$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft File: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json) Hash identifier: 0TTb5wj9qZL4YIo7N6ik/AlN55VUQYyzBV6Vi3djjGI= Subject key identifier: 6A:40:C5:3A:FD:A2:0B:82:A7:B3:C2:93:D5:74:01:70:1D:7E:83:43 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 55ACF3A7AA8BBF0B7A58109A77D377FA209174ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft Manifest number: 04DD Signing time: Sun 15 Jun 2025 15:20:56 +0000 Manifest this update: Sun 15 Jun 2025 15:15:56 +0000 Manifest next update: Wed 18 Jun 2025 20:04:56 +0000 Files and hashes: 1: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 0DSPPC3eIjICQ1QgbLgmjGB64GhEc/FiJxgxZMMi2rw=) 2: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: BvCVPcNV7+vHiw/+/JKyGnh9AGjy70YKxOGqZXDpVaY=) 3: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: jGoXC4NtMGtzcx+R9/Q81p54SI3SY8CoW+n8Kb2SzRU=) 4: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: YHgchxUowX4afg18dRitbsm1i2Jr1bcDLdOROkNe9ds=) 5: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: vyo5RypkFQEnVHU24LrFw7oPwATfGzPKn/kBk5If2Fc=) 6: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: LSvRzZKZqA3NwdEC9iho4W4LPDyE6x1z3v9TKwhHRg0=) 7: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: dHAXVvHNWN3lX3SmokQ/UCj86xJ8/z2lq2nv43vYPc0=) 8: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: wHpTffZ2nuWlAhlZXWgWT5vAarjhnzHKQ1BNdqdBZLA=) 9: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: tAs35Xh9PvYdZJSIW4FLCQe0rvv+Ua53CMSGfgCNFT4=) 10: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: i8E531bAACF/do6q7C690HP7ycKInzio0QMeynldjVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 20:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ac:f3:a7:aa:8b:bf:0b:7a:58:10:9a:77:d3:77:fa:20:91:74:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jun 15 15:15:56 2025 GMT Not After : Jun 18 20:04:56 2025 GMT Subject: CN=6A40C53AFDA20B82A7B3C293D57401701D7E8343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:51:a1:b6:2c:0b:89:f3:a6:87:e3:cd:65: fb:36:09:c7:8d:77:8f:53:e8:cf:f9:60:41:23:a9: b2:14:e8:0e:e1:72:2b:23:16:7d:76:76:4b:a1:91: 84:56:fc:e9:31:be:ef:db:87:a4:97:e0:0d:51:24: 8c:f0:4b:cf:0d:40:89:f6:4a:85:71:9f:67:36:eb: 89:58:35:88:b5:3a:4a:6c:97:33:99:89:f4:4e:03: 1d:41:85:cd:81:bb:48:2f:e3:58:69:47:8c:06:be: 68:b9:9c:d9:77:09:fd:90:cf:d9:8a:98:ea:3e:d0: 6a:73:d1:95:00:a0:e3:91:8c:1e:4d:4b:ca:84:54: 75:70:be:87:e3:6d:fd:f5:1c:23:78:c7:ac:2e:96: fc:75:89:b5:24:6d:12:2f:76:d1:66:64:3e:69:41: