$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: MLafmncFA6WKS+52R2dVgbcW8ta0dmPfnB0QsVZBPvI= Subject key identifier: 47:5B:51:6F:D7:8D:1D:79:D6:C6:3E:BD:22:9C:3C:E0:E0:C6:28:82 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 2BC6007F3342E588C6B4F6ADF9247F10B18294CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: 011E Signing time: Mon 20 Oct 2025 02:01:39 +0000 Manifest this update: Mon 20 Oct 2025 01:56:39 +0000 Manifest next update: Thu 23 Oct 2025 02:38:39 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: Sg6SB3MIi5e5SrGJ+YNnicZqAS6ZVxZnQKCxPuB29OU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c6:00:7f:33:42:e5:88:c6:b4:f6:ad:f9:24:7f:10:b1:82:94:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Oct 20 01:56:39 2025 GMT Not After : Oct 23 02:38:39 2025 GMT Subject: CN=475B516FD78D1D79D6C63EBD229C3CE0E0C62882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:2a:64:72:a3:4b:c4:c1:51:49:64:6f:ee: db:bf:64:85:47:4f:7d:bd:41:5c:a8:e7:04:3a:ff: 18:71:58:9a:88:69:cf:42:9d:1b:01:23:a2:51:46: 76:0f:ea:ea:2b:80:76:45:4c:5d:ef:e3:77:0f:44: 1f:b5:66:a8:b6:c9:8d:22:12:a0:99:39:47:be:47: b2:43:b2:6b:66:8c:96:e3:3f:f5:ef:60:97:de:02: 64:ef:07:8e:6e:fb:a9:17:a8:81:7e:78:5a:ab:d7: b6:ca:b9:10:bc:67:a6:42:d3:70:c5:fa:a1:e0:1c: bb:9c:1d:84:89:8a:66:1d:d6:3d:ef:e9:fa:59:24: 37:18:b3:7c:db:3f:72:51:3f:9e:95:d4:8b:44:9f: 26:13:7d:8d:b8:77:74:dc:f3:b4:e0:33:94:a4:24: 98:5f:12:fd:9f:90:91:81:1c:81:c1:41:83:d9:ed: ef:1a:66:56:24:7d:8e:f3:37:9c:04:f9:51:68:15: 5d:94:9b:af:d4:05:5f:62:f6:88:be:1d:a7:5f:54: 1c:ea:fc:8d:d8:95:ee:50:0f:80:ea:d7:39:c0:2e: e6:d0:4f:02:18:ae:46:b6:26:64:82:c9:a5:40:95: f4:0e:f2:c7:7f:9f:b0:cc:38:97:4e:29:d9:5d:1f: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:51:6F:D7:8D:1D:79:D6:C6:3E:BD:22:9C:3C:E0:E0:C6:28:82 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cd:9f:0e:e1:6a:b0:79:5d:41:8e:68:d7:92:ce:89:1b:0c: dc:55:3e:d1:e6:55:f2:e5:6a:37:a4:fa:82:37:b6:00:8e:7b: 76:66:09:ff:d8:d2:d4:17:27:51:ed:a9:0e:93:67:ee:69:44: e6:5d:90:f5:1a:d6:65:62:48:ad:af:1f:b4:71:ad:8d:8e:27: 6d:42:86:d9:1f:c3:8f:d0:a5:4a:32:d9:58:68:fa:52:8e:c5: 54:c2:4e:54:a6:a6:ed:6e:3d:82:45:f1:76:4c:f3:76:8a:aa: e1:ae:4e:fc:3c:0a:e8:ba:de:50:98:b8:d7:2c:3f:87:17:a7: 17:54:bc:f2:07:93:56:4e:23:2f:6d:a4:d3:06:7d:64:58:08: 90:b0:35:c2:60:ea:dd:d9:12:b9:20:f6:0a:81:38:9d:e8:ea: a9:7e:3e:11:b9:d8:0a:aa:50:55:9f:2f:69:53:5c:8a:0c:81: 40:f1:f6:4f:2f:0b:b4:e3:ab:0c:8c:63:40:23:43:9e:56:c7: e0:a4:1f:8c:81:99:da:b2:f3:d9:ae:58:8f:82:90:fa:a2:7a: 3f:e4:91:a1:9a:23:78:02:83:ea:9e:3a:bc:99:62:ad:2a:e4: 61:ea:f4:ca:38:e7:d2:66:55:ef:25:88:3b:89:55:50:f3:30: c1:2f:c8:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8YAfzNC5YjGtPat+SR/ELGClMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTEwMjAwMTU2MzlaFw0yNTEwMjMwMjM4MzlaMDMxMTAvBgNV BAMTKDQ3NUI1MTZGRDc4RDFENzlENkM2M0VCRDIyOUMzQ0UwRTBDNjI4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDurCpkcqNLxMFRSWRv7tu/ZIVH T329QVyo5wQ6/xhxWJqIac9CnRsBI6JRRnYP6uorgHZFTF3v43cPRB+1Zqi2yY0i EqCZOUe+R7JDsmtmjJbjP/XvYJfeAmTvB45u+6kXqIF+eFqr17bKuRC8Z6ZC03DF +qHgHLucHYSJimYd1j3v6fpZJDcYs3zbP3JRP56V1ItEnyYTfY24d3Tc87TgM5Sk JJhfEv2fkJGBHIHBQYPZ7e8aZlYkfY7zN5wE+VFoFV2Um6/UBV9i9oi+HadfVBzq /I3Yle5QD4Dq1znALubQTwIYrka2JmSCyaVAlfQO8sd/n7DMOJdOKdldHyvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1tRb9eNHXnWxj69Ipw84ODGKIIwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzNnw7harB5XUGOaNeSzokbDNxVPtHmVfLl ajek+oI3tgCOe3ZmCf/Y0tQXJ1HtqQ6TZ+5pROZdkPUa1mViSK2vH7RxrY2OJ21C htkfw4/QpUoy2Vho+lKOxVTCTlSmpu1uPYJF8XZM83aKquGuTvw8Cui63lCYuNcs P4cXpxdUvPIHk1ZOIy9tpNMGfWRYCJCwNcJg6t3ZErkg9gqBOJ3o6ql+PhG52Aqq UFWfL2lTXIoMgUDx9k8vC7TjqwyMY0AjQ55Wx+CkH4yBmdqy89muWI+CkPqiej/k kaGaI3gCg+qeOryZYq0q5GHq9Mo459JmVe8liDuJVVDzMMEvyLY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:44 2025 by rpki-client