$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: ZZrDiT5WHWJRXQIT0Be9TTTsNocJM3ef9nXrFH5RxKU= Subject key identifier: 05:1C:9C:47:1F:C6:25:47:60:1F:6F:4A:DD:E0:7A:73:36:C9:3C:74 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 5C791C1DECC8A9D26D1917D17DC0144444077D46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 01A1 Signing time: Sun 19 Oct 2025 21:11:39 +0000 Manifest this update: Sun 19 Oct 2025 21:06:39 +0000 Manifest next update: Wed 22 Oct 2025 23:23:39 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 2: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 3: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: x77KvNsd9nweIfQ1NMj25ODzkYTANcI6Q1XZNoRZaIA=) 4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:79:1c:1d:ec:c8:a9:d2:6d:19:17:d1:7d:c0:14:44:44:07:7d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Oct 19 21:06:39 2025 GMT Not After : Oct 22 23:23:39 2025 GMT Subject: CN=051C9C471FC62547601F6F4ADDE07A7336C93C74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:c3:2c:f7:57:93:92:6a:bf:f2:75:d9:b8: 34:b0:e2:0b:3c:15:16:8b:28:84:0d:05:da:37:20: 73:1a:9d:5a:47:f2:93:79:43:4b:8d:a1:09:ff:79: 60:06:11:7a:62:87:d6:72:93:63:23:03:b5:bd:7c: ed:96:89:40:4c:dd:61:e4:b6:2a:1b:d9:f5:14:37: fa:d5:46:fb:97:52:0b:3c:0c:ad:00:e3:ac:69:df: 05:2a:a9:ee:9d:76:3c:1f:4c:53:4f:fc:3a:6c:5d: 2d:f4:38:fb:c7:28:70:c6:ee:cc:a7:26:cd:8a:69: e7:f3:50:49:ae:03:2c:09:e2:0a:43:f0:14:98:25: 09:c6:4d:89:53:7a:33:6b:f9:87:d9:f1:50:13:0f: 47:df:6f:23:e0:f6:63:89:c2:40:7a:51:62:47:5b: 8a:7c:f4:be:9d:39:81:3d:02:1b:bf:cc:d4:d8:1d: 46:d4:ac:eb:40:c3:ed:ae:fe:85:8c:11:0e:3c:47: b8:23:60:6f:59:d4:86:2d:35:39:bd:81:c0:08:1c: 90:cc:46:32:e1:b6:28:cb:db:ab:1e:39:f3:6a:c7: f8:6d:34:18:ed:f1:64:c1:f9:c1:e8:c2:04:6b:71: 32:34:73:dc:3e:80:e1:1c:ec:a7:34:aa:45:1d:17: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:9C:47:1F:C6:25:47:60:1F:6F:4A:DD:E0:7A:73:36:C9:3C:74 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:86:fb:83:4c:52:91:7d:59:45:92:69:3b:5e:c0:a3:59:03: c5:8b:dd:2a:49:c3:cf:45:31:4f:09:5c:3f:be:72:0a:0b:52: da:c6:aa:09:e4:e3:11:69:b5:c2:a1:dd:f3:5d:37:95:80:82: fa:1b:72:50:8d:d3:1c:63:74:5c:82:ed:46:bf:98:a1:d0:80: c4:ee:49:e2:9b:22:7a:4c:07:f9:5e:2b:f7:96:9b:11:18:51: a0:30:7a:c5:bc:3b:f0:95:67:2d:ca:d5:67:be:1e:a2:6f:0d: 74:e6:8b:59:66:5c:87:03:b1:d0:dc:00:52:f6:59:84:40:31: 45:6d:46:aa:20:c0:45:64:15:58:43:1c:65:98:94:ee:48:0e: fc:11:49:84:ca:7f:d3:39:62:aa:bd:8b:dd:62:a5:38:e4:5d: 96:c5:92:c8:98:5b:4f:1b:6a:7e:b8:2e:27:e6:c8:51:fd:ab: 1b:33:b2:fe:17:c2:74:de:8d:7e:4a:0c:2d:d7:02:3e:da:de: 81:d0:4f:5a:53:ad:c4:01:a7:e1:2d:da:18:8a:aa:ac:20:63: d8:5a:5f:a3:6f:6f:00:b6:4f:a7:4a:f0:41:3c:15:80:49:c5: 90:33:80:4e:98:81:e5:0e:c5:d0:34:2d:03:97:49:5b:90:3f: 81:eb:2a:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHkcHezIqdJtGRfRfcAUREQHfUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTEwMTkyMTA2MzlaFw0yNTEwMjIyMzIzMzlaMDMxMTAvBgNV BAMTKDA1MUM5QzQ3MUZDNjI1NDc2MDFGNkY0QURERTA3QTczMzZDOTNDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcMMs91eTkmq/8nXZuDSw4gs8 FRaLKIQNBdo3IHManVpH8pN5Q0uNoQn/eWAGEXpih9Zyk2MjA7W9fO2WiUBM3WHk tiob2fUUN/rVRvuXUgs8DK0A46xp3wUqqe6ddjwfTFNP/DpsXS30OPvHKHDG7syn Js2KaefzUEmuAywJ4gpD8BSYJQnGTYlTejNr+YfZ8VATD0ffbyPg9mOJwkB6UWJH W4p89L6dOYE9Ahu/zNTYHUbUrOtAw+2u/oWMEQ48R7gjYG9Z1IYtNTm9gcAIHJDM RjLhtijL26seOfNqx/htNBjt8WTB+cHowgRrcTI0c9w+gOEc7Kc0qkUdF1ZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRycRx/GJUdgH29K3eB6czbJPHQwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeG+4NMUpF9WUWSaTtewKNZA8WL3SpJw89F MU8JXD++cgoLUtrGqgnk4xFptcKh3fNdN5WAgvobclCN0xxjdFyC7Ua/mKHQgMTu SeKbInpMB/leK/eWmxEYUaAwesW8O/CVZy3K1We+HqJvDXTmi1lmXIcDsdDcAFL2 WYRAMUVtRqogwEVkFVhDHGWYlO5IDvwRSYTKf9M5Yqq9i91ipTjkXZbFksiYW08b an64LifmyFH9qxszsv4XwnTejX5KDC3XAj7a3oHQT1pTrcQBp+Et2hiKqqwgY9ha X6NvbwC2T6dK8EE8FYBJxZAzgE6YgeUOxdA0LQOXSVuQP4HrKjA= -----END CERTIFICATE-----Generated at Tue Oct 21 02:29:05 2025 by rpki-client