$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: 5Y4rFF3yOuqe+erd/syhphRNCN7DQ3cw7GJ1pjCawtk= Subject key identifier: 19:1E:A2:54:4A:A3:2F:33:42:4F:69:1D:02:BA:83:9A:F3:E6:62:A6 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 5135E87F8D24348FC07FCDC9D19E2686E5EA32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 022B Signing time: Sat 09 Aug 2025 20:42:18 +0000 Manifest this update: Sat 09 Aug 2025 20:37:18 +0000 Manifest next update: Tue 12 Aug 2025 23:38:18 +0000 Files and hashes: 1: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: 7H0GdHg7L7zkSDLiSxs3CkgDGlREYCGdHWl+JFsGgmA=) 2: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: gov+8lERQceEfbRJlCEYxrAX+p+Uqcfqwo3MMxlUE04=) 3: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: 8ZIc2/UHbaJszYVc0cnSF+Q6BLvNmY+uA4yP7mbtneM=) 4: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: /sa4N19iB/o6G9OL5Szcq6Y4DsVMrF2Yrq0Ab1himGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 23:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:35:e8:7f:8d:24:34:8f:c0:7f:cd:c9:d1:9e:26:86:e5:ea:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Aug 9 20:37:18 2025 GMT Not After : Aug 12 23:38:18 2025 GMT Subject: CN=191EA2544AA32F33424F691D02BA839AF3E662A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:7f:70:b4:fa:18:34:7c:f8:5c:d8:d8:64: 50:e7:25:f0:69:e8:8f:79:80:c8:5b:18:68:ce:2e: 5a:3a:e9:46:99:2b:85:06:c5:80:bd:19:4a:26:84: 26:ab:a1:f5:26:b8:df:70:ee:25:c1:3f:1a:c1:43: bb:04:c1:60:c7:76:a2:05:02:9f:8c:cf:a7:35:89: 6f:19:fa:64:32:c6:53:a5:64:60:97:f7:71:54:f9: 9f:7f:79:8d:5b:00:4c:a9:ef:62:61:cf:dc:dc:d3: 1e:e0:e9:10:39:0d:a0:0f:31:1d:0d:5a:53:52:87: 15:04:ba:76:c6:c2:06:9d:20:a3:42:4a:b8:56:97: 2c:3f:3f:cd:a4:35:30:5a:e6:7a:dd:69:2f:b5:34: db:24:22:9c:e1:32:2d:cc:cc:9c:3d:1d:41:e7:2b: af:89:0f:41:8a:46:99:32:ea:56:f6:83:24:2d:d5: 1c:5c:18:c9:60:38:b2:1d:89:2e:bd:0a:8e:7e:fa: fe:5d:15:84:db:1c:1f:8e:4c:fa:f2:64:43:5e:23: 09:ac:f0:b7:47:c6:45:c1:0a:04:ac:73:24:80:ac: 8b:21:b6:2f:12:a7:15:41:f5:4a:1d:fb:f9:9f:dd: 79:e3:18:56:51:6b:72:01:9c:a6:4a:4e:d2:9a:99: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1E:A2:54:4A:A3:2F:33:42:4F:69:1D:02:BA:83:9A:F3:E6:62:A6 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:12:e9:37:31:36:e1:7a:73:ed:c9:70:9d:de:8e:b6:c7:b7: 50:68:1c:95:37:35:39:2a:c8:6c:bd:5f:37:46:31:b4:c3:a2: 5e:43:94:5f:89:09:fd:fc:88:51:1c:93:5d:2e:8d:c5:55:46: 