$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: 1Gu6hvb/+Jru139XksQ+KyieyeNjFoGRibCiMKiUYAo= Subject key identifier: B4:49:79:2C:D6:E9:06:A8:B6:7F:B4:5D:B7:A4:D0:88:8A:98:35:6D Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 712A5F4B00F0265F8F0F6096772DAE70765DA43F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 052D Signing time: Fri 05 Sep 2025 01:01:46 +0000 Manifest this update: Fri 05 Sep 2025 00:56:46 +0000 Manifest next update: Mon 08 Sep 2025 01:40:46 +0000 Files and hashes: 1: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: NzMEm3c3sVacQZSWsj7eCdzP+65DR1/M0h04y+5YJYE=) 2: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: SHObZCSyQ759rOoQJ/JZR3beQgRHBAmiHG/b7NwBiWM=) 3: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: la3Lo26Aa17Lz+dfnwUc2WZ/Zq7gWX7qsfEvtWc9abY=) 4: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: uYljhWPFI38b1Nx1UtlQJyqp8X7WWWNXDKkB58nW4HI=) 5: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=) 6: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=) 7: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=) 8: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=) 9: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: nCRffZlynF4CiEOh2iuotIMhJ1K47T3UdPYWHYFk4iY=) 10: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: 6WhqetXB0Qru1Hk4/GxM3BsbsVKsqVduKrzOxiby6RM=) 11: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: uySOy+S8Xsy4H4ygVfn9FFZSJNP2ZKNqDsizB5B+qv8=) 12: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=) 13: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: 42OUxulwbAB1CTRXrAGVc4itTg6RD7nCc12Z/wbxKk0=) 14: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: jzYSflbMwJIU7OJmfhxLLNRmLBX8xfDaE+EvcpXWcPM=) 15: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: 09wWxPVAnpsug3YZq5fezhFaG7QDA9T1Mjs7NiJLE+g=) 16: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8=) 17: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: gYdjbrllcxVsFjz+69ccDbd/xh/3XuSos0MpuObt62I=) 18: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: C1WvxvbH5IPUep7eQYoHGhXLqRMtWOqOKZMr05i/OjU=) 19: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: 4NvTNWG/M+F9wxey591qASGH1d72AFnruGMvs+fEAfI=) 20: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA=) 21: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: iGsP4VUogsadbwnWd/AM/1aXy+hpua+BCk1eWXzoRzA=) 22: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2a:5f:4b:00:f0:26:5f:8f:0f:60:96:77:2d:ae:70:76:5d:a4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Sep 5 00:56:46 2025 GMT Not After : Sep 8 01:40:46 2025 GMT Subject: CN=B449792CD6E906A8B67FB45DB7A4D0888A98356D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:1f:98:ce:5e:f1:11:57:7b:65:3a:36:9d: ef:a1:ae:1c:26:4c:d0:d3:ee:3d:cd:7d:e8:be:81: