$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json) Hash identifier: t5Tdm7kBxa5J74Wq2oCginCieBwVAyWEWmcb9lsZGLI= Subject key identifier: CD:02:66:7A:5A:1D:7D:7A:F2:FE:EC:32:E2:42:74:46:9D:BA:DA:AF Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED Certificate issuer: /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Certificate serial: 0BA0B4D6C6A819AC7E59D189287F9A2C98184849 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft Manifest number: 04EB Signing time: Sun 29 Jun 2025 17:01:37 +0000 Manifest this update: Sun 29 Jun 2025 16:56:37 +0000 Manifest next update: Wed 02 Jul 2025 22:14:37 +0000 Files and hashes: 1: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=) 2: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: 53tgdiqtdjNpYH/nxHiWdMfkZz/bYs/54zzLtN7gns8=) 3: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=) 4: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: /1Up5KnnvLOBdZGS4i18SP87IoNXD6V7sL0H1N0BWqs=) 5: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=) 6: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: C106cMZ7nVpbdEo6RtpPPocV8QkCM3iy9iSeYnPa1lI=) 7: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: +LKBbBTxZfejrH0n6yxZTpzAQ0ctc1KNHYYJokKKnzg=) 8: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: Yz30CPTYH/dOzjwnz1TP6tkfawJNbjkHzYhNkLuWAMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a0:b4:d6:c6:a8:19:ac:7e:59:d1:89:28:7f:9a:2c:98:18:48:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Validity Not Before: Jun 29 16:56:37 2025 GMT Not After : Jul 2 22:14:37 2025 GMT Subject: CN=CD02667A5A1D7D7AF2FEEC32E24274469DBADAAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:b7:ea:a1:05:43:1a:bb:a1:a1:da:46:8f: aa:15:eb:36:a1:32:4c:4d:4c:fa:92:f9:10:1d:9f: 46:cf:85:d8:13:22:66:1c:fb:ff:48:d9:e1:16:eb: 46:dd:4a:d7:84:65:fd:16:e8:3a:5b:a9:f0:97:69: d1:8e:db:99:a4:87:56:5a:e3:04:61:08:c1:bd:8b: f1:05:a7:3b:aa:63:4c:20:a9:96:a5:f2:ea:7e:d7: 90:59:87:75:6c:77:b2:ea:40:0f:b2:77:ae:9a:0d: 01:e9:1f:c2:07:67:b6:33:1c:d5:85:67:6f:77:bc: 8d:c5:42:94:76:66:c6:7f:e7:84:8d:a0:c9:64:15: 19:0b:03:4b:64:6b:8f:68:51:c1:98:db:81:5c:d1: 2b:54:cc:91:15:43:cb:fa:88:e1:97:99:f9:3c:3a: bd:68:37:86:4c:01:60:cc:62:ad:26:fc:68:7d:da: 5d:d7:ce:9b:7a:06:e0:d3:fe:88:e0:12:fc:c1:7c: 86:84:24:5b:54:13:87:3f:b6:03:8f:54:42:5f:83: a1:48:90:07:ee:14:00:46:30:21:5c:12:25:f1:45: 40:75:a2:8b:dc:27:58:03:55:c5:f5:54:e3:77:a0: 7e:00:e1:33:57:eb:bc:b4:9a:ad:30:3a:62:fb:2a: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:02:66:7A:5A:1D:7D:7A:F2:FE:EC:32:E2:42:74:46:9D:BA:DA:AF X509v3 Authority Key Identifier: keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:83:14:aa:19:1c:04:31:dc:b6:6a:05:cd:88:3d:d0:a1:ad: 73:b0:a2:c7:37:de:dd:9c:64:7c:ec:9e:45:ba:06:98:e3:78: cc:bf:d3:5a:d0:07:52:6e:3f:79:a3:b7:52:6e:a7:3f:7e:61: 62:6f:72:3e:49:8e:d2:a4:2e:23:cd:92:06:4c:a0:9f:06:e1: a8:6e:1c:de:91:47:17:1d:22:9d:58:9a:31:ec:8b:44:e9:5d: 3e:e5:b8:53:46:ed:c5:ab:38:3f:dc:67:11:93:bc:48:4e:27: 2c:39:f6:bb:7d:7a:ae:eb:56:fd:5a:ca:c8:30:cd:44:24:be: fb:98:56:0d:82:4b:60:9e:5f:3d:b2:86:76:0d:0b:b3:40:9f: 0d:28:7a:06:63:3e:07:01:e5:59:d9:0e:88:7f:20:b8:58:d7: 67:c4:18:4d:8a:cd:cd:9b:01:f2:84:1d:27:32:eb:7b:b7:6f: 2d:bf:98:0d:1a:3a:de:26:2a:23:b3:d7:ac:85:21:b7:53:23: 7b:b5:5d:40:73:dc:df:73:70:65:03:7b:61:34:7e:66:69:38: 2e:18:a0:ed:0c:05:ec:0d:d5:3f:a7:ff:20:c5:76:83:17:53: a2:11:68:f4:01:95:c7:03:88:44:ca:a4:a0:e4:cb:56:a9:8c: db:65:4c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6C01saoGax+WdGJKH+aLJgYSEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw QzM0QkVFRDAeFw0yNTA2MjkxNjU2MzdaFw0yNTA3MDIyMjE0MzdaMDMxMTAvBgNV BAMTKENEMDI2NjdBNUExRDdEN0FGMkZFRUMzMkUyNDI3NDQ2OURCQURBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvbfqoQVDGruhodpGj6oV6zah MkxNTPqS+RAdn0bPhdgTImYc+/9I2eEW60bdSteEZf0W6DpbqfCXadGO25mkh1Za 4wRhCMG9i/EFpzuqY0wgqZal8up+15BZh3Vsd7LqQA+yd66aDQHpH8IHZ7YzHNWF Z293vI3FQpR2ZsZ/54SNoMlkFRkLA0tka49oUcGY24Fc0StUzJEVQ8v6iOGXmfk8 Or1oN4ZMAWDMYq0m/Gh92l3Xzpt6BuDT/ojgEvzBfIaEJFtUE4c/tgOPVEJfg6FI kAfuFABGMCFcEiXxRUB1oovcJ1gDVcX1VON3oH4A4TNX67y0mq0wOmL7KnT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQJmelodfXry/uwy4kJ0Rp262q8wHwYDVR0j BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5 Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0 QkVFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0NTAwMzItNTQ5Mi00YTVhLTk0 M2YtYmRiNDczMzQxMjMzLzAvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFF MzQwQzM0QkVFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByDFKoZHAQx3LZqBc2IPdChrXOwosc33t2c ZHzsnkW6BpjjeMy/01rQB1JuP3mjt1Jupz9+YWJvcj5JjtKkLiPNkgZMoJ8G4ahu HN6RRxcdIp1YmjHsi0TpXT7luFNG7cWrOD/cZxGTvEhOJyw59rt9eq7rVv1aysgw zUQkvvuYVg2CS2CeXz2yhnYNC7NAnw0oegZjPgcB5VnZDoh/ILhY12fEGE2Kzc2b AfKEHScy63u3by2/mA0aOt4mKiOz16yFIbdTI3u1XUBz3N9zcGUDe2E0fmZpOC4Y oO0MBewN1T+n/yDFdoMXU6IRaPQBlccDiETKpKDky1apjNtlTKI= -----END CERTIFICATE-----Generated at Tue Jul 1 18:12:37 2025 by rpki-client