$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: a5Swx3v4LdcZu3CxKqgPXZCN+xtYRgdMta3VHRDmqBE= Subject key identifier: 79:7B:79:F9:54:6D:10:1A:A3:CA:4B:F7:C3:68:F7:BA:36:DB:A3:EE Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 295C306E7633F5ECF611B37ED7BD3A33347AA149 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 023C Signing time: Sun 19 Oct 2025 03:22:20 +0000 Manifest this update: Sun 19 Oct 2025 03:17:20 +0000 Manifest next update: Wed 22 Oct 2025 09:52:20 +0000 Files and hashes: 1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: J+c709QQoIEIkMy97sqY1YIyZz69ISUARLX/2qaMfu4=) 2: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5c:30:6e:76:33:f5:ec:f6:11:b3:7e:d7:bd:3a:33:34:7a:a1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Oct 19 03:17:20 2025 GMT Not After : Oct 22 09:52:20 2025 GMT Subject: CN=797B79F9546D101AA3CA4BF7C368F7BA36DBA3EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:06:83:0c:82:d8:06:4a:28:1e:10:5e:68: 63:50:82:aa:f4:65:7c:2d:36:99:72:22:47:33:84: 9a:04:9f:63:7e:09:33:71:95:7d:9d:57:6f:39:7c: 84:ce:c6:20:e1:64:83:3c:c4:d6:58:8a:ba:62:f1: 7e:90:60:3b:0c:88:07:69:25:25:86:82:2f:12:5e: 30:c3:6a:35:60:e0:fb:6e:3f:84:ef:0d:b1:50:e2: fe:e8:30:2b:9c:d6:6c:5e:26:98:4d:95:a4:e6:37: 4e:25:11:df:58:ef:a0:83:c9:2c:ab:41:f6:c0:08: 51:3c:62:b4:dd:38:ea:88:e8:e9:e8:46:42:41:0f: 1e:e9:b4:fe:c0:10:7d:8e:77:e2:50:8d:17:14:5f: 91:09:36:ca:d2:2c:82:29:e1:ee:97:43:e9:03:3c: 54:12:b3:54:a1:e5:87:63:53:1d:9b:78:b2:f8:b7: d0:47:5f:6c:99:6b:85:05:0d:00:e3:e8:30:fe:8d: 39:36:74:ab:92:c7:88:e3:ab:35:20:ca:d1:54:d7: 7a:e6:4a:f0:78:ee:77:00:04:a9:c9:8a:cb:b7:97: 20:3c:91:1b:29:97:f5:2f:3c:a4:f2:62:be:07:08: a3:79:87:e9:a5:76:e2:43:c9:c1:fe:ae:df:f2:55: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:79:F9:54:6D:10:1A:A3:CA:4B:F7:C3:68:F7:BA:36:DB:A3:EE X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:00:3e:ab:c8:c9:8a:14:5c:c7:d3:4c:1f:42:f7:be:02: cb:b4:24:2a:22:80:81:cc:0f:ff:a9:64:7a:b2:7f:1c:5f:78: d0:69:a5:44:03:7d:dc:6b:58:dd:51:f1:d4:3c:d9:ad:67:f5: db:cf:cc:b5:44:5b:d6:27:34:bb:4e:51:fa:7f:5c:79:f8:e4: 64:ba:38:6e:fe:48:5a:8f:da:7e:33:93:f8:11:4c:30:86:68: 2f:90:98:7a:43:56:9b:47:28:c3:ae:6c:6c:0a:55:1e:17:5d: ba:7e:f3:6e:f3:ea:61:ba:66:85:54:f5:bf:98:a9:7b:5a:34: 4b:fc:17:4a:ee:7d:51:01:46:95:0e:82:99:f6:cc:a0:35:07: 21:86:44:22:7d:c0:8c:82:3e:9a:a2:e7:79:0a:88:1e:ca:f4: d9:fb:65:fd:66:ec:ea:ef:42:62:af:e5:30:6e:52:c4:27:0b: ac:a0:44:80:ed:4b:45:c7:36:a3:80:de:d9:c2:2a:fa:7e:e9: ac:1e:07:15:42:f5:bf:30:9b:d9:5f:db:7b:72:ef:1b:58:c0: e9:12:3f:c8:32:8a:d5:ff:ff:f1:41:7d:91:72:eb:b3:5b:b7: 6a:ac:e4:0e:d5:f4:cd:47:56:98:2d:65:68:3f:9d:91:9e:b9: a9:25:b8:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVwwbnYz9ez2EbN+1706MzR6oUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTEwMTkwMzE3MjBaFw0yNTEwMjIwOTUyMjBaMDMxMTAvBgNV BAMTKDc5N0I3OUY5NTQ2RDEwMUFBM0NBNEJGN0MzNjhGN0JBMzZEQkEzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MQaDDILYBkooHhBeaGNQgqr0 ZXwtNplyIkczhJoEn2N+CTNxlX2dV285fITOxiDhZIM8xNZYirpi8X6QYDsMiAdp JSWGgi8SXjDDajVg4PtuP4TvDbFQ4v7oMCuc1mxeJphNlaTmN04lEd9Y76CDySyr QfbACFE8YrTdOOqI6OnoRkJBDx7ptP7AEH2Od+JQjRcUX5EJNsrSLIIp4e6XQ+kD PFQSs1Sh5YdjUx2beLL4t9BHX2yZa4UFDQDj6DD+jTk2dKuSx4jjqzUgytFU13rm SvB47ncABKnJisu3lyA8kRspl/UvPKTyYr4HCKN5h+mlduJDycH+rt/yVbCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeXt5+VRtEBqjykv3w2j3ujbbo+4wHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAnAD6ryMmKFFzH00wfQve+Asu0JCoigIHM D/+pZHqyfxxfeNBppUQDfdxrWN1R8dQ82a1n9dvPzLVEW9YnNLtOUfp/XHn45GS6 OG7+SFqP2n4zk/gRTDCGaC+QmHpDVptHKMOubGwKVR4XXbp+827z6mG6ZoVU9b+Y qXtaNEv8F0rufVEBRpUOgpn2zKA1ByGGRCJ9wIyCPpqi53kKiB7K9Nn7Zf1m7Orv QmKv5TBuUsQnC6ygRIDtS0XHNqOA3tnCKvp+6aweBxVC9b8wm9lf23ty7xtYwOkS P8gyitX///FBfZFy67Nbt2qs5A7V9M1HVpgtZWg/nZGeuakluIk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:52 2025 by rpki-client