$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: uHFZNGBzgTrScuIHgACVObuJCuTZSZe41EgtcX3nMAc= Subject key identifier: 68:D8:AF:BB:A8:1B:C7:40:48:63:65:7B:E9:09:DF:17:48:DE:ED:61 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 35C184B5F9C024775DFD9B67FEDB5017196F75A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 0188 Signing time: Sat 23 Aug 2025 20:41:49 +0000 Manifest this update: Sat 23 Aug 2025 20:36:49 +0000 Manifest next update: Wed 27 Aug 2025 01:13:49 +0000 Files and hashes: 1: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 2: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: jmJRDwWwLYryDqTYRf47B4hTz36a1KW4/ZVdX4pr8c4=) 3: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 01:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c1:84:b5:f9:c0:24:77:5d:fd:9b:67:fe:db:50:17:19:6f:75:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Aug 23 20:36:49 2025 GMT Not After : Aug 27 01:13:49 2025 GMT Subject: CN=68D8AFBBA81BC7404863657BE909DF1748DEED61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:1d:a1:47:89:cd:cc:08:6d:18:ec:b6:bf: a2:7d:e1:5f:25:ad:0f:2b:90:ec:10:90:a4:bd:70: 0d:82:7c:6a:b9:6a:ee:be:3a:b5:fa:e1:c6:94:8d: a4:ae:c3:8b:01:67:5e:c6:9d:54:67:f5:3e:ea:e7: f3:46:a5:d1:99:e8:40:f9:dd:1f:e9:4c:d8:d7:9c: 75:69:2e:7b:b8:48:8d:fb:85:76:6d:e7:8c:13:eb: 95:b3:4a:61:c5:55:93:ac:ac:30:4e:30:4d:ca:47: a2:68:a4:e8:19:58:e0:89:a7:24:34:8d:6e:65:82: e7:a1:28:94:b4:10:bb:7d:af:d6:e9:8e:40:73:f5: 2c:cd:ff:5d:c8:d3:67:12:ad:31:d9:60:2c:e3:5b: ac:fb:53:85:1e:ee:82:cf:14:85:93:81:8b:6c:d9: ac:90:21:ac:70:6d:ca:1a:94:1e:9c:0d:68:19:19: 7c:de:18:45:cb:27:8a:80:2d:6c:c2:dc:15:44:fa: fb:5b:3a:c8:76:ee:ea:db:ba:03:3a:0d:fa:25:29: 23:0a:9f:c3:ff:a5:69:76:85:fd:5f:9b:6d:11:8c: 31:b8:a9:31:ed:96:8d:86:ae:bc:a3:7e:64:7b:85: dd:75:38:d2:ba:1c:90:d9:84:0d:b9:eb:72:d7:7c: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:AF:BB:A8:1B:C7:40:48:63:65:7B:E9:09:DF:17:48:DE:ED:61 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:82:3a:62:4d:68:57:12:44:20:68:e8:f1:2e:44:09:75:13: 6d:5e:4f:ba:8d:5d:01:b5:f2:9e:fd:c4:18:20:14:a7:75:bc: 5c:d5:9e:59:30:11:8a:43:72:1c:82:5a:2b:cb:62:1e:e4:09: b2:32:6d:e9:7f:b1:33:0d:9f:fa:58:fc:ad:6a:03:c0:cd:eb: fb:00:cb:46:46:3b:f9:6b:97:86:e6:06:57:16:9d:15:ad:87: 51:53:4b:1e:79:8a:d6:d5:15:09:d0:3f:ba:32:b1:88:fa:d0: 36:77:a8:58:db:a1:d1:1a:b9:84:2b:22:02:33:5d:a5:bc:37: 8e:d5:e8:0a:02:a2:ca:f5:21:d2:60:a9:1f:87:81:fb:e3:59: ce:88:32:09:55:f7:39:a3:8b:27:7f:bc:41:3a:6c:dd:34:e3: 73:98:a9:9c:d5:01:cf:f3:ff:41:86:27:63:e4:1e:e2:00:13: ef:f8:36:5e:b0:38:07:2b:0c:8c:83:1c:a8:f5:13:58:be:8a: b1:4c:4b:94:d3:57:76:4f:35:bc:9a:24:32:e6:47:a9:93:70: 78:0f:55:b0:80:a0:98:c7:dc:42:1f:c3:a8:67:85:8b:8b:d5: e5:5c:93:93:6c:e5:2d:da:0d:2c:05:93:4d:c8:86:af:02:7a: 8e:44:08:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcGEtfnAJHdd/Ztn/ttQFxlvdaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA4MjMyMDM2NDlaFw0yNTA4MjcwMTEzNDlaMDMxMTAvBgNV BAMTKDY4RDhBRkJCQTgxQkM3NDA0ODYzNjU3QkU5MDlERjE3NDhERUVENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJh2hR4nNzAhtGOy2v6J94V8l rQ8rkOwQkKS9cA2CfGq5au6+OrX64caUjaSuw4sBZ17GnVRn9T7q5/NGpdGZ6ED5 3R/pTNjXnHVpLnu4SI37hXZt54wT65WzSmHFVZOsrDBOME3KR6JopOgZWOCJpyQ0 jW5lguehKJS0ELt9r9bpjkBz9SzN/13I02cSrTHZYCzjW6z7U4Ue7oLPFIWTgYts 2ayQIaxwbcoalB6cDWgZGXzeGEXLJ4qALWzC3BVE+vtbOsh27urbugM6DfolKSMK n8P/pWl2hf1fm20RjDG4qTHtlo2GrryjfmR7hd11ONK6HJDZhA2563LXfIQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNivu6gbx0BIY2V76QnfF0je7WEwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCCOmJNaFcSRCBo6PEuRAl1E21eT7qNXQG1 8p79xBggFKd1vFzVnlkwEYpDchyCWivLYh7kCbIybel/sTMNn/pY/K1qA8DN6/sA y0ZGO/lrl4bmBlcWnRWth1FTSx55itbVFQnQP7oysYj60DZ3qFjbodEauYQrIgIz XaW8N47V6AoCosr1IdJgqR+HgfvjWc6IMglV9zmjiyd/vEE6bN0043OYqZzVAc/z /0GGJ2PkHuIAE+/4Nl6wOAcrDIyDHKj1E1i+irFMS5TTV3ZPNbyaJDLmR6mTcHgP VbCAoJjH3EIfw6hnhYuL1eVck5Ns5S3aDSwFk03Ihq8Ceo5ECCg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:44 2025 by rpki-client