$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: 943orVynN8XKDsXI/mq7c8veOhjKc9qAufvQ8rA1cuU= Subject key identifier: A5:51:A1:68:EA:72:48:7A:6E:BF:C6:E3:00:55:84:32:9E:80:12:15 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 675361D091C91FC18F17AF38787A56BC4E0A2796 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 04E8 Signing time: Mon 14 Apr 2025 22:51:44 +0000 Manifest this update: Mon 14 Apr 2025 22:46:44 +0000 Manifest next update: Fri 18 Apr 2025 10:22:44 +0000 Files and hashes: 1: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: OBXqvO28chFiIaqWO0hGI78brPXkhQO3w7XZMMdS5Zk=) 2: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: ozMMj1PLYt9P59zXxht5YENq9xxiksZRJWyynQGPWwo=) 3: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: plFUYvoZx+Zhhi7/vKanQppp3zTRIZoJyKujyLUaQfM=) 4: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: dASDC6A8QkcoKOTRQ/CvgSqJWSyAkaKqOmqilKOQ97g=) 5: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: +7ThYpBxJ7cY58NoufQvfB+mtjUp0Rdkq8BnlAc4bZ4=) 6: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=) 7: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HAoFxdygcRJ4Y8uy9Ks9W9Gj/PwyoONosucd1x3NYoo=) 8: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=) 9: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: twCP3bQtXm7fHopGhk9qw+BKzDavhDYNdBsRfz7JGKg=) 10: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: bWRExWZZIgQwRxIP86bPE6hDOmLbrhGh8hJvUz7o6EE=) 11: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 9FaMWUxx6cNM5vz7M9YrzpMwj5RS9BmzIfAf19UCzPI=) 12: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 9SIW/5w9M/SmmmzkXzv4Bp8jIuxjcuDE9nLrxJeaY/8=) 13: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: vhMXT0X2yZyfjqh1If/jDIC06hgxnPfiOfL606K6iKk=) 14: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: So5G4uHqVHWD5JnkptSS1bHWAe/cdyDOQettCO6GGiU=) 15: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: fYkaRaqMdzeCnlFj0QC4k70wJ41vV5h8EX1emupb1Ew=) 16: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: jHen1vZLG/DOZwqIeHYY98aBHq6SMyx6T3vs559h5rI=) 17: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: unueG7P54wUmQZvOUKrhpSAH4gB/UymG78WRnuwkjpw=) 18: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=) 19: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: nun7wr5qUW6SSsLL/8m4wIYLtJbVijMvNYm3I5L5gwY=) 20: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: hplPEY83KbXLKF8mvbTVWHeph6nkNRI9I2QkUrjdTPg=) 21: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: LqxreuPQRi/RPY9pSW+yNL/verqLyl3p0dMRTLmH8hk=) 22: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: mwYMKgumoG9KUXW9CmbB5xkKPC0iVTbXFYBRWL88eZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 10:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:53:61:d0:91:c9:1f:c1:8f:17:af:38:78:7a:56:bc:4e:0a:27:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Apr 14 22:46:44 2025 GMT Not After : Apr 18 10:22:44 2025 GMT Subject: