$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: oTV9w6RKVT1GQa5vSSb2aEqQHkEhG+joLzEmfYXvk70= Subject key identifier: 21:57:38:89:0E:F6:70:5B:B5:EA:69:CF:81:EC:1F:95:49:05:2E:1F Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 35384EA6EA6BD994652FFF8F749A328C6CA9186E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 0169 Signing time: Sun 15 Jun 2025 04:21:38 +0000 Manifest this update: Sun 15 Jun 2025 04:16:38 +0000 Manifest next update: Wed 18 Jun 2025 12:21:38 +0000 Files and hashes: 1: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 2: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: xOYilfdGCDwApTcWQ5p/XSwTUABtTBBf7r/MIwURFGY=) 3: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 4: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 12:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:38:4e:a6:ea:6b:d9:94:65:2f:ff:8f:74:9a:32:8c:6c:a9:18:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Jun 15 04:16:38 2025 GMT Not After : Jun 18 12:21:38 2025 GMT Subject: CN=215738890EF6705BB5EA69CF81EC1F9549052E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a9:b2:f0:fe:42:ea:fd:52:29:c3:46:66:62: 32:c9:e5:4a:71:04:cb:1b:78:5a:b8:e3:ca:5f:4c: 68:9b:f2:71:4d:82:25:58:e3:3e:73:8b:a9:9b:84: 04:62:7a:44:72:07:10:42:02:6f:f4:16:5c:64:fc: 70:42:df:ad:05:ce:cb:74:58:45:db:3a:dc:a4:19: e2:bd:46:26:08:8b:03:d3:04:58:d7:f7:f3:08:ca: 75:01:3d:09:d3:e9:4f:9d:86:18:c1:07:4c:54:c5: 81:ea:9a:b9:8d:68:92:18:ec:32:ff:f3:ad:81:43: 1d:c8:ab:80:48:14:2f:99:b5:e6:6b:fe:ef:4c:fe: 63:a4:7a:d6:13:72:47:37:01:85:26:2b:6a:54:dd: 3e:df:7c:7a:b7:ce:f6:3e:59:c0:f9:d7:82:3b:52: b0:f3:64:d5:74:db:b8:c2:36:d4:30:76:8b:0a:9a: d5:41:0e:fd:3a:77:d9:02:e6:45:01:c1:22:f0:75: 4d:1b:4e:ee:99:3e:b3:bb:76:ed:65:de:bc:0f:cb: 7a:70:3b:b9:c7:21:93:d3:ce:92:16:8c:b3:91:18: 7b:46:2f:72:e5:be:28:68:a1:d2:fe:42:1a:a6:88: 64:1e:63:e1:07:b7:88:93:30:6a:52:94:92:4f:fd: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:57:38:89:0E:F6:70:5B:B5:EA:69:CF:81:EC:1F:95:49:05:2E:1F X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:84:bc:a0:59:c8:79:1b:52:af:2d:a2:4d:5d:44:b4:c4:66: eb:06:26:ee:06:42:af:ba:1a:0a:9f:a5:27:78:c9:07:b5:5c: 70:08:72:ab:33:e3:7e:f6:35:0c:aa:c7:64:6d:61:c6:17:10: 40:44:d1:82:22:c0:68:3e:e7:ab:1e:36:16:66:33:bd:10:72: ec:ef:ea:fb:90:09:ce:92:ca:f1:07:ff:bd:77:27:33:d3:da: f2:05:df:e3:b6:d6:6c:8d:6f:6b:bd:c2:5e:de:67:86:b3:33: 09:f9:b8:43:2a:38:07:26:20:72:51:ab:0c:fb:9c:25:42:e0: b0:c9:aa:11:90:03:38:7c:ae:8a:a5:a7:cb:b7:dd:20:d4:b6: bf:5d:07:0f:43:0b:47:0f:75:49:4e:4d:3a:7e:49:bc:0e:92: be:e7:56:19:fa:07:77:4b:dd:69:3c:08:b6:32:8a:6d:03:3c: 9c:6a:f7:ad:d8:72:76:a1:87:07:9c:e8:ba:d0:19:32:59:78: 44:8e:56:47:e4:b3:b3:af:c2:02:8e:df:21:9b:56:36:ee:5f: 4f:71:ba:83:d7:88:83:aa:a7:e2:b1:fb:4c:34:2e:a3:23:f0: 4c:95:9f:9d:e1:b5:91:8b:ce:7e:9b:ca:e4:16:5f:a7:7b:e0: e1:59:b2:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNThOpupr2ZRlL/+PdJoyjGypGG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA2MTUwNDE2MzhaFw0yNTA2MTgxMjIxMzhaMDMxMTAvBgNV BAMTKDIxNTczODg5MEVGNjcwNUJCNUVBNjlDRjgxRUMxRjk1NDkwNTJFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqbLw/kLq/VIpw0ZmYjLJ5Upx BMsbeFq448pfTGib8nFNgiVY4z5zi6mbhARiekRyBxBCAm/0Flxk/HBC360Fzst0 WEXbOtykGeK9RiYIiwPTBFjX9/MIynUBPQnT6U+dhhjBB0xUxYHqmrmNaJIY7DL/ 862BQx3Iq4BIFC+ZteZr/u9M/mOketYTckc3AYUmK2pU3T7ffHq3zvY+WcD514I7 UrDzZNV027jCNtQwdosKmtVBDv06d9kC5kUBwSLwdU0bTu6ZPrO7du1l3rwPy3pw O7nHIZPTzpIWjLORGHtGL3LlvihoodL+QhqmiGQeY+EHt4iTMGpSlJJP/fSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIVc4iQ72cFu16mnPgewflUkFLh8wHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuEvKBZyHkbUq8tok1dRLTEZusGJu4GQq+6 GgqfpSd4yQe1XHAIcqsz4372NQyqx2RtYcYXEEBE0YIiwGg+56seNhZmM70Qcuzv 6vuQCc6SyvEH/713JzPT2vIF3+O21myNb2u9wl7eZ4azMwn5uEMqOAcmIHJRqwz7 nCVC4LDJqhGQAzh8roqlp8u33SDUtr9dBw9DC0cPdUlOTTp+SbwOkr7nVhn6B3dL 3Wk8CLYyim0DPJxq963Ycnahhwec6LrQGTJZeESOVkfks7OvwgKO3yGbVjbuX09x uoPXiIOqp+Kx+0w0LqMj8EyVn53htZGLzn6byuQWX6d74OFZsg8= -----END CERTIFICATE-----Generated at Mon Jun 16 02:56:25 2025 by rpki-client