$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json) Hash identifier: Dw0EQ+yGMIrw3MhNcPw+lAKM0XIFrTS8JSCdzGLZkUQ= Subject key identifier: A0:B4:4A:54:35:1C:B0:62:84:02:89:E3:39:51:88:9B:FD:1E:FF:5A Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED Certificate issuer: /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Certificate serial: 2B716FF8EB3D5D1794E4A550A6D878D77127E5C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft Manifest number: 04F4 Signing time: Sun 20 Jul 2025 00:51:27 +0000 Manifest this update: Sun 20 Jul 2025 00:46:27 +0000 Manifest next update: Wed 23 Jul 2025 08:41:27 +0000 Files and hashes: 1: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=) 2: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: +LKBbBTxZfejrH0n6yxZTpzAQ0ctc1KNHYYJokKKnzg=) 3: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: F+4IfSlD8lQAjSK9lH7aqP/YtDTv0yy7ldfqliabL0k=) 4: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: C106cMZ7nVpbdEo6RtpPPocV8QkCM3iy9iSeYnPa1lI=) 5: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=) 6: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=) 7: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: 53tgdiqtdjNpYH/nxHiWdMfkZz/bYs/54zzLtN7gns8=) 8: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: Yz30CPTYH/dOzjwnz1TP6tkfawJNbjkHzYhNkLuWAMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:6f:f8:eb:3d:5d:17:94:e4:a5:50:a6:d8:78:d7:71:27:e5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Validity Not Before: Jul 20 00:46:27 2025 GMT Not After : Jul 23 08:41:27 2025 GMT Subject: CN=A0B44A54351CB062840289E33951889BFD1EFF5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:ac:37:d8:15:66:59:c9:39:8f:a1:61:5c: 9f:77:73:6e:54:1b:91:80:fb:c6:eb:54:a1:78:29: b4:5d:86:37:06:43:9f:53:60:6b:f2:47:a9:8a:25: e4:1c:a7:f7:78:47:72:3c:cd:7b:c6:ca:a8:9d:14: 36:3c:81:c1:b4:b2:54:c5:e4:0d:27:69:f3:55:a8: bb:0b:63:b1:71:88:6b:67:81:5b:a0:87:fe:bb:16: 4c:bc:ae:25:79:2e:c8:ec:f0:55:d3:3a:b7:58:55: 66:ba:d8:08:27:73:34:29:2c:ff:0a:45:a5:1c:41: f5:d2:6e:f4:2f:4a:7c:38:b5:19:da:29:00:f1:09: 22:d3:7c:a1:f1:8e:5c:ed:81:9b:c7:e0:c8:04:27: 65:c8:6f:29:ba:8a:05:37:f1:d0:6f:b4:ae:70:57: c5:e5:96:33:f5:f7:10:32:52:65:f0:df:37:48:bb: fb:bc:15:27:0b:72:a8:0a:e4:a9:85:ff:87:a7:30: 24:c3:7c:0c:12:3a:18:51:1f:67:8b:43:e4:5c:d6: df:ab:2b:ca:16:ea:4a:4a:e6:2a:a2:85:6d:e7:ef: 81:ca:9a:41:a2:4a:3c:e2:c4:f4:fa:95:3e:2b:2b: 92:7b:19:36:72:ca:4a:d0:2d:1c:01:fb:9e:22:ae: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B4:4A:54:35:1C:B0:62:84:02:89:E3:39:51:88:9B:FD:1E:FF:5A X509v3 Authority Key Identifier: keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8e:fd:54:d1:ea:0a:67:14:2c:53:5c:e0:63:e9:e0:7a:b8: 54:ca:26:37:62:3a:66:2c:29:d4:02:f8:a2:1d:f6:0c:e9:0f: bc:a4:88:3b:09:fe:7f:ba:95:4c:cb:da:1b:f2:1c:d1:90:b9: 2c:a0:ce:a1:04:98:37:74:c6:8b:51:fb:d6:2d:11:fd:df:9c: 2a:76:d1:f9:f6:a7:76:45:8c:7d:b6:18:23:20:eb:81:a7:90: 2c:5c:d1:83:6d:e2:d7:61:e7:bd:e4:01:5a:d6:3f:ab:94:86: f0:bd:2e:b7:19:97:41:6a:70:ff:d6:f3:b3:26:99:4b:30:4a: 02:6f:97:a4:d4:eb:f5:08:f0:1f:33:d1:8c:80:ef:58:ad:2d: 9c:09:9d:f3:a1:4b:f4:7e:2c:87:e6:ac:b2:24:fd:10:bb:70: d4:db:e8:01:75:b2:ab:0f:24:de:68:2e:08:c3:57:4c:35:fd: 10:93:64:47:ef:fc:e6:15:6d:36:08:b6:df:e3:88:4a:cf:1f: 4e:e9:7d:94:24:56:39:3d:5c:9c:4c:e2:0f:85:b5:61:33:2e: b9:28:a3:98:a7:32:17:79:59:b3:04:39:7a:ab:b0:ce:8b:89: ea:8b:1b:15:9b:db:41:e3:dd:75:2f:73:9a:31:2a:67:e8:0b: 27:14:71:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3Fv+Os9XReU5KVQpth413En5cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw QzM0QkVFRDAeFw0yNTA3MjAwMDQ2MjdaFw0yNTA3MjMwODQxMjdaMDMxMTAvBgNV BAMTKEEwQjQ0QTU0MzUxQ0IwNjI4NDAyODlFMzM5NTE4ODlCRkQxRUZGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOaw32BVmWck5j6FhXJ93c25U G5GA+8brVKF4KbRdhjcGQ59TYGvyR6mKJeQcp/d4R3I8zXvGyqidFDY8gcG0slTF 5A0nafNVqLsLY7FxiGtngVugh/67Fky8riV5Lsjs8FXTOrdYVWa62AgnczQpLP8K RaUcQfXSbvQvSnw4tRnaKQDxCSLTfKHxjlztgZvH4MgEJ2XIbym6igU38dBvtK5w V8XlljP19xAyUmXw3zdIu/u8FScLcqgK5KmF/4enMCTDfAwSOhhRH2eLQ+Rc1t+r K8oW6kpK5iqihW3n74HKmkGiSjzixPT6lT4rK5J7GTZyykrQLRwB+54irgufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLRKVDUcsGKEAonjOVGIm/0e/1owHwYDVR0j BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5 Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0 QkVFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0NTAwMzItNTQ5Mi00YTVhLTk0 M2YtYmRiNDczMzQxMjMzLzAvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFF MzQwQzM0QkVFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKO/VTR6gpnFCxTXOBj6eB6uFTKJjdiOmYs KdQC+KId9gzpD7ykiDsJ/n+6lUzL2hvyHNGQuSygzqEEmDd0xotR+9YtEf3fnCp2 0fn2p3ZFjH22GCMg64GnkCxc0YNt4tdh573kAVrWP6uUhvC9LrcZl0FqcP/W87Mm mUswSgJvl6TU6/UI8B8z0YyA71itLZwJnfOhS/R+LIfmrLIk/RC7cNTb6AF1sqsP JN5oLgjDV0w1/RCTZEfv/OYVbTYItt/jiErPH07pfZQkVjk9XJxM4g+FtWEzLrko o5inMhd5WbMEOXqrsM6LieqLGxWb20Hj3XUvc5oxKmfoCycUcVY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:49:04 2025 by rpki-client