CN=A551A168EA72487A6EBFC6E3005584329E801215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:f9:79:de:4f:91:57:55:96:ec:49:c4:59: 51:32:8a:ab:68:c1:4e:ef:2c:7d:0a:3d:39:1e:d3: dd:35:53:7d:bc:ae:a4:c9:7b:69:eb:40:64:38:dd: 87:10:37:06:bd:fd:eb:8a:9d:38:07:3b:98:99:bb: a6:ce:c4:79:d0:b1:53:9b:c5:45:ae:25:58:98:7c: 5e:2e:2f:f9:fa:de:81:4d:12:01:06:5b:38:5a:85: fb:69:72:b6:a0:a3:dd:6e:5c:cd:61:d1:19:f4:fa: 9e:50:22:ce:e0:19:34:05:a4:0c:0f:f6:2b:5e:b3: 04:f7:0b:39:c7:a5:a9:3d:35:ef:96:0a:2c:a2:84: 8d:f3:c1:c7:bb:17:b5:6a:7a:de:ce:ec:48:63:f3: a6:c9:a7:29:2c:a5:73:c1:cd:21:f2:36:5d:21:b1: 6a:28:e9:c2:2d:18:5b:ed:97:d0:46:dc:17:e5:3b: ef:f1:e2:18:55:3a:16:9b:f3:81:10:59:8c:0d:58: 39:5c:6d:0d:90:11:cd:a4:89:41:d5:27:d7:b7:ba: d1:e0:01:9c:00:4e:2e:17:b9:2c:ed:e5:3f:49:eb: 22:04:07:57:04:0a:c7:63:df:fc:fb:f1:84:d8:e5: 97:34:4e:4b:9e:d6:26:c3:0d:4d:82:8b:c8:fd:26: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:51:A1:68:EA:72:48:7A:6E:BF:C6:E3:00:55:84:32:9E:80:12:15 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7e:6e:8e:7f:1a:20:b8:3a:70:17:a9:c2:4d:37:ff:aa:0e: 12:ff:06:7c:b9:d8:d1:c9:34:2b:32:fe:18:6e:1a:9d:ea:c9: 17:73:05:5f:b1:11:25:11:3f:17:a7:b9:c0:e1:bd:8b:01:38: 64:89:d6:7e:c5:d0:f8:0b:b8:9f:96:01:ed:48:f0:33:d1:12: 13:4b:a9:b7:1c:ba:62:9d:1e:35:11:a4:48:93:c4:2a:aa:23: 03:2f:91:b2:fb:8f:25:a5:12:2b:92:80:cf:5a:9f:f6:d4:6d: c0:be:40:7a:f2:c6:5a:a0:3a:fa:98:f6:e8:5f:b3:6e:25:3f: fc:45:0b:29:e5:17:05:91:bd:2a:76:4b:42:86:74:26:20:91: 66:e2:c5:ad:7d:41:0b:d1:2d:fe:dd:f5:f3:fa:e3:18:27:23: d7:b5:65:96:60:ee:54:61:ea:0c:b2:a6:c5:0e:bc:fe:e9:57: 03:df:f2:32:9f:24:cb:1d:6d:f2:c4:d7:2a:6f:12:58:f4:3d: 11:32:ec:9d:0a:bb:a8:53:3a:c6:a5:eb:58:96:e9:ee:72:21: 5c:8f:70:b0:e3:ba:0a:4d:cb:70:44:03:12:18:db:45:75:47: ce:9f:fe:b7:e4:5b:14:24:bc:7f:a2:07:09:8f:fd:21:28:63: 7b:57:98:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1Nh0JHJH8GPF684eHpWvE4KJ5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTA0MTQyMjQ2NDRaFw0yNTA0MTgxMDIyNDRaMDMxMTAvBgNV BAMTKEE1NTFBMTY4RUE3MjQ4N0E2RUJGQzZFMzAwNTU4NDMyOUU4MDEyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmX/l53k+RV1WW7EnEWVEyiqto wU7vLH0KPTke0901U328rqTJe2nrQGQ43YcQNwa9/euKnTgHO5iZu6bOxHnQsVOb xUWuJViYfF4uL/n63oFNEgEGWzhahftpcrago91uXM1h0Rn0+p5QIs7gGTQFpAwP 9iteswT3CznHpak9Ne+WCiyihI3zwce7F7Vqet7O7Ehj86bJpykspXPBzSHyNl0h sWoo6cItGFvtl9BG3BflO+/x4hhVOhab84EQWYwNWDlcbQ2QEc2kiUHVJ9e3utHg AZwATi4XuSzt5T9J6yIEB1cECsdj3/z78YTY5Zc0Tkue1ibDDU2Ci8j9JuJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpVGhaOpySHpuv8bjAFWEMp6AEhUwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB+bo5/GiC4OnAXqcJNN/+qDhL/Bny52NHJ NCsy/hhuGp3qyRdzBV+xESURPxenucDhvYsBOGSJ1n7F0PgLuJ+WAe1I8DPREhNL qbccumKdHjURpEiTxCqqIwMvkbL7jyWlEiuSgM9an/bUbcC+QHryxlqgOvqY9uhf s24lP/xFCynlFwWRvSp2S0KGdCYgkWbixa19QQvRLf7d9fP64xgnI9e1ZZZg7lRh 6gyypsUOvP7pVwPf8jKfJMsdbfLE1ypvElj0PREy7J0Ku6hTOsal61iW6e5yIVyP cLDjugpNy3BEAxIY20V1R86f/rfkWxQkvH+iBwmP/SEoY3tXmDc= -----END CERTIFICATE-----Generated at Wed Apr 16 19:22:09 2025 by rpki-client