$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: oJqv+cRnvP75O26rCkKNA6PoAIH1Vb2dNWGgq1zpMKU= Subject key identifier: 5C:9E:EC:42:60:98:48:9B:2A:79:5E:D4:F3:CB:A1:5D:08:B2:13:03 Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 5A762263E7FDFDAB4EA6CE45A3D4B364AB23681D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 024F Signing time: Wed 06 Aug 2025 11:10:42 +0000 Manifest this update: Wed 06 Aug 2025 11:05:42 +0000 Manifest next update: Sat 09 Aug 2025 20:50:42 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: fsMZj7iW2yAhQoR9gn0RUJUByte3BrYCcoMKT26OoXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:76:22:63:e7:fd:fd:ab:4e:a6:ce:45:a3:d4:b3:64:ab:23:68:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Aug 6 11:05:42 2025 GMT Not After : Aug 9 20:50:42 2025 GMT Subject: CN=5C9EEC426098489B2A795ED4F3CBA15D08B21303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5c:17:4c:aa:11:21:67:01:77:8e:bc:f9:be: 58:9e:49:45:75:a1:8c:85:ed:0d:84:e0:bc:4e:5f: d7:c2:e7:10:ab:38:47:1a:6b:c9:0b:4c:a0:bd:77: df:2e:61:b5:d0:34:b5:c1:4c:7c:79:12:f6:72:41: b7:8a:1b:7b:1a:d3:02:96:bc:bc:80:3e:ba:11:ef: 5f:6a:a7:6a:67:b7:a9:d4:da:cc:f6:d0:63:ca:2d: 9c:c1:ce:2b:36:2a:be:9f:e0:1b:46:9d:33:4f:c2: 64:b9:59:6c:16:c2:b7:4c:09:08:4b:6d:69:3a:3e: 6c:de:b7:cb:a7:bb:d5:cd:9c:a7:6e:d1:dc:f5:12: be:6d:4d:4c:f9:cf:f2:89:b2:e7:28:7c:35:89:d3: a1:16:cf:07:60:46:91:94:dd:8a:cd:c0:37:39:00: 7a:86:9e:d3:b7:99:fb:17:19:91:67:23:a3:80:5b: 09:87:46:d7:8b:78:cd:77:90:06:42:5c:d0:4f:10: c9:2c:eb:b8:d8:12:12:83:83:40:ff:59:a8:ab:b7: e3:6c:c2:42:57:86:ce:85:71:61:12:83:67:7a:4e: 1b:2e:f4:62:29:c7:21:66:92:77:0e:e1:4d:de:48: 89:00:02:58:55:03:a2:b6:cc:86:84:68:a0:d1:61: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:EC:42:60:98:48:9B:2A:79:5E:D4:F3:CB:A1:5D:08:B2:13:03 X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:21:40:bc:22:da:df:a5:e7:7d:3c:1f:21:09:28:56:ed:ab: c8:00:c0:3e:5d:84:99:8b:44:24:78:4b:28:8c:c9:10:fc:be: 4b:dd:27:08:d6:53:92:7e:49:f3:7a:cf:8c:55:d3:28:27:e4: fb:cd:81:31:77:a9:82:8a:78:cb:33:a5:f7:bb:bd:67:6b:b6: cd:99:0f:7e:cb:51:49:b7:55:cf:87:a7:29:ed:19:a2:5d:03: ba:98:4d:96:a0:ee:33:17:81:78:b5:65:04:31:94:5b:28:9f: 49:dd:1e:80:04:96:1c:49:c9:c4:be:88:5c:ae:06:f6:9d:64: 22:49:8c:48:79:75:60:fd:15:cc:f6:6d:e8:e7:48:52:90:a2: f7:af:37:68:93:a5:90:a9:08:0f:13:35:5f:be:d5:bb:02:81: 3b:5e:dd:71:2c:65:5c:9a:e5:f4:f8:97:67:fe:2f:89:dd:55: f5:92:c3:e5:85:13:5e:22:f2:c7:17:87:80:4f:1b:42:bf:d3: ff:9d:81:f2:a2:f5:a1:bd:12:73:16:5d:37:1b:b2:2e:5c:3b: a0:ec:7a:f9:7c:5d:3f:34:42:15:a3:72:59:ac:65:46:2c:ec: 70:e4:65:80:30:c9:41:7a:74:8e:ac:76:f4:53:e4:2c:27:58: 91:ca:00:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnYiY+f9/atOps5Fo9SzZKsjaB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTA4MDYxMTA1NDJaFw0yNTA4MDkyMDUwNDJaMDMxMTAvBgNV BAMTKDVDOUVFQzQyNjA5ODQ4OUIyQTc5NUVENEYzQ0JBMTVEMDhCMjEzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXBdMqhEhZwF3jrz5vlieSUV1 oYyF7Q2E4LxOX9fC5xCrOEcaa8kLTKC9d98uYbXQNLXBTHx5EvZyQbeKG3sa0wKW vLyAProR719qp2pnt6nU2sz20GPKLZzBzis2Kr6f4BtGnTNPwmS5WWwWwrdMCQhL bWk6Pmzet8unu9XNnKdu0dz1Er5tTUz5z/KJsucofDWJ06EWzwdgRpGU3YrNwDc5 AHqGntO3mfsXGZFnI6OAWwmHRteLeM13kAZCXNBPEMks67jYEhKDg0D/Wairt+Ns wkJXhs6FcWESg2d6Thsu9GIpxyFmkncO4U3eSIkAAlhVA6K2zIaEaKDRYUfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXJ7sQmCYSJsqeV7U88uhXQiyEwMwHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEhQLwi2t+l5308HyEJKFbtq8gAwD5dhJmL RCR4SyiMyRD8vkvdJwjWU5J+SfN6z4xV0ygn5PvNgTF3qYKKeMszpfe7vWdrts2Z D37LUUm3Vc+HpyntGaJdA7qYTZag7jMXgXi1ZQQxlFson0ndHoAElhxJycS+iFyu BvadZCJJjEh5dWD9Fcz2bejnSFKQovevN2iTpZCpCA8TNV++1bsCgTte3XEsZVya 5fT4l2f+L4ndVfWSw+WFE14i8scXh4BPG0K/0/+dgfKi9aG9EnMWXTcbsi5cO6Ds evl8XT80QhWjclmsZUYs7HDkZYAwyUF6dI6sdvRT5CwnWJHKABQ= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:51 2025 by rpki-client