12:16:d3:ae:c7:95:24:6a:b6:47:26:cb:86:87:d9:a4:46:b6: 98:71:4f:27:86:a9:e7:ae:b4:f8:6a:a9:45:1c:26:be:37:4f: e1:0e:0d:e9:19:7c:43:df:06:a2:22:54:91:e5:3e:90:cb:26: 40:9d:0e:4f:5e:d1:16:76:f3:11:be:10:59:5d:30:6f:b4:53: ed:65:cf:08:2d:47:b1:f0:d9:d5:09:67:49:9c:c4:fe:56:49: dc:5f:95:cb:f5:4b:91:75:10:82:67:cf:ad:10:76:28:a4:9a: 60:1d:f4:ac:9b:c4:28:71:8f:8b:b2:82:8a:3c:6e:2a:47:91: 30:9a:c0:0e:74:0b:7a:b3:23:4f:6e:17:87:5f:e2:bf:13:e1: 35:ce:e6:a4:97:65:5b:1a:0b:a0:d5:e8:4d:2b:64:e5:74:b7: ca:56:b9:f2:9b:41:44:3e:65:b7:ce:f9:38:91:fb:a0:9c:fd: c3:c2:9c:80:22:ce:c9:91:f5:58:93:2d:80:b6:22:64:36:2e: 19:c4:d3:a7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITUTXof40kNI/Af83J0Z4mhuXqMjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwMzVBRDZBOUI3MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0 NDkxMzZEMB4XDTI1MDgwOTIwMzcxOFoXDTI1MDgxMjIzMzgxOFowMzExMC8GA1UE AxMoMTkxRUEyNTQ0QUEzMkYzMzQyNEY2OTFEMDJCQTgzOUFGM0U2NjJBNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALp9f3C0+hg0fPhc2NhkUOcl8Gno j3mAyFsYaM4uWjrpRpkrhQbFgL0ZSiaEJquh9Sa433DuJcE/GsFDuwTBYMd2ogUC n4zPpzWJbxn6ZDLGU6VkYJf3cVT5n395jVsATKnvYmHP3NzTHuDpEDkNoA8xHQ1a U1KHFQS6dsbCBp0go0JKuFaXLD8/zaQ1MFrmet1pL7U02yQinOEyLczMnD0dQecr r4kPQYpGmTLqVvaDJC3VHFwYyWA4sh2JLr0Kjn76/l0VhNscH45M+vJkQ14jCazw t0fGRcEKBKxzJICsiyG2LxKnFUH1Sh37+Z/deeMYVlFrcgGcpkpO0pqZ/V0CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQZHqJUSqMvM0JPaR0CuoOa8+ZipjAfBgNVHSME GDAWgBQDWtaptxLE+na36COnn2QQtEkTbTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Rl NmY1Y2U3LWIzNmItNDczZC1hNWJlLTljMDM1MGQxZjM4Mi8wLzAzNUFENkE5Qjcx MkM0RkE3NkI3RTgyM0E3OUY2NDEwQjQ0OTEzNkQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8wMzVBRDZBOUI3MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkx MzZELmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9kZTZmNWNlNy1iMzZiLTQ3M2QtYTVi ZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3MTJDNEZBNzZCN0U4MjNBNzlGNjQx MEI0NDkxMzZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAtRLpNzE24Xpz7clwnd6Otse3UGgclTc1OSrI bL1fN0YxtMOiXkOUX4kJ/fyIURyTXS6NxVVGEhbTrseVJGq2RybLhofZpEa2mHFP J4ap5660+GqpRRwmvjdP4Q4N6Rl8Q98GoiJUkeU+kMsmQJ0OT17RFnbzEb4QWV0w b7RT7WXPCC1HsfDZ1QlnSZzE/lZJ3F+Vy/VLkXUQgmfPrRB2KKSaYB30rJvEKHGP i7KCijxuKkeRMJrADnQLerMjT24Xh1/ivxPhNc7mpJdlWxoLoNXoTStk5XS3yla5 8ptBRD5lt875OJH7oJz9w8KcgCLOyZH1WJMtgLYiZDYuGcTTpw== -----END CERTIFICATE-----Generated at Sun Aug 10 13:44:23 2025 by rpki-client