$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: cz03iEJZXt/Ymzao01qpao/JHgtWZY5APuGIRjna8Dw= Subject key identifier: 36:45:1D:DE:7D:BA:AF:6E:46:F4:7D:4A:83:1F:46:18:FD:97:60:AD Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 6DCCCB455B32B5B7A80E56C27F9DE4511CF08CE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 04FD Signing time: Mon 02 Jun 2025 05:21:46 +0000 Manifest this update: Mon 02 Jun 2025 05:16:46 +0000 Manifest next update: Thu 05 Jun 2025 08:57:46 +0000 Files and hashes: 1: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: bWRExWZZIgQwRxIP86bPE6hDOmLbrhGh8hJvUz7o6EE=) 2: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: ozMMj1PLYt9P59zXxht5YENq9xxiksZRJWyynQGPWwo=) 3: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: twCP3bQtXm7fHopGhk9qw+BKzDavhDYNdBsRfz7JGKg=) 4: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=) 5: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: +7ThYpBxJ7cY58NoufQvfB+mtjUp0Rdkq8BnlAc4bZ4=) 6: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: vhMXT0X2yZyfjqh1If/jDIC06hgxnPfiOfL606K6iKk=) 7: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: dASDC6A8QkcoKOTRQ/CvgSqJWSyAkaKqOmqilKOQ97g=) 8: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=) 9: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HAoFxdygcRJ4Y8uy9Ks9W9Gj/PwyoONosucd1x3NYoo=) 10: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: LqxreuPQRi/RPY9pSW+yNL/verqLyl3p0dMRTLmH8hk=) 11: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: unueG7P54wUmQZvOUKrhpSAH4gB/UymG78WRnuwkjpw=) 12: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=) 13: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: So5G4uHqVHWD5JnkptSS1bHWAe/cdyDOQettCO6GGiU=) 14: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: hplPEY83KbXLKF8mvbTVWHeph6nkNRI9I2QkUrjdTPg=) 15: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: nun7wr5qUW6SSsLL/8m4wIYLtJbVijMvNYm3I5L5gwY=) 16: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 9SIW/5w9M/SmmmzkXzv4Bp8jIuxjcuDE9nLrxJeaY/8=) 17: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: plFUYvoZx+Zhhi7/vKanQppp3zTRIZoJyKujyLUaQfM=) 18: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: W/h36Q2E5PrTvzcH5FOwcMGejr9EJ8iRfqUHDxfGPYU=) 19: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: mwYMKgumoG9KUXW9CmbB5xkKPC0iVTbXFYBRWL88eZY=) 20: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: jHen1vZLG/DOZwqIeHYY98aBHq6SMyx6T3vs559h5rI=) 21: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 9FaMWUxx6cNM5vz7M9YrzpMwj5RS9BmzIfAf19UCzPI=) 22: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: fYkaRaqMdzeCnlFj0QC4k70wJ41vV5h8EX1emupb1Ew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cc:cb:45:5b:32:b5:b7:a8:0e:56:c2:7f:9d:e4:51:1c:f0:8c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Jun 2 05:16:46 2025 GMT Not After : Jun 5 08:57:46 2025 GMT Subject: