$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: ChhMHcN6a1ADtRZ1cyhGoQA0mIzVsBRwU45H0kzBULA= Subject key identifier: C0:C0:7F:58:B3:B7:02:40:24:96:C7:A5:91:B7:21:2C:8F:AD:B1:BB Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 1CB2CE26E63764C49D9158F5E135FE67A55CFE45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: ED Signing time: Mon 30 Jun 2025 06:01:37 +0000 Manifest this update: Mon 30 Jun 2025 05:56:37 +0000 Manifest next update: Thu 03 Jul 2025 10:53:37 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: jbMbz20g8cC3zBZg5NEXaex7FdPGgWd1UYe8XacpZ5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 10:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b2:ce:26:e6:37:64:c4:9d:91:58:f5:e1:35:fe:67:a5:5c:fe:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Jun 30 05:56:37 2025 GMT Not After : Jul 3 10:53:37 2025 GMT Subject: CN=C0C07F58B3B702402496C7A591B7212C8FADB1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:ef:76:76:de:71:08:7d:f1:b9:05:cf:b1: 67:0d:1f:75:95:b1:b4:53:c4:07:86:15:8b:0b:38: 4a:1b:46:9d:59:79:4e:b9:77:a4:55:01:2e:44:e9: 06:2c:50:53:75:b7:3e:e3:71:77:91:9f:71:9c:35: 76:4b:a7:37:ef:b8:2b:46:1b:53:57:07:87:3a:da: 41:f7:f3:de:0a:96:58:75:26:a8:f4:79:93:61:c2: 70:f7:f3:0f:b6:48:7e:b9:e3:72:40:db:17:f1:67: b4:bd:50:45:a6:80:4a:9b:ee:6c:96:53:37:cf:6d: 69:f7:87:4c:59:cf:c8:2f:ef:03:c4:36:7b:1d:4b: 99:74:82:8c:0c:f1:a9:eb:f3:fb:bd:a2:68:2d:c2: 78:e1:a4:f1:97:07:de:1d:84:0c:41:b2:cd:48:4e: 5e:fd:8c:45:21:2a:c3:ef:39:eb:ff:12:b3:71:13: 5c:f3:b3:cb:ad:d4:f7:a1:db:1f:ba:1a:2d:17:4e: a5:4c:7e:ac:c0:0b:6c:2c:f4:ff:5f:5a:5b:b6:20: 6b:4f:09:0a:d7:34:48:af:5f:e4:58:97:04:90:ca: ca:11:28:89:d5:91:e7:c0:53:b2:aa:c5:7a:34:58: c1:5b:4e:a6:a8:e5:39:13:41:ae:7e:db:2b:fd:0a: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C0:7F:58:B3:B7:02:40:24:96:C7:A5:91:B7:21:2C:8F:AD:B1:BB X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3a:07:f4:3c:7e:d5:43:7e:62:d1:f2:7d:6d:dc:a7:23:19: 84:5d:86:b4:4a:e2:ec:cc:94:0e:31:59:a0:95:1f:52:82:6d: a8:d4:71:17:76:49:a9:2b:92:98:14:f4:31:72:c1:da:d3:bd: 3e:cc:bb:05:0c:99:77:61:21:79:4f:32:32:ae:09:22:15:76: cc:36:9f:74:f5:fb:4c:35:99:b6:01:25:9e:1c:8f:98:ff:ba: 48:fb:e9:b2:d8:b0:bd:b8:e8:09:23:43:43:23:96:0d:bc:f1: 7c:f7:8d:50:da:b8:c6:6f:77:18:3a:42:ea:78:97:f8:ae:3b: 3b:08:8e:73:98:78:4b:ca:76:49:df:e4:11:c7:d3:13:2c:ac: 28:26:83:72:d5:84:b2:12:e6:1b:74:be:06:8b:65:f5:21:2f: e5:b1:6a:67:d8:df:23:43:94:b7:9e:1f:c1:60:fd:06:ee:4d: 18:9d:71:9e:bc:d1:12:52:09:ab:94:11:4b:06:73:ae:48:aa: 90:93:6b:16:7a:fa:f3:52:78:ee:5e:25:96:0b:16:14:1d:5f: 1e:9e:14:92:03:48:eb:2f:7a:62:93:0f:f0:fa:ce:45:38:8a: 1d:1e:33:60:e3:34:cf:95:e4:d1:26:ac:73:83:8c:19:ec:7b: ea:7d:61:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLLOJuY3ZMSdkVj14TX+Z6Vc/kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTA2MzAwNTU2MzdaFw0yNTA3MDMxMDUzMzdaMDMxMTAvBgNV BAMTKEMwQzA3RjU4QjNCNzAyNDAyNDk2QzdBNTkxQjcyMTJDOEZBREIxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkO92dt5xCH3xuQXPsWcNH3WV sbRTxAeGFYsLOEobRp1ZeU65d6RVAS5E6QYsUFN1tz7jcXeRn3GcNXZLpzfvuCtG G1NXB4c62kH3894Kllh1Jqj0eZNhwnD38w+2SH6543JA2xfxZ7S9UEWmgEqb7myW UzfPbWn3h0xZz8gv7wPENnsdS5l0gowM8anr8/u9omgtwnjhpPGXB94dhAxBss1I Tl79jEUhKsPvOev/ErNxE1zzs8ut1Peh2x+6Gi0XTqVMfqzAC2ws9P9fWlu2IGtP CQrXNEivX+RYlwSQysoRKInVkefAU7KqxXo0WMFbTqao5TkTQa5+2yv9Cv1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMB/WLO3AkAklselkbchLI+tsbswHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI6B/Q8ftVDfmLR8n1t3KcjGYRdhrRK4uzM lA4xWaCVH1KCbajUcRd2SakrkpgU9DFywdrTvT7MuwUMmXdhIXlPMjKuCSIVdsw2 n3T1+0w1mbYBJZ4cj5j/ukj76bLYsL246AkjQ0Mjlg288Xz3jVDauMZvdxg6Qup4 l/iuOzsIjnOYeEvKdknf5BHH0xMsrCgmg3LVhLIS5ht0vgaLZfUhL+WxamfY3yND lLeeH8Fg/QbuTRidcZ680RJSCauUEUsGc65IqpCTaxZ6+vNSeO5eJZYLFhQdXx6e FJIDSOsvemKTD/D6zkU4ih0eM2DjNM+V5NEmrHODjBnse+p9YYM= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:14 2025 by rpki-client