$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: ND8DMRQUOYMuwhmJw2nuWpVQMzGg/o+0/vOR7Z78X2E= Subject key identifier: AD:AE:10:05:69:C0:5A:C1:9F:92:A8:F1:1E:C3:76:69:03:AF:4D:2A Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 1A1C1A8125EEC2F32F556420627A042B4B9BF2D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 0335 Signing time: Fri 22 Aug 2025 07:00:55 +0000 Manifest this update: Fri 22 Aug 2025 06:55:55 +0000 Manifest next update: Mon 25 Aug 2025 08:07:55 +0000 Files and hashes: 1: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: kn1u3H+Ll2agnCreRcaCuxh7oJFk4p9Ar3zFl2iudbk=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: 4Lx8wRUe0EBL5Vg6TnxJN2re2vfRXqdGwu0ff5l9s8U=) 3: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: 4pBa1nIpK2G00khMSrBtnx7UJip4FXw2b8NyVf8n72Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1c:1a:81:25:ee:c2:f3:2f:55:64:20:62:7a:04:2b:4b:9b:f2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Aug 22 06:55:55 2025 GMT Not After : Aug 25 08:07:55 2025 GMT Subject: CN=ADAE100569C05AC19F92A8F11EC3766903AF4D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:74:4e:c2:34:5c:39:b9:13:ad:f4:f2:2e: fb:33:79:0f:a9:29:3c:46:61:1d:13:5a:ad:fb:05: 5f:6f:b1:38:46:c4:7e:ee:70:00:a1:79:e6:cb:43: d3:68:ca:f2:93:21:89:6c:51:24:a5:fd:17:7d:be: 56:0e:55:97:7c:89:db:71:a4:31:27:3e:0a:11:c6: fa:82:55:60:e0:94:eb:89:6d:8e:f8:3d:11:db:69: 61:ba:64:05:33:b8:b7:1c:57:bd:3c:a6:5d:88:ff: ee:99:58:25:e0:ad:18:fc:67:7a:e5:ad:cc:8d:57: 61:46:ec:ef:cf:5a:4b:64:45:a6:2c:49:21:b0:96: 01:02:ed:39:96:5e:6e:3e:62:e6:47:32:51:cb:a3: 92:1f:da:af:a5:5f:35:12:05:8b:f1:af:16:8e:0f: ca:49:50:57:f3:8a:ee:26:0c:77:5f:a8:80:ff:6b: 05:4e:d0:ea:9a:dd:21:fb:6f:f2:18:46:6c:a1:e2: 1e:a2:02:67:62:1f:0e:fb:13:4c:c4:55:04:89:a7: 4e:9d:21:4c:46:02:26:a9:2f:9b:fd:9c:04:2b:bb: ec:50:0f:30:1f:b7:8e:1f:fb:35:28:9a:06:59:af: 64:b1:30:bd:1b:25:a0:4f:75:6c:e2:be:6f:d6:d8: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AE:10:05:69:C0:5A:C1:9F:92:A8:F1:1E:C3:76:69:03:AF:4D:2A X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:aa:1a:85:2d:d3:6b:f6:4d:7f:ef:ec:ec:cd:a5:1d:e0:a5: e1:25:8a:ca:66:04:d3:5f:42:52:ca:7b:65:33:97:64:40:b8: 17:6e:ad:36:7c:68:b8:a7:27:96:a7:c9:ba:12:e8:11:7d:8d: 99:54:38:4d:f6:98:6a:a5:ad:0a:7a:b7:6f:63:22:e6:30:e9: df:05:4b:c1:ff:09:5e:1e:83:f2:55:1e:48:28:bc:c7:01:54: 48:8b:6e:7f:cf:4d:d0:de:29:91:a2:01:cb:b0:18:95:15:f4: 67:d6:2d:55:40:da:0a:b2:7d:a4:90:75:a0:de:2a:ee:8c:5f: c5:aa:86:eb:88:01:e8:aa:5f:95:a9:63:89:a0:56:25:f4:ff: 53:69:b0:ca:06:72:a9:03:c2:c2:8d:48:84:c6:56:b6:56:57: 5d:cc:f9:c2:cd:d8:de:f8:f8:4f:dd:19:22:17:74:9c:70:a0: 8b:dd:b0:c8:d5:d0:3e:3e:73:8d:0e:1c:14:93:4a:45:dd:ad: 9d:8c:80:c3:e9:96:1b:4b:69:56:09:b0:39:6f:c6:4c:01:f0: 43:16:c3:3f:03:ea:73:a3:5d:79:f3:11:86:63:86:34:6c:4a: e6:da:14:b3:7b:47:19:3f:63:dc:3d:42:fc:c5:17:cc:1c:a7: ef:0d:58:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhwagSXuwvMvVWQgYnoEK0ub8tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNTA4MjIwNjU1NTVaFw0yNTA4MjUwODA3NTVaMDMxMTAvBgNV BAMTKEFEQUUxMDA1NjlDMDVBQzE5RjkyQThGMTFFQzM3NjY5MDNBRjREMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRHROwjRcObkTrfTyLvszeQ+p KTxGYR0TWq37BV9vsThGxH7ucACheebLQ9NoyvKTIYlsUSSl/Rd9vlYOVZd8idtx pDEnPgoRxvqCVWDglOuJbY74PRHbaWG6ZAUzuLccV708pl2I/+6ZWCXgrRj8Z3rl rcyNV2FG7O/PWktkRaYsSSGwlgEC7TmWXm4+YuZHMlHLo5If2q+lXzUSBYvxrxaO D8pJUFfziu4mDHdfqID/awVO0Oqa3SH7b/IYRmyh4h6iAmdiHw77E0zEVQSJp06d IUxGAiapL5v9nAQru+xQDzAft44f+zUomgZZr2SxML0bJaBPdWzivm/W2ClLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUra4QBWnAWsGfkqjxHsN2aQOvTSowHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeqGoUt02v2TX/v7OzNpR3gpeElispmBNNf QlLKe2Uzl2RAuBdurTZ8aLinJ5anyboS6BF9jZlUOE32mGqlrQp6t29jIuYw6d8F S8H/CV4eg/JVHkgovMcBVEiLbn/PTdDeKZGiAcuwGJUV9GfWLVVA2gqyfaSQdaDe Ku6MX8WqhuuIAeiqX5WpY4mgViX0/1NpsMoGcqkDwsKNSITGVrZWV13M+cLN2N74 +E/dGSIXdJxwoIvdsMjV0D4+c40OHBSTSkXdrZ2MgMPplhtLaVYJsDlvxkwB8EMW wz8D6nOjXXnzEYZjhjRsSubaFLN7Rxk/Y9w9QvzFF8wcp+8NWCw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:15 2025 by rpki-client