CN=36451DDE7DBAAF6E46F47D4A831F4618FD9760AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:72:39:3d:5d:dd:36:f0:7d:97:57:66:c0:3c: 63:90:a0:d5:a9:7d:d1:e1:05:a1:7a:e1:23:2c:b2: 9d:87:b2:06:11:f5:5a:85:4f:28:d5:26:07:7c:2b: 3e:c9:2f:36:48:33:6f:ff:7e:19:04:69:eb:18:f0: 55:b2:14:08:77:04:a6:f0:ab:a3:c0:9c:2d:19:34: 26:3b:08:9a:72:78:c8:d0:a5:20:ab:a5:21:88:db: 7e:6d:19:b5:49:4e:dc:68:37:f9:f9:b2:97:97:22: f6:f9:68:5b:1b:35:b3:ea:73:3f:a4:68:92:d1:77: 0e:92:03:72:36:55:60:c8:13:6e:3a:90:48:0b:26: b9:63:fd:2c:06:0b:b1:87:69:eb:f5:31:bf:f3:05: 0d:75:22:8a:4f:6d:52:11:11:12:b7:01:e1:59:4f: d4:f5:62:9a:36:68:2b:8f:7a:f2:5b:a4:41:41:20: 41:71:61:70:2c:1a:63:7f:f3:ee:72:cb:a7:73:7a: 8f:95:f2:3b:5d:27:93:02:9b:68:78:b0:6b:30:07: 46:72:7a:f7:e6:6d:4e:90:7b:a6:09:65:56:09:53: ea:e1:d9:6e:b5:c6:fa:36:93:4f:15:b6:de:00:0a: 0a:9a:33:61:c5:1d:8c:82:c8:03:c2:34:5c:d3:49: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:1D:DE:7D:BA:AF:6E:46:F4:7D:4A:83:1F:46:18:FD:97:60:AD X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ae:ef:32:b2:0f:c2:04:e2:10:f2:d4:41:3f:a3:f9:93:d3: f3:24:29:df:4e:70:98:b8:f7:33:fa:0d:7c:d5:1a:b3:53:14: c8:22:65:a8:ec:42:65:2d:78:35:79:99:27:b1:dc:0c:7d:84: 09:c3:6d:6f:83:a6:d9:a7:32:f7:df:53:b8:7f:b8:f8:0b:67: 10:da:86:2b:2a:85:4d:b9:45:16:a5:6a:77:75:7c:c9:bb:d9: f6:44:b4:11:86:9d:b3:a7:d2:b2:b3:ef:78:3d:42:45:51:16: a4:74:5b:ea:d4:e8:1d:46:72:46:f0:0a:a0:54:37:2d:af:4b: 35:d2:46:85:44:a7:f3:b6:ed:3e:ba:03:f2:fd:0d:6e:52:aa: d2:06:f1:7d:62:87:5f:70:c0:3d:48:62:a7:ea:e1:0a:4f:3d: 21:55:6c:e2:d8:f6:38:cb:e5:ad:57:88:78:0f:0a:37:9c:6c: 73:81:02:32:b0:41:4a:97:46:9b:96:e8:d6:69:b6:31:ec:7b: 08:4e:45:10:bb:a7:fe:68:c3:af:b9:aa:6a:59:df:07:e9:72: ac:4b:10:01:7d:81:38:c4:e7:c9:d5:d3:5f:12:1e:36:02:ec: 30:07:7a:6c:5a:9d:a8:44:08:c9:71:f1:06:4c:94:5f:ed:45: 20:fc:69:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbczLRVsytbeoDlbCf53kURzwjOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTA2MDIwNTE2NDZaFw0yNTA2MDUwODU3NDZaMDMxMTAvBgNV BAMTKDM2NDUxRERFN0RCQUFGNkU0NkY0N0Q0QTgzMUY0NjE4RkQ5NzYwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxcjk9Xd028H2XV2bAPGOQoNWp fdHhBaF64SMssp2HsgYR9VqFTyjVJgd8Kz7JLzZIM2//fhkEaesY8FWyFAh3BKbw q6PAnC0ZNCY7CJpyeMjQpSCrpSGI235tGbVJTtxoN/n5speXIvb5aFsbNbPqcz+k aJLRdw6SA3I2VWDIE246kEgLJrlj/SwGC7GHaev1Mb/zBQ11IopPbVIRERK3AeFZ T9T1Ypo2aCuPevJbpEFBIEFxYXAsGmN/8+5yy6dzeo+V8jtdJ5MCm2h4sGswB0Zy evfmbU6Qe6YJZVYJU+rh2W61xvo2k08Vtt4ACgqaM2HFHYyCyAPCNFzTScv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNkUd3n26r25G9H1Kgx9GGP2XYK0wHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOu7zKyD8IE4hDy1EE/o/mT0/MkKd9OcJi4 9zP6DXzVGrNTFMgiZajsQmUteDV5mSex3Ax9hAnDbW+DptmnMvffU7h/uPgLZxDa hisqhU25RRaland1fMm72fZEtBGGnbOn0rKz73g9QkVRFqR0W+rU6B1GckbwCqBU Ny2vSzXSRoVEp/O27T66A/L9DW5SqtIG8X1ih19wwD1IYqfq4QpPPSFVbOLY9jjL 5a1XiHgPCjecbHOBAjKwQUqXRpuW6NZptjHsewhORRC7p/5ow6+5qmpZ3wfpcqxL EAF9gTjE58nV018SHjYC7DAHemxanahECMlx8QZMlF/tRSD8aUE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:52 2025 by rpki-client