$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: oZfpFsylOlEw8tDOJYEz/FMsOLY1EEZTcAZaLDd5Ybo= Subject key identifier: 86:2C:25:E5:3A:A5:59:48:FD:4C:9B:90:02:59:5A:AE:E8:B0:E0:4F Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 533804EEBFBF2099B1ABF2C1A5D397F3128DBBE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0277 Signing time: Mon 03 Nov 2025 11:33:24 +0000 Manifest this update: Mon 03 Nov 2025 11:28:24 +0000 Manifest next update: Thu 06 Nov 2025 12:41:24 +0000 Files and hashes: 1: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) 2: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: AjOJBNxbua3GUZWrHjCo/PxKhNnZNB1a2bjSNU6pPSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:38:04:ee:bf:bf:20:99:b1:ab:f2:c1:a5:d3:97:f3:12:8d:bb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Nov 3 11:28:24 2025 GMT Not After : Nov 6 12:41:24 2025 GMT Subject: CN=862C25E53AA55948FD4C9B9002595AAEE8B0E04F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:11:0b:ad:f5:a8:26:a5:d9:cb:c5:99:fa: 10:93:6e:1f:b6:b6:a4:0a:fe:ec:4b:0d:85:88:88: 22:38:50:7b:bb:f7:e6:61:0a:f4:54:e9:03:90:40: c6:0a:12:c2:22:60:5f:4a:04:47:9e:68:90:fd:2d: 0f:ef:ed:dd:08:68:f5:81:a6:fc:89:4e:a0:7b:8c: ab:d8:75:46:3d:89:b8:5e:8c:a7:93:cc:eb:71:71: 13:75:34:e7:c6:51:24:2f:c0:c1:1b:30:c9:e9:50: 4e:04:df:ed:b5:2f:12:26:e9:e5:70:a1:33:9f:39: f9:11:46:52:c2:22:70:53:b3:00:ba:77:47:41:96: 66:0c:ea:3f:6a:c8:bf:48:76:2d:a6:1f:31:b5:21: 2f:30:c5:bb:a3:4b:cf:c8:a5:6f:5f:d3:52:37:4f: 1c:e1:0d:b3:91:be:b0:c3:90:5d:78:27:32:11:8b: e7:01:5e:45:a8:44:f9:04:ab:34:b7:b7:1f:d5:a3: d5:94:9a:b6:25:32:f2:3b:9c:fa:d5:b0:0c:7c:16: a1:d0:4a:de:b1:e2:c6:1d:c7:9d:8d:f5:5c:e1:39: 74:4d:10:3b:f7:53:e8:c3:73:ad:d6:c0:34:79:67: 32:4e:37:4e:d6:49:03:7b:18:a5:ba:82:d1:32:ef: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:25:E5:3A:A5:59:48:FD:4C:9B:90:02:59:5A:AE:E8:B0:E0:4F X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b7:10:0c:b6:c8:c2:c2:06:06:c2:d5:4a:b9:09:06:37:0e: 75:2a:64:eb:26:38:2a:62:a7:dc:27:81:89:12:5b:4b:61:d4: 46:c9:f5:dc:49:f6:22:af:bc:a1:0f:16:f6:5f:03:31:ba:b8: b1:79:29:b9:a3:05:f3:d6:80:17:85:b9:ee:c8:42:fe:a7:63: 18:9a:63:7d:5b:60:a1:5e:a2:01:b8:e9:2f:56:6c:49:b8:c1: c0:de:1c:ac:dc:9b:ba:2b:e0:8d:1b:f9:d6:2b:6e:2c:18:b6: 50:92:bf:7e:6c:67:15:3e:e4:0a:c3:07:0b:ee:3b:43:d9:ab: eb:38:ed:24:96:58:b2:61:7e:0f:54:ef:2d:b5:67:56:45:2d: a3:29:ea:92:d9:df:5f:10:b8:78:98:54:6b:fc:f5:79:2d:92: a6:25:e1:cb:1a:0b:47:2e:e5:82:c1:74:ab:6a:9a:dc:89:9b: ad:9b:a3:fb:aa:12:f1:47:c6:f4:f0:b2:3a:09:ed:a8:c7:78: 75:a0:fa:4a:fa:78:b6:82:b8:c3:d9:b8:83:f7:09:f1:85:c3: c0:d7:5a:f2:f6:93:be:d9:f4:1a:24:63:cc:61:a5:06:c7:32: 88:9e:c6:f1:b9:a9:8c:1a:12:f1:36:0c:59:66:22:b6:82:4c: fa:e7:e7:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzgE7r+/IJmxq/LBpdOX8xKNu+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTExMDMxMTI4MjRaFw0yNTExMDYxMjQxMjRaMDMxMTAvBgNV BAMTKDg2MkMyNUU1M0FBNTU5NDhGRDRDOUI5MDAyNTk1QUFFRThCMEUwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ4xELrfWoJqXZy8WZ+hCTbh+2 tqQK/uxLDYWIiCI4UHu79+ZhCvRU6QOQQMYKEsIiYF9KBEeeaJD9LQ/v7d0IaPWB pvyJTqB7jKvYdUY9ibhejKeTzOtxcRN1NOfGUSQvwMEbMMnpUE4E3+21LxIm6eVw oTOfOfkRRlLCInBTswC6d0dBlmYM6j9qyL9Idi2mHzG1IS8wxbujS8/IpW9f01I3 TxzhDbORvrDDkF14JzIRi+cBXkWoRPkEqzS3tx/Vo9WUmrYlMvI7nPrVsAx8FqHQ St6x4sYdx52N9VzhOXRNEDv3U+jDc63WwDR5ZzJON07WSQN7GKW6gtEy71hTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhiwl5TqlWUj9TJuQAllaruiw4E8wHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHm3EAy2yMLCBgbC1Uq5CQY3DnUqZOsmOCpi p9wngYkSW0th1EbJ9dxJ9iKvvKEPFvZfAzG6uLF5KbmjBfPWgBeFue7IQv6nYxia Y31bYKFeogG46S9WbEm4wcDeHKzcm7or4I0b+dYrbiwYtlCSv35sZxU+5ArDBwvu O0PZq+s47SSWWLJhfg9U7y21Z1ZFLaMp6pLZ318QuHiYVGv89XktkqYl4csaC0cu 5YLBdKtqmtyJm62bo/uqEvFHxvTwsjoJ7ajHeHWg+kr6eLaCuMPZuIP3CfGFw8DX WvL2k77Z9BokY8xhpQbHMoiexvG5qYwaEvE2DFlmIraCTPrn574= -----END CERTIFICATE-----Generated at Wed Nov 5 08:57:28 2025 by rpki-client