c4:a6:aa: cc:32:34:ea:cb:1e:6f:24:bf:97:c7:e9:d0:3b:e2: 1e:81:a4:4e:98:62:13:1a:3b:b3:0f:9e:6b:14:7a: db:35:02:a3:7a:22:4c:d1:77:ad:fe:d1:bf:cd:63: 35:5c:e8:4b:16:17:c3:16:dc:24:8e:d5:84:d6:54: fb:6d:7f:8c:e2:26:65:06:05:64:f2:55:2e:58:28: c5:33:97:d7:03:b1:7e:f6:e6:f2:81:a6:f0:34:7d: 53:15:cb:6d:b9:8a:19:97:73:d1:6a:a3:91:74:12: 2f:70:5b:69:c8:04:d7:a4:67:7c:e1:02:7a:0a:92: 5a:4c:3f:a2:fb:9f:7f:44:13:3b:5a:ee:4a:48:94: 0e:ba:0f:1d:f7:57:03:48:ad:a0:c6:8b:86:bf:82: 8f:b0:5b:74:fe:2c:89:02:41:2f:26:fa:2e:f7:cc: 63:40:35:cd:bd:50:68:fc:d6:66:cf:4f:73:fe:da: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EF:DE:D4:9F:2F:BE:AA:E0:B3:11:B2:D6:3F:E2:91:52:08:F6:0B X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cc:f1:d3:46:c6:42:d3:a3:8c:f8:8a:6d:78:9d:6f:a2:1e: b4:48:4b:49:28:08:33:15:16:cb:33:ee:76:54:55:11:13:ad: d2:5e:70:83:f1:bf:8e:b4:a4:0c:fb:64:3d:29:4b:da:8b:b9: 42:bc:8e:4c:45:83:22:69:58:1c:bb:49:3e:4a:0e:03:d8:61: 48:0e:4f:a2:d8:63:84:80:91:3c:d8:f4:cb:74:0c:7d:53:77: fa:33:8c:86:94:0e:29:44:af:af:f3:46:2c:2d:b6:1c:ea:a8: 8f:f5:cf:a0:e7:8e:18:b1:e3:1c:71:a4:c4:92:b7:f1:3a:96: a5:53:f6:24:12:ad:14:e2:a2:4a:eb:ff:25:cd:bd:8f:14:21: 51:29:8b:f4:08:a0:55:b9:63:6d:4c:df:f1:42:a5:3d:95:3d: f4:60:f6:3e:e7:8f:d4:a8:ae:fb:55:8d:2e:36:11:ca:5e:46: 17:70:98:16:26:86:56:07:17:45:68:84:60:b7:82:0f:de:71: 01:71:a8:ef:b1:df:38:ed:31:41:63:68:f6:61:78:f9:90:51: 37:f7:1b:93:c6:e7:cf:ae:72:c9:c0:cc:f3:7e:c6:90:fb:d5: d7:73:93:86:63:ab:76:ad:ff:2c:fc:99:11:15:be:c3:55:f9: 74:ae:91:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+axZvQp4VBY4WSQ+L3wTIoMmCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA2MjcxNzQ3MTBaFw0yNTA3MDEwMjU5MTBaMDMxMTAvBgNV BAMTKDEzRUZERUQ0OUYyRkJFQUFFMEIzMTFCMkQ2M0ZFMjkxNTIwOEY2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGQAaH9OSvUPuSL3jsTV47qfN 6KdDBOvoeGuldqSHpkGNGK6owjgHqMdCJPRr0LJFmELVSD7jJOydt+ji9bMtjfWB Er1xEsSmqswyNOrLHm8kv5fH6dA74h6BpE6YYhMaO7MPnmsUets1AqN6IkzRd63+ 0b/NYzVc6EsWF8MW3CSO1YTWVPttf4ziJmUGBWTyVS5YKMUzl9cDsX725vKBpvA0 fVMVy225ihmXc9Fqo5F0Ei9wW2nIBNekZ3zhAnoKklpMP6L7n39EEzta7kpIlA66 Dx33VwNIraDGi4a/go+wW3T+LIkCQS8m+i73zGNANc29UGj81mbPT3P+2ovPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE+/e1J8vvqrgsxGy1j/ikVII9gswHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArM8dNGxkLTo4z4im14nW+iHrRIS0koCDMV Fssz7nZUVRETrdJecIPxv460pAz7ZD0pS9qLuUK8jkxFgyJpWBy7ST5KDgPYYUgO T6LYY4SAkTzY9Mt0DH1Td/ozjIaUDilEr6/zRiwtthzqqI/1z6Dnjhix4xxxpMSS t/E6lqVT9iQSrRTiokrr/yXNvY8UIVEpi/QIoFW5Y21M3/FCpT2VPfRg9j7nj9So rvtVjS42EcpeRhdwmBYmhlYHF0VohGC3gg/ecQFxqO+x3zjtMUFjaPZhePmQUTf3 G5PG58+ucsnAzPN+xpD71ddzk4Zjq3at/yz8mREVvsNV+XSukZk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:03 2025 by rpki-client