$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: DnVxnIUQmLBuNI50SkYwp9Ha6Yvw1GSxRhiF+o5l0OQ= Subject key identifier: 04:ED:5A:1B:C3:39:B9:FD:6A:C2:9A:51:DB:97:87:7E:8D:CD:2E:4F Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 10EAA3B86A5CEB8FB821E25A3C7EDE9BEC80CAFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 018B Signing time: Mon 04 Aug 2025 12:12:14 +0000 Manifest this update: Mon 04 Aug 2025 12:07:14 +0000 Manifest next update: Thu 07 Aug 2025 16:03:14 +0000 Files and hashes: 1: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 2: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) 3: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 4: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 5: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: WCOrnk17euY2m5XWsBTv7CjE5BCu4mydzWLpWe3ry6o=) 6: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 16:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ea:a3:b8:6a:5c:eb:8f:b8:21:e2:5a:3c:7e:de:9b:ec:80:ca:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Aug 4 12:07:14 2025 GMT Not After : Aug 7 16:03:14 2025 GMT Subject: CN=04ED5A1BC339B9FD6AC29A51DB97877E8DCD2E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:7e:60:19:9f:0d:f3:d5:f1:3b:23:b4:6f: 56:c2:08:cf:64:e9:97:6a:b2:c6:dd:7f:ca:3f:4f: 2f:db:8d:2c:4b:dd:ed:d6:6a:f7:e6:45:70:90:db: 9b:97:68:dc:12:1a:8f:33:6e:63:53:95:a1:f1:11: c6:e7:10:98:8e:10:26:4a:2a:6a:35:50:fc:48:47: 49:27:ba:e4:b3:7d:ed:12:c5:2d:98:26:80:52:7a: 26:df:b1:e0:28:df:d8:70:f9:8a:e6:4e:50:a6:80: 95:79:03:7e:58:ed:46:56:00:8d:c9:63:ba:99:4e: 52:0a:ba:03:4d:84:28:28:6a:81:a2:dc:01:27:6f: 64:9f:88:85:40:58:cd:56:10:5c:24:ed:08:19:33: e5:bc:07:28:7b:f7:d0:ab:d9:ef:1d:d0:e8:0b:e6: e7:34:cc:93:cc:14:d7:2a:fa:23:a1:31:47:f0:36: 4d:b9:97:be:a8:55:0d:2d:80:25:fe:83:59:5a:f0: ae:99:6e:45:56:21:ee:de:42:fe:d9:c9:64:1a:02: f4:9c:8b:99:8d:b3:26:57:5d:84:92:23:8c:32:68: c8:9f:aa:c9:0c:39:1d:9c:f6:19:17:d7:82:53:e6: 8d:29:95:94:80:9c:df:46:ce:f1:72:71:73:ac:e2: 28:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:5A:1B:C3:39:B9:FD:6A:C2:9A:51:DB:97:87:7E:8D:CD:2E:4F X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2b:04:96:41:d8:b3:6d:94:95:bf:79:c3:3c:9e:14:c9:4a: ea:50:a7:5c:2c:02:e7:9f:e4:d3:24:4f:e1:bd:42:eb:de:d5: 9b:c0:73:8e:2c:66:be:85:86:6f:e3:ee:68:5e:07:8d:26:62: 1c:dc:d7:18:ff:e8:df:78:9c:c7:6f:bc:27:9a:2a:2d:5f:77: 57:89:3f:41:b7:75:c4:8e:c7:f5:23:47:bc:d0:a4:6a:a9:da: 63:e5:12:a9:e2:10:af:4d:f2:a8:30:91:ee:b7:d4:31:e5:3e: e5:e8:4f:e9:d4:29:c1:aa:ee:be:1f:b4:fb:83:15:ca:51:6d: 45:6d:9d:51:66:09:44:1a:cd:40:09:9a:f7:95:24:3a:7d:0e: ef:c5:25:86:8b:4e:9c:cd:13:71:21:d5:6e:c4:b1:4d:b2:1b: c4:f9:73:07:9a:66:db:72:f2:e1:fd:5d:00:d8:3a:d7:be:ee: f2:b3:00:f0:99:5b:20:09:bd:99:67:24:48:dd:60:2e:06:d5: bf:82:7b:71:27:ae:c8:46:2c:e1:71:06:c1:20:6a:09:47:c3: 53:8d:a2:05:b3:af:ab:01:75:5d:53:6b:c2:78:bc:a8:f3:2f: 13:bb:0f:58:17:ed:92:8d:bc:f8:e7:d4:c1:74:28:2b:bc:9b: f5:57:47:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOqjuGpc64+4IeJaPH7em+yAyv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA4MDQxMjA3MTRaFw0yNTA4MDcxNjAzMTRaMDMxMTAvBgNV BAMTKDA0RUQ1QTFCQzMzOUI5RkQ2QUMyOUE1MURCOTc4NzdFOERDRDJFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gX5gGZ8N89XxOyO0b1bCCM9k 6Zdqssbdf8o/Ty/bjSxL3e3WavfmRXCQ25uXaNwSGo8zbmNTlaHxEcbnEJiOECZK Kmo1UPxIR0knuuSzfe0SxS2YJoBSeibfseAo39hw+YrmTlCmgJV5A35Y7UZWAI3J Y7qZTlIKugNNhCgoaoGi3AEnb2SfiIVAWM1WEFwk7QgZM+W8Byh799Cr2e8d0OgL 5uc0zJPMFNcq+iOhMUfwNk25l76oVQ0tgCX+g1la8K6ZbkVWIe7eQv7ZyWQaAvSc i5mNsyZXXYSSI4wyaMifqskMOR2c9hkX14JT5o0plZSAnN9GzvFycXOs4ijzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBO1aG8M5uf1qwppR25eHfo3NLk8wHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMrBJZB2LNtlJW/ecM8nhTJSupQp1wsAuef 5NMkT+G9Quve1ZvAc44sZr6Fhm/j7mheB40mYhzc1xj/6N94nMdvvCeaKi1fd1eJ P0G3dcSOx/UjR7zQpGqp2mPlEqniEK9N8qgwke631DHlPuXoT+nUKcGq7r4ftPuD FcpRbUVtnVFmCUQazUAJmveVJDp9Du/FJYaLTpzNE3Eh1W7EsU2yG8T5cweaZtty 8uH9XQDYOte+7vKzAPCZWyAJvZlnJEjdYC4G1b+Ce3EnrshGLOFxBsEgaglHw1ON ogWzr6sBdV1Ta8J4vKjzLxO7D1gX7ZKNvPjn1MF0KCu8m/VXR7o= -----END CERTIFICATE-----Generated at Wed Aug 6 07:41:18 2025 by rpki-client