$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: azVycmCD0OI2x7C36EwdyxBWiSB4qU3h5/3QBoVzR2U= Subject key identifier: C6:16:FF:59:C6:DC:56:22:FC:2C:32:47:D4:16:F3:65:7F:C2:76:A1 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 0D6D5091D47CE1FDF237149DF1629429E4C2284E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 0503 Signing time: Mon 16 Jun 2025 01:51:46 +0000 Manifest this update: Mon 16 Jun 2025 01:46:46 +0000 Manifest next update: Thu 19 Jun 2025 07:55:46 +0000 Files and hashes: 1: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HAoFxdygcRJ4Y8uy9Ks9W9Gj/PwyoONosucd1x3NYoo=) 2: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=) 3: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: b3ac6PG5cjEJyjFezeRR/8aTStRyy4HUf4mT3mQu7a0=) 4: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: nun7wr5qUW6SSsLL/8m4wIYLtJbVijMvNYm3I5L5gwY=) 5: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: ozMMj1PLYt9P59zXxht5YENq9xxiksZRJWyynQGPWwo=) 6: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: mwYMKgumoG9KUXW9CmbB5xkKPC0iVTbXFYBRWL88eZY=) 7: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=) 8: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: fYkaRaqMdzeCnlFj0QC4k70wJ41vV5h8EX1emupb1Ew=) 9: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: bWRExWZZIgQwRxIP86bPE6hDOmLbrhGh8hJvUz7o6EE=) 10: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=) 11: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: dASDC6A8QkcoKOTRQ/CvgSqJWSyAkaKqOmqilKOQ97g=) 12: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: unueG7P54wUmQZvOUKrhpSAH4gB/UymG78WRnuwkjpw=) 13: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 9FaMWUxx6cNM5vz7M9YrzpMwj5RS9BmzIfAf19UCzPI=) 14: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 9SIW/5w9M/SmmmzkXzv4Bp8jIuxjcuDE9nLrxJeaY/8=) 15: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: vhMXT0X2yZyfjqh1If/jDIC06hgxnPfiOfL606K6iKk=) 16: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: jHen1vZLG/DOZwqIeHYY98aBHq6SMyx6T3vs559h5rI=) 17: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: twCP3bQtXm7fHopGhk9qw+BKzDavhDYNdBsRfz7JGKg=) 18: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: So5G4uHqVHWD5JnkptSS1bHWAe/cdyDOQettCO6GGiU=) 19: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: plFUYvoZx+Zhhi7/vKanQppp3zTRIZoJyKujyLUaQfM=) 20: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: +7ThYpBxJ7cY58NoufQvfB+mtjUp0Rdkq8BnlAc4bZ4=) 21: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: LqxreuPQRi/RPY9pSW+yNL/verqLyl3p0dMRTLmH8hk=) 22: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: hplPEY83KbXLKF8mvbTVWHeph6nkNRI9I2QkUrjdTPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6d:50:91:d4:7c:e1:fd:f2:37:14:9d:f1:62:94:29:e4:c2:28:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Jun 16 01:46:46 2025 GMT Not After : Jun 19 07:55:46 2025 GMT Subject: