$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: T5EAyejrIpWJTbP5YD88UGBj2aQn/9ll550DwEWJI9E= Subject key identifier: B2:B4:52:52:97:7C:F5:13:21:9C:69:71:6E:2F:8F:0C:62:70:E7:4F Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 415077B8F0D6B27C99E8A313EAB7A51F895ADD58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 0193 Signing time: Fri 22 Aug 2025 18:52:19 +0000 Manifest this update: Fri 22 Aug 2025 18:47:19 +0000 Manifest next update: Mon 25 Aug 2025 19:04:19 +0000 Files and hashes: 1: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) 2: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: LQJWEm59o+h0aEq4oR+EGJSlP90L7t/xFuJxJrFnC38=) 3: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) 4: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 5: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 6: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:50:77:b8:f0:d6:b2:7c:99:e8:a3:13:ea:b7:a5:1f:89:5a:dd:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Aug 22 18:47:19 2025 GMT Not After : Aug 25 19:04:19 2025 GMT Subject: CN=B2B45252977CF513219C69716E2F8F0C6270E74F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:a8:91:3b:de:69:2b:18:c0:cd:03:2d:c4: d2:82:b6:6d:cf:ea:7a:aa:ae:d5:2f:1f:4c:5c:73: a1:03:82:ab:77:bc:dc:15:26:57:c2:03:ea:ed:89: 5a:95:70:00:dd:bb:e6:63:e4:74:59:45:b7:e6:04: cd:ae:11:4f:5a:ce:dd:fa:c4:d4:32:d6:c2:2e:9e: 9d:9b:1b:34:48:3a:1e:e3:1b:ad:c2:3d:7b:da:55: e1:10:50:9b:c9:02:b6:7f:dc:61:5d:0e:e1:58:6a: bc:ed:6d:a5:ca:c0:0e:dc:84:b0:ec:5d:ea:af:50: c7:49:78:9b:7b:99:20:48:79:6b:3d:3e:c5:a4:c4: ae:96:ef:e4:e6:f0:39:61:f0:2f:fe:bc:e1:eb:0e: cb:25:ba:55:86:79:b2:48:8e:98:a5:b0:6c:93:5c: 26:ec:5e:e1:49:a5:d8:e1:6d:a6:3f:1c:48:9f:29: 6f:56:d4:27:c1:7a:ac:2a:8a:03:41:86:d8:98:0a: a3:5b:98:c8:38:50:c2:88:df:60:f3:ae:ce:12:c5: 43:7d:8c:8c:b3:60:0f:cd:1d:98:fb:6f:f2:07:2e: 20:2e:ca:4a:d8:d3:99:83:85:06:a4:40:bf:c2:03: 71:5f:ff:6b:11:3f:22:4b:ee:b3:3d:50:0a:53:12: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B4:52:52:97:7C:F5:13:21:9C:69:71:6E:2F:8F:0C:62:70:E7:4F X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:37:3c:87:5c:1c:c8:d8:7d:e5:75:95:00:87:d6:36:85:34: 4e:ac:44:ff:d9:08:99:47:ee:52:b4:2a:12:63:50:91:4c:2a: 45:0d:d4:92:cd:23:d4:f7:1d:14:30:d8:89:52:8f:b4:23:dd: 4f:3b:6b:2b:d2:aa:41:2e:6c:65:64:0d:7e:ea:70:88:e3:56: ef:be:a1:b5:1f:23:56:4a:e9:ea:69:04:d6:a1:8b:c5:20:a8: 75:07:69:62:d1:47:4d:68:78:09:51:09:9e:8f:74:2e:75:98: 95:18:03:15:9a:3b:13:80:fa:bd:8e:14:d1:7f:f0:c1:43:36: 0e:55:9a:7c:c8:78:42:1d:77:29:0e:05:e3:ff:4a:d0:96:ab: 24:75:ff:3b:b9:b4:22:bf:c7:22:f9:8d:f7:81:2b:16:b6:b2: 2b:9b:89:b9:b7:99:5c:6e:12:09:a9:f0:58:53:90:36:f5:80: 5d:59:58:5c:e2:2b:20:68:fe:d7:c1:68:ad:dd:71:6c:c0:2f: 15:16:1a:a2:eb:1c:32:43:72:72:32:6a:90:10:5d:74:cd:2e: 18:37:97:35:a8:45:19:53:6a:61:d5:cb:93:fb:af:31:01:76: a1:d4:84:0d:c8:a2:1b:55:57:d5:e1:29:25:fc:f0:09:ca:c4: 88:1c:b6:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVB3uPDWsnyZ6KMT6relH4la3VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA4MjIxODQ3MTlaFw0yNTA4MjUxOTA0MTlaMDMxMTAvBgNV BAMTKEIyQjQ1MjUyOTc3Q0Y1MTMyMTlDNjk3MTZFMkY4RjBDNjI3MEU3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNaiRO95pKxjAzQMtxNKCtm3P 6nqqrtUvH0xcc6EDgqt3vNwVJlfCA+rtiVqVcADdu+Zj5HRZRbfmBM2uEU9azt36 xNQy1sIunp2bGzRIOh7jG63CPXvaVeEQUJvJArZ/3GFdDuFYarztbaXKwA7chLDs XeqvUMdJeJt7mSBIeWs9PsWkxK6W7+Tm8Dlh8C/+vOHrDsslulWGebJIjpilsGyT XCbsXuFJpdjhbaY/HEifKW9W1CfBeqwqigNBhtiYCqNbmMg4UMKI32Dzrs4SxUN9 jIyzYA/NHZj7b/IHLiAuykrY05mDhQakQL/CA3Ff/2sRPyJL7rM9UApTEoUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsrRSUpd89RMhnGlxbi+PDGJw508wHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU3PIdcHMjYfeV1lQCH1jaFNE6sRP/ZCJlH 7lK0KhJjUJFMKkUN1JLNI9T3HRQw2IlSj7Qj3U87ayvSqkEubGVkDX7qcIjjVu++ obUfI1ZK6eppBNahi8UgqHUHaWLRR01oeAlRCZ6PdC51mJUYAxWaOxOA+r2OFNF/ 8MFDNg5VmnzIeEIddykOBeP/StCWqyR1/zu5tCK/xyL5jfeBKxa2siubibm3mVxu Egmp8FhTkDb1gF1ZWFziKyBo/tfBaK3dcWzALxUWGqLrHDJDcnIyapAQXXTNLhg3 lzWoRRlTamHVy5P7rzEBdqHUhA3IohtVV9XhKSX88AnKxIgctqU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:28:00 2025 by rpki-client