$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: H3IjqNxzo7NQTE70eUIXDh185lag43Bb9KL4k7zNFrs= Subject key identifier: 48:3F:7E:AB:A9:3D:13:0A:B9:20:D8:A2:66:94:FE:A7:EA:60:BD:BB Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 2A12D5073AE19423EB223048FED2B50056E00C56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 0203 Signing time: Sun 11 May 2025 15:12:01 +0000 Manifest this update: Sun 11 May 2025 15:07:01 +0000 Manifest next update: Wed 14 May 2025 20:45:01 +0000 Files and hashes: 1: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: /sa4N19iB/o6G9OL5Szcq6Y4DsVMrF2Yrq0Ab1himGg=) 2: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: gov+8lERQceEfbRJlCEYxrAX+p+Uqcfqwo3MMxlUE04=) 3: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: 7H0GdHg7L7zkSDLiSxs3CkgDGlREYCGdHWl+JFsGgmA=) 4: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: vUk72TcDV0DpFYpRtJmWBCvLOcFJ84KehndNVpRFXrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:12:d5:07:3a:e1:94:23:eb:22:30:48:fe:d2:b5:00:56:e0:0c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: May 11 15:07:01 2025 GMT Not After : May 14 20:45:01 2025 GMT Subject: CN=483F7EABA93D130AB920D8A26694FEA7EA60BDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:6a:25:bc:91:3d:04:8f:b0:51:fa:33:09: b1:6d:74:a1:a0:1f:bb:88:9c:42:c5:ea:33:5d:2f: 1a:0a:39:c5:76:de:aa:43:b8:80:d3:59:f6:55:85: b0:44:65:b7:d3:ae:48:0d:f1:63:6a:a2:79:bd:d5: 50:a9:03:82:dd:d2:77:1b:c8:1a:b9:cb:12:4d:f9: cc:93:b4:d2:4c:45:47:da:f4:9d:59:ad:c6:58:cd: 2f:78:5c:56:75:01:f1:a0:81:73:32:91:ba:78:25: ff:d1:b5:5e:a5:80:3d:2a:e2:86:af:5e:87:91:cc: af:55:ba:4b:56:42:92:df:ce:82:23:a5:a8:9c:d6: c0:72:97:77:79:de:a6:39:6d:03:45:00:4e:c8:40: 89:cb:d5:42:e2:af:29:b0:88:88:bb:2e:a9:a9:dc: db:9b:ca:6b:be:49:0e:5c:94:0b:90:b2:01:45:84: 36:d3:8d:c0:5c:30:33:6c:ab:49:48:41:4a:75:12: 5e:2e:1c:ee:4a:bf:67:b8:16:bb:09:40:be:71:a4: 3f:eb:08:48:db:02:72:c5:92:3d:ce:e8:79:73:be: 1d:cd:b0:60:07:b5:cf:d1:cc:43:b7:0c:6d:89:98: fe:f8:ef:02:0e:c0:44:f3:fd:24:27:5f:b2:c7:d1: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3F:7E:AB:A9:3D:13:0A:B9:20:D8:A2:66:94:FE:A7:EA:60:BD:BB X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:6d:ef:8a:46:a8:82:62:50:ff:6d:9d:82:f8:8d:dd:c2:3e: b1:38:24:fd:06:9d:b1:d2:c2:cd:ea:db:84:00:93:16:09:46: dd:da:4f:02:93:3b:69:6d:01:9f:b1:2a:d0:36:a9:ab:f0:d3: 0b:31:65:81:2d:8f:ce:3a:0c:41:56:ff:ba:5a:ae:3c:9f:d3: 3b:b9:63:af:ee:f7:a9:83:03:8f:85:89:2a:05:c0:62:1f:04: 0e:df:6e:ad:65:4d:86:b8:05:09:7b:98:ed:a4:5f:95:78:67: 12:45:b3:99:1b:57:b6:ae:0a:9c:de:6a:7d:ef:f1:9f:76:66: 0c:9e:3d:22:9f:53:00:0d:40:00:19:69:12:b2:c6:90:1c:af: c7:33:bf:de:c3:be:e4:72:95:e0:5a:ab:f5:1e:ce:b7:78:18: 76:c5:c1:8e:24:cb:67:2c:be:4c:58:71:a5:db:4c:68:f5:cd: 6f:72:52:d4:b6:18:b5:b5:d6:45:44:6f:99:01:44:56:17:88: 2d:1b:25:49:30:f8:07:52:39:cc:31:ef:5e:55:bc:2d:55:d6: fb:dc:5d:4f:33:08:e6:c8:f0:81:40:e9:2b:51:be:51:ec:68: e2:06:84:f2:68:bd:bd:55:18:3b:31:e0:44:8a:57:fb:91:a1: 28:f5:9e:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhLVBzrhlCPrIjBI/tK1AFbgDFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTA1MTExNTA3MDFaFw0yNTA1MTQyMDQ1MDFaMDMxMTAvBgNV BAMTKDQ4M0Y3RUFCQTkzRDEzMEFCOTIwRDhBMjY2OTRGRUE3RUE2MEJEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6molvJE9BI+wUfozCbFtdKGg H7uInELF6jNdLxoKOcV23qpDuIDTWfZVhbBEZbfTrkgN8WNqonm91VCpA4Ld0ncb yBq5yxJN+cyTtNJMRUfa9J1ZrcZYzS94XFZ1AfGggXMykbp4Jf/RtV6lgD0q4oav XoeRzK9VuktWQpLfzoIjpaic1sByl3d53qY5bQNFAE7IQInL1ULirymwiIi7Lqmp 3Nubymu+SQ5clAuQsgFFhDbTjcBcMDNsq0lIQUp1El4uHO5Kv2e4FrsJQL5xpD/r CEjbAnLFkj3O6Hlzvh3NsGAHtc/RzEO3DG2JmP747wIOwETz/SQnX7LH0X5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSD9+q6k9Ewq5INiiZpT+p+pgvbswHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpt74pGqIJiUP9tnYL4jd3CPrE4JP0GnbHS ws3q24QAkxYJRt3aTwKTO2ltAZ+xKtA2qavw0wsxZYEtj846DEFW/7parjyf0zu5 Y6/u96mDA4+FiSoFwGIfBA7fbq1lTYa4BQl7mO2kX5V4ZxJFs5kbV7auCpzean3v 8Z92ZgyePSKfUwANQAAZaRKyxpAcr8czv97DvuRyleBaq/Uezrd4GHbFwY4ky2cs vkxYcaXbTGj1zW9yUtS2GLW11kVEb5kBRFYXiC0bJUkw+AdSOcwx715VvC1V1vvc XU8zCObI8IFA6StRvlHsaOIGhPJovb1VGDsx4ESKV/uRoSj1nlc= -----END CERTIFICATE-----Generated at Tue May 13 00:00:36 2025 by rpki-client