$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: dBjZYKxUG2QdVc913vvC79FgqGq8hXbblvavBP7vnuk= Subject key identifier: A7:E3:45:CE:06:B3:A5:1F:2C:A6:41:B0:53:06:12:92:02:E7:C2:85 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 3D5259FB19565245CD7D15EF93A42A4C801CCB58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 0542 Signing time: Wed 22 Oct 2025 14:31:45 +0000 Manifest this update: Wed 22 Oct 2025 14:26:45 +0000 Manifest next update: Sat 25 Oct 2025 15:55:45 +0000 Files and hashes: 1: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: NzMEm3c3sVacQZSWsj7eCdzP+65DR1/M0h04y+5YJYE=) 2: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=) 3: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: SHObZCSyQ759rOoQJ/JZR3beQgRHBAmiHG/b7NwBiWM=) 4: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: iGsP4VUogsadbwnWd/AM/1aXy+hpua+BCk1eWXzoRzA=) 5: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=) 6: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: jzYSflbMwJIU7OJmfhxLLNRmLBX8xfDaE+EvcpXWcPM=) 7: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: C1WvxvbH5IPUep7eQYoHGhXLqRMtWOqOKZMr05i/OjU=) 8: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: uySOy+S8Xsy4H4ygVfn9FFZSJNP2ZKNqDsizB5B+qv8=) 9: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: gYdjbrllcxVsFjz+69ccDbd/xh/3XuSos0MpuObt62I=) 10: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=) 11: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: 42OUxulwbAB1CTRXrAGVc4itTg6RD7nCc12Z/wbxKk0=) 12: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=) 13: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: hL5DbCGJ7KbDineN9lz+VXSoC8lY3RNqM/bRAfQoTGQ=) 14: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=) 15: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: la3Lo26Aa17Lz+dfnwUc2WZ/Zq7gWX7qsfEvtWc9abY=) 16: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: 6WhqetXB0Qru1Hk4/GxM3BsbsVKsqVduKrzOxiby6RM=) 17: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: nCRffZlynF4CiEOh2iuotIMhJ1K47T3UdPYWHYFk4iY=) 18: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: 09wWxPVAnpsug3YZq5fezhFaG7QDA9T1Mjs7NiJLE+g=) 19: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA=) 20: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8=) 21: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=) 22: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: uYljhWPFI38b1Nx1UtlQJyqp8X7WWWNXDKkB58nW4HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 13:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:52:59:fb:19:56:52:45:cd:7d:15:ef:93:a4:2a:4c:80:1c:cb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Oct 22 14:26:45 2025 GMT Not After : Oct 25 15:55:45 2025 GMT Subject: CN=A7E345CE06B3A51F2CA641B05306129202E7C285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3a:d2:21:6e:eb:be:17:54:68:75:44:62:db: 