$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: V7Q1vivp/emhZkyaGB7T3kCLNGQeH/Q6IPQPfT3dPpM= Subject key identifier: 98:B7:31:BF:46:DD:31:D0:E0:85:16:86:01:0F:5B:86:32:BE:5F:84 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 4BBDFE10F55D0F8C32DA173307CFB95702FCA9C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 0157 Signing time: Mon 05 May 2025 00:41:36 +0000 Manifest this update: Mon 05 May 2025 00:36:36 +0000 Manifest next update: Thu 08 May 2025 06:00:36 +0000 Files and hashes: 1: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 2: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: G1DcVYZmGtaA+Q6dW6ED/M3NfpRvWQNohHq7MBNG16A=) 3: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bd:fe:10:f5:5d:0f:8c:32:da:17:33:07:cf:b9:57:02:fc:a9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: May 5 00:36:36 2025 GMT Not After : May 8 06:00:36 2025 GMT Subject: CN=98B731BF46DD31D0E0851686010F5B8632BE5F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:8a:64:e1:fb:a8:dc:83:5f:ce:b6:8b:a2: 12:ec:7f:dc:f8:99:33:33:03:69:4f:73:73:9b:8c: 67:bd:ef:f5:14:78:48:de:70:f1:1e:05:fb:05:b4: e8:21:fe:97:35:ad:13:20:83:ed:2d:23:3e:c3:f8: cb:34:ac:04:c4:55:e5:7f:d3:1b:c9:b5:b9:15:ce: 8d:0e:c7:5e:5a:00:80:7c:7b:4a:88:05:c5:4b:b5: ab:1e:eb:9f:12:7c:e2:78:d6:12:81:53:58:b8:18: 05:27:c3:36:f4:11:58:5f:b0:f8:40:64:ed:35:ba: 3d:59:f4:6b:21:de:4a:5d:7d:a4:75:b9:b0:d4:f8: 4d:72:57:36:93:61:00:04:72:5d:bb:4c:d1:5c:75: 5c:ad:ef:22:18:2e:b3:b1:9d:44:79:2e:1b:55:29: 81:cb:13:c3:8b:e9:a4:e0:49:49:a4:e5:98:08:e0: 14:d1:f5:2e:d5:60:eb:6d:d0:b4:1a:3a:05:5e:ec: 6b:41:52:4e:8b:fb:c3:19:75:5b:65:a4:fe:61:92: 39:ab:13:4b:2c:ae:bb:59:67:3b:4b:66:b4:d7:f0: 24:5a:91:f5:a0:6d:63:84:41:fd:da:58:fa:30:44: 01:b3:48:2a:2a:86:a5:ea:1e:0f:3e:48:1c:a5:4a: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:31:BF:46:DD:31:D0:E0:85:16:86:01:0F:5B:86:32:BE:5F:84 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:63:5a:27:80:42:d3:39:bf:81:35:47:98:92:87:7e:a6:f1: 14:9a:57:ee:dd:bc:29:24:79:cb:94:da:89:02:ec:68:65:d9: 81:c2:e3:61:86:54:44:5c:8b:99:88:af:e0:35:88:af:73:b9: 71:84:7c:87:78:15:df:50:5e:d0:9a:c1:59:6d:2d:57:c1:80: 3e:03:6d:2f:a5:30:32:61:b7:6d:02:06:01:b1:d9:79:01:83: 14:17:18:05:be:cf:aa:3d:78:f3:bb:73:d1:80:b7:39:bd:20: d6:c1:18:1c:3b:db:80:01:93:8f:e2:c6:84:c9:ec:a0:e3:13: a5:35:55:68:cd:c3:fe:c8:1c:ff:95:58:04:c5:6d:1c:b3:4e: ef:75:85:89:1d:6c:4f:1f:30:a5:7c:95:44:be:eb:0d:93:0e: d7:1e:98:81:cd:18:b8:fb:62:d2:d1:e1:7c:47:1b:53:3c:c4: 39:a7:f0:58:63:d6:77:2a:56:f8:b6:8b:cc:96:ce:83:d8:58: 39:e0:6d:69:aa:c7:09:b8:ff:62:d9:4c:5a:47:ea:36:db:6c: a6:45:6f:a2:b1:e8:95:1f:3e:88:ff:6d:ca:f7:96:8a:06:07: 96:29:21:24:a1:46:78:9b:e1:67:a3:3c:99:d2:20:77:02:00: ca:fb:0f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS73+EPVdD4wy2hczB8+5VwL8qcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA1MDUwMDM2MzZaFw0yNTA1MDgwNjAwMzZaMDMxMTAvBgNV BAMTKDk4QjczMUJGNDZERDMxRDBFMDg1MTY4NjAxMEY1Qjg2MzJCRTVGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZYpk4fuo3INfzraLohLsf9z4 mTMzA2lPc3ObjGe97/UUeEjecPEeBfsFtOgh/pc1rRMgg+0tIz7D+Ms0rATEVeV/ 0xvJtbkVzo0Ox15aAIB8e0qIBcVLtase658SfOJ41hKBU1i4GAUnwzb0EVhfsPhA ZO01uj1Z9Gsh3kpdfaR1ubDU+E1yVzaTYQAEcl27TNFcdVyt7yIYLrOxnUR5LhtV KYHLE8OL6aTgSUmk5ZgI4BTR9S7VYOtt0LQaOgVe7GtBUk6L+8MZdVtlpP5hkjmr E0ssrrtZZztLZrTX8CRakfWgbWOEQf3aWPowRAGzSCoqhqXqHg8+SBylShXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLcxv0bdMdDghRaGAQ9bhjK+X4QwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMljWieAQtM5v4E1R5iSh36m8RSaV+7dvCkk ecuU2okC7Ghl2YHC42GGVERci5mIr+A1iK9zuXGEfId4Fd9QXtCawVltLVfBgD4D bS+lMDJht20CBgGx2XkBgxQXGAW+z6o9ePO7c9GAtzm9INbBGBw724ABk4/ixoTJ 7KDjE6U1VWjNw/7IHP+VWATFbRyzTu91hYkdbE8fMKV8lUS+6w2TDtcemIHNGLj7 YtLR4XxHG1M8xDmn8Fhj1ncqVvi2i8yWzoPYWDngbWmqxwm4/2LZTFpH6jbbbKZF b6Kx6JUfPoj/bcr3looGB5YpISShRnib4WejPJnSIHcCAMr7Dxc= -----END CERTIFICATE-----Generated at Wed May 7 12:15:20 2025 by rpki-client