$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: Pp8UvuxB6dl4xMy0uhyIvSmwwhMyPe3am15F1fLY2aE= Subject key identifier: 01:85:08:5C:65:52:58:49:3A:24:6A:D0:5C:7E:F3:F3:C0:98:68:D0 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 0BB133D7E6E9C264BD3536C02A58C8484DA380B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: D6 Signing time: Thu 08 May 2025 23:01:36 +0000 Manifest this update: Thu 08 May 2025 22:56:36 +0000 Manifest next update: Mon 12 May 2025 03:08:36 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: 3e9m0lyvLi6O8ZMyXG1R2dIifNeh3L9o6Xq/Jbqk02g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b1:33:d7:e6:e9:c2:64:bd:35:36:c0:2a:58:c8:48:4d:a3:80:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: May 8 22:56:36 2025 GMT Not After : May 12 03:08:36 2025 GMT Subject: CN=0185085C655258493A246AD05C7EF3F3C09868D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:15:79:5c:fb:bf:a0:98:9d:1c:f9:5c:be: 1b:84:14:2b:47:c0:d4:40:d1:c9:52:ca:0c:41:74: 11:e6:dc:a4:a0:49:a8:67:5a:ec:35:34:13:7c:62: 22:7d:56:e4:cf:84:cf:99:65:e0:c5:79:e7:d4:6b: 41:96:6c:33:34:ab:bb:dc:4d:6e:90:82:84:56:dc: 0e:0f:76:70:54:91:2e:5a:be:a3:db:c1:00:89:de: 77:4d:b3:32:5f:4f:a1:28:54:4a:60:cb:d6:ef:b4: 8d:43:fc:1c:2c:7b:05:a2:7f:59:21:74:00:5c:0d: a1:68:12:e6:25:ad:72:fe:fd:cf:49:63:f8:65:dd: 17:6e:86:fe:d8:c1:37:d5:82:59:19:a0:6f:ce:10: 81:d6:11:4f:45:29:63:8b:b3:94:89:2e:51:22:50: 85:8d:e5:88:2b:c7:08:c4:22:51:bb:3c:24:9b:66: 8e:c6:e8:d4:28:f2:a2:7e:4c:82:64:44:78:d2:08: 91:7c:bf:81:5f:b4:10:b4:6b:22:e5:7b:b4:a5:17: f4:ec:93:5d:7c:9e:26:14:d8:6f:36:6d:4b:a0:08: df:26:81:2a:07:8d:5e:4e:4d:b0:2c:ce:68:65:e3: 16:f6:54:57:19:be:79:b0:d6:eb:42:13:ea:ea:cf: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:08:5C:65:52:58:49:3A:24:6A:D0:5C:7E:F3:F3:C0:98:68:D0 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:84:48:59:68:9e:af:ca:ba:c0:13:d2:1f:b7:b1:7c:57:27: c7:19:8d:89:1d:2d:48:de:4b:58:e9:7b:a5:29:c4:76:70:2b: 81:48:3f:6f:a6:04:9f:c7:10:2d:e8:e3:f2:99:1c:91:ec:1a: 56:3c:fe:96:5c:52:e6:2c:f1:fe:e9:73:07:a6:af:9a:63:0b: 6b:52:97:9e:f5:4d:46:a7:eb:99:8c:3a:70:2b:52:45:3a:a4: 74:70:ff:35:fe:1e:19:d1:ba:d2:83:61:e0:7c:39:44:1f:31: 78:d6:6b:74:97:34:90:64:9b:22:ec:f8:a5:b6:5c:7c:e0:f0: df:66:a5:a6:b5:7f:d3:bd:65:33:c4:76:55:27:09:67:7f:ce: 13:40:d0:c2:db:5c:cf:18:db:d9:03:29:f6:ae:9b:11:52:8a: 9c:2b:cb:7d:71:81:8c:f0:1f:0e:b8:59:c8:65:7b:b3:f2:4d: 35:2d:d1:06:90:2f:62:09:74:95:4c:ec:32:40:b7:64:66:a8: 7c:46:c7:37:f2:c8:dd:00:9b:8c:cb:b0:5d:6c:54:85:22:6d: e7:6c:b8:69:8d:dd:62:46:aa:05:2c:16:5a:90:ac:4c:f9:5b: fe:d0:2f:d6:39:8f:70:fe:59:30:f0:5d:64:53:47:16:66:6b: 09:ce:df:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7Ez1+bpwmS9NTbAKljISE2jgLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTA1MDgyMjU2MzZaFw0yNTA1MTIwMzA4MzZaMDMxMTAvBgNV BAMTKDAxODUwODVDNjU1MjU4NDkzQTI0NkFEMDVDN0VGM0YzQzA5ODY4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwhV5XPu/oJidHPlcvhuEFCtH wNRA0clSygxBdBHm3KSgSahnWuw1NBN8YiJ9VuTPhM+ZZeDFeefUa0GWbDM0q7vc TW6QgoRW3A4PdnBUkS5avqPbwQCJ3ndNszJfT6EoVEpgy9bvtI1D/BwsewWif1kh dABcDaFoEuYlrXL+/c9JY/hl3Rduhv7YwTfVglkZoG/OEIHWEU9FKWOLs5SJLlEi UIWN5YgrxwjEIlG7PCSbZo7G6NQo8qJ+TIJkRHjSCJF8v4FftBC0ayLle7SlF/Ts k118niYU2G82bUugCN8mgSoHjV5OTbAszmhl4xb2VFcZvnmw1utCE+rqz8xXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYUIXGVSWEk6JGrQXH7z88CYaNAwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCESFlonq/KusAT0h+3sXxXJ8cZjYkdLUje S1jpe6UpxHZwK4FIP2+mBJ/HEC3o4/KZHJHsGlY8/pZcUuYs8f7pcwemr5pjC2tS l571TUan65mMOnArUkU6pHRw/zX+HhnRutKDYeB8OUQfMXjWa3SXNJBkmyLs+KW2 XHzg8N9mpaa1f9O9ZTPEdlUnCWd/zhNA0MLbXM8Y29kDKfaumxFSipwry31xgYzw Hw64Wchle7PyTTUt0QaQL2IJdJVM7DJAt2RmqHxGxzfyyN0Am4zLsF1sVIUibeds uGmN3WJGqgUsFlqQrEz5W/7QL9Y5j3D+WTDwXWRTRxZmawnO39s= -----END CERTIFICATE-----Generated at Sat May 10 08:39:55 2025 by rpki-client