$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: CALdexnEAxf2RyJartJ7e5+E05sv4rea0wKHucL7Xc0= Subject key identifier: 55:1F:66:F8:2E:FF:BF:79:CC:2F:41:AF:23:79:2C:4C:54:C7:30:E0 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 163E453B83C8EAD98EEB9867C6EABDED3C725DB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 0180 Signing time: Wed 06 Aug 2025 07:31:43 +0000 Manifest this update: Wed 06 Aug 2025 07:26:43 +0000 Manifest next update: Sat 09 Aug 2025 16:48:43 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 2: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 3: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: XQ7PJGEnynjsTVASm9kixhxrchZqivjRfby1IjznrSQ=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3e:45:3b:83:c8:ea:d9:8e:eb:98:67:c6:ea:bd:ed:3c:72:5d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Aug 6 07:26:43 2025 GMT Not After : Aug 9 16:48:43 2025 GMT Subject: CN=551F66F82EFFBF79CC2F41AF23792C4C54C730E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:f0:b2:19:55:7a:47:9b:74:80:3a:07:16: 30:d8:94:29:c3:01:f1:79:44:2b:ab:d4:d9:e2:41: 59:6e:0a:b4:0c:62:c6:71:6b:1c:5b:29:bd:0f:4a: ae:5d:f7:2a:8e:4f:a3:ff:75:0d:67:56:94:5a:0e: ee:6b:83:7d:25:5c:99:ab:54:3a:45:71:6f:ed:40: 96:ed:f7:36:34:0f:c4:58:08:1f:6b:f3:40:b9:23: d7:b9:6c:4d:44:fb:3e:b8:f6:96:aa:50:03:24:50: d2:e5:9d:ca:46:a8:83:14:d0:d0:23:bf:ed:29:ca: fe:9a:7b:b6:d9:d5:2b:a5:82:74:7c:90:6c:c4:d6: cb:c2:4b:84:78:79:13:25:95:dd:f0:2f:af:33:a5: 98:22:79:49:7b:48:26:ae:a9:96:17:df:7b:68:80: 93:8b:1a:a4:c2:5e:4d:0d:71:d2:2b:76:75:1d:da: f5:c3:6f:4a:bb:b6:12:4e:78:be:86:68:4b:4c:ae: e6:49:a8:f4:b1:af:bf:58:9f:60:f7:50:3d:d5:7a: cf:ba:d2:06:ba:7f:24:4b:bb:09:a7:57:02:07:5c: 05:54:f9:ee:7f:36:00:73:a2:4f:06:6c:68:4d:d9: 84:d3:84:c1:77:15:55:7c:de:70:70:b7:d9:c5:fa: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1F:66:F8:2E:FF:BF:79:CC:2F:41:AF:23:79:2C:4C:54:C7:30:E0 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2c:14:dc:92:e9:93:83:a0:68:c0:b2:d5:34:1d:7e:12:a0: 45:b2:33:31:a5:3f:e3:13:39:5d:2d:c6:be:37:7f:14:69:13: 0b:3d:67:1f:33:b7:a7:2c:20:74:0b:58:32:f0:6d:28:55:a2: 50:91:b1:9b:0b:c9:f2:80:71:30:52:2e:c5:32:f5:95:6c:f6: 86:bb:71:ba:87:fb:88:56:f9:15:7d:cd:74:ce:49:69:4e:d2: 46:08:7f:f7:14:c1:2e:cc:34:b7:e4:86:4f:b8:1b:e2:d3:da: 25:76:dc:3a:21:ff:0f:24:a0:93:65:d6:f7:3c:1d:86:80:2a: d8:c5:a1:1e:a4:a8:5c:43:32:a4:8f:00:5d:02:dc:45:e8:23: 19:b3:14:10:90:b8:75:e2:50:eb:84:66:57:61:0e:5b:39:b8: 0d:10:02:81:ba:33:64:a0:12:1a:a9:c6:8c:04:46:a6:ec:6a: 5d:c9:1f:22:4b:38:9c:c2:09:aa:99:9d:1f:d3:3c:0e:51:eb: 05:c1:c9:ad:1c:d0:8c:db:0f:28:68:61:33:29:d6:13:9f:0e: fd:a2:f0:1e:2c:b9:99:8c:38:2b:d2:92:90:90:34:f9:ba:af: c6:71:07:93:a8:f7:50:d4:2d:05:fc:f1:8b:16:39:a8:b6:6f: 5a:08:43:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFj5FO4PI6tmO65hnxuq97TxyXbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA4MDYwNzI2NDNaFw0yNTA4MDkxNjQ4NDNaMDMxMTAvBgNV BAMTKDU1MUY2NkY4MkVGRkJGNzlDQzJGNDFBRjIzNzkyQzRDNTRDNzMwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbU/CyGVV6R5t0gDoHFjDYlCnD AfF5RCur1NniQVluCrQMYsZxaxxbKb0PSq5d9yqOT6P/dQ1nVpRaDu5rg30lXJmr VDpFcW/tQJbt9zY0D8RYCB9r80C5I9e5bE1E+z649paqUAMkUNLlncpGqIMU0NAj v+0pyv6ae7bZ1SulgnR8kGzE1svCS4R4eRMlld3wL68zpZgieUl7SCauqZYX33to gJOLGqTCXk0NcdIrdnUd2vXDb0q7thJOeL6GaEtMruZJqPSxr79Yn2D3UD3Ves+6 0ga6fyRLuwmnVwIHXAVU+e5/NgBzok8GbGhN2YTThMF3FVV83nBwt9nF+uKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVR9m+C7/v3nML0GvI3ksTFTHMOAwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIsFNyS6ZODoGjAstU0HX4SoEWyMzGlP+MT OV0txr43fxRpEws9Zx8zt6csIHQLWDLwbShVolCRsZsLyfKAcTBSLsUy9ZVs9oa7 cbqH+4hW+RV9zXTOSWlO0kYIf/cUwS7MNLfkhk+4G+LT2iV23Doh/w8koJNl1vc8 HYaAKtjFoR6kqFxDMqSPAF0C3EXoIxmzFBCQuHXiUOuEZldhDls5uA0QAoG6M2Sg EhqpxowERqbsal3JHyJLOJzCCaqZnR/TPA5R6wXBya0c0IzbDyhoYTMp1hOfDv2i 8B4suZmMOCvSkpCQNPm6r8ZxB5Oo91DULQX88YsWOai2b1oIQ3c= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:15 2025 by rpki-client