$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: IDstD6ScN/nPA478HOr3+fYLYOMvMGcYAfdiYfkXcs0= Subject key identifier: AB:BC:FD:1C:C0:86:06:6F:93:6B:1B:2C:C3:4A:9F:0E:44:1C:D0:93 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 35311E4DCB974E9378A66CB227CFBB193B80EAC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 04C7 Signing time: Fri 31 Jan 2025 11:51:41 +0000 Manifest this update: Fri 31 Jan 2025 11:46:41 +0000 Manifest next update: Mon 03 Feb 2025 15:20:41 +0000 Files and hashes: 1: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: mwYMKgumoG9KUXW9CmbB5xkKPC0iVTbXFYBRWL88eZY=) 2: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: vhMXT0X2yZyfjqh1If/jDIC06hgxnPfiOfL606K6iKk=) 3: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: H911T2Oyw7E/be4YSoMDYuSyG1D6EtJloE4CFkI8rag=) 4: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: LqxreuPQRi/RPY9pSW+yNL/verqLyl3p0dMRTLmH8hk=) 5: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: m9HEvaPr+MCHUScC/S8/ZbPl5+d+RZJ8L/y0XuZIprU=) 6: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: jHen1vZLG/DOZwqIeHYY98aBHq6SMyx6T3vs559h5rI=) 7: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: +7ThYpBxJ7cY58NoufQvfB+mtjUp0Rdkq8BnlAc4bZ4=) 8: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: ozMMj1PLYt9P59zXxht5YENq9xxiksZRJWyynQGPWwo=) 9: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: tGWvh9Bs3t8INRdrxWygALb5XhF17l2/AZgg1s1qyuY=) 10: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: unueG7P54wUmQZvOUKrhpSAH4gB/UymG78WRnuwkjpw=) 11: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: So5G4uHqVHWD5JnkptSS1bHWAe/cdyDOQettCO6GGiU=) 12: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 9SIW/5w9M/SmmmzkXzv4Bp8jIuxjcuDE9nLrxJeaY/8=) 13: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: fYkaRaqMdzeCnlFj0QC4k70wJ41vV5h8EX1emupb1Ew=) 14: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: twCP3bQtXm7fHopGhk9qw+BKzDavhDYNdBsRfz7JGKg=) 15: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: TjZJtGUs0Afv/iY1+9wMNrBYMwzmj2MuAfLOM1yReW8=) 16: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: plFUYvoZx+Zhhi7/vKanQppp3zTRIZoJyKujyLUaQfM=) 17: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: nun7wr5qUW6SSsLL/8m4wIYLtJbVijMvNYm3I5L5gwY=) 18: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: hplPEY83KbXLKF8mvbTVWHeph6nkNRI9I2QkUrjdTPg=) 19: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 9FaMWUxx6cNM5vz7M9YrzpMwj5RS9BmzIfAf19UCzPI=) 20: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: dASDC6A8QkcoKOTRQ/CvgSqJWSyAkaKqOmqilKOQ97g=) 21: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HAoFxdygcRJ4Y8uy9Ks9W9Gj/PwyoONosucd1x3NYoo=) 22: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: bWRExWZZIgQwRxIP86bPE6hDOmLbrhGh8hJvUz7o6EE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 35:31:1e:4d:cb:97:4e:93:78:a6:6c:b2:27:cf:bb:19:3b:80:ea:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Jan 31 11:46:41 2025 GMT Not After : Feb 3 15:20:41 2025 GMT