6e:92:ca:db:36:81:15:e1:9a:19:d8:3c:77:90:50: ca:93:8b:0e:e2:07:87:74:e1:73:58:48:c8:b3:fb: cd:73:5c:d9:a2:e6:42:bd:29:29:5e:83:a7:de:d0: 45:ac:09:b3:e4:e0:1a:0c:e0:22:df:9e:81:d6:a4: 8c:93:da:d5:ae:0d:63:13:58:e7:b1:8a:4f:26:79: 6c:1e:00:63:da:d2:19:ab:ab:f7:d5:6e:f8:2b:1c: 17:11:8a:89:5c:71:e5:7b:17:a7:73:85:3f:d7:6e: fd:cf:52:24:6c:73:76:e4:08:c0:9c:6c:ee:34:46: d9:06:f9:fd:d0:4a:f3:7a:08:8d:78:3d:73:4c:65: 1b:86:b8:3c:c4:44:ec:01:58:12:45:f7:ae:ec:ce: cd:7e:3b:d2:18:ea:cd:a4:82:ed:87:7f:41:e4:f9: ce:a9:d2:a6:ca:a0:74:5d:58:a3:bb:36:89:90:0b: 82:da:50:21:72:93:b6:99:9b:a7:fe:3e:58:af:8f: b3:97:b1:54:7a:eb:66:1c:a0:1f:f8:01:5e:bc:44: 50:04:83:4e:00:bf:ea:54:9f:2e:cc:f7:e3:20:73: b6:df:a2:31:9b:3e:1b:c0:23:23:b3:86:c6:50:b9: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:45:CE:06:B3:A5:1F:2C:A6:41:B0:53:06:12:92:02:E7:C2:85 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8f:c8:07:8d:3a:d5:7d:e2:84:0d:84:7f:6c:9c:a3:e0:e7: 31:96:c8:77:9c:4d:e1:e0:a6:f1:0d:b5:56:dc:c7:bd:ee:05: 7a:5b:11:0b:13:ba:fc:13:44:f8:f4:d8:b7:0e:c6:e8:ed:ff: 03:de:ad:da:ec:7e:4e:7c:14:14:e7:20:ff:00:d0:0b:14:83: 40:02:56:bd:7c:7f:3d:b7:4c:8d:ed:6c:b6:ba:59:c6:20:75: 93:f4:f2:b2:7f:92:71:dd:f7:fc:0b:ed:50:8a:47:02:61:a2: 7c:4e:9c:37:a4:e0:38:e0:52:9c:8e:8c:88:26:89:fc:87:a0: 1a:24:46:64:a6:98:18:12:ea:e6:3c:ef:10:72:63:63:2d:20: 6b:df:a0:b7:21:0f:61:ac:55:be:d8:b2:37:9d:7d:ab:12:ff: 9d:73:fe:fe:c1:59:a6:bc:52:33:ba:cb:e3:ea:fa:f3:66:59: 1c:0b:85:c0:38:49:d8:fb:10:c6:08:6b:47:01:d6:18:85:10: 17:91:0f:b4:cf:29:ea:7f:1d:d7:17:c9:19:b6:ae:9d:6f:c8: 14:9e:7d:3e:f1:94:fb:c7:b4:6b:4d:12:52:79:c0:e7:35:35: e9:75:1b:b6:a4:84:a3:26:e3:02:34:f0:6f:9b:5f:37:13:11: 3f:8b:fd:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVJZ+xlWUkXNfRXvk6QqTIAcy1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTEwMjIxNDI2NDVaFw0yNTEwMjUxNTU1NDVaMDMxMTAvBgNV BAMTKEE3RTM0NUNFMDZCM0E1MUYyQ0E2NDFCMDUzMDYxMjkyMDJFN0MyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOtIhbuu+F1RodURi226Syts2 gRXhmhnYPHeQUMqTiw7iB4d04XNYSMiz+81zXNmi5kK9KSleg6fe0EWsCbPk4BoM 4CLfnoHWpIyT2tWuDWMTWOexik8meWweAGPa0hmrq/fVbvgrHBcRiolcceV7F6dz hT/Xbv3PUiRsc3bkCMCcbO40RtkG+f3QSvN6CI14PXNMZRuGuDzEROwBWBJF967s zs1+O9IY6s2kgu2Hf0Hk+c6p0qbKoHRdWKO7NomQC4LaUCFyk7aZm6f+Plivj7OX sVR662YcoB/4AV68RFAEg04Av+pUny7M9+Mgc7bfojGbPhvAIyOzhsZQudK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+NFzgazpR8spkGwUwYSkgLnwoUwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKPyAeNOtV94oQNhH9snKPg5zGWyHecTeHg pvENtVbcx73uBXpbEQsTuvwTRPj02LcOxujt/wPerdrsfk58FBTnIP8A0AsUg0AC Vr18fz23TI3tbLa6WcYgdZP08rJ/knHd9/wL7VCKRwJhonxOnDek4DjgUpyOjIgm ifyHoBokRmSmmBgS6uY87xByY2MtIGvfoLchD2GsVb7YsjedfasS/51z/v7BWaa8 UjO6y+Pq+vNmWRwLhcA4Sdj7EMYIa0cB1hiFEBeRD7TPKep/HdcXyRm2rp1vyBSe fT7xlPvHtGtNElJ5wOc1Nel1G7akhKMm4wI08G+bXzcTET+L/cs= -----END CERTIFICATE-----Generated at Wed Oct 22 16:44:07 2025 by rpki-client