$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: avK4n3Ad3UDKkrfS0vNOFdzpqxSB4lFrmoGFIfCls64= Subject key identifier: 55:03:E3:03:1E:9A:0F:83:D8:38:C4:C3:92:CB:D1:39:31:8C:18:33 Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 7F036180A2B0477E3131940AF6F63976776EA419 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 0246 Signing time: Sat 28 Jun 2025 20:21:13 +0000 Manifest this update: Sat 28 Jun 2025 20:16:13 +0000 Manifest next update: Wed 02 Jul 2025 06:48:13 +0000 Files and hashes: 1: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: JkbWHivPhJsD3g1oehsQXHSkUe1IApwcb1eZRN7L4oQ=) 2: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: aeEs0b9qIuhX+nV2yR3I3AU5CjrgkvzSt+XqsFWgsh4=) 3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: V8A5qvlja2NYXpcRnbKxugWJ4eOJeRmdBpf3sJh4ueQ=) 4: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: lOzsBAzFryNZCB+/jSigc4I1GSMJcpM/tHVhQtqL83s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:03:61:80:a2:b0:47:7e:31:31:94:0a:f6:f6:39:76:77:6e:a4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Jun 28 20:16:13 2025 GMT Not After : Jul 2 06:48:13 2025 GMT Subject: CN=5503E3031E9A0F83D838C4C392CBD139318C1833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:82:75:c0:93:a7:41:fd:21:7f:1e:e6:72: f5:7b:ce:7c:46:f4:0d:c2:b4:b8:fd:99:f7:16:47: 7d:42:3d:4c:37:6e:e9:07:2e:93:41:c8:1d:0b:26: 7e:19:6b:a1:63:0a:86:c2:a2:e1:49:98:b7:46:49: 38:7b:04:38:fe:56:5b:ed:32:c1:60:8f:a9:1d:61: 25:3d:65:f1:45:68:92:fd:84:31:e3:60:5d:e3:be: 8b:be:c3:c5:d1:34:e5:e5:82:27:7a:43:ca:0c:85: f2:65:14:21:b7:a5:94:6b:47:00:1f:29:78:cb:04: 2e:2e:b1:7a:e3:2b:15:35:52:94:48:fe:3c:ec:0c: 24:ab:c4:e1:6a:72:97:56:0a:ac:a4:2d:f2:86:6d: 4e:97:3e:1f:7f:cb:a9:af:23:e0:7e:ff:a8:33:0b: f8:9f:bc:c6:91:fb:00:2f:e7:df:ab:2e:ae:0a:e5: e2:d6:1e:a3:49:28:96:d4:23:d7:cb:9e:d1:88:18: 28:54:17:87:1f:7e:85:1e:43:8e:07:78:b6:b6:65: 3b:df:ce:24:90:f2:a0:1b:a1:cd:eb:95:0e:f8:42: 48:46:22:fd:5e:38:7b:cc:b9:27:ca:5e:97:e0:14: dc:96:ca:12:d9:1b:43:c4:5f:c2:bc:be:6e:fc:af: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:E3:03:1E:9A:0F:83:D8:38:C4:C3:92:CB:D1:39:31:8C:18:33 X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:dc:ef:3e:08:87:5b:75:90:4a:e1:00:5e:e9:b6:29:e2:fb: b5:33:f6:d3:fe:0f:b8:63:95:51:a1:05:c5:94:4f:ab:d5:26: db:b3:97:41:d7:64:49:9e:84:f5:09:c0:fc:dd:1a:54:39:94: e9:c5:c1:a5:d4:8d:b9:aa:eb:9f:3e:03:95:9b:b4:28:bc:86: 5f:0a:a3:af:43:8c:49:0b:0d:af:48:bb:13:4b:76:6f:bc:b8: a0:c7:57:1b:7b:e1:17:65:f7:ad:3a:08:88:ed:60:32:d6:0b: 4b:c7:27:76:7a:7d:eb:fa:d8:44:45:b3:80:cf:cc:74:0d:ca: 8d:0e:72:d0:1f:14:65:ca:94:57:15:0b:c3:8e:f0:16:94:79: 6f:54:52:c7:e0:b2:01:7d:e5:59:4c:8d:73:ee:99:ef:6e:7c: b7:42:74:a5:07:1e:2c:98:50:95:33:a1:ed:8c:41:c7:49:ac: 7b:f4:df:af:aa:80:39:be:1f:25:6a:53:17:c2:26:0f:b2:a0: 4c:0e:27:f7:08:79:7d:3f:ee:5a:82:68:e6:a5:00:e8:dd:92: db:c7:8d:d0:be:7b:26:c5:18:63:62:62:45:bc:59:00:e9:a2: 1d:1a:94:b5:d8:ff:46:2b:e1:f0:7b:ff:4b:c5:84:24:b7:c4: 71:b6:ea:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwNhgKKwR34xMZQK9vY5dndupBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNTA2MjgyMDE2MTNaFw0yNTA3MDIwNjQ4MTNaMDMxMTAvBgNV BAMTKDU1MDNFMzAzMUU5QTBGODNEODM4QzRDMzkyQ0JEMTM5MzE4QzE4MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYYJ1wJOnQf0hfx7mcvV7znxG 9A3CtLj9mfcWR31CPUw3bukHLpNByB0LJn4Za6FjCobCouFJmLdGSTh7BDj+Vlvt MsFgj6kdYSU9ZfFFaJL9hDHjYF3jvou+w8XRNOXlgid6Q8oMhfJlFCG3pZRrRwAf KXjLBC4usXrjKxU1UpRI/jzsDCSrxOFqcpdWCqykLfKGbU6XPh9/y6mvI+B+/6gz C/ifvMaR+wAv59+rLq4K5eLWHqNJKJbUI9fLntGIGChUF4cffoUeQ44HeLa2ZTvf ziSQ8qAboc3rlQ74QkhGIv1eOHvMuSfKXpfgFNyWyhLZG0PEX8K8vm78r7gZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQPjAx6aD4PYOMTDksvROTGMGDMwHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfc7z4Ih1t1kErhAF7ptini+7Uz9tP+D7hj lVGhBcWUT6vVJtuzl0HXZEmehPUJwPzdGlQ5lOnFwaXUjbmq658+A5WbtCi8hl8K o69DjEkLDa9IuxNLdm+8uKDHVxt74Rdl9606CIjtYDLWC0vHJ3Z6fev62ERFs4DP zHQNyo0OctAfFGXKlFcVC8OO8BaUeW9UUsfgsgF95VlMjXPume9ufLdCdKUHHiyY UJUzoe2MQcdJrHv036+qgDm+HyVqUxfCJg+yoEwOJ/cIeX0/7lqCaOalAOjdktvH jdC+eybFGGNiYkW8WQDpoh0alLXY/0Yr4fB7/0vFhCS3xHG26kw= -----END CERTIFICATE-----Generated at Sun Jun 29 19:46:09 2025 by rpki-client