$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: ydSWBNdLiISCVTmkzLcAi+WsDzYInZ4PHvNXiB/AjBI= Subject key identifier: 3B:F4:92:8A:DF:8E:6E:3B:9C:92:29:DC:D1:26:3E:75:F5:AA:6A:AF Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 191D008A31853512B8573432EC31281F700EE50E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 0154 Signing time: Mon 28 Apr 2025 02:01:39 +0000 Manifest this update: Mon 28 Apr 2025 01:56:39 +0000 Manifest next update: Thu 01 May 2025 09:02:39 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 2: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: XC38nb/hxS14szo5N60hqmL9V2YSxAMslPfKgH3zOYk=) 3: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 4: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1d:00:8a:31:85:35:12:b8:57:34:32:ec:31:28:1f:70:0e:e5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Apr 28 01:56:39 2025 GMT Not After : May 1 09:02:39 2025 GMT Subject: CN=3BF4928ADF8E6E3B9C9229DCD1263E75F5AA6AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:e6:0e:f5:a3:0e:c5:0a:29:fc:42:8c:32: d0:33:eb:60:86:d4:92:a1:3f:7f:9f:68:a9:e9:c4: ce:1a:76:a3:ff:ae:09:22:90:87:b4:04:ef:dd:a8: e9:e1:a7:0a:e8:1b:dc:fd:fe:a6:b2:fe:38:3f:1f: 3e:ea:eb:03:08:09:07:0f:30:4d:f1:fc:18:1e:d9: 7b:e9:8c:6b:d4:5b:e8:52:e3:64:25:0a:9c:d5:62: 4e:20:54:49:e4:50:4b:cc:d3:bb:28:27:6a:e6:9c: 9e:67:07:85:ba:83:fb:89:4e:7c:31:d6:69:13:5d: 8f:c4:14:00:30:68:cb:e4:47:0b:d2:5b:e2:82:42: c7:f7:44:42:df:1d:ee:cb:d6:c9:2e:4b:69:60:98: 78:17:03:b6:91:65:bb:32:e1:54:9f:d0:ab:62:b6: b6:83:76:b9:b1:1b:b8:d1:47:1e:65:37:f2:4b:15: ba:04:cd:5a:99:44:be:3d:10:47:3f:38:3a:f5:d9: de:20:ec:3e:37:18:dd:e7:9c:f2:0e:dd:b5:60:35: 93:3f:6c:a2:15:c7:01:6f:cd:cb:fa:56:a0:42:bd: c2:c8:e5:47:24:73:5a:5a:73:1f:9a:ab:b0:bb:2f: 6a:53:3f:4a:e4:68:7f:4a:de:dd:c9:4d:05:7d:34: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:92:8A:DF:8E:6E:3B:9C:92:29:DC:D1:26:3E:75:F5:AA:6A:AF X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ca:da:b0:d7:aa:f4:14:f5:ba:4e:f6:0c:51:30:0e:c5:cf: d4:0a:ba:8c:1c:92:f0:9a:c0:ba:db:40:d2:4f:90:79:6a:6a: ca:02:d3:8c:6b:fc:68:d0:4e:9a:5a:3f:9a:22:98:db:71:7e: 3c:1d:01:00:45:ac:e9:6e:5a:05:13:bc:11:cf:70:dc:f9:4a: 0e:de:d5:af:ac:10:8e:64:48:65:0a:80:6c:5f:1b:fa:57:50: 11:ba:73:88:48:29:69:c5:59:99:e2:6d:2c:65:d6:a2:b3:bb: 8e:bb:9e:ce:c3:ac:8b:f6:9d:77:d3:a8:8d:cb:81:de:b8:99: ad:bc:ea:7d:ea:c6:ba:d8:df:b8:81:3b:66:a7:38:a9:c3:e7: ee:e3:fa:96:af:81:ab:4e:bf:e3:fd:e0:8d:81:27:c4:c8:7a: 96:1c:96:4a:d0:55:ca:d1:b2:75:cb:1f:23:7f:2e:dc:f6:49: a1:36:0c:b2:a0:cc:01:59:98:6b:3d:fa:23:dc:ee:4b:e6:06: 40:5f:d3:63:f3:3f:5b:78:db:32:70:0a:df:89:eb:a2:0f:17: 5b:86:8e:c3:f9:2e:40:3e:23:f5:1e:3c:b8:90:45:a6:6d:b5: 7d:f7:94:d8:2c:ad:5c:d2:c3:81:6c:f6:19:be:18:20:cc:96: 70:41:13:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGR0AijGFNRK4VzQy7DEoH3AO5Q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA0MjgwMTU2MzlaFw0yNTA1MDEwOTAyMzlaMDMxMTAvBgNV BAMTKDNCRjQ5MjhBREY4RTZFM0I5QzkyMjlEQ0QxMjYzRTc1RjVBQTZBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIuYO9aMOxQop/EKMMtAz62CG 1JKhP3+faKnpxM4adqP/rgkikIe0BO/dqOnhpwroG9z9/qay/jg/Hz7q6wMICQcP ME3x/Bge2XvpjGvUW+hS42QlCpzVYk4gVEnkUEvM07soJ2rmnJ5nB4W6g/uJTnwx 1mkTXY/EFAAwaMvkRwvSW+KCQsf3RELfHe7L1skuS2lgmHgXA7aRZbsy4VSf0Kti traDdrmxG7jRRx5lN/JLFboEzVqZRL49EEc/ODr12d4g7D43GN3nnPIO3bVgNZM/ bKIVxwFvzcv6VqBCvcLI5Uckc1pacx+aq7C7L2pTP0rkaH9K3t3JTQV9NERzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/SSit+Objuckinc0SY+dfWqaq8wHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvK2rDXqvQU9bpO9gxRMA7Fz9QKuowckvCa wLrbQNJPkHlqasoC04xr/GjQTppaP5oimNtxfjwdAQBFrOluWgUTvBHPcNz5Sg7e 1a+sEI5kSGUKgGxfG/pXUBG6c4hIKWnFWZnibSxl1qKzu467ns7DrIv2nXfTqI3L gd64ma286n3qxrrY37iBO2anOKnD5+7j+pavgatOv+P94I2BJ8TIepYclkrQVcrR snXLHyN/Ltz2SaE2DLKgzAFZmGs9+iPc7kvmBkBf02PzP1t42zJwCt+J66IPF1uG jsP5LkA+I/UePLiQRaZttX33lNgsrVzSw4Fs9hm+GCDMlnBBE3w= -----END CERTIFICATE-----Generated at Tue Apr 29 22:58:52 2025 by rpki-client