$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: IjlPh1d2SDt7XmeoBqPxkBPmb/K2gI5YntwhPkj2lP0= Subject key identifier: 48:32:F0:A7:8A:D7:40:41:DB:60:68:CB:AB:0E:FB:DB:57:D6:9D:A1 Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 38ECA89EE90499301529E94570E1264495AD98FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: 83 Signing time: Wed 06 Aug 2025 03:21:39 +0000 Manifest this update: Wed 06 Aug 2025 03:16:39 +0000 Manifest next update: Sat 09 Aug 2025 04:54:39 +0000 Files and hashes: 1: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: b4vxNzwiVFmab1foHihdg9m0FlN5YBthhvYoHgQTOdk=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: J4isEyK1ySJtCWVpvhGVyfTYrZDUM8aentftYxqK7KA=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: EfPoQqtxgLuobpoazcJOzehsaHb5tIneq6Zek5DzcaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ec:a8:9e:e9:04:99:30:15:29:e9:45:70:e1:26:44:95:ad:98:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Aug 6 03:16:39 2025 GMT Not After : Aug 9 04:54:39 2025 GMT Subject: CN=4832F0A78AD74041DB6068CBAB0EFBDB57D69DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:7e:ef:28:24:b9:cc:73:80:6c:ed:f5:9b: c0:ab:69:22:ee:ae:3f:03:cf:6b:0c:7e:28:09:17: 57:ae:24:98:cc:0a:6a:c4:82:1a:31:23:5a:7c:f4: ef:7f:2e:2a:8d:86:a8:bb:4a:49:e2:00:8f:ac:b9: 20:de:d0:96:05:88:69:8d:60:e5:ea:b1:18:99:5a: d0:b4:c5:3a:19:42:c2:ef:e9:22:c3:2d:f4:7f:99: 94:b9:27:f5:de:ee:b6:10:95:7f:54:eb:45:6f:7e: 6e:cd:0d:11:c7:ba:00:e3:e7:89:0b:dd:89:58:8f: 6b:82:0c:79:cb:87:78:5c:83:b2:6c:ff:d0:03:a8: 3c:a1:a8:3b:57:dc:de:14:24:d0:3c:66:d6:26:65: 15:16:71:7e:c7:05:83:3f:93:0c:39:00:85:e6:10: a8:c9:76:87:2a:0f:46:20:d3:c7:9c:90:2a:70:e7: 82:11:d2:83:87:a8:7a:86:bb:ce:43:57:b6:16:fe: 30:40:6a:fa:c4:ea:ba:bd:9f:73:12:58:8c:90:5d: 1e:10:b5:f1:2f:e4:80:75:97:08:21:66:0f:66:7d: 84:7e:3e:a1:f4:2c:92:63:2d:49:d0:7f:1a:df:a4: 54:43:31:47:0c:a5:c3:47:be:ce:96:45:48:24:cd: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:32:F0:A7:8A:D7:40:41:DB:60:68:CB:AB:0E:FB:DB:57:D6:9D:A1 X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:37:f4:a0:03:1d:7b:91:11:ad:08:0c:ad:1a:1b:1f:9f:bf: 7f:6d:c3:55:fa:f7:e5:93:1e:21:15:b0:ac:16:e0:1a:69:b1: be:85:82:11:58:e5:67:9e:99:ba:db:fe:5c:85:5d:48:4f:fa: bf:ed:92:64:04:8b:2c:b9:bf:c0:81:05:f0:1d:97:4e:4b:8c: 50:c7:fe:45:4f:93:93:9c:18:a7:27:a4:49:d8:a8:14:69:88: 7d:d7:7f:0c:a6:ba:36:27:09:63:3d:61:69:cb:32:a4:36:7d: b3:39:66:f0:0c:c4:5a:25:40:b4:96:bb:d5:bc:4a:ec:88:8f: d3:71:f3:9b:0d:b9:7a:51:cc:74:c9:01:e7:12:03:fb:5c:2d: da:0b:80:cf:cb:04:41:49:f4:79:ed:69:12:23:76:cd:55:f6: a6:f8:ba:96:c0:94:ed:75:9a:9e:db:d7:d0:2a:f0:a4:a2:c4: 53:0e:2c:4e:a6:57:d7:78:88:d0:fe:00:f3:c5:2f:61:c3:3f: 19:e0:cf:4c:f8:6e:06:68:85:1c:0e:6c:46:c2:65:e3:ef:69: 07:97:5e:70:a3:0d:77:32:5a:17:a4:b7:f6:7d:b0:ac:c4:56: 14:63:a2:4c:c8:7d:44:26:a6:f9:1c:6d:08:cf:bb:c6:24:30: 9a:f1:02:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOyonukEmTAVKelFcOEmRJWtmPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNTA4MDYwMzE2MzlaFw0yNTA4MDkwNDU0MzlaMDMxMTAvBgNV BAMTKDQ4MzJGMEE3OEFENzQwNDFEQjYwNjhDQkFCMEVGQkRCNTdENjlEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSL37vKCS5zHOAbO31m8CraSLu rj8Dz2sMfigJF1euJJjMCmrEghoxI1p89O9/LiqNhqi7SkniAI+suSDe0JYFiGmN YOXqsRiZWtC0xToZQsLv6SLDLfR/mZS5J/Xe7rYQlX9U60Vvfm7NDRHHugDj54kL 3YlYj2uCDHnLh3hcg7Js/9ADqDyhqDtX3N4UJNA8ZtYmZRUWcX7HBYM/kww5AIXm EKjJdocqD0Yg08eckCpw54IR0oOHqHqGu85DV7YW/jBAavrE6rq9n3MSWIyQXR4Q tfEv5IB1lwghZg9mfYR+PqH0LJJjLUnQfxrfpFRDMUcMpcNHvs6WRUgkzbwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDLwp4rXQEHbYGjLqw7721fWnaEwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs39KADHXuREa0IDK0aGx+fv39tw1X69+WT HiEVsKwW4Bppsb6FghFY5Weembrb/lyFXUhP+r/tkmQEiyy5v8CBBfAdl05LjFDH /kVPk5OcGKcnpEnYqBRpiH3XfwymujYnCWM9YWnLMqQ2fbM5ZvAMxFolQLSWu9W8 SuyIj9Nx85sNuXpRzHTJAecSA/tcLdoLgM/LBEFJ9HntaRIjds1V9qb4upbAlO11 mp7b19Aq8KSixFMOLE6mV9d4iND+APPFL2HDPxngz0z4bgZohRwObEbCZePvaQeX XnCjDXcyWhekt/Z9sKzEVhRjokzIfUQmpvkcbQjPu8YkMJrxAqU= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:39 2025 by rpki-client