$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: Oe1OHzSnSBdhIaOHMr5R829YbByyybh/A1PgUqgFqpE= Subject key identifier: ED:C1:5A:CE:C4:2A:73:5F:F7:BB:B6:CD:72:C4:C0:91:A9:4E:C1:22 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 4C8DB0EFF34DFDB63100162D2A4E6EBBB86E249D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 01F3 Signing time: Thu 08 May 2025 16:01:09 +0000 Manifest this update: Thu 08 May 2025 15:56:09 +0000 Manifest next update: Mon 12 May 2025 00:59:09 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 2: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: h3i7MmY0Ascojq5tUjfS3+Zt4BpobtnOfCDIErARHyo=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8d:b0:ef:f3:4d:fd:b6:31:00:16:2d:2a:4e:6e:bb:b8:6e:24:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: May 8 15:56:09 2025 GMT Not After : May 12 00:59:09 2025 GMT Subject: CN=EDC15ACEC42A735FF7BBB6CD72C4C091A94EC122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8d:35:21:5d:07:9a:5d:f1:18:b8:51:0f:d8: 0e:8e:2e:d4:61:c0:88:51:5a:51:a5:9f:e5:8e:67: 65:b3:e3:39:fe:42:fd:ea:ca:a1:63:12:28:6c:65: 94:be:c0:1e:ba:63:b4:16:f1:3b:10:25:7a:cb:dd: 7a:d4:21:0c:0c:c8:71:2a:4d:f7:27:d4:4b:83:c1: 39:29:f4:c7:2a:e2:e6:92:93:c5:2a:1b:1d:20:45: e4:ad:bd:f6:65:3a:03:fd:46:a5:3a:ee:f7:97:e2: 89:ea:e5:28:c7:6d:cc:74:6c:df:e0:2f:a0:b7:dd: e9:87:58:87:09:c7:8a:b4:2a:86:da:d8:fa:65:45: 34:0a:0f:66:71:9a:f0:a7:33:1f:5e:2a:2f:46:a3: a3:80:a3:94:7b:99:6a:70:0c:e4:93:db:4f:3d:eb: 26:46:9e:92:d3:68:69:d1:56:e0:8c:c4:6b:d6:a3: eb:37:6b:b9:e1:06:db:06:53:e3:e2:a9:e4:43:ef: c9:64:f4:70:ac:5d:2e:37:1a:76:2c:3d:f8:68:eb: 20:d8:11:43:8e:02:83:1e:b7:32:26:b9:03:22:14: 5f:a2:a2:7c:7f:6c:1a:d4:fe:7b:cd:6c:6e:5c:69: 93:3d:93:b2:09:b6:24:33:93:be:43:68:4e:32:b1: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C1:5A:CE:C4:2A:73:5F:F7:BB:B6:CD:72:C4:C0:91:A9:4E:C1:22 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2a:2d:d0:db:49:c5:a0:1f:43:76:cf:91:20:34:08:48:d2: 4b:f9:84:13:68:c6:fb:5c:cb:e1:e5:b6:0a:3c:48:90:3d:ba: 2f:0d:9e:fd:ea:ec:33:e9:8c:85:9a:c5:4f:b5:b7:df:15:03: ff:34:99:cd:6e:a9:cb:9e:3c:61:04:e1:a2:98:90:1f:89:df: 8b:59:65:3a:23:61:06:ff:1b:05:ad:59:13:ea:58:66:32:72: af:4f:ae:3d:86:0a:0b:c7:f5:05:a8:7b:81:ec:a4:9e:09:53: b9:7b:1b:15:dc:d7:88:2a:98:9d:e9:a9:78:60:52:42:6e:58: 6c:97:54:04:d1:fe:a6:cb:ce:7a:62:96:d3:14:c7:68:cd:5e: 27:be:e8:bf:40:d5:06:a4:6b:cc:06:31:af:dc:9f:cf:67:b1: 49:ef:95:4c:60:99:e1:4a:49:ca:91:46:c3:3a:b0:43:ec:c8: ec:22:c5:43:56:96:70:dd:e0:07:59:56:78:66:de:cc:07:5b: ae:69:7b:e6:29:31:7e:aa:68:bd:ae:81:81:7b:7e:56:27:ad: 18:c4:ac:36:82:87:96:b4:45:98:4b:bb:6e:42:73:d3:5e:84: f8:4c:4a:89:81:c6:b8:4e:08:08:19:59:6e:1c:de:c4:6f:6e: 88:0a:31:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTI2w7/NN/bYxABYtKk5uu7huJJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTA1MDgxNTU2MDlaFw0yNTA1MTIwMDU5MDlaMDMxMTAvBgNV BAMTKEVEQzE1QUNFQzQyQTczNUZGN0JCQjZDRDcyQzRDMDkxQTk0RUMxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6jTUhXQeaXfEYuFEP2A6OLtRh wIhRWlGln+WOZ2Wz4zn+Qv3qyqFjEihsZZS+wB66Y7QW8TsQJXrL3XrUIQwMyHEq Tfcn1EuDwTkp9Mcq4uaSk8UqGx0gReStvfZlOgP9RqU67veX4onq5SjHbcx0bN/g L6C33emHWIcJx4q0Koba2PplRTQKD2ZxmvCnMx9eKi9Go6OAo5R7mWpwDOST2089 6yZGnpLTaGnRVuCMxGvWo+s3a7nhBtsGU+PiqeRD78lk9HCsXS43GnYsPfho6yDY EUOOAoMetzImuQMiFF+ionx/bBrU/nvNbG5caZM9k7IJtiQzk75DaE4ysTGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cFazsQqc1/3u7bNcsTAkalOwSIwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsqLdDbScWgH0N2z5EgNAhI0kv5hBNoxvtc y+Hltgo8SJA9ui8Nnv3q7DPpjIWaxU+1t98VA/80mc1uqcuePGEE4aKYkB+J34tZ ZTojYQb/GwWtWRPqWGYycq9Prj2GCgvH9QWoe4HspJ4JU7l7GxXc14gqmJ3pqXhg UkJuWGyXVATR/qbLznpiltMUx2jNXie+6L9A1Qaka8wGMa/cn89nsUnvlUxgmeFK ScqRRsM6sEPsyOwixUNWlnDd4AdZVnhm3swHW65pe+YpMX6qaL2ugYF7flYnrRjE rDaCh5a0RZhLu25Cc9NehPhMSomBxrhOCAgZWW4c3sRvbogKMVE= -----END CERTIFICATE-----Generated at Fri May 9 18:47:06 2025 by rpki-client