$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: WtmCydFpRYIK2bmuMEPscDqXKjedm6cwS7FOUnzanW0= Subject key identifier: 1C:67:F2:AF:33:93:24:36:29:88:A3:6C:36:A7:D1:43:24:74:BF:34 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 41A9B7618275ADA276445CE24FCC8E17AC80C0B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: D1 Signing time: Sun 27 Apr 2025 20:51:37 +0000 Manifest this update: Sun 27 Apr 2025 20:46:37 +0000 Manifest next update: Thu 01 May 2025 01:48:37 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: HeoyRjR2L+kY/3fYBTXDCjYuokpbWd4nHVv7G6qEiIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 01:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a9:b7:61:82:75:ad:a2:76:44:5c:e2:4f:cc:8e:17:ac:80:c0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Apr 27 20:46:37 2025 GMT Not After : May 1 01:48:37 2025 GMT Subject: CN=1C67F2AF339324362988A36C36A7D1432474BF34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4c:2a:ed:a2:2a:bd:00:10:f2:af:55:be:0b: 32:40:dd:81:00:40:1f:1f:51:63:17:1f:ce:7d:c1: 8d:79:5c:68:2d:e7:c3:3b:8a:6f:d7:0b:64:6a:4d: 41:08:5d:e7:7e:85:50:46:c3:e0:86:4e:81:5d:12: de:a0:7e:1a:3f:a2:e3:b2:24:40:df:78:33:0f:4c: dc:97:9d:f2:63:bc:92:1e:af:f0:d9:65:c5:84:ed: 92:64:ec:71:0b:43:c5:1d:32:9d:cb:cd:64:f4:5e: 99:df:6f:04:94:1f:87:3b:ba:88:56:61:84:0f:86: 5f:e9:75:58:77:51:5a:46:54:38:f3:34:78:16:52: 44:e4:f8:12:15:65:ed:ad:85:7c:14:77:99:89:af: 9a:9f:02:25:d7:2d:3d:d5:d5:5f:f6:25:55:b5:5c: 82:93:0a:6e:ad:81:34:81:90:66:57:3b:eb:15:53: e1:6b:0a:1f:84:25:dc:4b:30:c8:63:06:5b:e7:54: 50:e5:8c:75:1a:cb:2d:d9:2f:2f:a1:c9:5d:37:e1: 4b:27:d4:86:51:85:39:e7:f3:cf:ed:a9:1a:e3:d2: 19:0d:36:ec:59:6a:48:32:6f:97:98:ed:76:9a:dd: 12:29:26:3b:bb:e7:74:64:fc:d2:8b:37:b5:91:39: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:67:F2:AF:33:93:24:36:29:88:A3:6C:36:A7:D1:43:24:74:BF:34 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e1:ff:0e:cf:f6:ac:45:0e:d0:67:ca:99:21:9f:ae:fc:58: 5f:b5:0b:12:62:f4:d2:46:e8:fc:52:95:e9:a3:d1:41:4d:75: 86:f1:5c:b1:68:21:13:18:fc:28:4d:d9:f0:bd:cb:ee:2c:27: 86:fe:f6:8d:cb:bb:17:eb:53:b4:b1:a2:dc:bd:cc:46:3d:e2: 1d:28:5a:e4:37:17:4a:7c:4f:d3:3e:3e:e4:3b:2a:44:73:90: 1b:c4:7d:0e:4d:81:0e:31:00:ed:ca:f1:3c:f4:0a:c1:67:00: 6e:f4:9d:bd:fc:a4:77:b5:c2:db:6a:ff:cc:65:98:d2:37:9f: 95:9d:3c:2b:3e:55:3f:ca:34:34:39:7c:b2:73:d6:e1:e6:7a: 24:a2:bb:35:90:19:f3:3f:ea:7a:21:41:0c:ee:9a:30:80:dc: 33:12:3a:55:43:81:91:46:82:8d:2e:fc:00:09:77:f5:e0:53: f8:8c:e4:1b:49:41:1f:6e:f6:46:89:31:ae:63:46:fc:35:6d: c6:f6:a0:20:f5:b5:9e:0f:01:89:14:84:52:45:fc:26:d0:2e: 77:90:1f:60:38:4f:fd:60:a1:4e:6a:3e:a6:8d:0f:58:ed:98: 6f:37:e1:e1:18:46:3a:67:3c:f2:d5:35:c2:61:ba:03:34:01: 73:f9:c1:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQam3YYJ1raJ2RFziT8yOF6yAwLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTA0MjcyMDQ2MzdaFw0yNTA1MDEwMTQ4MzdaMDMxMTAvBgNV BAMTKDFDNjdGMkFGMzM5MzI0MzYyOTg4QTM2QzM2QTdEMTQzMjQ3NEJGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSTCrtoiq9ABDyr1W+CzJA3YEA QB8fUWMXH859wY15XGgt58M7im/XC2RqTUEIXed+hVBGw+CGToFdEt6gfho/ouOy JEDfeDMPTNyXnfJjvJIer/DZZcWE7ZJk7HELQ8UdMp3LzWT0XpnfbwSUH4c7uohW YYQPhl/pdVh3UVpGVDjzNHgWUkTk+BIVZe2thXwUd5mJr5qfAiXXLT3V1V/2JVW1 XIKTCm6tgTSBkGZXO+sVU+FrCh+EJdxLMMhjBlvnVFDljHUayy3ZLy+hyV034Usn 1IZRhTnn88/tqRrj0hkNNuxZakgyb5eY7Xaa3RIpJju753Rk/NKLN7WRObdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHGfyrzOTJDYpiKNsNqfRQyR0vzQwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHh/w7P9qxFDtBnypkhn678WF+1CxJi9NJG 6PxSlemj0UFNdYbxXLFoIRMY/ChN2fC9y+4sJ4b+9o3LuxfrU7Sxoty9zEY94h0o WuQ3F0p8T9M+PuQ7KkRzkBvEfQ5NgQ4xAO3K8Tz0CsFnAG70nb38pHe1wttq/8xl mNI3n5WdPCs+VT/KNDQ5fLJz1uHmeiSiuzWQGfM/6nohQQzumjCA3DMSOlVDgZFG go0u/AAJd/XgU/iM5BtJQR9u9kaJMa5jRvw1bcb2oCD1tZ4PAYkUhFJF/CbQLneQ H2A4T/1goU5qPqaND1jtmG834eEYRjpnPPLVNcJhugM0AXP5wcU= -----END CERTIFICATE-----Generated at Tue Apr 29 09:25:59 2025 by rpki-client