$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: PgHhZ58R8GL+az2GmLSGtfuLTeVH2ylQMBndBq/x00g= Subject key identifier: B0:5B:93:7F:5F:73:20:BC:3F:6E:E8:94:06:D7:A4:EC:E4:C5:AE:6C Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 0F2EC9B497E9D85F8165C7E705AFF52C6C7554BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 0513 Signing time: Sat 19 Jul 2025 20:51:44 +0000 Manifest this update: Sat 19 Jul 2025 20:46:43 +0000 Manifest next update: Wed 23 Jul 2025 01:30:43 +0000 Files and hashes: 1: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=) 2: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: dASDC6A8QkcoKOTRQ/CvgSqJWSyAkaKqOmqilKOQ97g=) 3: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: bWRExWZZIgQwRxIP86bPE6hDOmLbrhGh8hJvUz7o6EE=) 4: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: twCP3bQtXm7fHopGhk9qw+BKzDavhDYNdBsRfz7JGKg=) 5: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: So5G4uHqVHWD5JnkptSS1bHWAe/cdyDOQettCO6GGiU=) 6: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=) 7: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=) 8: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=) 9: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: ozMMj1PLYt9P59zXxht5YENq9xxiksZRJWyynQGPWwo=) 10: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: jHen1vZLG/DOZwqIeHYY98aBHq6SMyx6T3vs559h5rI=) 11: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=) 12: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 9SIW/5w9M/SmmmzkXzv4Bp8jIuxjcuDE9nLrxJeaY/8=) 13: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: plFUYvoZx+Zhhi7/vKanQppp3zTRIZoJyKujyLUaQfM=) 14: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: fYkaRaqMdzeCnlFj0QC4k70wJ41vV5h8EX1emupb1Ew=) 15: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: +uJbj8WJqEphM7541brz+wsMNFOJrMcS3IoFnXDsUR4=) 16: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: vhMXT0X2yZyfjqh1If/jDIC06hgxnPfiOfL606K6iKk=) 17: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 9FaMWUxx6cNM5vz7M9YrzpMwj5RS9BmzIfAf19UCzPI=) 18: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=) 19: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: hplPEY83KbXLKF8mvbTVWHeph6nkNRI9I2QkUrjdTPg=) 20: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: nun7wr5qUW6SSsLL/8m4wIYLtJbVijMvNYm3I5L5gwY=) 21: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: +7ThYpBxJ7cY58NoufQvfB+mtjUp0Rdkq8BnlAc4bZ4=) 22: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: LqxreuPQRi/RPY9pSW+yNL/verqLyl3p0dMRTLmH8hk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2e:c9:b4:97:e9:d8:5f:81:65:c7:e7:05:af:f5:2c:6c:75:54:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Jul 19 20:46:43 2025 GMT Not After : Jul 23 01:30:43 2025 GMT Subject: CN=B05B937F5F7320BC3F6EE89406D7A4ECE4C5AE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:b8:ce:19:ce:d7:64:41:eb:37:05:df:ee: