
$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.mft (raw, json)
Hash identifier: +NEsvslig1TuUctg0+YCltoIbUU2Gr3YxdpUGFvSI6Y=
Subject key identifier: 73:71:83:92:FC:DA:E9:98:01:C0:AE:8B:A4:B1:04:C8:26:BD:D0:54
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial: 47AF4B69D53AFDB3A70F00D0427A3157D28687B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
Manifest number: 01DF
Signing time: Tue 04 Nov 2025 17:11:42 +0000
Manifest this update: Tue 04 Nov 2025 17:06:42 +0000
Manifest next update: Sat 08 Nov 2025 04:27:42 +0000
Files and hashes: 1: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: lKrNBKuDZS/ipiNlTaiA44F8MyhuWOX6AJpZ28duXRw=)
2: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: VrC0pE6ywJ4SpMSp1FoGXZj0toTtd8RroZm7PaGXQLI=)
3: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: GLppbahQizSwOWwKriMc4uG3htQlLQar3GU+UJJemeo=)
4: 35E6B2357C98B974C14BA8A5DE46B519083666C6.crl (hash: g4zk7ryOcqrw+SdZC0mGgKoieWMSLRHHUq+mfdJAOw0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 00:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:af:4b:69:d5:3a:fd:b3:a7:0f:00:d0:42:7a:31:57:d2:86:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Validity
Not Before: Nov 4 17:06:42 2025 GMT
Not After : Nov 8 04:27:42 2025 GMT
Subject: CN=73718392FCDAE99801C0AE8BA4B104C826BDD054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:30:69:58:63:68:dc:78:c3:81:26:e3:6d:
ab:9e:e8:2c:15:ae:71:a4:67:a3:3a:51:16:9d:c4:
4d:ff:ab:66:0a:50:a9:fd:14:e9:5c:78:f4:d6:4b:
c7:e5:0b:42:71:53:9b:88:11:18:65:64:b9:ae:a8:
69:45:01:64:e8:45:d4:78:65:6e:db:1e:7a:8c:c9:
56:30:78:e3:19:5c:0e:22:4b:18:92:f4:e8:65:b2:
b4:d9:7a:c8:7e:ce:b2:bc:e0:94:23:cd:18:cc:11:
c1:c5:99:83:c5:39:6e:f6:da:ab:2a:76:3e:fd:a1:
35:fe:37:65:48:e5:5f:6e:c9:41:c6:76:90:96:e2:
61:d2:26:8e:4d:e9:f9:72:3f:e6:8f:29:eb:dd:65:
96:e1:67:63:7e:c0:90:1a:6d:02:80:7e:c3:af:b9:
71:b8:6a:9f:45:ea:52:b7:af:64:6d:c3:b9:3d:d7:
09:a6:b4:78:18:aa:07:1a:6d:28:98:81:b6:5a:39:
48:8b:2c:2b:92:40:dc:f3:3c:48:a3:30:d4:13:b4:
d3:eb:27:19:01:16:d6:68:82:cb:d4:f9:b3:5e:b3:
00:ea:92:42:4f:12:ab:b2:8f:e6:4b:81:ee:e5:10:
85:05:da:99:60:34:09:de:1f:29:9c:6a:ae:6f:d7:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:83:92:FC:DA:E9:98:01:C0:AE:8B:A4:B1:04:C8:26:BD:D0:54
X509v3 Authority Key Identifier:
keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:05:23:15:7a:1a:74:4c:6c:60:7d:fe:f4:f1:21:a9:e2:4f:
24:10:78:54:d2:27:52:2c:cf:71:03:0c:b8:56:98:b5:2a:0f:
78:e8:70:8b:e5:38:ab:2d:1b:75:fb:ac:a8:d9:f7:39:40:6e:
4c:a1:79:0d:90:65:fb:5c:56:34:b7:4d:71:cd:8d:34:49:a3:
17:bc:c4:f9:a6:11:cf:d5:f1:bc:0b:a1:89:46:a1:14:97:7c:
58:0a:ce:d4:08:08:86:96:e4:6b:1f:82:9f:64:8e:63:da:30:
33:e6:4f:24:de:e5:a6:4c:1d:fd:76:0c:f3:77:b0:70:71:da:
12:de:1b:f7:23:42:b2:51:1e:17:21:fe:e0:0b:58:e6:8b:ee:
ba:9d:78:5a:80:99:66:12:7f:f7:56:47:3a:bc:56:06:fe:b9:
a7:a8:a3:fb:c1:ed:51:7e:17:4c:35:4a:19:cf:38:dc:08:29:
b2:d6:24:25:1f:bf:87:07:62:ce:28:59:e2:66:61:d3:f9:83:
f3:5d:b1:f1:3b:b7:22:d4:fe:0b:99:7d:81:78:11:01:69:09:
b5:59:0a:11:e4:6c:4a:d8:ab:9d:e0:ee:98:88:4c:32:7f:68:
17:a7:a9:60:6a:e8:e0:e9:a2:3a:3e:c0:54:6f:2f:52:98:ce:
89:ed:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:29 2025 by rpki-client