$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: 8vkX7cGf+0EdhAgH+FCoWIOEYrJWBaYdIfWli4xrbYw= Subject key identifier: 33:E1:03:0A:24:E6:98:A3:3C:A8:A9:C2:F2:BA:AD:22:99:8E:26:DD Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 245229C9AD6E30DA3ACF4574954859F884D02462 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 031D Signing time: Sat 28 Jun 2025 23:40:54 +0000 Manifest this update: Sat 28 Jun 2025 23:35:54 +0000 Manifest next update: Wed 02 Jul 2025 06:26:54 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: 4Lx8wRUe0EBL5Vg6TnxJN2re2vfRXqdGwu0ff5l9s8U=) 2: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: w/jIwlYh0s1cuYuSQYf3btexi05XPV5g7mA+HNXeUBo=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: kn1u3H+Ll2agnCreRcaCuxh7oJFk4p9Ar3zFl2iudbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:52:29:c9:ad:6e:30:da:3a:cf:45:74:95:48:59:f8:84:d0:24:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Jun 28 23:35:54 2025 GMT Not After : Jul 2 06:26:54 2025 GMT Subject: CN=33E1030A24E698A33CA8A9C2F2BAAD22998E26DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:22:24:f8:bf:da:d0:f0:28:24:47:d5:6e: 63:b0:aa:de:7c:5d:91:39:82:ae:6b:00:a6:6e:13: 4b:32:05:c4:86:a1:c1:49:2b:d9:a8:56:8c:c1:98: 3d:5e:f5:88:54:b9:86:f5:cd:1f:99:bc:0e:0f:b6: e5:fe:44:c0:8d:72:35:36:73:b8:0f:c9:ad:5a:df: 93:48:8a:e6:7c:5a:79:f5:1b:81:57:4d:02:4f:4d: 69:ea:ad:34:5b:ff:2f:12:58:25:8f:49:75:4f:65: 7b:42:18:dc:92:0f:3d:91:43:c6:ee:8e:e5:5b:45: a5:85:02:bb:5d:86:68:85:c6:a4:b1:e7:0e:78:2e: 62:58:46:c2:58:d1:85:06:94:51:2f:19:b1:ae:7a: f5:e6:7d:71:60:72:24:e7:df:b9:78:39:0d:a3:a9: 78:65:15:25:03:8f:cc:87:53:1d:44:68:47:9d:fe: 10:40:4b:d4:cb:fb:c2:af:b8:3d:e5:4a:c3:3c:32: 8b:39:53:ee:cb:e5:63:d4:ec:c0:2d:ec:7b:a3:db: f0:82:83:09:f4:3c:73:f6:1c:84:9c:af:66:3e:60: 0f:d5:7b:4d:99:61:cf:a7:17:02:58:bb:77:45:69: 2b:3c:84:9a:45:c3:66:cc:e2:e9:e4:0b:2d:2f:72: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E1:03:0A:24:E6:98:A3:3C:A8:A9:C2:F2:BA:AD:22:99:8E:26:DD X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b0:7e:46:1a:23:44:07:3e:7f:e8:b3:1f:c8:91:24:63:0b: 86:de:e0:e9:8d:bc:0d:7e:e6:ee:a1:25:e9:58:59:20:3d:da: ab:b8:fb:f1:3e:c8:29:ef:fb:1d:80:27:4d:06:3f:c5:76:df: a2:c8:49:15:05:d3:41:ec:9f:85:16:f6:85:eb:d7:63:06:98: f5:4a:24:68:b8:96:01:51:73:86:bd:6b:78:ee:77:1e:66:21: 88:53:8e:25:71:60:96:2d:da:cd:82:47:0d:31:d7:93:42:e2: 94:eb:b1:11:f3:40:fb:7e:36:24:07:ac:7f:f9:7c:ae:59:72: c2:91:17:b2:c4:25:0d:1a:5e:11:6f:5e:3b:d7:a8:5b:ad:8c: 12:8c:9a:3d:16:60:f8:60:be:0a:d8:b6:fb:ee:00:3a:55:f7: 2b:43:98:19:96:61:a6:dc:18:10:14:45:0d:2e:1a:c8:f4:f7: 8c:05:3b:4f:d4:99:0c:16:49:13:2b:8d:b1:09:e3:a9:76:9b: 25:0a:52:f8:8b:87:52:22:25:9f:4f:d1:2f:eb:9a:42:63:54: 1c:a8:9f:0b:1a:32:d5:31:ae:48:50:54:8e:a2:22:c1:21:f9: 56:ac:d7:d7:5e:f2:ed:f4:19:83:4c:4f:f5:f3:77:ec:14:af: 7e:eb:17:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFIpya1uMNo6z0V0lUhZ+ITQJGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNTA2MjgyMzM1NTRaFw0yNTA3MDIwNjI2NTRaMDMxMTAvBgNV BAMTKDMzRTEwMzBBMjRFNjk4QTMzQ0E4QTlDMkYyQkFBRDIyOTk4RTI2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChViIk+L/a0PAoJEfVbmOwqt58 XZE5gq5rAKZuE0syBcSGocFJK9moVozBmD1e9YhUuYb1zR+ZvA4PtuX+RMCNcjU2 c7gPya1a35NIiuZ8Wnn1G4FXTQJPTWnqrTRb/y8SWCWPSXVPZXtCGNySDz2RQ8bu juVbRaWFArtdhmiFxqSx5w54LmJYRsJY0YUGlFEvGbGuevXmfXFgciTn37l4OQ2j qXhlFSUDj8yHUx1EaEed/hBAS9TL+8KvuD3lSsM8Mos5U+7L5WPU7MAt7Huj2/CC gwn0PHP2HIScr2Y+YA/Ve02ZYc+nFwJYu3dFaSs8hJpFw2bM4unkCy0vcpMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM+EDCiTmmKM8qKnC8rqtIpmOJt0wHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACewfkYaI0QHPn/osx/IkSRjC4be4OmNvA1+ 5u6hJelYWSA92qu4+/E+yCnv+x2AJ00GP8V236LISRUF00Hsn4UW9oXr12MGmPVK JGi4lgFRc4a9a3judx5mIYhTjiVxYJYt2s2CRw0x15NC4pTrsRHzQPt+NiQHrH/5 fK5ZcsKRF7LEJQ0aXhFvXjvXqFutjBKMmj0WYPhgvgrYtvvuADpV9ytDmBmWYabc GBAURQ0uGsj094wFO0/UmQwWSRMrjbEJ46l2myUKUviLh1IiJZ9P0S/rmkJjVByo nwsaMtUxrkhQVI6iIsEh+Vas19de8u30GYNMT/Xzd+wUr37rFzs= -----END CERTIFICATE-----Generated at Mon Jun 30 11:57:16 2025 by rpki-client