$ rpki-client -vvf repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft File: 510BADD365AB1A82795AF2361991094E4847999C.mft (raw, json) Hash identifier: QCxJL6XnxfCzMpiKlBW5lbsOehxfCUVpkMY5kdMu8vo= Subject key identifier: B7:9C:29:81:75:6E:F2:0D:6B:A9:2A:19:E0:3F:30:19:03:E1:CD:14 Authority key identifier: 51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C Certificate issuer: /CN=510BADD365AB1A82795AF2361991094E4847999C Certificate serial: 58B8C4D69A2D4BC26C8A4041EAC85DD5F94B105A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft Manifest number: 02DA Signing time: Sun 15 Jun 2025 19:21:05 +0000 Manifest this update: Sun 15 Jun 2025 19:16:05 +0000 Manifest next update: Wed 18 Jun 2025 21:27:05 +0000 Files and hashes: 1: 510BADD365AB1A82795AF2361991094E4847999C.crl (hash: caBezmZceedrinCxF4leodULDZmJEKwzbPlxRfieNG0=) 2: 3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa (hash: GjYhQrMQxoOj06ZU/LWm3+cV8+5MUt2+C4M5JDYk5Kg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.crl rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b8:c4:d6:9a:2d:4b:c2:6c:8a:40:41:ea:c8:5d:d5:f9:4b:10:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510BADD365AB1A82795AF2361991094E4847999C Validity Not Before: Jun 15 19:16:05 2025 GMT Not After : Jun 18 21:27:05 2025 GMT Subject: CN=B79C2981756EF20D6BA92A19E03F301903E1CD14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:5c:f1:57:f5:fb:ca:79:85:f8:4b:d4:0d: 6c:b5:f9:79:5b:bb:09:12:1f:23:94:51:11:ca:28: bc:46:4e:1b:9d:c2:8c:4c:fa:46:5f:08:8b:74:27: 23:c0:3d:79:c9:8e:8c:ca:54:a3:51:53:66:45:1a: 01:77:df:78:4a:3d:d4:a2:2f:53:89:06:78:d8:d0: f2:66:36:73:89:a0:cb:1c:4b:24:c6:07:c3:ff:f5: 45:b0:45:11:f7:a7:79:f0:6c:a8:7e:e0:31:71:ed: 51:98:8e:a0:23:5b:47:26:0e:2d:a1:5e:1e:e7:21: 5f:8b:a7:f0:9c:06:ed:ea:92:19:c0:78:a8:3f:f5: 1b:9e:87:c8:f1:94:6d:0a:5c:c7:f4:2e:fb:bd:1f: 0c:c6:a0:22:a9:7e:fa:d4:ba:a3:14:40:63:59:c2: ed:47:e9:2a:2b:fa:ed:b9:3d:b7:ae:13:cf:1f:3e: a2:c8:25:80:4e:e1:d7:79:43:a7:14:31:d8:d5:9b: ee:32:bf:3b:fc:61:5a:6a:97:3b:fd:f5:f9:3b:bf: 3c:12:32:a4:8f:a0:c2:57:c4:8c:87:4b:69:fe:75: 2a:38:d3:2c:db:0e:5b:14:a1:3d:0d:6c:03:e4:8a: 73:e0:9d:9a:72:52:0c:06:e5:75:c2:ad:f1:28:41: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9C:29:81:75:6E:F2:0D:6B:A9:2A:19:E0:3F:30:19:03:E1:CD:14 X509v3 Authority Key Identifier: keyid:51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:4f:28:3c:2e:3f:cc:a5:7f:24:65:a6:94:70:ce:b0:d4:95: 