$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft File: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft (raw, json) Hash identifier: Y9DDIYpYzMkkW9WryatXX3QNufxIuNJyQsO7gIVcONc= Subject key identifier: 1B:CA:22:44:6E:5F:F3:95:65:17:FD:23:73:F3:3B:0D:D2:31:14:4E Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD Certificate issuer: /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Certificate serial: 44C8CFF3730D100126DE4690EDE0EDEA82B18D94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft Manifest number: 0521 Signing time: Mon 03 Nov 2025 23:41:20 +0000 Manifest this update: Mon 03 Nov 2025 23:36:20 +0000 Manifest next update: Fri 07 Nov 2025 07:51:20 +0000 Files and hashes: 1: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: j21itrf8qD4AmUrxncy40ymX8U/GV6CW8szjNUym4g4=) 2: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl (hash: 3qLp0PYVDIC1gwe1wyuI6St7rpaeo/4IcNSbrVHJ3Qs=) 3: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: ceBLgXby2aRGoAlIoNZmevBafi2ZgxeFVTgfIExcxzY=) 4: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 624g30p2voUe7YOI6fxkypPwiKquVP6kSsxSvqN561I=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: Ts5xtS1oQbReAZqtallUwZhr/nW63EWdb9tsEvZsE08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c8:cf:f3:73:0d:10:01:26:de:46:90:ed:e0:ed:ea:82:b1:8d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Validity Not Before: Nov 3 23:36:20 2025 GMT Not After : Nov 7 07:51:20 2025 GMT Subject: CN=1BCA22446E5FF3956517FD2373F33B0DD231144E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:0a:10:b8:20:9d:32:f3:62:f6:b9:65:72: cb:71:b4:be:b1:a0:4c:c2:14:60:da:24:c0:2e:3d: ad:36:d0:c6:a1:50:84:32:3c:a7:03:50:55:bd:59: b3:86:0e:ef:64:f0:48:1a:5f:47:bc:0a:1d:0b:3a: 17:56:2f:c4:9d:91:17:18:04:90:72:9a:8d:23:86: 32:aa:6a:1e:19:db:d0:0a:7d:43:8d:9a:d3:5d:99: 58:b2:e6:88:79:b8:40:9e:36:98:82:8e:ea:d3:cc: 9c:dd:91:27:4f:00:fa:36:af:93:4c:8a:89:e3:fb: e0:4d:f0:9b:2d:73:e5:f3:a4:3f:02:e8:82:34:de: 82:b1:06:68:ec:6f:72:96:92:3d:7c:5c:14:ae:1d: 50:db:71:83:08:a7:87:03:d0:e0:81:5f:cb:46:c9: 80:d6:f4:06:4b:c5:ba:19:e8:7d:b1:e0:80:0a:3d: e6:2f:fb:eb:81:f6:3d:2e:e0:e7:1e:ae:b7:7d:10: b6:88:9c:66:a1:ea:a8:ad:c5:06:de:ec:dc:a5:f4: 69:d0:5e:b9:9d:72:6f:d3:4c:a1:ff:2b:8b:07:d9: a8:99:24:8a:e8:31:6b:09:ea:02:f2:c7:9e:96:ee: f7:e2:47:7e:13:51:fb:2a:85:e0:ac:41:e7:13:ae: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CA:22:44:6E:5F:F3:95:65:17:FD:23:73:F3:3B:0D:D2:31:14:4E X509v3 Authority Key Identifier: keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1f:7e:e9:15:9d:cc:45:08:d6:59:29:1c:07:72:42:e0:19: 6f:3d:2e:33:13:6d:2d:37:dd:8a:47:94:84:3b:a1:0d:58:23: 21:e7:50:6e:ac:5b:3d:e0:71:64:ac:55:c0:ab:11:03:1a:12: d8:a5:87:7c:ae:15:e1:07:c0:b9:ff:41:85:3f:51:63:4a:8d: ea:fa:21:8e:ee:59:3b:e9:85:5c:0c:cf:88:9f:0f:47:e0:a5: 87:05:c0:32:a4:08:13:de:7e:68:31:77:4e:22:fa:cc:e9:7c: 2e:09:ff:36:78:63:e8:e1:ae:4d:91:ae:3f:2f:27:3e:9e:ad: 6d:22:c4:36:fe:64:43:f0:b5:77:56:2a:4d:de:76:14:f7:c2: b1:a5:41:45:83:8f:9c:43:85:13:05:ef:3b:b1:30:4f:ca:af: 7d:0b:af:e0:cf:60:43:79:66:c7:20:a8:69:6a:aa:8a:39:3b: 10:48:21:98:d9:de:5c:dc:e7:a7:71:47:d0:3a:8e:56:7d:90: bb:09:ca:5b:06:e6:8f:18:05:8b:47:63:e0:ef:92:59:52:17: a3:2f:28:7a:e6:9c:33:50:f9:0c:e6:65:83:a6:1a:7e:88:77: ce:f7:d9:90:8a:ca:29:a8:15:72:08:fc:0b:03:db:2c:61:77: 8e:87:b4:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMjP83MNEAEm3kaQ7eDt6oKxjZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy Q0M5QThBRDAeFw0yNTExMDMyMzM2MjBaFw0yNTExMDcwNzUxMjBaMDMxMTAvBgNV BAMTKDFCQ0EyMjQ0NkU1RkYzOTU2NTE3RkQyMzczRjMzQjBERDIzMTE0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/woQuCCdMvNi9rllcstxtL6x oEzCFGDaJMAuPa020MahUIQyPKcDUFW9WbOGDu9k8EgaX0e8Ch0LOhdWL8SdkRcY BJBymo0jhjKqah4Z29AKfUONmtNdmViy5oh5uECeNpiCjurTzJzdkSdPAPo2r5NM ionj++BN8Jstc+XzpD8C6II03oKxBmjsb3KWkj18XBSuHVDbcYMIp4cD0OCBX8tG yYDW9AZLxboZ6H2x4IAKPeYv++uB9j0u4Ocerrd9ELaInGah6qitxQbe7Nyl9GnQ Xrmdcm/TTKH/K4sH2aiZJIroMWsJ6gLyx56W7vfiR34TUfsqheCsQecTrm5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8oiRG5f85VlF/0jc/M7DdIxFE4wHwYDVR0j BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5 QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5 QThBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0 MzMyQ0M5QThBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8ffukVncxFCNZZKRwHckLgGW89LjMTbS03 3YpHlIQ7oQ1YIyHnUG6sWz3gcWSsVcCrEQMaEtilh3yuFeEHwLn/QYU/UWNKjer6 IY7uWTvphVwMz4ifD0fgpYcFwDKkCBPefmgxd04i+szpfC4J/zZ4Y+jhrk2Rrj8v Jz6erW0ixDb+ZEPwtXdWKk3edhT3wrGlQUWDj5xDhRMF7zuxME/Kr30Lr+DPYEN5 ZscgqGlqqoo5OxBIIZjZ3lzc56dxR9A6jlZ9kLsJylsG5o8YBYtHY+DvkllSF6Mv KHrmnDNQ+QzmZYOmGn6Id8732ZCKyimoFXII/AsD2yxhd46HtH4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:08:18 2025 by rpki-client