$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: Cn8uZUxq5gZBLtyG6qDhxxFwf5TAsUZRrlyhglRTNLw= Subject key identifier: 1B:68:C0:14:7B:CC:0A:71:B6:7E:D9:DA:D8:D2:E2:28:5A:BB:6D:CF Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 56FA2BE5272B6D8DEABFECACF3B7F8A55085C8DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0242 Signing time: Sun 02 Nov 2025 04:51:11 +0000 Manifest this update: Sun 02 Nov 2025 04:46:11 +0000 Manifest next update: Wed 05 Nov 2025 05:30:11 +0000 Files and hashes: 1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: kMr4GmE9fNyBY7aq7HW4AX/C5B3oGWAgJZjAykoPF6I=) 2: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 05:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fa:2b:e5:27:2b:6d:8d:ea:bf:ec:ac:f3:b7:f8:a5:50:85:c8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Nov 2 04:46:11 2025 GMT Not After : Nov 5 05:30:11 2025 GMT Subject: CN=1B68C0147BCC0A71B67ED9DAD8D2E2285ABB6DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:58:a8:8f:02:c8:a7:38:d4:3a:b3:b3:b4: fe:36:53:83:0c:4b:58:de:83:e9:b0:75:5a:4a:90: ba:7b:55:d8:f8:89:e5:12:b5:3c:60:21:4f:90:64: 01:a6:1e:e9:e5:56:ac:ec:5f:2f:ff:4e:d7:40:54: ed:1b:6a:d6:6f:2e:10:b6:4f:c7:8f:c1:64:7d:f9: 23:63:1f:a8:60:f5:9f:6c:06:f1:82:cc:d4:c4:eb: 83:f0:76:cf:31:da:55:7d:7a:0c:97:56:fe:ae:a1: 9a:32:1b:43:98:58:08:0e:97:1b:44:b4:56:5e:47: 6b:8f:c6:6a:3a:e5:4b:93:62:bd:85:2e:07:ac:da: 0c:ca:ad:9c:e1:9c:17:a0:9a:23:25:68:b2:0b:d6: c8:a0:ed:f4:17:50:06:34:86:43:86:44:9b:db:2c: 70:6d:d6:8d:e1:e8:80:a3:63:67:8a:22:60:cd:0f: 1d:a8:95:56:65:71:1b:65:20:5d:ad:5d:9d:86:69: 9f:a0:fb:ef:13:cc:ca:43:7f:0f:f3:33:f5:63:55: bd:c7:d5:9b:2f:a6:50:76:51:7c:0a:52:d0:9e:79: 68:37:41:f1:22:b5:0c:42:60:2e:6b:90:6b:7e:ad: 0a:4f:b0:50:01:48:c3:f6:ae:6c:a6:65:be:83:cd: 2e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:68:C0:14:7B:CC:0A:71:B6:7E:D9:DA:D8:D2:E2:28:5A:BB:6D:CF X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:44:48:c8:b1:a3:39:43:3e:58:2f:7d:aa:b8:3c:c9:1e:e2: 4b:39:84:ae:48:db:0e:38:37:47:93:09:82:7d:cb:42:a7:30: fd:25:81:0f:8e:99:dd:6a:46:2b:60:02:c8:38:80:d1:79:bb: 20:8e:36:b3:33:a3:04:aa:ce:a7:ef:ff:4a:3c:3d:40:e0:43: e7:61:17:40:93:67:e1:bf:94:be:dc:97:1a:f9:b2:3a:5c:5d: cb:1a:8b:e7:62:60:da:b0:42:bb:66:18:c1:a9:ab:19:ac:b7: f6:13:17:a4:c9:da:82:93:91:7e:bf:0d:44:9d:21:41:95:4d: c8:95:71:ce:84:0e:09:27:50:d8:38:d1:53:d5:1d:02:c1:15: 02:8d:73:5d:b1:e3:bb:d5:ca:f4:4c:63:3c:ba:6f:03:c9:19: 31:cd:62:cf:58:ce:de:2c:92:48:c7:f9:44:55:0e:74:f8:c1: 6f:32:e6:d2:43:35:02:80:b9:0d:21:03:e6:b5:51:ab:04:56: c0:9d:88:04:2a:48:d0:9a:87:e3:18:14:46:c2:c1:47:32:25: 10:e5:1b:81:64:9e:f4:05:90:be:67:33:ec:d3:64:c7:65:31: ba:ab:74:ea:05:f6:20:b7:7e:5d:a7:84:3f:7f:fd:d1:c1:da: ae:37:a1:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvor5ScrbY3qv+ys87f4pVCFyN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTExMDIwNDQ2MTFaFw0yNTExMDUwNTMwMTFaMDMxMTAvBgNV BAMTKDFCNjhDMDE0N0JDQzBBNzFCNjdFRDlEQUQ4RDJFMjI4NUFCQjZEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIFiojwLIpzjUOrOztP42U4MM S1jeg+mwdVpKkLp7Vdj4ieUStTxgIU+QZAGmHunlVqzsXy//TtdAVO0batZvLhC2 T8ePwWR9+SNjH6hg9Z9sBvGCzNTE64Pwds8x2lV9egyXVv6uoZoyG0OYWAgOlxtE tFZeR2uPxmo65UuTYr2FLges2gzKrZzhnBegmiMlaLIL1sig7fQXUAY0hkOGRJvb LHBt1o3h6ICjY2eKImDNDx2olVZlcRtlIF2tXZ2GaZ+g++8TzMpDfw/zM/VjVb3H 1ZsvplB2UXwKUtCeeWg3QfEitQxCYC5rkGt+rQpPsFABSMP2rmymZb6DzS4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2jAFHvMCnG2ftna2NLiKFq7bc8wHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5ESMixozlDPlgvfaq4PMke4ks5hK5I2w44 N0eTCYJ9y0KnMP0lgQ+Omd1qRitgAsg4gNF5uyCONrMzowSqzqfv/0o8PUDgQ+dh F0CTZ+G/lL7clxr5sjpcXcsai+diYNqwQrtmGMGpqxmst/YTF6TJ2oKTkX6/DUSd IUGVTciVcc6EDgknUNg40VPVHQLBFQKNc12x47vVyvRMYzy6bwPJGTHNYs9Yzt4s kkjH+URVDnT4wW8y5tJDNQKAuQ0hA+a1UasEVsCdiAQqSNCah+MYFEbCwUcyJRDl G4FknvQFkL5nM+zTZMdlMbqrdOoF9iC3fl2nhD9//dHB2q43oTM= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:37 2025 by rpki-client