$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: 1IIhAovLFoex9s1jxJ5PI1Oel0UHCVV4zDEYe314uXA= Subject key identifier: C5:64:69:28:2F:6E:E0:82:3C:EC:6C:70:91:EB:13:AA:22:F9:DE:57 Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 4AE1EB8CB9892CF9A883A88A20046D02DA50D335 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 02CE Signing time: Wed 06 Aug 2025 18:40:53 +0000 Manifest this update: Wed 06 Aug 2025 18:35:53 +0000 Manifest next update: Sun 10 Aug 2025 00:33:53 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) 2: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: KiO1UZiVCIx15bkuhcfXqIbIOgutPq8Y7hSNqzFIhxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e1:eb:8c:b9:89:2c:f9:a8:83:a8:8a:20:04:6d:02:da:50:d3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Aug 6 18:35:53 2025 GMT Not After : Aug 10 00:33:53 2025 GMT Subject: CN=C56469282F6EE0823CEC6C7091EB13AA22F9DE57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:77:ed:2e:db:bf:c0:5b:2d:bb:ed:a7:70: 2f:bb:b7:26:8d:ac:4a:34:cb:3e:fd:89:53:73:ce: e6:6f:b7:7e:b3:2d:3b:d3:7b:14:cb:23:5e:73:f8: c5:6d:8b:2d:7b:b2:cb:09:a1:83:26:47:d8:59:38: e9:ac:ae:ba:c8:fe:d4:6f:0b:5f:e2:d3:f2:a4:13: 99:0e:d2:eb:00:21:90:d7:c8:1c:d7:11:ff:c8:34: f4:37:a7:f9:78:eb:f5:c0:25:db:0f:31:9b:d6:22: d1:44:81:18:1a:82:dc:a5:d4:41:44:03:a2:c2:ed: 5a:52:b1:79:a1:00:63:f2:66:e3:a2:eb:de:6b:e6: 4d:c4:49:ac:70:58:c4:43:e3:ec:c2:45:53:0f:62: d2:a8:af:ce:bc:f1:86:42:70:44:b0:3b:8d:65:a8: 75:50:36:d4:fa:9f:7e:b6:1a:40:ff:4b:f9:e1:9e: 1e:a3:24:ac:93:b5:2a:90:6b:ed:a5:13:ff:1f:23: 8b:d6:45:eb:34:a7:39:a7:15:69:36:8f:f5:40:f5: b5:b9:88:99:b9:b9:d5:f7:8c:d5:0f:ef:53:f2:84: c6:a9:cc:52:e4:b2:05:e4:d9:95:24:c9:fb:71:bb: 1e:9a:18:c3:a6:17:f0:33:32:03:0d:26:bc:03:2a: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:64:69:28:2F:6E:E0:82:3C:EC:6C:70:91:EB:13:AA:22:F9:DE:57 X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ba:f0:f4:0a:76:7d:ab:ae:88:81:b7:c8:c0:31:2a:7b:0d: 39:f2:eb:60:03:1e:f2:33:06:85:76:81:80:72:b3:3a:58:69: 7c:46:e3:56:94:d7:fc:55:67:9c:0c:d5:08:a9:49:3c:e9:ee: 85:6b:8b:22:31:fd:34:ef:5b:f7:6a:69:fb:30:6a:fc:c8:1b: 7c:fd:49:01:fc:5d:63:83:3b:97:7a:d7:bd:46:1f:73:66:9f: 82:2c:b0:4d:93:bc:e3:9c:70:f9:58:15:7b:1c:c2:26:fc:c1: 80:e5:67:ed:0a:32:ce:23:fd:13:ec:ef:fa:85:9b:61:56:01: 0e:14:0e:19:46:fe:04:4f:56:2f:fc:9b:ea:30:42:c8:40:15: 6b:60:aa:0f:9b:e2:3a:b1:9b:9e:2c:fa:d7:81:f6:c4:e1:f0: d3:4e:e0:32:02:f0:57:52:c0:b5:2e:a8:53:17:15:1a:28:ad: 81:ea:6a:f1:c6:1a:4e:a0:ab:e5:a1:1e:26:f8:e8:34:bc:88: a7:69:9f:5c:6f:e3:8c:8a:a7:00:65:9d:06:58:40:a9:ed:21: 25:28:11:0d:14:37:60:68:d4:65:f0:ec:7a:d1:73:cc:93:2f: 1e:56:13:aa:ec:c4:0d:b1:cd:ee:9b:44:d9:99:9c:fb:49:9c: 7c:fb:58:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuHrjLmJLPmog6iKIARtAtpQ0zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNTA4MDYxODM1NTNaFw0yNTA4MTAwMDMzNTNaMDMxMTAvBgNV BAMTKEM1NjQ2OTI4MkY2RUUwODIzQ0VDNkM3MDkxRUIxM0FBMjJGOURFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWnftLtu/wFstu+2ncC+7tyaN rEo0yz79iVNzzuZvt36zLTvTexTLI15z+MVtiy17sssJoYMmR9hZOOmsrrrI/tRv C1/i0/KkE5kO0usAIZDXyBzXEf/INPQ3p/l46/XAJdsPMZvWItFEgRgagtyl1EFE A6LC7VpSsXmhAGPyZuOi695r5k3ESaxwWMRD4+zCRVMPYtKor8688YZCcESwO41l qHVQNtT6n362GkD/S/nhnh6jJKyTtSqQa+2lE/8fI4vWRes0pzmnFWk2j/VA9bW5 iJm5udX3jNUP71PyhMapzFLksgXk2ZUkyftxux6aGMOmF/AzMgMNJrwDKpDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWRpKC9u4II87GxwkesTqiL53lcwHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL268PQKdn2rroiBt8jAMSp7DTny62ADHvIz BoV2gYByszpYaXxG41aU1/xVZ5wM1QipSTzp7oVriyIx/TTvW/dqafswavzIG3z9 SQH8XWODO5d6171GH3Nmn4IssE2TvOOccPlYFXscwib8wYDlZ+0KMs4j/RPs7/qF m2FWAQ4UDhlG/gRPVi/8m+owQshAFWtgqg+b4jqxm54s+teB9sTh8NNO4DIC8FdS wLUuqFMXFRoorYHqavHGGk6gq+WhHib46DS8iKdpn1xv44yKpwBlnQZYQKntISUo EQ0UN2Bo1GXw7HrRc8yTLx5WE6rsxA2xze6bRNmZnPtJnHz7WBM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:12 2025 by rpki-client