$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: BNylE1xLLhe29dAEWPwMISqYfoycTV2fhd/YdN6e1bk= Subject key identifier: 1C:EE:CB:4B:95:A7:FD:E6:84:BC:CB:65:EB:CE:F1:A5:6C:57:3F:52 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 39350DA42856AF281159E66642A231D9D6003ACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 016F Signing time: Sun 29 Jun 2025 02:01:40 +0000 Manifest this update: Sun 29 Jun 2025 01:56:40 +0000 Manifest next update: Wed 02 Jul 2025 05:41:40 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 2: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 3: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: qwnwRJd/LO7EarRUL5xWZER2B8Soowbs0UYfjEE01wM=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:35:0d:a4:28:56:af:28:11:59:e6:66:42:a2:31:d9:d6:00:3a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Jun 29 01:56:40 2025 GMT Not After : Jul 2 05:41:40 2025 GMT Subject: CN=1CEECB4B95A7FDE684BCCB65EBCEF1A56C573F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:c4:25:2e:b0:2b:04:51:d9:6b:34:c4:d1: 75:52:60:77:56:c7:6f:0c:41:05:9c:c1:d6:8e:fd: d7:fb:b8:09:ea:03:77:43:04:2a:31:d5:05:38:af: 5c:41:3d:4b:5b:7b:d6:04:e6:8e:08:62:ba:f4:1f: 5c:61:c9:de:1a:ca:b5:c2:4b:b8:e9:42:65:b8:3a: 7f:ba:7e:19:22:c1:36:4e:61:59:6f:0f:b3:a9:2c: f6:51:b6:b9:02:0c:b0:c7:98:c5:0d:9a:f5:0a:6a: f4:d8:5f:a1:d9:a2:dc:8a:c5:4f:0b:0c:bc:cd:3a: 6e:53:c6:c5:35:fc:7c:95:a1:2b:49:e5:06:1d:67: 81:7b:99:a4:b2:d6:71:04:4f:11:de:89:39:e5:89: 41:0e:23:35:3c:ca:f5:ec:57:11:25:e6:e4:1b:a8: 5c:9d:01:cd:4e:c2:6b:75:a5:34:ae:b4:39:8a:a5: 3e:5c:40:71:3f:12:7e:f5:36:f3:0c:dc:bd:bb:71: fb:d0:a2:df:1b:4d:61:d0:31:ee:60:53:f9:50:02: 62:58:6f:b6:fd:8b:59:b2:90:bc:c2:be:93:9e:c5: b5:40:8e:f2:35:08:fa:6b:7d:22:19:2d:07:c6:25: 90:ea:9f:ca:32:02:e2:94:1f:aa:2e:86:64:7d:6a: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:CB:4B:95:A7:FD:E6:84:BC:CB:65:EB:CE:F1:A5:6C:57:3F:52 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:4a:db:c0:2d:42:c8:dd:93:74:03:b3:a1:34:db:04:15:94: 02:86:41:fd:cf:b0:a1:c1:98:7b:54:a7:57:8b:22:fe:0d:90: 56:e7:12:b6:e0:26:f6:67:33:c7:a0:07:e4:55:b6:b5:02:58: ab:e0:b2:8f:80:14:3d:8e:f5:ab:d9:5c:7d:6a:85:c6:42:81: 53:07:49:f2:0e:cf:f5:cc:da:1e:f8:e3:44:b9:8f:29:92:94: 57:3b:57:9f:35:11:1c:fb:85:cf:ea:a8:e8:00:ce:72:17:f2: a5:30:c2:6e:15:76:af:74:cf:55:44:67:e0:d3:bc:b9:c0:56: a1:ee:d7:91:17:7f:9e:a0:e4:ff:75:f1:8e:e7:39:61:cf:08: 40:67:02:44:f2:33:e2:a8:19:27:dd:dd:f7:be:dd:34:d0:b3: 6d:7d:92:b8:41:6d:f2:bd:b1:d5:42:7b:8d:16:68:88:f8:72: 4e:b3:cf:55:a6:7f:a7:e2:80:4b:69:79:53:a6:62:10:12:d1: cb:c8:c5:d9:9a:d6:94:b8:31:df:94:21:d3:06:c6:e5:c9:ce: 7e:3b:b6:81:8d:98:4d:92:f1:28:ed:79:b9:87:8b:4b:f4:ca: 36:a4:48:1f:5a:65:b6:da:37:69:1e:5b:92:17:94:19:69:61: 55:53:9a:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTUNpChWrygRWeZmQqIx2dYAOswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA2MjkwMTU2NDBaFw0yNTA3MDIwNTQxNDBaMDMxMTAvBgNV BAMTKDFDRUVDQjRCOTVBN0ZERTY4NEJDQ0I2NUVCQ0VGMUE1NkM1NzNGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjsQlLrArBFHZazTE0XVSYHdW x28MQQWcwdaO/df7uAnqA3dDBCox1QU4r1xBPUtbe9YE5o4IYrr0H1xhyd4ayrXC S7jpQmW4On+6fhkiwTZOYVlvD7OpLPZRtrkCDLDHmMUNmvUKavTYX6HZotyKxU8L DLzNOm5TxsU1/HyVoStJ5QYdZ4F7maSy1nEETxHeiTnliUEOIzU8yvXsVxEl5uQb qFydAc1Owmt1pTSutDmKpT5cQHE/En71NvMM3L27cfvQot8bTWHQMe5gU/lQAmJY b7b9i1mykLzCvpOexbVAjvI1CPprfSIZLQfGJZDqn8oyAuKUH6ouhmR9avtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHO7LS5Wn/eaEvMtl687xpWxXP1IwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANRK28AtQsjdk3QDs6E02wQVlAKGQf3PsKHB mHtUp1eLIv4NkFbnErbgJvZnM8egB+RVtrUCWKvgso+AFD2O9avZXH1qhcZCgVMH SfIOz/XM2h7440S5jymSlFc7V581ERz7hc/qqOgAznIX8qUwwm4Vdq90z1VEZ+DT vLnAVqHu15EXf56g5P918Y7nOWHPCEBnAkTyM+KoGSfd3fe+3TTQs219krhBbfK9 sdVCe40WaIj4ck6zz1Wmf6figEtpeVOmYhAS0cvIxdma1pS4Md+UIdMGxuXJzn47 toGNmE2S8SjtebmHi0v0yjakSB9aZbbaN2keW5IXlBlpYVVTmgw= -----END CERTIFICATE-----Generated at Sun Jun 29 21:21:14 2025 by rpki-client