c3:63:21:bc:e5:63:d5:15:99:7f:b0:68:6f:2e:00: 61:04:b2:82:d4:ff:3b:ef:a8:9e:f3:d2:b1:1a:d1: 17:97:90:31:d9:50:a9:33:b3:00:20:ac:61:70:24: cc:7b:27:3d:ae:37:a5:2a:b3:63:9a:d0:89:37:d9: 8e:8a:e5:f4:dd:ca:7e:30:a5:a4:7d:1f:25:1e:00: a1:f2:34:4e:84:1a:36:c3:27:48:c5:32:d5:1c:60: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:40:C5:3A:FD:A2:0B:82:A7:B3:C2:93:D5:74:01:70:1D:7E:83:43 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0c:9d:96:83:43:6f:d6:41:11:5b:68:cc:ce:7b:cc:7d:75: c0:ee:ec:f5:60:da:92:b6:b9:73:af:cb:86:ea:b9:06:07:c0: be:e5:48:9d:fd:07:c4:bb:43:56:fa:f4:42:ec:0e:c4:5f:ce: ae:2f:50:85:b0:f6:9c:c1:cb:68:38:52:9a:1c:51:cc:44:b3: 89:0f:2e:21:1f:ce:04:f0:eb:03:72:0a:29:be:0a:ef:5a:98: 75:68:f7:0d:d1:a5:32:71:0b:12:cd:be:4c:ae:95:6e:6c:4f: 5b:51:57:b9:c8:8f:5a:50:00:49:99:7d:1c:a4:d0:22:0c:41: 53:c2:70:d9:38:cc:b5:99:9a:f9:91:78:33:54:2d:80:da:d3: 61:68:c8:af:13:a4:7b:3b:23:aa:cb:9a:cb:c2:6d:f9:e0:04: bb:23:91:3b:a9:f1:bb:2c:9d:2e:ee:52:02:55:42:4a:92:43: 5e:dd:06:04:07:57:ca:e4:cd:d1:0f:4b:e7:42:82:1b:cb:52: 5e:e7:b3:6d:29:ee:fa:02:d2:7d:f0:65:29:3c:e7:ea:3e:89: 56:9c:01:bd:ef:6d:d6:9b:1c:03:99:64:9c:1a:a8:7a:55:a9: 8f:ea:86:5d:ce:b4:28:ca:e2:5f:85:d6:21:f4:5a:2f:f7:0e: ca:11:cd:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVazzp6qLvwt6WBCad9N3+iCRdO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNTA2MTUxNTE1NTZaFw0yNTA2MTgyMDA0NTZaMDMxMTAvBgNV BAMTKDZBNDBDNTNBRkRBMjBCODJBN0IzQzI5M0Q1NzQwMTcwMUQ3RTgzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ulGhtiwLifOmh+PNZfs2CceN d49T6M/5YEEjqbIU6A7hcisjFn12dkuhkYRW/Okxvu/bh6SX4A1RJIzwS88NQIn2 SoVxn2c264lYNYi1OkpslzOZifROAx1Bhc2Bu0gv41hpR4wGvmi5nNl3Cf2Qz9mK mOo+0Gpz0ZUAoOORjB5NS8qEVHVwvofjbf31HCN4x6wulvx1ibUkbRIvdtFmZD5p QcNjIbzlY9UVmX+waG8uAGEEsoLU/zvvqJ7z0rEa0ReXkDHZUKkzswAgrGFwJMx7 Jz2uN6Uqs2Oa0Ik32Y6K5fTdyn4wpaR9HyUeAKHyNE6EGjbDJ0jFMtUcYC0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUakDFOv2iC4Kns8KT1XQBcB1+g0MwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMy MzQyN0MxOTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEMnZaDQ2/WQRFbaMzOe8x9dcDu7PVg2pK2 uXOvy4bquQYHwL7lSJ39B8S7Q1b69ELsDsRfzq4vUIWw9pzBy2g4UpocUcxEs4kP LiEfzgTw6wNyCim+Cu9amHVo9w3RpTJxCxLNvkyulW5sT1tRV7nIj1pQAEmZfRyk 0CIMQVPCcNk4zLWZmvmReDNULYDa02FoyK8TpHs7I6rLmsvCbfngBLsjkTup8bss nS7uUgJVQkqSQ17dBgQHV8rkzdEPS+dCghvLUl7ns20p7voC0n3wZSk85+o+iVac Ab3vbdabHAOZZJwaqHpVqY/qhl3OtCjK4l+F1iH0Wi/3DsoRzUM= -----END CERTIFICATE-----Generated at Mon Jun 16 15:36:13 2025 by rpki-client