$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: Qy8OmFcfhLQu4BF0oDmsi548GmINfU6KHefBMKmJ2bE= Subject key identifier: 93:A5:BF:A8:16:56:D0:DC:62:6E:2C:4E:C3:8B:6E:17:21:2E:1D:AF Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 24725146CE9452B4D10DBEED1C39F3686B0186CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 0152 Signing time: Wed 23 Apr 2025 13:01:39 +0000 Manifest this update: Wed 23 Apr 2025 12:56:39 +0000 Manifest next update: Sat 26 Apr 2025 16:44:39 +0000 Files and hashes: 1: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: j8q0x1zyzJHVgJTOBwuxuccKW128WjN8GYtqzfK/oQ0=) 2: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 3: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:72:51:46:ce:94:52:b4:d1:0d:be:ed:1c:39:f3:68:6b:01:86:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Apr 23 12:56:39 2025 GMT Not After : Apr 26 16:44:39 2025 GMT Subject: CN=93A5BFA81656D0DC626E2C4EC38B6E17212E1DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:d4:29:b4:dd:e5:08:8d:f9:95:d0:98:80: a7:c3:d5:a5:b3:80:90:6f:6b:a7:38:63:b9:2c:5b: 24:de:75:c0:c4:63:f2:58:82:82:75:5f:6b:d6:46: 61:56:d2:ab:63:56:5e:b2:d3:ff:1a:81:9f:1a:3e: ef:04:83:6e:ba:93:b7:42:ad:cb:8d:92:19:d9:3c: b3:6e:4f:83:07:02:eb:70:89:80:cf:ce:8d:ee:30: 50:e4:2e:63:9b:1d:3e:5b:17:4e:3d:b9:e5:bb:23: 23:6e:11:8d:41:4a:54:ba:85:23:4d:7f:a5:6e:ff: c5:b9:36:9b:6a:84:22:85:48:83:c2:c7:f7:fe:39: a1:42:42:4d:00:97:e2:4c:58:8d:bf:cd:e9:c3:68: 4d:da:84:bf:c2:a3:d8:eb:b4:7e:39:d4:29:80:d7: bc:39:a9:63:7e:a9:41:ed:f4:4b:ec:34:d4:af:bc: e3:93:33:ef:db:8b:80:d7:3b:74:47:11:0a:7a:ea: 2d:dd:b3:b7:d9:62:0d:8e:2e:6b:1d:ac:5d:94:f1: 2e:6a:1a:c4:49:73:54:46:83:18:25:00:b6:73:12: d7:65:9b:cd:02:02:d0:83:7d:f0:54:c1:6f:74:f1: 3c:ec:cb:85:f0:de:84:7a:00:a2:eb:11:89:be:c7: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A5:BF:A8:16:56:D0:DC:62:6E:2C:4E:C3:8B:6E:17:21:2E:1D:AF X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4c:69:e7:67:9a:0c:65:c4:dc:3c:6e:7c:3b:35:57:79:6c: cd:48:a4:51:22:99:81:46:92:5d:01:c9:f1:c7:7b:7e:50:1d: 66:8c:5b:67:63:48:e5:db:0b:a4:77:a5:47:07:b9:fe:81:d2: 09:c6:ff:5e:c1:dd:f8:14:1c:4e:c4:bc:62:5f:52:e6:2c:99: af:42:cc:5c:ce:11:04:bf:ae:aa:db:93:89:c0:88:8f:9e:b7: db:c7:19:ff:72:43:66:69:a1:d3:04:bc:a2:fd:1f:40:51:a0: a4:87:dc:06:e0:e0:15:00:aa:ba:eb:9c:e0:b9:61:3c:f7:7d: 8e:42:65:93:7c:c3:13:48:d9:42:8a:89:a0:05:96:6c:65:b4: a2:75:5e:69:2a:c5:7f:3e:53:b5:88:81:da:0c:70:6c:69:61: fb:69:b5:f0:eb:d1:0c:2c:0d:18:0c:82:d6:c7:1a:06:6d:0d: 97:c2:96:e8:9d:40:74:7d:7e:db:9a:f2:7c:3c:05:f3:03:02: fd:38:82:34:fc:2b:e8:a8:39:84:7e:6c:2b:ed:a8:d4:c5:7d: 6a:44:1a:7d:74:5e:1f:e8:2a:88:df:1f:af:6f:f8:38:1f:72: 40:3b:55:34:2a:61:29:66:1c:35:a8:0c:72:49:f1:96:69:a3: a7:ce:2b:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHJRRs6UUrTRDb7tHDnzaGsBhsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTA0MjMxMjU2MzlaFw0yNTA0MjYxNjQ0MzlaMDMxMTAvBgNV BAMTKDkzQTVCRkE4MTY1NkQwREM2MjZFMkM0RUMzOEI2RTE3MjEyRTFEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCdQptN3lCI35ldCYgKfD1aWz gJBva6c4Y7ksWyTedcDEY/JYgoJ1X2vWRmFW0qtjVl6y0/8agZ8aPu8Eg266k7dC rcuNkhnZPLNuT4MHAutwiYDPzo3uMFDkLmObHT5bF049ueW7IyNuEY1BSlS6hSNN f6Vu/8W5NptqhCKFSIPCx/f+OaFCQk0Al+JMWI2/zenDaE3ahL/Co9jrtH451CmA 17w5qWN+qUHt9EvsNNSvvOOTM+/bi4DXO3RHEQp66i3ds7fZYg2OLmsdrF2U8S5q GsRJc1RGgxglALZzEtdlm80CAtCDffBUwW908Tzsy4Xw3oR6AKLrEYm+xwXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6W/qBZW0NxibixOw4tuFyEuHa8wHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZMaednmgxlxNw8bnw7NVd5bM1IpFEimYFG kl0ByfHHe35QHWaMW2djSOXbC6R3pUcHuf6B0gnG/17B3fgUHE7EvGJfUuYsma9C zFzOEQS/rqrbk4nAiI+et9vHGf9yQ2ZpodMEvKL9H0BRoKSH3Abg4BUAqrrrnOC5 YTz3fY5CZZN8wxNI2UKKiaAFlmxltKJ1XmkqxX8+U7WIgdoMcGxpYftptfDr0Qws DRgMgtbHGgZtDZfCluidQHR9ftua8nw8BfMDAv04gjT8K+ioOYR+bCvtqNTFfWpE Gn10Xh/oKojfH69v+DgfckA7VTQqYSlmHDWoDHJJ8ZZpo6fOK+c= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:58 2025 by rpki-client on console.sobornost.net