Subject: CN=ABBCFD1CC086066F936B1B2CC34A9F0E441CD093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:00:96:19:3a:d9:89:36:9c:96:13:a4:5b: 16:86:f9:c7:7b:be:2e:52:ff:16:ca:89:4d:6f:ed: 97:59:b2:f6:b4:f4:a3:14:db:45:c8:0d:c2:7a:1d: 76:77:62:cd:ca:68:e1:55:56:9e:e9:83:4d:f6:a8: 3d:57:75:da:51:b9:f8:05:ed:95:96:bb:de:16:26: ab:89:50:49:0c:20:67:1f:69:bf:40:bc:b2:56:94: 3b:9d:7c:99:57:91:b9:71:03:ea:38:27:db:31:d4: 56:c0:e1:7e:3e:32:7a:4c:fc:e3:e7:ce:bf:85:dc: 8b:3f:f2:1c:a9:6b:29:21:94:a2:18:59:94:14:86: 67:30:bc:ca:a2:fa:9a:aa:52:a3:b1:5c:9c:58:27: 82:16:a1:8c:89:88:33:ca:89:fb:c8:d8:e5:9f:c4: dd:8c:59:1c:f5:59:9c:07:63:04:72:b5:58:b4:39: 2a:4a:9f:e0:0d:85:73:11:94:97:45:26:79:29:49: be:bc:54:5d:82:ca:5b:41:8f:8a:f5:a4:2a:a2:f3: 77:11:0c:4f:eb:e9:de:a1:43:01:f4:2f:5c:21:b4: b4:87:01:0d:79:2b:58:90:6e:8a:26:f9:d1:b9:46: 36:14:96:82:81:2c:e5:91:35:05:02:56:41:19:38: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BC:FD:1C:C0:86:06:6F:93:6B:1B:2C:C3:4A:9F:0E:44:1C:D0:93 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:48:47:b1:3c:de:75:d8:db:a0:88:63:b1:c6:35:c5:30:9c: 54:98:cc:81:cb:64:54:74:95:49:0b:ff:9a:b4:2f:bd:de:be: 0e:dd:79:c7:f0:7b:52:99:9f:d4:0e:a5:ad:cc:ff:db:a0:62: 39:cb:a2:f0:18:04:71:59:5a:0a:f8:bb:65:90:7e:44:17:3a: cc:bc:8d:10:13:ed:86:85:db:e9:ac:42:99:55:16:8f:dd:79: dc:30:10:a5:61:cb:b7:cb:9b:a9:e9:d9:77:d8:ac:63:37:f8: 05:09:af:30:c6:c5:bb:22:92:3f:f2:4e:f8:dd:52:97:4e:97: ee:1a:d2:f4:88:22:0b:59:f2:58:f2:11:be:03:92:c5:eb:e7: 45:0e:dd:8c:08:cd:49:4b:2e:1a:18:9b:85:7c:31:03:52:88: 4f:ae:41:52:11:62:6f:6d:57:4a:de:24:ca:53:31:49:de:d4: 0f:6e:ec:9e:f3:20:39:34:ab:2a:cd:80:cb:23:fd:9b:3d:5a: 29:2c:7a:f9:90:c7:20:79:42:01:60:e5:88:55:67:35:b3:50: 15:b3:27:87:53:0f:fe:2a:5d:22:e8:2b:dd:95:53:d9:da:65: 30:0d:8d:cb:21:cc:49:69:54:07:48:ed:59:19:a4:1e:1c:1f: 85:47:12:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNTEeTcuXTpN4pmyyJ8+7GTuA6sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTAxMzExMTQ2NDFaFw0yNTAyMDMxNTIwNDFaMDMxMTAvBgNV BAMTKEFCQkNGRDFDQzA4NjA2NkY5MzZCMUIyQ0MzNEE5RjBFNDQxQ0QwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jwCWGTrZiTaclhOkWxaG+cd7 vi5S/xbKiU1v7ZdZsva09KMU20XIDcJ6HXZ3Ys3KaOFVVp7pg032qD1XddpRufgF 7ZWWu94WJquJUEkMIGcfab9AvLJWlDudfJlXkblxA+o4J9sx1FbA4X4+MnpM/OPn zr+F3Is/8hypaykhlKIYWZQUhmcwvMqi+pqqUqOxXJxYJ4IWoYyJiDPKifvI2OWf xN2MWRz1WZwHYwRytVi0OSpKn+ANhXMRlJdFJnkpSb68VF2CyltBj4r1pCqi83cR DE/r6d6hQwH0L1whtLSHAQ15K1iQboom+dG5RjYUloKBLOWRNQUCVkEZOEIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7z9HMCGBm+Taxssw0qfDkQc0JMwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlIR7E83nXY26CIY7HGNcUwnFSYzIHLZFR0 lUkL/5q0L73evg7decfwe1KZn9QOpa3M/9ugYjnLovAYBHFZWgr4u2WQfkQXOsy8 jRAT7YaF2+msQplVFo/dedwwEKVhy7fLm6np2XfYrGM3+AUJrzDGxbsikj/yTvjd UpdOl+4a0vSIIgtZ8ljyEb4DksXr50UO3YwIzUlLLhoYm4V8MQNSiE+uQVIRYm9t V0reJMpTMUne1A9u7J7zIDk0qyrNgMsj/Zs9WiksevmQxyB5QgFg5YhVZzWzUBWz J4dTD/4qXSLoK92VU9naZTANjcshzElpVAdI7VkZpB4cH4VHEqA= -----END CERTIFICATE-----Generated at Thu Apr 24 17:04:17 2025 by rpki-client