$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: sc8/hlg2UBqXz5iNvwGytEycCtZnrUfN/uHXlgecPd0= Subject key identifier: 54:67:A0:0B:56:84:07:AB:EE:60:EF:BD:EF:17:94:77:B9:4D:FC:97 Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 1F9B01377D3C8C2313EF98312095AD27018FDE0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 032F Signing time: Sat 09 Aug 2025 04:10:55 +0000 Manifest this update: Sat 09 Aug 2025 04:05:55 +0000 Manifest next update: Tue 12 Aug 2025 07:23:55 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: 4Lx8wRUe0EBL5Vg6TnxJN2re2vfRXqdGwu0ff5l9s8U=) 2: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: kn1u3H+Ll2agnCreRcaCuxh7oJFk4p9Ar3zFl2iudbk=) 3: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: bYwVBlWkEwAAtt1voLMBSxVwA2QTErlKcOcK3+VUubw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9b:01:37:7d:3c:8c:23:13:ef:98:31:20:95:ad:27:01:8f:de:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Aug 9 04:05:55 2025 GMT Not After : Aug 12 07:23:55 2025 GMT Subject: CN=5467A00B568407ABEE60EFBDEF179477B94DFC97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:54:4c:df:cb:16:01:11:24:de:5c:74:a5: 03:0b:ea:31:68:62:c7:2f:fc:6f:63:7f:db:86:3e: a0:ce:11:83:94:2c:af:47:b3:da:e9:cd:e8:09:69: e6:35:0f:cc:f6:f5:4c:31:3d:fe:1e:4a:3d:a9:10: bb:68:6b:5a:8e:1f:1d:07:04:91:b6:99:ee:6b:e5: 3e:65:23:8c:4c:18:bc:c9:47:af:2b:15:da:ff:76: 25:2a:6e:ba:13:30:c5:b3:ca:46:1b:fa:67:bf:58: 9d:ee:f7:01:6f:ff:25:83:4f:43:9d:97:a4:83:22: 7b:29:13:57:29:71:d4:a0:f8:11:76:6f:70:9d:8b: 4b:af:cb:e4:bb:b0:12:14:44:65:8a:42:e4:7f:c7: 5e:5d:10:5d:ff:6b:7f:b2:77:11:eb:4d:3a:58:fb: 94:c4:b2:58:bc:3a:3a:ca:90:1b:50:cd:dd:e4:fa: ad:79:b1:a1:71:10:82:c7:fc:79:85:6a:ef:b2:bf: 84:4e:af:1b:68:80:a5:a5:be:e9:57:df:26:02:7d: 3a:c6:1a:d9:84:3f:de:fb:40:3a:3f:48:55:39:73: 23:ea:0c:7f:e9:9a:8d:33:29:bb:fa:6f:78:15:c7: 74:d1:d4:72:8e:f3:3f:1f:6a:43:d1:b0:6d:fb:78: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:67:A0:0B:56:84:07:AB:EE:60:EF:BD:EF:17:94:77:B9:4D:FC:97 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c2:68:06:4a:6a:6b:8d:42:27:de:37:90:14:37:f4:0b:cc: 9c:50:f5:e2:0f:55:93:de:4d:b0:15:53:29:a8:ea:df:17:60: 14:8e:8e:bf:5b:64:67:e4:ab:ed:15:1d:2e:90:24:be:4d:49: fa:3b:06:ad:cf:2f:98:0c:a8:e2:34:97:fc:d6:fd:aa:76:fe: 8c:37:72:bf:96:ea:bc:f2:ed:72:bc:45:72:c3:19:cd:b6:d5: 5e:16:41:23:ba:ec:7d:6f:a2:f3:b2:13:2e:86:4d:f2:5b:d3: fb:62:a3:ae:ad:ee:18:3b:b1:b6:36:50:ae:f5:c0:5c:89:6f: 07:30:8f:60:b9:a5:c0:f2:49:db:6d:8b:29:de:b4:17:a9:be: df:02:3b:4d:fe:9c:77:e0:3b:5e:a7:4c:0c:61:f0:da:25:0d: 2b:d8:86:c4:2d:8f:06:cc:36:b7:24:63:fd:1e:41:7a:bb:09: d4:d8:b9:43:9f:6f:d4:b8:ea:21:0b:a3:90:21:93:0a:b1:cd: 46:4b:4c:52:59:e0:8b:d0:ee:ec:80:c8:22:3f:30:87:4b:7d: 4d:8a:d7:56:47:f4:14:98:11:6a:b3:0d:3e:7b:2d:0a:15:c8: 6b:dc:42:c2:22:41:a7:fc:ae:ca:b6:22:ba:4a:4d:70:98:90: 77:5f:91:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5sBN308jCMT75gxIJWtJwGP3gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNTA4MDkwNDA1NTVaFw0yNTA4MTIwNzIzNTVaMDMxMTAvBgNV BAMTKDU0NjdBMDBCNTY4NDA3QUJFRTYwRUZCREVGMTc5NDc3Qjk0REZDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyy1RM38sWAREk3lx0pQML6jFo Yscv/G9jf9uGPqDOEYOULK9Hs9rpzegJaeY1D8z29UwxPf4eSj2pELtoa1qOHx0H BJG2me5r5T5lI4xMGLzJR68rFdr/diUqbroTMMWzykYb+me/WJ3u9wFv/yWDT0Od l6SDInspE1cpcdSg+BF2b3Cdi0uvy+S7sBIURGWKQuR/x15dEF3/a3+ydxHrTTpY +5TEsli8OjrKkBtQzd3k+q15saFxEILH/HmFau+yv4ROrxtogKWlvulX3yYCfTrG GtmEP977QDo/SFU5cyPqDH/pmo0zKbv6b3gVx3TR1HKO8z8fakPRsG37eHhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGegC1aEB6vuYO+97xeUd7lN/JcwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrCaAZKamuNQifeN5AUN/QLzJxQ9eIPVZPe TbAVUymo6t8XYBSOjr9bZGfkq+0VHS6QJL5NSfo7Bq3PL5gMqOI0l/zW/ap2/ow3 cr+W6rzy7XK8RXLDGc221V4WQSO67H1vovOyEy6GTfJb0/tio66t7hg7sbY2UK71 wFyJbwcwj2C5pcDySdttiynetBepvt8CO03+nHfgO16nTAxh8NolDSvYhsQtjwbM NrckY/0eQXq7CdTYuUOfb9S46iELo5AhkwqxzUZLTFJZ4IvQ7uyAyCI/MIdLfU2K 11ZH9BSYEWqzDT57LQoVyGvcQsIiQaf8rsq2IrpKTXCYkHdfkQo= -----END CERTIFICATE-----Generated at Mon Aug 11 07:24:34 2025 by rpki-client