$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: 4MVlH1BZXOUtOrCjQtm6h87gPyDdVUhwADhqUJSiGYw= Subject key identifier: 91:FD:C2:12:82:13:D9:07:51:28:A0:A0:86:98:52:F0:39:F7:31:34 Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 0D13218EFA4E6D0C99C2039C70022C9A1A4FC9F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 02DD Signing time: Thu 07 Aug 2025 23:10:02 +0000 Manifest this update: Thu 07 Aug 2025 23:05:02 +0000 Manifest next update: Mon 11 Aug 2025 03:27:02 +0000 Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=) 2: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: Vss5TmlsmoVmlkxoGOoaF91TvYuLyTxNj9yuVbdpkqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:13:21:8e:fa:4e:6d:0c:99:c2:03:9c:70:02:2c:9a:1a:4f:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Aug 7 23:05:02 2025 GMT Not After : Aug 11 03:27:02 2025 GMT Subject: CN=91FDC2128213D9075128A0A0869852F039F73134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:0a:ca:a5:7c:b1:48:26:12:40:40:7e:57: f0:f8:8f:50:cc:4d:75:a8:0d:1a:da:1c:7f:0c:4f: c7:e1:05:2e:fc:a6:27:a7:d6:79:18:c0:2d:2b:99: bd:1f:9a:a1:1c:ed:cf:b4:68:a0:ac:c4:3e:09:ad: 13:a3:c4:b7:fa:d1:df:9c:f3:3b:84:db:6e:f7:a1: fb:b6:d2:f7:c6:23:2e:0b:06:f6:c6:bc:10:78:24: 0a:a4:fb:9a:b7:61:7b:30:2c:d7:55:ec:ea:2b:d7: 33:a5:bb:7e:aa:f6:08:88:61:ff:40:2a:41:cf:75: f1:38:2b:8f:8c:74:6d:a7:ad:00:8a:78:41:40:7a: 20:20:c4:2b:90:1e:b7:ed:56:42:60:a0:0d:89:94: 73:ab:e0:77:9e:f1:ec:bd:03:3c:45:10:63:6c:82: 32:0a:69:f2:0d:55:96:b9:9b:dd:1c:9e:4a:37:2c: 17:df:ae:70:a5:ab:81:67:2e:88:70:fa:2d:1c:1f: 23:cb:76:68:89:c4:94:6e:8d:14:18:75:00:a3:dc: e4:fa:5c:f1:34:08:e0:dd:0c:6a:9d:d7:4f:e0:cb: 9c:e0:f3:7b:c9:99:d0:f1:b6:85:56:77:d5:8f:8a: 44:31:e3:85:04:1f:0e:b6:72:e0:42:a2:9e:a6:78: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FD:C2:12:82:13:D9:07:51:28:A0:A0:86:98:52:F0:39:F7:31:34 X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b5:77:9e:eb:32:77:99:47:a0:eb:ef:f2:b7:5a:8a:66:c0: 9a:4d:7e:8b:75:02:fe:84:a0:eb:59:e2:bb:34:59:05:2c:a1: bc:3b:95:42:e6:b1:b4:8b:d6:a9:28:58:26:d0:08:c3:57:6c: ae:7d:29:af:1a:d5:54:ce:9d:07:6d:10:70:d7:7f:df:b7:68: 92:9f:43:6e:28:60:06:f0:a6:47:e8:a6:3c:09:e5:f1:28:95: 50:75:68:00:7e:a9:8a:8f:44:8b:52:b8:53:52:d5:d7:8f:bd: 4b:00:d0:19:30:41:71:46:10:83:21:49:73:1f:1f:66:9b:03: 8a:4e:01:6d:c9:b6:f2:9a:bc:6a:9d:1b:9a:24:54:71:c4:25: 7e:1f:f3:ac:31:9c:16:8e:05:8e:b8:bd:8f:e4:b5:39:c6:ae: 1b:59:d6:9d:01:fd:42:07:a4:72:e5:7b:bc:ab:33:6a:4b:eb: 71:28:d7:ad:0a:24:a2:ec:3a:51:98:20:eb:23:e6:47:38:4f: 03:d8:14:e8:7f:48:d6:4d:e8:30:62:6f:bd:9d:c0:db:e1:54: a4:c5:e2:9a:b7:06:07:6f:bb:6e:9d:d0:9c:b3:fd:98:55:3b: 39:89:05:44:76:3c:8f:6a:aa:ff:58:a6:4e:5e:91:12:72:25: f6:1f:a5:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRMhjvpObQyZwgOccAIsmhpPyfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTA4MDcyMzA1MDJaFw0yNTA4MTEwMzI3MDJaMDMxMTAvBgNV BAMTKDkxRkRDMjEyODIxM0Q5MDc1MTI4QTBBMDg2OTg1MkYwMzlGNzMxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeuwrKpXyxSCYSQEB+V/D4j1DM TXWoDRraHH8MT8fhBS78pien1nkYwC0rmb0fmqEc7c+0aKCsxD4JrROjxLf60d+c 8zuE2273ofu20vfGIy4LBvbGvBB4JAqk+5q3YXswLNdV7Oor1zOlu36q9giIYf9A KkHPdfE4K4+MdG2nrQCKeEFAeiAgxCuQHrftVkJgoA2JlHOr4Hee8ey9AzxFEGNs gjIKafINVZa5m90cnko3LBffrnClq4FnLohw+i0cHyPLdmiJxJRujRQYdQCj3OT6 XPE0CODdDGqd10/gy5zg83vJmdDxtoVWd9WPikQx44UEHw62cuBCop6meKjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkf3CEoIT2QdRKKCghphS8Dn3MTQwHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC1d57rMneZR6Dr7/K3WopmwJpNfot1Av6E oOtZ4rs0WQUsobw7lULmsbSL1qkoWCbQCMNXbK59Ka8a1VTOnQdtEHDXf9+3aJKf Q24oYAbwpkfopjwJ5fEolVB1aAB+qYqPRItSuFNS1dePvUsA0BkwQXFGEIMhSXMf H2abA4pOAW3JtvKavGqdG5okVHHEJX4f86wxnBaOBY64vY/ktTnGrhtZ1p0B/UIH pHLle7yrM2pL63Eo160KJKLsOlGYIOsj5kc4TwPYFOh/SNZN6DBib72dwNvhVKTF 4pq3Bgdvu26d0Jyz/ZhVOzmJBUR2PI9qqv9Ypk5ekRJyJfYfpQI= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:10 2025 by rpki-client