f3:ae:6b:e0:76:ac:69:06:af:23:54:37:29:78:bb: f0:d4:c2:0f:98:a6:c2:c3:46:1f:2f:98:91:87:92: 2a:0b:7f:69:35:80:33:82:53:87:fc:45:f4:37:7e: fe:1e:88:96:00:81:08:e2:6c:83:e1:b6:d0:63:87: 2e:17:19:ca:f9:a8:5a:47:5f:59:80:5b:ef:17:52: 60:a2:ed:87:e2:e5:94:ef:9e:13:b5:70:5d:78:90: b2:69:78:de:7b:05:80:d3:65:8a:6c:0c:97:51:7c: b2:b8:b8:77:b4:a1:82:5b:ec:0e:f2:4a:33:b1:f7: 28:49:48:10:07:73:c1:12:fe:99:a4:62:09:d7:0b: 86:cf:54:57:3a:6c:f2:5e:7c:79:7a:af:36:01:d3: 5b:c0:d0:77:61:24:8e:bb:9d:e6:b1:ea:3b:6e:b0: 8e:a2:dd:6b:a7:80:43:96:41:8a:c9:73:e0:a8:04: 5c:a8:79:c6:4d:1a:f7:a5:7a:79:70:09:1d:99:90: 44:be:43:e0:dd:12:5a:8a:b1:b1:59:c2:e4:bd:45: c5:f4:7d:a8:11:8d:a5:ec:6b:73:7c:ce:e8:14:0a: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:49:79:2C:D6:E9:06:A8:B6:7F:B4:5D:B7:A4:D0:88:8A:98:35:6D X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:30:83:a7:29:06:89:f4:d3:b2:52:d3:dc:31:f2:b5:1c:da: 49:16:a2:7f:a5:48:41:b7:ce:67:90:c9:50:6a:21:86:9f:f0: 29:a1:f2:3a:e0:4c:cb:4c:a9:c4:03:e9:80:95:38:7d:15:f8: 1d:59:5f:6a:4a:14:ce:3f:3b:31:bf:c0:a6:7c:a3:08:65:db: 0c:3e:f1:32:f6:33:da:c6:ab:27:c2:8a:58:73:e2:39:57:ae: 9f:59:e3:e4:c0:89:1f:36:e8:6c:1c:a6:f2:9a:fd:e7:77:60: 13:1a:9b:c7:8f:3a:dd:51:fb:ca:5f:86:94:42:de:40:06:c9: a1:12:51:98:cc:6e:27:c0:3f:90:b2:e4:12:1f:ec:2f:0e:a3: 72:c7:42:9c:80:99:70:eb:af:a3:8a:37:d8:14:37:72:6a:8c: 51:26:ad:17:c9:2f:0f:f8:0e:82:ae:b3:7c:83:2e:8c:5e:19: cf:2b:ef:20:4b:fd:eb:e5:09:5d:85:23:8d:ef:5c:57:71:09: e6:5a:6c:c0:ad:ac:13:dd:43:81:71:21:30:df:7a:1e:4e:f0: c7:29:7c:f2:57:46:61:6b:10:59:c7:63:72:07:36:97:2d:d6: 96:4e:9d:b8:d1:ef:e9:7c:9c:2d:ee:6f:cd:ba:a0:63:7e:f7: a7:b8:87:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcSpfSwDwJl+PD2CWdy2ucHZdpD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTA5MDUwMDU2NDZaFw0yNTA5MDgwMTQwNDZaMDMxMTAvBgNV BAMTKEI0NDk3OTJDRDZFOTA2QThCNjdGQjQ1REI3QTREMDg4OEE5ODM1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNpx+Yzl7xEVd7ZTo2ne+hrhwm TNDT7j3Nfei+gfOua+B2rGkGryNUNyl4u/DUwg+YpsLDRh8vmJGHkioLf2k1gDOC U4f8RfQ3fv4eiJYAgQjibIPhttBjhy4XGcr5qFpHX1mAW+8XUmCi7Yfi5ZTvnhO1 cF14kLJpeN57BYDTZYpsDJdRfLK4uHe0oYJb7A7ySjOx9yhJSBAHc8ES/pmkYgnX C4bPVFc6bPJefHl6rzYB01vA0HdhJI67neax6jtusI6i3WungEOWQYrJc+CoBFyo ecZNGvelenlwCR2ZkES+Q+DdElqKsbFZwuS9RcX0fagRjaXsa3N8zugUCrSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtEl5LNbpBqi2f7Rdt6TQiIqYNW0wHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4wg6cpBon007JS09wx8rUc2kkWon+lSEG3 zmeQyVBqIYaf8Cmh8jrgTMtMqcQD6YCVOH0V+B1ZX2pKFM4/OzG/wKZ8owhl2ww+ 8TL2M9rGqyfCilhz4jlXrp9Z4+TAiR826GwcpvKa/ed3YBMam8ePOt1R+8pfhpRC 3kAGyaESUZjMbifAP5Cy5BIf7C8Oo3LHQpyAmXDrr6OKN9gUN3JqjFEmrRfJLw/4 DoKus3yDLoxeGc8r7yBL/evlCV2FI43vXFdxCeZabMCtrBPdQ4FxITDfeh5O8Mcp fPJXRmFrEFnHY3IHNpct1pZOnbjR7+l8nC3ub826oGN+96e4h5M= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:21 2025 by rpki-client