$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json) Hash identifier: ybA3hnT7pw90RBKELGu23Sv89R29Vk6DEe+BPjseKqc= Subject key identifier: 56:22:7A:1A:34:D8:E1:F2:52:1B:D6:D8:88:70:97:BD:C3:54:5B:60 Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED Certificate issuer: /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Certificate serial: 5778E14387307DAF584A609A9BB946B01FE3AE90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft Manifest number: 04D0 Signing time: Tue 29 Apr 2025 14:42:20 +0000 Manifest this update: Tue 29 Apr 2025 14:37:20 +0000 Manifest next update: Fri 02 May 2025 22:49:20 +0000 Files and hashes: 1: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: 53tgdiqtdjNpYH/nxHiWdMfkZz/bYs/54zzLtN7gns8=) 2: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: FrhZIsA2EAriYUEHDAEqTDZdZdNHqsPml83KdFcpBMM=) 3: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: Elh39w1U+GBq3XiIsIcKakRKgH0ks1OQk6DpSiPwZ6E=) 4: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: +LKBbBTxZfejrH0n6yxZTpzAQ0ctc1KNHYYJokKKnzg=) 5: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: Yz30CPTYH/dOzjwnz1TP6tkfawJNbjkHzYhNkLuWAMM=) 6: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: Y7S/x1FB6DKsmHTOnZELmwFo9y/6LWedH5c3B/Vt+9k=) 7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: C106cMZ7nVpbdEo6RtpPPocV8QkCM3iy9iSeYnPa1lI=) 8: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 22:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:78:e1:43:87:30:7d:af:58:4a:60:9a:9b:b9:46:b0:1f:e3:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Validity Not Before: Apr 29 14:37:20 2025 GMT Not After : May 2 22:49:20 2025 GMT Subject: CN=56227A1A34D8E1F2521BD6D8887097BDC3545B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:8a:e6:c0:96:3c:45:22:e2:67:ef:01:16: 68:50:bf:6a:c9:0b:10:fe:c5:b6:22:39:26:65:ca: 08:20:a4:24:dd:a5:ab:9e:35:86:5f:64:17:c5:a4: 8f:58:82:16:56:87:a9:2a:ab:9b:87:99:37:35:26: a8:64:a1:70:4b:65:e5:cf:1a:2c:da:41:b2:90:a1: d2:72:1f:ff:77:6e:bb:64:4c:94:a5:02:59:ab:a2: 74:f5:a8:9b:c1:96:4a:d2:96:76:24:59:79:64:5d: 52:b1:8d:67:1f:4d:6d:0f:76:c6:c4:f9:ff:85:c7: 0a:71:4d:7c:42:c8:40:5d:17:52:86:1d:f7:32:f3: 35:c5:a3:2c:f0:08:dd:a0:c3:0c:06:27:02:85:15: ee:e9:09:a0:0a:df:78:d0:ce:88:47:d7:5a:3e:a2: 17:3a:ad:86:e0:ef:26:81:f7:56:80:69:46:86:67: 73:65:c2:a3:e0:5a:b6:c2:96:04:cb:51:94:60:cd: b2:84:b6:68:1b:2f:4a:6d:ca:6b:6d:21:90:b5:7e: 4f:dc:fa:20:c5:7e:df:9d:45:49:31:90:0d:39:21: 9e:41:1c:9c:4c:5b:ba:a2:f2:8e:ed:d8:59:15:7a: f4:d1:e6:67:56:67:26:4c:43:64:62:a9:20:eb:34: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:22:7A:1A:34:D8:E1:F2:52:1B:D6:D8:88:70:97:BD:C3:54:5B:60 X509v3 Authority Key Identifier: keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a9:9f:c4:a6:39:68:da:2f:48:92:6f:cf:28:b2:9e:db:44: 26:e6:fd:45:d5:f2:39:a4:48:46:9b:26:88:21:80:20:aa:ef: a9:ea:0f:2b:45:70:f6:a4:ff:25:d9:85:71:fc:3c:a2:2e:df: 46:f5:5b:3a:49:04:64:63:c7:09:3d:08:84:c8:9c:54:d0:a0: 78:c6:ed:09:64:d3:3d:25:20:9e:28:2e:7d:d8:10:7a:db:3d: 0e:cc:c7:ae:7d:e6:6e:dd:bf:18:34:e9:e9:6a:b8:d8:15:c2: 08:4a:c6:02:d5:b1:b7:84:37:b7:fc:b5:60:d3:2d:a5:24:b0: d6:71:a9:8e:29:2f:ee:d5:07:b3:b5:4a:64:11:0e:eb:3f:75: 3f:72:f2:43:08:9d:b8:37:00:fc:d0:f3:32:67:06:e4:6d:ad: b5:79:e0:16:59:85:fd:f6:89:57:32:af:1a:5e:52:a2:93:75: fb:5d:0e:a6:7b:40:6b:32:1e:49:0a:6e:45:34:b5:1f:53:70: e6:1a:4d:6e:92:ec:53:c0:38:8e:fe:36:89:16:67:21:a8:31: 64:b9:d5:e4:63:34:1e:fd:e6:32:fd:0b:36:dc:66:03:88:6e: 30:97:50:16:98:e3:f6:c9:42:0d:44:b0:28:86:a1:67:17:ed: 24:67:e2:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3jhQ4cwfa9YSmCam7lGsB/jrpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw QzM0QkVFRDAeFw0yNTA0MjkxNDM3MjBaFw0yNTA1MDIyMjQ5MjBaMDMxMTAvBgNV BAMTKDU2MjI3QTFBMzREOEUxRjI1MjFCRDZEODg4NzA5N0JEQzM1NDVCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+94rmwJY8RSLiZ+8BFmhQv2rJ CxD+xbYiOSZlygggpCTdpaueNYZfZBfFpI9YghZWh6kqq5uHmTc1JqhkoXBLZeXP GizaQbKQodJyH/93brtkTJSlAlmronT1qJvBlkrSlnYkWXlkXVKxjWcfTW0PdsbE +f+FxwpxTXxCyEBdF1KGHfcy8zXFoyzwCN2gwwwGJwKFFe7pCaAK33jQzohH11o+ ohc6rYbg7yaB91aAaUaGZ3NlwqPgWrbClgTLUZRgzbKEtmgbL0ptymttIZC1fk/c +iDFft+dRUkxkA05IZ5BHJxMW7qi8o7t2FkVevTR5mdWZyZMQ2RiqSDrNCDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViJ6GjTY4fJSG9bYiHCXvcNUW2AwHwYDVR0j BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5 Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0 QkVFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0NTAwMzItNTQ5Mi00YTVhLTk0 M2YtYmRiNDczMzQxMjMzLzAvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFF MzQwQzM0QkVFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGpn8SmOWjaL0iSb88osp7bRCbm/UXV8jmk SEabJoghgCCq76nqDytFcPak/yXZhXH8PKIu30b1WzpJBGRjxwk9CITInFTQoHjG 7Qlk0z0lIJ4oLn3YEHrbPQ7Mx6595m7dvxg06elquNgVwghKxgLVsbeEN7f8tWDT LaUksNZxqY4pL+7VB7O1SmQRDus/dT9y8kMInbg3APzQ8zJnBuRtrbV54BZZhf32 iVcyrxpeUqKTdftdDqZ7QGsyHkkKbkU0tR9TcOYaTW6S7FPAOI7+NokWZyGoMWS5 1eRjNB795jL9CzbcZgOIbjCXUBaY4/bJQg1EsCiGoWcX7SRn4nI= -----END CERTIFICATE-----Generated at Wed Apr 30 17:55:54 2025 by rpki-client