$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: OZcVaryralM9Kb4462LanTmNlQLr3Jrxp3MY4dw95XY= Subject key identifier: E9:75:C8:B9:91:6D:81:0A:13:CB:3D:8A:CC:F0:C4:B2:BD:C5:71:3B Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 1F3987A8228DD32AAA0A6CB2905C3C8A9A42A26D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 0174 Signing time: Sat 14 Jun 2025 15:32:10 +0000 Manifest this update: Sat 14 Jun 2025 15:27:10 +0000 Manifest next update: Tue 17 Jun 2025 22:35:10 +0000 Files and hashes: 1: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: BApdCyFnVXxuQWT7ynA6SGKBY/XoCB8xG/E3UbG1Yjc=) 2: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 3: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) 4: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 5: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 6: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:39:87:a8:22:8d:d3:2a:aa:0a:6c:b2:90:5c:3c:8a:9a:42:a2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Jun 14 15:27:10 2025 GMT Not After : Jun 17 22:35:10 2025 GMT Subject: CN=E975C8B9916D810A13CB3D8ACCF0C4B2BDC5713B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:14:c5:ea:d6:3b:d9:7d:08:0e:87:71:26: 4d:0b:64:73:cd:cf:ec:22:c0:02:3f:b0:8e:fc:ca: 87:43:8c:56:aa:4e:27:8c:3b:da:88:13:d8:bd:11: a6:fb:63:66:27:a5:9c:d8:2e:15:f2:ee:1a:b0:6c: e8:3d:6d:93:17:6d:4f:fc:55:b4:84:e4:ab:0d:1b: b3:b8:ee:74:72:02:29:8a:b6:c2:08:8c:e1:c0:54: f4:16:14:08:17:5b:36:f4:69:e9:bf:69:43:9d:ad: 7c:0d:f0:67:6e:29:86:63:4a:7e:c7:6a:6e:6e:03: 22:ff:65:d6:32:24:4f:cf:c6:52:52:81:a1:43:02: 95:4e:b1:5a:17:51:3b:ea:9e:6b:7f:aa:98:b8:97: 5f:d1:50:a0:48:54:55:24:e0:60:d2:ba:a1:cf:b7: 84:1a:da:e5:07:99:9a:36:ea:8e:97:f1:df:7b:be: e7:98:3a:b6:69:5d:7f:cf:9a:3c:0c:41:e9:f0:65: 65:b1:07:c7:c9:56:91:67:6e:59:7b:ee:fd:c1:98: 4a:fc:54:e7:55:47:64:6f:82:22:c4:e9:f5:ec:db: f9:b8:25:77:c5:45:7e:bd:bb:c1:e7:20:0b:47:3c: 5a:04:55:91:e5:bc:a9:43:c6:50:50:00:ab:0b:6e: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:C8:B9:91:6D:81:0A:13:CB:3D:8A:CC:F0:C4:B2:BD:C5:71:3B X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:53:84:ee:4b:f9:26:1f:9d:58:5e:51:45:75:77:90:b3:23: 79:32:d2:fe:26:9b:a6:62:ee:ce:cb:fd:8f:04:48:c9:c5:5d: 19:86:b4:9c:ef:18:c7:42:21:dd:c7:1c:f8:98:56:ab:60:05: a7:96:78:db:9c:dd:d9:6a:78:79:d7:a8:52:73:a1:ae:b5:90: 45:4b:8a:7a:77:1b:f4:e6:4d:b8:95:58:c0:20:76:c1:38:2e: f0:a4:9a:74:13:3a:4d:b3:bf:ea:39:b2:c9:5c:4a:97:dc:37: 4d:45:75:22:2d:5d:ba:55:46:7c:d6:87:4e:ef:fd:54:f5:df: 1f:d9:a4:50:c7:08:79:fd:56:a7:b0:23:9d:e5:c4:8a:3d:01: 3d:45:38:4f:89:0c:89:19:c5:08:95:5d:86:ff:dd:9d:82:7d: e8:11:b9:40:b9:e1:05:c8:8b:d4:5f:2c:01:e1:5b:1e:b7:de: bb:74:c8:78:73:8b:f5:62:d2:a4:cf:50:3d:f2:c6:92:12:fb: c0:d2:fc:57:0c:57:67:8a:d0:e7:94:2a:49:ec:3a:23:73:95: 70:a5:7f:2b:8a:fe:17:8a:86:3e:71:11:79:52:40:8b:bb:68: 89:2c:17:85:c6:3b:e0:e0:eb:84:0d:d8:0b:e9:6b:dc:c3:c0: ac:b1:82:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzmHqCKN0yqqCmyykFw8ippCom0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTA2MTQxNTI3MTBaFw0yNTA2MTcyMjM1MTBaMDMxMTAvBgNV BAMTKEU5NzVDOEI5OTE2RDgxMEExM0NCM0Q4QUNDRjBDNEIyQkRDNTcxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgBTF6tY72X0IDodxJk0LZHPN z+wiwAI/sI78yodDjFaqTieMO9qIE9i9Eab7Y2YnpZzYLhXy7hqwbOg9bZMXbU/8 VbSE5KsNG7O47nRyAimKtsIIjOHAVPQWFAgXWzb0aem/aUOdrXwN8GduKYZjSn7H am5uAyL/ZdYyJE/PxlJSgaFDApVOsVoXUTvqnmt/qpi4l1/RUKBIVFUk4GDSuqHP t4Qa2uUHmZo26o6X8d97vueYOrZpXX/PmjwMQenwZWWxB8fJVpFnbll77v3BmEr8 VOdVR2RvgiLE6fXs2/m4JXfFRX69u8HnIAtHPFoEVZHlvKlDxlBQAKsLbqHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XXIuZFtgQoTyz2KzPDEsr3FcTswHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdThO5L+SYfnVheUUV1d5CzI3ky0v4mm6Zi 7s7L/Y8ESMnFXRmGtJzvGMdCId3HHPiYVqtgBaeWeNuc3dlqeHnXqFJzoa61kEVL inp3G/TmTbiVWMAgdsE4LvCkmnQTOk2zv+o5sslcSpfcN01FdSItXbpVRnzWh07v /VT13x/ZpFDHCHn9VqewI53lxIo9AT1FOE+JDIkZxQiVXYb/3Z2CfegRuUC54QXI i9RfLAHhWx633rt0yHhzi/Vi0qTPUD3yxpIS+8DS/FcMV2eK0OeUKknsOiNzlXCl fyuK/heKhj5xEXlSQIu7aIksF4XGO+Dg64QN2Avpa9zDwKyxgiQ= -----END CERTIFICATE-----Generated at Mon Jun 16 01:29:27 2025 by rpki-client