$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: 6aiGcSWps9B8XTq63yqC0r/m7rdyzzXdc+gCZveKv6U= Subject key identifier: 38:67:58:B4:E7:43:6D:06:CC:73:8F:70:DC:06:BC:DA:08:7C:72:5F Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 2642AF7F1F0BCE5A9E88855174D684F3A5A7CD95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0222 Signing time: Fri 22 Aug 2025 13:41:10 +0000 Manifest this update: Fri 22 Aug 2025 13:36:10 +0000 Manifest next update: Mon 25 Aug 2025 16:38:10 +0000 Files and hashes: 1: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) 2: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 3: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: xws5wPq9GaqIxCLQbiCSQ8r7SEce6Sp7YEiUncQb/9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:42:af:7f:1f:0b:ce:5a:9e:88:85:51:74:d6:84:f3:a5:a7:cd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Aug 22 13:36:10 2025 GMT Not After : Aug 25 16:38:10 2025 GMT Subject: CN=386758B4E7436D06CC738F70DC06BCDA087C725F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:a2:e3:6c:b1:44:8f:d2:68:b4:d1:f3:e1: 6a:d4:98:10:f8:e8:84:08:5d:06:4f:d6:4e:ab:25: ba:21:ba:6d:2e:28:73:d2:63:d9:8e:61:7b:1b:d5: c6:64:1c:16:76:0b:84:37:55:57:87:43:75:9b:fa: 81:e8:2e:c7:3a:02:ca:7d:10:5a:36:72:d8:8e:64: ea:14:da:ed:ca:e1:c4:a2:da:40:d7:43:ce:3e:d9: b2:bf:68:c4:e3:f5:75:08:7b:de:69:a4:5d:b2:2d: ec:f8:dd:54:22:36:11:ed:1e:c7:44:f6:e5:ca:1e: de:cf:ba:99:17:44:c3:cf:80:b8:96:99:e5:0a:1d: 90:12:2c:f4:bd:a6:d0:3f:dc:63:c1:a2:39:b1:6a: 9a:8e:dc:22:57:bd:bb:f2:6e:37:c0:c9:e2:52:33: 50:c6:10:f2:4c:3d:ef:96:56:77:be:36:d9:a8:32: d6:a9:a3:55:fe:f0:ee:89:44:00:37:ff:d5:4a:5d: 9a:70:43:dd:fb:21:79:db:3d:d8:37:b7:87:2d:74: 31:23:29:46:a2:89:32:68:59:5b:2c:19:3f:e5:ee: 17:79:36:8b:c8:b8:22:cb:a7:e8:b4:2a:fb:f5:a8: 87:de:64:83:e3:d4:30:a6:09:37:e4:10:15:bb:01: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:58:B4:E7:43:6D:06:CC:73:8F:70:DC:06:BC:DA:08:7C:72:5F X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4d:74:18:e5:70:e2:f8:2d:61:97:eb:7d:63:11:c2:57:20: 73:0f:b7:63:8d:2b:d4:9e:e6:7b:8e:bf:28:ae:8f:9d:10:65: 27:05:63:6b:88:27:fa:64:53:09:d3:e0:19:55:63:f9:6a:56: 60:ca:8c:13:76:59:4e:bd:30:95:94:d3:a9:34:13:17:20:f1: b0:f6:16:6a:0c:4a:8f:0e:52:9e:01:95:1f:dc:1c:3f:89:85: 3d:21:e0:d3:b0:ce:6f:c3:10:cc:3d:1f:7f:bd:0d:6a:6d:45: 17:63:53:28:06:48:52:4b:cc:b2:29:af:19:f2:23:85:89:5e: 3a:3f:77:45:7d:b7:e7:07:f2:12:7f:11:84:a4:54:d8:30:00: e4:94:76:9e:2b:68:01:4b:ed:86:06:a6:25:de:df:5e:07:05: 35:2f:3f:8a:ee:97:a6:e7:bb:59:bf:5c:82:08:22:99:1a:1f: a5:6b:67:58:b3:fa:39:24:91:a1:cd:b4:72:92:6c:fe:61:7d: 77:ad:97:5f:e4:78:08:dd:53:86:c5:d2:fa:86:6f:96:58:cf: bf:fa:92:58:01:5d:4b:6e:cf:ba:08:e4:81:11:f3:4d:ea:31: 62:54:f4:31:4e:f7:db:e5:44:85:55:04:80:53:1f:99:36:b0: 43:9d:fe:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkKvfx8LzlqeiIVRdNaE86WnzZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTA4MjIxMzM2MTBaFw0yNTA4MjUxNjM4MTBaMDMxMTAvBgNV BAMTKDM4Njc1OEI0RTc0MzZEMDZDQzczOEY3MERDMDZCQ0RBMDg3QzcyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9KLjbLFEj9JotNHz4WrUmBD4 6IQIXQZP1k6rJbohum0uKHPSY9mOYXsb1cZkHBZ2C4Q3VVeHQ3Wb+oHoLsc6Asp9 EFo2ctiOZOoU2u3K4cSi2kDXQ84+2bK/aMTj9XUIe95ppF2yLez43VQiNhHtHsdE 9uXKHt7PupkXRMPPgLiWmeUKHZASLPS9ptA/3GPBojmxapqO3CJXvbvybjfAyeJS M1DGEPJMPe+WVne+NtmoMtapo1X+8O6JRAA3/9VKXZpwQ937IXnbPdg3t4ctdDEj KUaiiTJoWVssGT/l7hd5NovIuCLLp+i0Kvv1qIfeZIPj1DCmCTfkEBW7Aa/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOGdYtOdDbQbMc49w3Aa82gh8cl8wHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJNdBjlcOL4LWGX631jEcJXIHMPt2ONK9Se 5nuOvyiuj50QZScFY2uIJ/pkUwnT4BlVY/lqVmDKjBN2WU69MJWU06k0Excg8bD2 FmoMSo8OUp4BlR/cHD+JhT0h4NOwzm/DEMw9H3+9DWptRRdjUygGSFJLzLIprxny I4WJXjo/d0V9t+cH8hJ/EYSkVNgwAOSUdp4raAFL7YYGpiXe314HBTUvP4rul6bn u1m/XIIIIpkaH6VrZ1iz+jkkkaHNtHKSbP5hfXetl1/keAjdU4bF0vqGb5ZYz7/6 klgBXUtuz7oI5IER803qMWJU9DFO99vlRIVVBIBTH5k2sEOd/l8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:32 2025 by rpki-client