$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: r+ESIt270iV1iEldjN+jSunpnNAd4uUnxPyEAHwdykc= Subject key identifier: 60:01:7B:38:DB:1D:B3:24:D2:92:4E:AD:EF:3F:A7:2B:5D:99:65:79 Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 5EC7342490CEA760B961724DF6B05458B15306A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 18:20:02 +0000 Manifest this update: Tue 04 Nov 2025 18:15:02 +0000 Manifest next update: Fri 07 Nov 2025 23:40:02 +0000 Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=) 2: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: rMnxi7nuBWF4u3+BPm+aAZpocKEZVZ+DABiufFA5cXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c7:34:24:90:ce:a7:60:b9:61:72:4d:f6:b0:54:58:b1:53:06:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Nov 4 18:15:02 2025 GMT Not After : Nov 7 23:40:02 2025 GMT Subject: CN=60017B38DB1DB324D2924EADEF3FA72B5D996579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:c9:18:4b:09:f1:9c:09:b0:84:2e:66:e7: de:4b:5e:85:43:1c:15:32:85:b3:4e:27:ec:3b:1f: fb:38:6e:44:9c:6f:1d:e3:84:0a:5b:63:7e:e6:09: 9e:7f:12:10:d9:52:e3:3b:0d:48:54:b3:29:93:e8: 1b:09:d8:a8:8c:a8:06:5b:07:27:10:2b:9f:e8:7b: 8c:bf:ab:33:11:53:bb:8f:61:45:ba:52:29:70:57: 08:15:a4:f5:78:66:0d:36:4e:ba:03:b5:ba:70:af: 96:45:f1:84:f2:b7:36:0f:3b:a6:99:a0:70:67:18: ac:28:b3:b7:a7:50:f8:00:e2:d8:f3:ae:da:8a:d8: cb:2a:76:7b:ed:e1:36:d8:74:d6:7e:1b:ab:f1:75: 7d:32:84:57:93:0c:b7:c5:f9:fc:37:9f:96:77:e0: 23:5e:1e:6e:ba:00:39:ae:d5:95:56:fa:1a:19:24: 25:51:9f:aa:eb:87:64:0f:4b:3c:2f:e6:91:50:2b: aa:ea:5b:5b:0d:1a:b4:da:f5:30:50:e1:c8:65:6b: 72:12:9b:03:b7:f6:8d:d4:26:ba:91:22:d6:10:5c: 60:b9:b7:b4:ea:82:17:dd:36:c7:03:97:c0:d9:46: 47:15:c5:73:79:3d:b5:75:91:a4:66:fd:5a:3e:79: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:7B:38:DB:1D:B3:24:D2:92:4E:AD:EF:3F:A7:2B:5D:99:65:79 X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:d2:e1:86:37:79:1f:df:b1:16:4a:e2:d3:3f:68:a1:dd: 94:c7:6a:03:d5:7f:43:68:bd:18:29:21:84:82:5b:b8:ae:7f: 44:66:b7:c8:c8:fc:2d:39:aa:51:6c:da:a6:cf:55:0a:8a:e6: b0:2f:67:cb:93:2d:fd:6c:74:b5:8e:0f:0d:d4:79:ba:ae:40: 7c:fd:c5:f3:a5:13:bb:df:44:2b:9f:b9:53:cb:c4:79:15:d6: 71:01:c2:4e:3c:15:d0:f0:c8:62:fc:51:0f:fe:6a:11:c7:ab: e3:4d:46:b3:47:25:6b:fa:7a:e2:be:46:92:a8:e4:17:ba:f8: 4f:65:2e:6b:ad:99:48:8a:58:1d:8a:9e:a2:f9:05:57:fe:15: bd:70:18:b4:a8:93:b1:9c:b6:71:95:42:ec:1d:27:f5:e6:91: 6c:6f:0d:b2:f1:48:d1:9e:90:2a:73:14:d5:6c:18:61:ec:aa: 40:b6:e1:45:61:65:58:05:bf:41:bb:d3:43:d5:5e:c1:57:32: 79:e3:90:65:28:13:cd:10:48:de:ae:0b:d6:11:19:1e:4a:64: ff:4f:cf:d3:dd:89:70:69:66:23:98:3d:6f:6c:42:ae:b9:e0: d1:e8:8c:ee:90:9c:3e:d2:65:6b:d2:7e:4a:ac:2a:f4:f7:be: 11:47:36:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsc0JJDOp2C5YXJN9rBUWLFTBqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTExMDQxODE1MDJaFw0yNTExMDcyMzQwMDJaMDMxMTAvBgNV BAMTKDYwMDE3QjM4REIxREIzMjREMjkyNEVBREVGM0ZBNzJCNUQ5OTY1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZNskYSwnxnAmwhC5m595LXoVD HBUyhbNOJ+w7H/s4bkScbx3jhApbY37mCZ5/EhDZUuM7DUhUsymT6BsJ2KiMqAZb BycQK5/oe4y/qzMRU7uPYUW6UilwVwgVpPV4Zg02TroDtbpwr5ZF8YTytzYPO6aZ oHBnGKwos7enUPgA4tjzrtqK2Msqdnvt4TbYdNZ+G6vxdX0yhFeTDLfF+fw3n5Z3 4CNeHm66ADmu1ZVW+hoZJCVRn6rrh2QPSzwv5pFQK6rqW1sNGrTa9TBQ4chla3IS mwO39o3UJrqRItYQXGC5t7TqghfdNscDl8DZRkcVxXN5PbV1kaRm/Vo+eaQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYAF7ONsdsyTSkk6t7z+nK12ZZXkwHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYX0uGGN3kf37EWSuLTP2ih3ZTHagPVf0No vRgpIYSCW7iuf0Rmt8jI/C05qlFs2qbPVQqK5rAvZ8uTLf1sdLWODw3UebquQHz9 xfOlE7vfRCufuVPLxHkV1nEBwk48FdDwyGL8UQ/+ahHHq+NNRrNHJWv6euK+RpKo 5Be6+E9lLmutmUiKWB2KnqL5BVf+Fb1wGLSok7GctnGVQuwdJ/XmkWxvDbLxSNGe kCpzFNVsGGHsqkC24UVhZVgFv0G700PVXsFXMnnjkGUoE80QSN6uC9YRGR5KZP9P z9PdiXBpZiOYPW9sQq654NHojO6QnD7SZWvSfkqsKvT3vhFHNo0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:06 2025 by rpki-client