$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: MAkN7xCRoWRn+2DEBA90NcPQgUluP9A9pN+QOainH8Q= Subject key identifier: 58:75:84:5B:ED:DA:D0:F5:42:44:34:77:C1:BA:DD:82:A4:69:7A:71 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 09BA805AD33E43F6F2403F6B0D1C6102A1A46858 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 04ED Signing time: Tue 17 Jun 2025 12:31:29 +0000 Manifest this update: Tue 17 Jun 2025 12:26:29 +0000 Manifest next update: Fri 20 Jun 2025 14:07:29 +0000 Files and hashes: 1: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=) 2: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=) 3: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=) 4: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: NCwFKfYg4WjQF/vEmyBLcS2s5PqakkLGax3JvYTJyYc=) 5: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=) 6: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=) 7: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ba:80:5a:d3:3e:43:f6:f2:40:3f:6b:0d:1c:61:02:a1:a4:68:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Jun 17 12:26:29 2025 GMT Not After : Jun 20 14:07:29 2025 GMT Subject: CN=5875845BEDDAD0F542443477C1BADD82A4697A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:ec:36:10:05:ce:d7:06:92:dc:33:8f:75: 5a:57:b5:7a:a6:17:d4:37:65:96:16:22:0f:48:30: f4:a1:06:20:6d:2f:85:4d:45:a2:cd:d3:40:90:68: fb:ba:2e:6b:5e:ce:3b:79:1a:58:ec:ff:6f:97:7e: 19:0b:40:34:c5:6a:4c:7d:08:20:ba:a7:08:cc:e7: 97:f9:a0:ae:90:eb:c5:eb:9f:37:d4:b3:6e:8a:d2: 72:10:1d:84:97:84:c9:ea:54:5d:42:6d:2b:02:9e: 3c:92:a8:46:5c:c2:a7:1c:6c:64:a1:68:b3:13:ef: ad:81:88:98:b8:15:51:63:de:b9:95:fc:e6:1c:57: 99:0b:13:d5:93:24:76:dd:9d:18:e5:57:d0:be:c0: eb:fb:36:73:25:3b:cb:77:b3:fc:f2:99:4c:a0:86: 12:bb:eb:69:ca:99:07:86:a6:1a:79:32:e8:1d:d3: f3:9a:32:42:2f:99:a0:74:68:ca:b3:74:54:01:f5: 7f:94:a2:f5:7e:89:9b:02:29:05:44:3a:78:2f:d6: 0d:08:fa:0f:13:2a:ad:6d:05:71:3a:2f:2e:19:67: 53:b1:8f:4a:12:35:38:77:bf:4b:3e:ec:ef:e0:b7: a2:e4:b1:70:a9:e5:5d:fc:e8:33:44:b4:c6:53:fd: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:75:84:5B:ED:DA:D0:F5:42:44:34:77:C1:BA:DD:82:A4:69:7A:71 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0e:4c:3f:8a:83:29:62:02:08:8b:36:88:e6:fb:c5:24:85: 75:bc:b6:0e:dc:28:2c:f6:d0:74:12:3f:3b:8f:33:c6:fd:46: fd:db:85:83:f1:b3:5f:59:02:58:91:f3:6f:36:a5:47:70:04: 87:b6:3c:d1:c5:12:e8:2e:39:11:0f:01:81:ac:6a:98:0e:c1: 32:35:fb:3c:79:3e:a5:17:92:79:fb:4a:94:45:39:b8:75:70: 1b:15:62:66:b3:81:47:cb:a8:48:80:c8:cc:5b:b7:f9:2b:2a: 56:1d:7c:89:c0:df:0d:ec:54:3e:9b:ed:14:0b:d2:c3:5b:35: e9:f3:35:3a:50:97:ca:6d:17:4f:31:12:54:93:89:06:3a:a6: 7e:3d:01:3b:3d:72:ea:c1:56:16:bb:8c:b9:1a:4b:45:46:91: db:f7:4f:0c:1f:1a:4b:06:07:ef:14:be:64:5c:bd:28:b3:0c: 99:fc:99:de:0c:b3:14:16:73:e7:b7:d4:41:1a:f0:e6:4b:aa: 0a:50:c9:02:a8:95:44:fe:dc:9d:7d:44:9e:07:27:76:7f:8e: b0:60:46:e7:d6:41:db:d7:05:3f:b7:87:22:db:b3:16:c0:03: cb:f8:99:fe:7a:93:2e:eb:52:2b:8c:17:75:96:50:89:70:d4: 51:f4:b2:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbqAWtM+Q/byQD9rDRxhAqGkaFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA2MTcxMjI2MjlaFw0yNTA2MjAxNDA3MjlaMDMxMTAvBgNV BAMTKDU4NzU4NDVCRUREQUQwRjU0MjQ0MzQ3N0MxQkFERDgyQTQ2OTdBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPc+w2EAXO1waS3DOPdVpXtXqm F9Q3ZZYWIg9IMPShBiBtL4VNRaLN00CQaPu6Lmtezjt5Gljs/2+XfhkLQDTFakx9 CCC6pwjM55f5oK6Q68XrnzfUs26K0nIQHYSXhMnqVF1CbSsCnjySqEZcwqccbGSh aLMT762BiJi4FVFj3rmV/OYcV5kLE9WTJHbdnRjlV9C+wOv7NnMlO8t3s/zymUyg hhK762nKmQeGphp5Mugd0/OaMkIvmaB0aMqzdFQB9X+UovV+iZsCKQVEOngv1g0I +g8TKq1tBXE6Ly4ZZ1Oxj0oSNTh3v0s+7O/gt6LksXCp5V386DNEtMZT/Z3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHWEW+3a0PVCRDR3wbrdgqRpenEwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0OTD+KgyliAgiLNojm+8UkhXW8tg7cKCz2 0HQSPzuPM8b9Rv3bhYPxs19ZAliR8282pUdwBIe2PNHFEuguOREPAYGsapgOwTI1 +zx5PqUXknn7SpRFObh1cBsVYmazgUfLqEiAyMxbt/krKlYdfInA3w3sVD6b7RQL 0sNbNenzNTpQl8ptF08xElSTiQY6pn49ATs9curBVha7jLkaS0VGkdv3TwwfGksG B+8UvmRcvSizDJn8md4MsxQWc+e31EEa8OZLqgpQyQKolUT+3J19RJ4HJ3Z/jrBg RufWQdvXBT+3hyLbsxbAA8v4mf56ky7rUiuMF3WWUIlw1FH0st8= -----END CERTIFICATE-----Generated at Tue Jun 17 15:41:39 2025 by rpki-client