$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: 9krCEnSXyK0WZ0pPHA1c2v73Qu1SqnCnvjZxU24oSao= Subject key identifier: 4D:D6:A3:15:FA:38:58:FD:A7:7D:DE:90:66:0F:09:0A:8B:1F:55:A1 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 50DA6E11CF926D336DB5D04DC85EC44AC6B10682 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 04EB Signing time: Sun 15 Jun 2025 08:11:57 +0000 Manifest this update: Sun 15 Jun 2025 08:06:57 +0000 Manifest next update: Wed 18 Jun 2025 08:49:57 +0000 Files and hashes: 1: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 2: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 3: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 4: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: i8BpctBtDR1cL+NnxkziOtf21/F0kdql2uvKW16NHeU=) 5: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 6: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 7: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 8: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: /L5xs6PGKpRT/JJeBTXRVK04bWdHgmJFRa12gb3q/ao=) 9: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 10: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: 9oKO6g1ubJMPn+KO0b/5NKvsIE0sjvdEPhP+zwJwgK8=) 11: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 12: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 13: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: K244iScN8M4O5u7S2cH3/W0yr++iJmaE7tZQk4Lm388=) 14: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 15: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 16: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 17: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 18: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 19: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 20: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 21: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 22: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 23: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 24: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: QAldYMySegENqQQNW/bIkZxB1ztP9ShknyBKacd1nyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:da:6e:11:cf:92:6d:33:6d:b5:d0:4d:c8:5e:c4:4a:c6:b1:06:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jun 15 08:06:57 2025 GMT Not After : Jun 18 08:49:57 2025 GMT Subject: CN=4DD6A315FA3858FDA77DDE90660F090A8B1F55A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:41:00:f3:7a:a3:ff:69:77:4a:7a:8e:e2: 1e:a1:85:39:fc:c5:d5:15:ac:7a:23:c0:83:c5:70: 67:2d:70:c0:98:8c:c3:f6:3e:79:00:a5:58:b6:38: b6:6d:84:b3:0a:8d:bc:7e:cc:ae:9c:b1:22:34:d7: 85:7a:28:f6:05:7b:ee:e6:cd:d8:28:2f:b8:64:b0: 32:17:2b:a6:15:95:45:66:a6:ac:eb:f9:22:f8:18: 01:73:db:29:ab:9f:50:06:a3:e6:87:cf:e7:0b:64: 1d:10:09:c8:6d:b6:d7:f2:3e:b9:14:a9:d6:9b:c3: 3c:39:ba:34:06:27:9c:42:07:cf:f9:f4:4b:78:76: 09:9f:b3:09:fd:3e:9c:67:27:cf:66:f9:8d:3a:6e: 55:e5:cc:ec:e5:c3:2b:35:d3:58:e8:fb:cd:c5:48: 76:03:2d:f3:9f:e7:05:79:74:01:b0:48:3b:99:32: 29:2c:29:74:c1:3d:ba:a5:41:6a:13:5e:28:94:d8: 41:79:8e:0c:bc:39:16:6f:10:40:72:d7:f4:7b:07: a3:19:5f:7a:58:73:42:1f:32:34:42:12:56:0d:a0: e7:ff:07:3b:45:e7:a5:a7:42:c7:c4:e7:bb:2c:e6: 65:ec:08:a5:5d:bb:66:7a:31:8d:83:68:09:03:b4: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D6:A3:15:FA:38:58:FD:A7:7D:DE:90:66:0F:09:0A:8B:1F:55:A1 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ee:20:38:34:aa:3b:b8:75:66:bc:1b:bc:8b:12:25:57:f8: cc:c6:cf:21:33:01:49:b0:75:75:51:fd:64:32:c2:cc:d4:ab: b3:c2:ff:7d:ce:6d:01:ab:81:61:81:d9:94:75:2d:5f:2f:7b: a4:3a:26:f7:13:cd:f5:e6:11:6f:ce:94:a3:73:ae:34:2a:e7: 1e:5a:aa:b3:df:9d:a9:52:46:7d:44:c2:16:1d:15:3c:68:64: 4a:b5:38:51:6f:02:85:ae:4f:77:c2:be:a5:1b:ef:5d:e8:3d: 9d:87:81:5f:95:1d:df:7e:10:42:55:ca:e0:7b:30:50:f3:6b: c9:60:27:22:d8:48:7e:17:89:d3:98:63:99:2d:ac:f4:4d:d9: e3:c3:10:58:c7:09:7b:29:f5:a7:ab:28:4a:46:a4:b6:ff:fd: 19:53:d9:66:14:b7:74:a8:1e:76:0a:28:7a:67:ba:89:0e:08: ba:87:6b:8a:12:7a:bb:54:9e:a9:7c:13:37:53:df:5b:4a:6a: 1e:6d:4a:5a:5b:ab:37:3c:b8:d6:5a:c2:1a:38:02:9c:a7:24: d9:53:c1:29:80:2d:0d:2b:6c:3c:d1:70:05:e2:5f:a7:d8:8d: 26:3e:dc:cc:04:9c:ee:e8:ff:a2:8b:55:17:5e:1d:34:ca:6a: 6f:25:f3:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNpuEc+SbTNttdBNyF7ESsaxBoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA2MTUwODA2NTdaFw0yNTA2MTgwODQ5NTdaMDMxMTAvBgNV BAMTKDRERDZBMzE1RkEzODU4RkRBNzdEREU5MDY2MEYwOTBBOEIxRjU1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTo0EA83qj/2l3SnqO4h6hhTn8 xdUVrHojwIPFcGctcMCYjMP2PnkApVi2OLZthLMKjbx+zK6csSI014V6KPYFe+7m zdgoL7hksDIXK6YVlUVmpqzr+SL4GAFz2ymrn1AGo+aHz+cLZB0QCchtttfyPrkU qdabwzw5ujQGJ5xCB8/59Et4dgmfswn9PpxnJ89m+Y06blXlzOzlwys101jo+83F SHYDLfOf5wV5dAGwSDuZMiksKXTBPbqlQWoTXiiU2EF5jgy8ORZvEEBy1/R7B6MZ X3pYc0IfMjRCElYNoOf/BztF56WnQsfE57ss5mXsCKVdu2Z6MY2DaAkDtJZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdajFfo4WP2nfd6QZg8JCosfVaEwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjuIDg0qju4dWa8G7yLEiVX+MzGzyEzAUmw dXVR/WQywszUq7PC/33ObQGrgWGB2ZR1LV8ve6Q6JvcTzfXmEW/OlKNzrjQq5x5a qrPfnalSRn1EwhYdFTxoZEq1OFFvAoWuT3fCvqUb713oPZ2HgV+VHd9+EEJVyuB7 MFDza8lgJyLYSH4XidOYY5ktrPRN2ePDEFjHCXsp9aerKEpGpLb//RlT2WYUt3So HnYKKHpnuokOCLqHa4oSertUnql8EzdT31tKah5tSlpbqzc8uNZawho4ApynJNlT wSmALQ0rbDzRcAXiX6fYjSY+3MwEnO7o/6KLVRdeHTTKam8l80E= -----END CERTIFICATE-----Generated at Tue Jun 17 08:14:29 2025 by rpki-client