$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: OuE27yMEWOm4qeAoueEjbHPwwixG5KSt/iaFETpMiXE= Subject key identifier: 99:C8:63:17:DC:6F:BF:CB:48:CA:86:2A:9E:DD:FD:7C:20:7B:D5:BC Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 0A4EAE9B61739EB32777FCABD02074D1D0C60724 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 0165 Signing time: Sun 11 May 2025 01:32:12 +0000 Manifest this update: Sun 11 May 2025 01:27:12 +0000 Manifest next update: Wed 14 May 2025 06:31:12 +0000 Files and hashes: 1: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) 2: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 3: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) 4: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 5: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: 4g5tZSXzBzI18fNDS5KMvUJqTSNaKBybp8BeznPD3NU=) 6: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 06:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4e:ae:9b:61:73:9e:b3:27:77:fc:ab:d0:20:74:d1:d0:c6:07:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: May 11 01:27:12 2025 GMT Not After : May 14 06:31:12 2025 GMT Subject: CN=99C86317DC6FBFCB48CA862A9EDDFD7C207BD5BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:b4:e9:35:18:36:e6:c3:62:c7:17:bb:38: c5:3e:b8:92:9a:a9:f2:69:21:31:63:ac:5d:65:e0: d5:0e:53:bc:98:46:d8:d3:94:6a:7f:f3:2b:b3:b5: ec:a7:f6:49:f3:31:f7:f7:2f:1e:d0:c0:ef:4e:02: de:b7:69:b3:6a:ee:d4:b3:71:72:d6:20:21:8e:77: 20:5b:1c:d7:44:d4:28:41:2e:a3:13:fd:65:ac:1b: 52:6a:c9:45:b5:25:f5:9c:fb:f6:f1:56:77:4a:7d: 9b:cc:da:77:7e:fb:0a:f4:b3:47:37:54:f2:fa:96: d9:b9:ec:46:d0:77:36:9a:20:63:c8:90:a9:ee:bc: d3:5c:8a:a7:0f:89:05:29:0e:07:92:db:b7:ff:ae: 69:5b:df:f9:dc:82:a7:08:5e:25:d0:61:16:b7:27: 2e:23:7f:b4:f5:e9:41:1e:d4:92:43:52:55:0d:f7: 4d:08:c4:59:38:45:da:6f:e5:bf:70:97:17:1d:46: 40:e2:db:7a:13:12:c3:15:1c:72:d2:74:b4:33:dd: 75:9e:bb:3a:5f:71:57:07:ee:8c:a4:b1:ab:b9:53: 00:ba:ab:15:7c:7b:9c:62:53:55:fa:c3:66:39:de: 92:77:f8:f6:9c:b0:41:7e:71:84:cb:d5:be:48:8f: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C8:63:17:DC:6F:BF:CB:48:CA:86:2A:9E:DD:FD:7C:20:7B:D5:BC X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:14:88:8c:15:9d:70:2d:5c:86:c1:bf:bc:f6:e7:15:1a:fc: 92:21:72:0d:bc:96:bf:58:9d:0b:96:e2:64:23:75:6d:ec:c5: 4a:49:e8:6d:55:d2:86:79:15:ed:58:69:f7:e7:68:20:c9:97: b1:2a:6b:3f:8f:13:55:c8:58:c2:68:72:ff:8a:65:5c:cc:30: c6:b5:e4:11:08:07:39:3c:cf:cf:16:65:34:d9:7e:66:9e:32: 76:46:ed:df:12:ef:15:e0:c5:3e:70:a2:6d:66:c2:6c:22:e2: a8:22:e4:5a:27:5e:d8:7d:6e:d2:76:ee:10:d9:f1:65:32:0f: 52:62:67:9f:70:93:ea:17:e0:75:fc:b1:79:3d:e5:38:57:67: 52:bf:21:51:a8:fd:53:4f:7b:82:f7:29:c1:5a:24:fb:93:60: 09:b4:06:06:b6:6a:d9:b5:86:b8:35:bc:6b:01:63:20:f0:c5: 1f:a6:75:16:7e:3e:d9:05:09:33:b2:7b:31:1a:0c:6b:cd:56: 35:30:4b:fa:60:1b:0b:46:b1:0f:31:fa:39:47:c3:05:68:19: a8:61:23:92:ea:2a:8d:21:59:53:da:3f:dc:10:44:7b:31:8e: 36:54:17:1f:e8:90:89:82:09:2e:be:62:23:7e:74:ca:ae:aa: 34:2b:cc:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCk6um2FznrMnd/yr0CB00dDGByQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA1MTEwMTI3MTJaFw0yNTA1MTQwNjMxMTJaMDMxMTAvBgNV BAMTKDk5Qzg2MzE3REM2RkJGQ0I0OENBODYyQTlFRERGRDdDMjA3QkQ1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDh7TpNRg25sNixxe7OMU+uJKa qfJpITFjrF1l4NUOU7yYRtjTlGp/8yuzteyn9knzMff3Lx7QwO9OAt63abNq7tSz cXLWICGOdyBbHNdE1ChBLqMT/WWsG1JqyUW1JfWc+/bxVndKfZvM2nd++wr0s0c3 VPL6ltm57EbQdzaaIGPIkKnuvNNciqcPiQUpDgeS27f/rmlb3/ncgqcIXiXQYRa3 Jy4jf7T16UEe1JJDUlUN900IxFk4Rdpv5b9wlxcdRkDi23oTEsMVHHLSdLQz3XWe uzpfcVcH7oyksau5UwC6qxV8e5xiU1X6w2Y53pJ3+PacsEF+cYTL1b5Ij3dfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmchjF9xvv8tIyoYqnt39fCB71bwwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMUiIwVnXAtXIbBv7z25xUa/JIhcg28lr9Y nQuW4mQjdW3sxUpJ6G1V0oZ5Fe1YaffnaCDJl7Eqaz+PE1XIWMJocv+KZVzMMMa1 5BEIBzk8z88WZTTZfmaeMnZG7d8S7xXgxT5wom1mwmwi4qgi5FonXth9btJ27hDZ 8WUyD1JiZ59wk+oX4HX8sXk95ThXZ1K/IVGo/VNPe4L3KcFaJPuTYAm0Bga2atm1 hrg1vGsBYyDwxR+mdRZ+PtkFCTOyezEaDGvNVjUwS/pgGwtGsQ8x+jlHwwVoGahh I5LqKo0hWVPaP9wQRHsxjjZUFx/okImCCS6+YiN+dMquqjQrzGs= -----END CERTIFICATE-----Generated at Sun May 11 23:05:48 2025 by rpki-client