c8:07:54:db:fc:f4:db:95:95:0c:35:5c:20:ce:32: 89:c0:ba:3c:1b:ad:1c:59:0b:72:6d:40:f0:2e:70: aa:24:fa:9e:28:1e:4f:6f:f7:2b:37:22:33:e9:d1: 05:f0:18:d5:a7:d4:26:09:65:bb:36:ff:4f:ab:59: 98:53:13:04:25:e9:b5:bc:89:7f:eb:12:88:da:d5: ea:3e:07:4f:80:51:03:d0:40:29:bd:89:14:8d:c2: 9a:df:47:ca:83:28:cc:43:20:51:3a:99:a0:7d:23: 16:c3:9c:e7:01:ab:83:81:72:75:8a:5f:6a:89:a9: 70:ac:51:c4:6a:d3:be:3c:b6:52:d9:80:fe:4b:4d: 68:c4:0b:59:b3:57:d0:cb:e2:12:08:61:20:29:a6: 24:6f:d4:92:6b:34:32:f6:d0:26:d0:76:08:2d:2d: 0e:ac:14:2a:6d:be:7b:26:e3:dd:34:b9:2f:02:54: f5:e1:7d:a8:38:19:af:23:e4:40:dd:d0:98:44:84: 8c:1c:44:8d:ea:be:c9:fe:b1:42:29:21:34:d9:d3: df:c9:48:ce:88:c0:4f:72:83:61:3d:a3:a1:54:02: 55:9e:fa:8b:ae:fe:68:50:54:36:94:77:9a:f6:cb: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5B:93:7F:5F:73:20:BC:3F:6E:E8:94:06:D7:A4:EC:E4:C5:AE:6C X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:88:cf:2e:26:b2:94:21:72:d9:0e:1b:e1:7f:2f:50:69: a7:10:ce:e4:0e:5b:f4:6c:63:80:79:45:15:dc:86:d3:1a:cf: ac:83:a8:29:24:8e:b4:af:7a:be:a9:5c:d0:45:c7:ab:73:56: e7:51:b8:60:1c:3d:a1:8e:fc:ef:5a:c6:50:75:c8:20:6b:84: 96:1d:86:7c:fc:96:1f:21:8f:b2:33:00:ba:3d:00:71:7f:86: 69:dc:b5:2f:1d:fb:cf:40:c9:db:a3:31:9d:c8:e5:5e:a2:a1: f1:67:df:bd:36:41:8b:18:53:58:66:9a:50:ce:c6:97:3d:67: 60:38:fa:a6:81:f4:44:ab:7b:48:81:82:55:ef:ed:3a:b0:d2: 16:f9:f7:87:44:52:20:a1:92:c2:5d:ad:15:75:47:87:fa:96: de:18:94:9c:e4:c2:27:09:98:ed:c5:92:9b:a0:ab:7c:84:81: 7b:4b:13:89:f9:f8:7e:3f:35:e9:4f:37:69:69:a6:04:67:51: 6e:ae:48:b5:9c:a7:ce:5f:10:38:b7:d7:cc:f9:67:6d:c1:78: 36:ca:17:2e:24:25:35:48:54:ba:22:8c:39:a6:e0:8f:3e:b5: 91:14:47:d6:60:ab:82:d3:51:24:97:74:a1:b3:ed:33:83:f8: 24:db:d3:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDy7JtJfp2F+BZcfnBa/1LGx1VL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTA3MTkyMDQ2NDNaFw0yNTA3MjMwMTMwNDNaMDMxMTAvBgNV BAMTKEIwNUI5MzdGNUY3MzIwQkMzRjZFRTg5NDA2RDdBNEVDRTRDNUFFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVELjOGc7XZEHrNwXf7sgHVNv8 9NuVlQw1XCDOMonAujwbrRxZC3JtQPAucKok+p4oHk9v9ys3IjPp0QXwGNWn1CYJ Zbs2/0+rWZhTEwQl6bW8iX/rEoja1eo+B0+AUQPQQCm9iRSNwprfR8qDKMxDIFE6 maB9IxbDnOcBq4OBcnWKX2qJqXCsUcRq0748tlLZgP5LTWjEC1mzV9DL4hIIYSAp piRv1JJrNDL20CbQdggtLQ6sFCptvnsm4900uS8CVPXhfag4Ga8j5EDd0JhEhIwc RI3qvsn+sUIpITTZ09/JSM6IwE9yg2E9o6FUAlWe+ouu/mhQVDaUd5r2y0ArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsFuTf19zILw/buiUBtek7OTFrmwwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtdiM8uJrKUIXLZDhvhfy9QaacQzuQOW/Rs Y4B5RRXchtMaz6yDqCkkjrSver6pXNBFx6tzVudRuGAcPaGO/O9axlB1yCBrhJYd hnz8lh8hj7IzALo9AHF/hmnctS8d+89AydujMZ3I5V6iofFn3702QYsYU1hmmlDO xpc9Z2A4+qaB9ESre0iBglXv7Tqw0hb594dEUiChksJdrRV1R4f6lt4YlJzkwicJ mO3Fkpugq3yEgXtLE4n5+H4/NelPN2lppgRnUW6uSLWcp85fEDi318z5Z23BeDbK Fy4kJTVIVLoijDmm4I8+tZEUR9Zgq4LTUSSXdKGz7TOD+CTb00o= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:04 2025 by rpki-client