CN=C616FF59C6DC5622FC2C3247D416F3657FC276A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ca:aa:0c:25:6d:a8:39:31:fe:73:53:a6:e8: af:94:95:15:3d:2b:89:77:be:01:e7:1a:68:1d:25: 7f:47:e4:9f:ff:38:89:5b:29:c9:3c:20:50:8a:36: 0d:7c:6c:c0:08:b4:c1:f9:60:5d:c5:2e:69:03:4d: 4e:73:79:f0:66:ea:26:bc:57:6a:40:77:16:23:30: 15:08:ee:ab:3a:da:9b:d7:b3:57:97:c5:6c:8e:ef: db:dc:3b:eb:bc:93:84:6a:d6:ad:6e:9e:dc:f5:26: ef:1b:17:b3:50:35:57:76:c9:c5:7a:eb:9b:c6:c6: 70:1b:d6:ab:8b:60:47:b4:d9:cf:12:f4:95:85:6e: 10:4a:77:6d:d8:aa:76:cc:3f:0d:52:b8:0e:f1:dc: a7:c1:c2:fd:f7:09:2f:be:fb:fa:e6:60:da:c6:10: 0a:88:ff:49:5f:2b:d8:5e:17:aa:19:92:d3:d7:81: 33:4b:d7:15:74:00:c1:e2:32:1b:1a:18:f1:a0:e7: c1:68:31:a3:87:cd:60:de:94:3c:11:b3:f6:51:22: 5d:53:61:0c:bd:fb:81:8e:0e:91:78:09:27:71:1b: b0:14:02:48:90:a6:01:bd:2a:d9:5b:07:b8:0d:dc: be:85:b4:8f:b8:bf:3a:44:e7:09:07:b5:85:96:d1: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:16:FF:59:C6:DC:56:22:FC:2C:32:47:D4:16:F3:65:7F:C2:76:A1 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1b:41:0f:b6:05:1a:aa:b5:aa:a0:f3:39:b9:10:fd:35:f0: a1:4a:a3:56:6d:3d:aa:42:23:31:7c:87:93:2c:3f:4c:a8:ba: 2e:47:57:3c:93:b1:13:4d:79:0f:6e:cc:d0:d7:28:01:a8:91: 96:43:ad:23:a8:d8:c8:b7:bd:fa:b5:32:70:2f:9e:f6:86:03: f4:37:fa:45:fb:61:a6:66:e7:8f:6a:b6:68:e1:e4:0d:85:22: aa:14:11:4c:8f:e6:48:15:04:36:2e:d5:7d:c4:41:ed:60:9c: ad:9d:00:a9:09:65:8b:dc:16:23:fa:1a:15:07:5a:09:c5:2b: 83:a6:c3:02:79:f9:54:c1:15:44:6d:fa:4b:ec:6a:f3:9e:b2: 6f:55:af:45:ce:2f:31:5d:6c:1c:2f:ee:27:fe:cf:74:58:36: d9:55:96:1e:cf:1e:04:e5:9e:02:dd:0f:91:59:9b:7e:13:f3: ff:d4:f7:0c:5a:39:dc:ec:1a:a3:1f:9e:9f:ae:6e:47:6c:62: 2a:ed:ac:56:e8:11:76:11:af:51:27:f9:93:bd:8f:43:e0:d1: cb:3a:6a:c7:50:4c:65:38:c6:92:a7:81:ee:21:f7:e2:ad:23: 78:49:0d:c8:43:1d:67:72:0e:4f:04:bf:b4:4a:d2:6e:c7:dd: 6d:95:d1:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDW1QkdR84f3yNxSd8WKUKeTCKE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTA2MTYwMTQ2NDZaFw0yNTA2MTkwNzU1NDZaMDMxMTAvBgNV BAMTKEM2MTZGRjU5QzZEQzU2MjJGQzJDMzI0N0Q0MTZGMzY1N0ZDMjc2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgyqoMJW2oOTH+c1Om6K+UlRU9 K4l3vgHnGmgdJX9H5J//OIlbKck8IFCKNg18bMAItMH5YF3FLmkDTU5zefBm6ia8 V2pAdxYjMBUI7qs62pvXs1eXxWyO79vcO+u8k4Rq1q1untz1Ju8bF7NQNVd2ycV6 65vGxnAb1quLYEe02c8S9JWFbhBKd23YqnbMPw1SuA7x3KfBwv33CS+++/rmYNrG EAqI/0lfK9heF6oZktPXgTNL1xV0AMHiMhsaGPGg58FoMaOHzWDelDwRs/ZRIl1T YQy9+4GODpF4CSdxG7AUAkiQpgG9KtlbB7gN3L6FtI+4vzpE5wkHtYWW0ZeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxhb/WcbcViL8LDJH1BbzZX/CdqEwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4bQQ+2BRqqtaqg8zm5EP018KFKo1ZtPapC IzF8h5MsP0youi5HVzyTsRNNeQ9uzNDXKAGokZZDrSOo2Mi3vfq1MnAvnvaGA/Q3 +kX7YaZm549qtmjh5A2FIqoUEUyP5kgVBDYu1X3EQe1gnK2dAKkJZYvcFiP6GhUH WgnFK4OmwwJ5+VTBFURt+kvsavOesm9Vr0XOLzFdbBwv7if+z3RYNtlVlh7PHgTl ngLdD5FZm34T8//U9wxaOdzsGqMfnp+ubkdsYirtrFboEXYRr1En+ZO9j0Pg0cs6 asdQTGU4xpKnge4h9+KtI3hJDchDHWdyDk8Ev7RK0m7H3W2V0dI= -----END CERTIFICATE-----Generated at Mon Jun 16 03:18:45 2025 by rpki-client