04:58:0a:04:e4:81:21:d7:84:15:c5:97:5c:19:9f:01:44:f6: ea:5a:74:6c:32:8a:ca:b3:56:fd:52:1c:7a:06:f8:3d:66:87: 64:b3:e0:ed:bc:c4:1c:c2:c6:30:46:c0:c1:43:27:3a:ca:e4: 98:d9:4a:ba:e0:de:5c:70:20:b6:5b:b1:3c:0d:1b:52:99:5f: 1d:fd:f2:18:a5:23:31:ac:05:44:1d:81:c9:a5:4f:26:c7:c2: e7:2e:6b:38:7b:04:40:f0:29:e9:9b:8b:66:9b:71:06:9f:92: 9a:9c:e5:6e:f9:ca:e9:a1:8d:c7:30:7f:3d:7f:7a:e8:8d:e1: 66:56:0e:12:4b:ad:5f:20:23:6c:9f:ee:a7:c3:0b:cc:92:dc: 37:e0:89:51:52:55:0a:f2:3f:1d:5b:64:94:3a:53:60:38:a5: d9:2e:f0:0d:6b:53:4b:cc:d7:c5:9d:ee:4b:a7:26:4c:39:8c: 3a:32:a7:36:c2:24:fe:c9:0a:9a:08:2d:ec:d9:7e:ea:ba:10: 0d:da:ba:48:f5:aa:9e:d4:d4:3b:56:39:fd:f3:c5:fd:82:6a: 25:ce:38:0f:b9:10:f2:8c:1a:24:7b:f1:12:83:8a:2e:fb:2d: 45:c1:ab:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLjE1potS8JsikBB6shd1flLEFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwQkFERDM2NUFCMUE4Mjc5NUFGMjM2MTk5MTA5NEU0 ODQ3OTk5QzAeFw0yNTA2MTUxOTE2MDVaFw0yNTA2MTgyMTI3MDVaMDMxMTAvBgNV BAMTKEI3OUMyOTgxNzU2RUYyMEQ2QkE5MkExOUUwM0YzMDE5MDNFMUNEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvq1zxV/X7ynmF+EvUDWy1+Xlb uwkSHyOUURHKKLxGThudwoxM+kZfCIt0JyPAPXnJjozKVKNRU2ZFGgF333hKPdSi L1OJBnjY0PJmNnOJoMscSyTGB8P/9UWwRRH3p3nwbKh+4DFx7VGYjqAjW0cmDi2h Xh7nIV+Lp/CcBu3qkhnAeKg/9Rueh8jxlG0KXMf0Lvu9HwzGoCKpfvrUuqMUQGNZ wu1H6Sor+u25PbeuE88fPqLIJYBO4dd5Q6cUMdjVm+4yvzv8YVpqlzv99fk7vzwS MqSPoMJXxIyHS2n+dSo40yzbDlsUoT0NbAPkinPgnZpyUgwG5XXCrfEoQZ13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt5wpgXVu8g1rqSoZ4D8wGQPhzRQwHwYDVR0j BBgwFoAUUQut02WrGoJ5WvI2GZEJTkhHmZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTRiYWE3Mi02NTRmLTRiODAtOGZjNy1mM2YyN2JjZGQzNDAvMC81MTBCQUREMzY1 QUIxQTgyNzk1QUYyMzYxOTkxMDk0RTQ4NDc5OTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwQkFERDM2NUFCMUE4Mjc5NUFGMjM2MTk5MTA5NEU0ODQ3 OTk5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU0YmFhNzItNjU0Zi00YjgwLThm YzctZjNmMjdiY2RkMzQwLzAvNTEwQkFERDM2NUFCMUE4Mjc5NUFGMjM2MTk5MTA5 NEU0ODQ3OTk5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNPKDwuP8ylfyRlppRwzrDUlQRYCgTkgSHX hBXFl1wZnwFE9upadGwyisqzVv1SHHoG+D1mh2Sz4O28xBzCxjBGwMFDJzrK5JjZ Srrg3lxwILZbsTwNG1KZXx398hilIzGsBUQdgcmlTybHwucuazh7BEDwKembi2ab cQafkpqc5W75yumhjccwfz1/euiN4WZWDhJLrV8gI2yf7qfDC8yS3DfgiVFSVQry Px1bZJQ6U2A4pdku8A1rU0vM18Wd7kunJkw5jDoypzbCJP7JCpoILezZfuq6EA3a ukj1qp7U1DtWOf3zxf2CaiXOOA+5EPKMGiR78RKDii77LUXBqxc= -----END CERTIFICATE-----Generated at Mon Jun 16 00:43:06 2025 by rpki-client