$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: HF/B1Pt9rd35GXvypRNFXOd4n0IYAUK1UssDGOEhe1s= Subject key identifier: 7A:B1:B5:3D:6E:03:23:9C:3F:98:33:5C:0F:0E:4C:73:E8:6D:AC:DA Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 385F2CBB5A9860019AFCB43B182B4CB9CD4A76CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: B8 Signing time: Tue 17 Jun 2025 19:41:35 +0000 Manifest this update: Tue 17 Jun 2025 19:36:35 +0000 Manifest next update: Fri 20 Jun 2025 23:48:35 +0000 Files and hashes: 1: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: isAlEmOn7GqCRmoWmYE1dlkHZAJ4bsIKk3jkBC/DfSE=) 2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 23:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5f:2c:bb:5a:98:60:01:9a:fc:b4:3b:18:2b:4c:b9:cd:4a:76:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: Jun 17 19:36:35 2025 GMT Not After : Jun 20 23:48:35 2025 GMT Subject: CN=7AB1B53D6E03239C3F98335C0F0E4C73E86DACDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:f6:dc:e1:2e:c0:bc:55:8a:67:88:fe:69: 55:76:6f:30:4c:5c:a8:e2:0b:87:cf:78:5f:2f:a8: 62:a5:79:f6:6d:df:57:1d:66:6c:01:e5:9f:fb:89: 5d:46:fc:fb:9d:6c:3a:b2:13:f1:64:df:c9:72:3e: 80:b3:49:23:99:61:1c:af:17:53:72:22:62:c5:ca: ee:d7:8f:bf:1f:96:b4:d9:b8:b4:7a:bf:00:ea:23: 16:9f:08:44:91:7a:76:ce:3f:4d:de:f9:c3:58:b1: 7c:b3:75:21:f5:1e:ed:53:ae:82:63:4a:42:b6:54: 83:f2:63:b7:84:42:18:f6:31:d9:d6:b2:ef:88:d4: cc:a9:7c:ef:7e:67:2e:98:d7:17:ff:1d:9e:e5:0b: 18:c1:5b:d1:ba:c0:2b:b0:96:98:5c:b4:61:35:33: c1:2c:6b:17:83:e9:97:88:b5:50:a9:27:d1:da:c2: 58:02:c7:5e:19:2d:7b:69:4b:14:0a:33:a4:e7:95: c9:81:b2:2c:44:b9:b2:5d:6e:a5:d2:31:38:e4:8b: a4:86:20:34:b5:e0:7d:17:30:4f:94:79:75:c4:1e: 69:ca:a8:43:7b:30:b3:c0:cf:22:6b:76:fc:bd:a4: af:c3:06:a7:e1:7d:6b:ea:df:5e:c7:53:66:ac:49: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B1:B5:3D:6E:03:23:9C:3F:98:33:5C:0F:0E:4C:73:E8:6D:AC:DA X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4e:68:30:15:31:8f:e7:48:5c:4e:d4:5c:6e:8c:e3:99:1e: 9e:4b:80:5c:b3:ed:0e:09:fc:05:dd:a1:7b:8a:5f:b2:03:08: 93:d6:a5:fb:a4:c9:bc:b4:02:3d:53:21:31:b6:5c:47:76:71: 52:ef:aa:59:d3:c9:05:aa:5c:c8:6a:bf:22:53:b0:07:6c:ad: 41:9e:73:6d:4b:7b:4a:5e:5b:8b:9f:39:8e:61:02:44:5f:c5: 9a:54:1a:f6:8b:b1:34:50:9f:57:d8:80:8f:d3:3f:d3:9c:65: 1e:14:93:5f:80:99:d7:5d:50:9f:69:6a:e7:04:a9:7b:0c:25: f8:db:06:b1:4e:a9:6c:43:6e:5d:45:85:52:11:9b:e7:b7:b0: 13:f0:4a:de:79:9e:5c:59:57:f4:e9:91:b5:a2:0b:99:13:db: a1:02:68:f0:9a:45:8c:b4:e9:2f:72:b6:df:a5:8d:11:7c:2b: 82:33:96:91:55:53:56:20:81:a8:21:c5:58:fb:c7:99:11:ed: d4:a0:b9:57:dd:29:f0:d0:5e:d6:99:a9:e2:f5:cf:23:ee:24: 3b:bd:cc:6e:6f:6b:6a:58:09:4e:6d:fd:6d:45:2a:04:7a:28: e8:d0:4d:d9:ab:ed:6d:13:8f:7c:01:0b:52:c7:52:89:e9:0c: 79:42:53:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOF8su1qYYAGa/LQ7GCtMuc1Kds4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNTA2MTcxOTM2MzVaFw0yNTA2MjAyMzQ4MzVaMDMxMTAvBgNV BAMTKDdBQjFCNTNENkUwMzIzOUMzRjk4MzM1QzBGMEU0QzczRTg2REFDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nvbc4S7AvFWKZ4j+aVV2bzBM XKjiC4fPeF8vqGKlefZt31cdZmwB5Z/7iV1G/PudbDqyE/Fk38lyPoCzSSOZYRyv F1NyImLFyu7Xj78flrTZuLR6vwDqIxafCESRenbOP03e+cNYsXyzdSH1Hu1TroJj SkK2VIPyY7eEQhj2MdnWsu+I1MypfO9+Zy6Y1xf/HZ7lCxjBW9G6wCuwlphctGE1 M8EsaxeD6ZeItVCpJ9HawlgCx14ZLXtpSxQKM6TnlcmBsixEubJdbqXSMTjki6SG IDS14H0XME+UeXXEHmnKqEN7MLPAzyJrdvy9pK/DBqfhfWvq317HU2asSZ0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerG1PW4DI5w/mDNcDw5Mc+htrNowHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5OaDAVMY/nSFxO1FxujOOZHp5LgFyz7Q4J /AXdoXuKX7IDCJPWpfukyby0Aj1TITG2XEd2cVLvqlnTyQWqXMhqvyJTsAdsrUGe c21Le0peW4ufOY5hAkRfxZpUGvaLsTRQn1fYgI/TP9OcZR4Uk1+AmdddUJ9paucE qXsMJfjbBrFOqWxDbl1FhVIRm+e3sBPwSt55nlxZV/TpkbWiC5kT26ECaPCaRYy0 6S9ytt+ljRF8K4IzlpFVU1YggaghxVj7x5kR7dSguVfdKfDQXtaZqeL1zyPuJDu9 zG5va2pYCU5t/W1FKgR6KOjQTdmr7W0Tj3wBC1LHUonpDHlCUwE= -----END CERTIFICATE-----Generated at Wed Jun 18 04:11:18 2025 by rpki-client