$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: 5X7SgowEb94n6ojFiBpX64hcxLkecwnTo7muTSY5AQU= Subject key identifier: CF:0B:DB:0E:16:E4:7A:44:C9:1C:90:C9:58:D8:AE:72:98:A5:93:66 Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 2F2BF85958E9E72E87913D1E6A6996AEBFF3D591 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: 6D Signing time: Tue 17 Jun 2025 15:31:35 +0000 Manifest this update: Tue 17 Jun 2025 15:26:35 +0000 Manifest next update: Sat 21 Jun 2025 02:11:35 +0000 Files and hashes: 1: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: J4isEyK1ySJtCWVpvhGVyfTYrZDUM8aentftYxqK7KA=) 2: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: EfPoQqtxgLuobpoazcJOzehsaHb5tIneq6Zek5DzcaE=) 3: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: jQmGk9PE6lJob7sh3ntgocQ4TUvOb30tI6U2ZzySe3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 02:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2b:f8:59:58:e9:e7:2e:87:91:3d:1e:6a:69:96:ae:bf:f3:d5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Jun 17 15:26:35 2025 GMT Not After : Jun 21 02:11:35 2025 GMT Subject: CN=CF0BDB0E16E47A44C91C90C958D8AE7298A59366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:33:26:d5:47:9a:74:a9:9b:79:c6:1b:6c: 0e:8f:f2:04:38:eb:c5:ee:31:a8:07:9f:47:f7:8e: 97:78:d6:2d:56:4e:27:67:55:01:85:5e:8d:6b:44: 25:18:4c:97:a9:53:f0:7a:16:e3:ba:ad:e7:16:cf: 43:e3:dd:da:90:29:b5:2d:3f:30:f6:00:28:e7:d7: f8:85:5c:f0:3b:d1:ad:d0:e3:aa:7e:57:39:cc:e4: 59:e1:66:4c:c0:b4:7b:c9:d6:74:96:c6:35:db:d1: c2:1f:ec:82:e2:e7:b3:2f:75:d3:a8:50:28:6a:36: 72:af:d8:6e:b1:dc:5e:77:64:97:03:2c:8d:5b:76: 6b:60:c0:7e:55:19:41:db:91:02:7e:a7:09:2e:3a: a9:24:99:a8:6f:ca:1a:71:68:f3:a3:ed:2e:4c:55: 4a:38:74:85:10:0d:4f:f2:8c:07:fa:21:fd:4c:59: 5c:70:a0:42:c2:ca:7b:8b:e7:c4:b5:73:51:31:b6: d2:e9:6e:42:ac:c5:13:50:a2:f0:35:bb:6c:6a:dc: 09:a2:8f:be:de:93:4d:b3:4f:a7:18:8a:5b:14:7a: ed:a0:f4:ff:7f:f3:a4:ac:03:ce:4a:7e:9b:2b:e2: 88:cb:10:e8:e9:07:8f:8c:98:02:ce:2b:b0:60:01: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0B:DB:0E:16:E4:7A:44:C9:1C:90:C9:58:D8:AE:72:98:A5:93:66 X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f4:db:c4:cb:e8:40:1a:35:8d:3a:4d:47:48:1d:0b:e4:21: 10:46:87:51:f7:0a:5e:ca:82:17:55:d3:d3:44:b9:a1:0b:19: 1c:23:e1:f3:69:b6:af:20:fd:08:d7:9a:30:0a:fa:e2:ff:37: e4:a7:1d:0e:3e:0c:3e:0e:46:97:a5:20:34:cf:3e:ce:fa:42: 3a:8e:7d:80:82:6e:f0:de:6e:18:89:af:e4:da:30:b6:d0:95: 5e:51:90:80:dd:c1:e9:20:36:b1:12:23:16:95:8e:95:2f:2b: f1:a1:10:ce:39:54:09:e2:e4:81:11:46:b3:01:b8:5d:d7:87: 5c:25:48:a0:73:43:3b:96:9b:29:4f:82:43:f7:fe:b1:4d:a3: c3:e7:11:a4:3f:59:8e:8f:e7:8e:ee:e5:61:7d:4c:df:60:6c: 8e:e6:b8:e0:79:24:b5:ee:e9:65:2f:43:50:f9:63:98:66:0f: da:ae:c4:da:02:f5:26:bf:0d:15:3e:50:76:13:ad:b0:2b:06: 96:cb:0c:ed:6a:4f:92:db:a9:8b:e1:52:b3:bd:23:8a:65:fd: c9:6d:76:9a:03:4d:3e:29:19:fc:94:ba:fe:40:3f:6d:49:dc: 08:b0:77:cb:77:8a:ba:21:2b:ee:01:2f:83:b8:30:f2:0f:6c: ed:9c:05:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyv4WVjp5y6HkT0eammWrr/z1ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNTA2MTcxNTI2MzVaFw0yNTA2MjEwMjExMzVaMDMxMTAvBgNV BAMTKENGMEJEQjBFMTZFNDdBNDRDOTFDOTBDOTU4RDhBRTcyOThBNTkzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqwjMm1UeadKmbecYbbA6P8gQ4 68XuMagHn0f3jpd41i1WTidnVQGFXo1rRCUYTJepU/B6FuO6recWz0Pj3dqQKbUt PzD2ACjn1/iFXPA70a3Q46p+VznM5FnhZkzAtHvJ1nSWxjXb0cIf7ILi57MvddOo UChqNnKv2G6x3F53ZJcDLI1bdmtgwH5VGUHbkQJ+pwkuOqkkmahvyhpxaPOj7S5M VUo4dIUQDU/yjAf6If1MWVxwoELCynuL58S1c1ExttLpbkKsxRNQovA1u2xq3Ami j77ek02zT6cYilsUeu2g9P9/86SsA85Kfpsr4ojLEOjpB4+MmALOK7BgAfkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzwvbDhbkekTJHJDJWNiucpilk2YwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn028TL6EAaNY06TUdIHQvkIRBGh1H3Cl7K ghdV09NEuaELGRwj4fNptq8g/QjXmjAK+uL/N+SnHQ4+DD4ORpelIDTPPs76QjqO fYCCbvDebhiJr+TaMLbQlV5RkIDdwekgNrESIxaVjpUvK/GhEM45VAni5IERRrMB uF3Xh1wlSKBzQzuWmylPgkP3/rFNo8PnEaQ/WY6P547u5WF9TN9gbI7muOB5JLXu 6WUvQ1D5Y5hmD9quxNoC9Sa/DRU+UHYTrbArBpbLDO1qT5LbqYvhUrO9I4pl/clt dpoDTT4pGfyUuv5AP21J3Aiwd8t3irohK+4BL4O4MPIPbO2cBXs= -----END CERTIFICATE-----Generated at Tue Jun 17 19:18:59 2025 by rpki-client