$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: p0pXcfEVxWqYfrkEafdHADPFujfFQu/Q47AfbPYXfps= Subject key identifier: CD:9C:02:72:7A:57:C8:83:F0:EB:1F:23:5A:BF:07:3F:1F:6E:A4:2F Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 3217332E0DAD955D2A3F0D2D07D7A065E28FCCC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 02D6 Signing time: Wed 23 Jul 2025 07:50:02 +0000 Manifest this update: Wed 23 Jul 2025 07:45:02 +0000 Manifest next update: Sat 26 Jul 2025 08:18:02 +0000 Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=) 2: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: rFj3bUc+T3GShewLjbY1IP8lObUBYpM4OwQJL5/pJW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:17:33:2e:0d:ad:95:5d:2a:3f:0d:2d:07:d7:a0:65:e2:8f:cc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Jul 23 07:45:02 2025 GMT Not After : Jul 26 08:18:02 2025 GMT Subject: CN=CD9C02727A57C883F0EB1F235ABF073F1F6EA42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:86:5b:31:5a:e2:38:08:55:46:d9:91:d9: a3:43:11:1e:aa:37:c7:13:da:89:70:0d:b6:38:c3: de:b7:59:c1:1c:0d:84:9b:a1:fb:28:a3:24:f6:f1: 6e:05:0a:e7:08:b9:c1:74:44:ae:45:8d:91:a8:a4: 42:02:ea:a9:7d:af:a5:8a:41:46:fd:5e:60:f6:23: d8:f5:3d:35:13:ed:ad:97:80:7f:b4:9b:98:35:b8: 66:5d:b3:ae:24:c6:6f:ff:75:80:ee:35:d0:fd:e2: 54:2f:4a:6d:ec:ad:51:3b:83:d7:1b:aa:5f:32:a9: 78:af:a6:33:d4:fa:de:78:b3:dd:d2:8f:54:81:1a: 6c:23:68:83:2a:07:7b:3c:17:81:50:ee:ec:e8:a8: d2:28:aa:e5:ff:b3:32:9b:db:07:5f:b5:7d:39:6d: 27:01:3b:5d:05:99:1e:c6:b6:7d:f4:75:0c:35:a3: b2:25:77:6d:fb:41:b5:57:54:e0:50:5e:da:62:96: c3:d8:d4:c1:4e:07:cd:4f:60:ce:8a:0d:7f:1d:a3: 16:9e:b2:b6:6c:15:1c:af:32:3d:85:91:6c:f5:29: ed:70:d0:57:1c:ad:62:45:59:b4:e8:f8:83:69:70: 14:ff:ff:5c:46:eb:c4:1e:b8:4a:e0:b9:cc:e9:93: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:02:72:7A:57:C8:83:F0:EB:1F:23:5A:BF:07:3F:1F:6E:A4:2F X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:44:2a:09:42:f5:ca:e1:57:ad:9f:a9:e6:ee:a0:e1:26:8c: 9e:b9:4f:22:3b:0f:b4:2f:9e:67:be:c2:b1:cd:1e:8a:14:37: 9a:e9:38:31:e8:08:54:dc:97:0c:55:85:b2:35:06:72:3f:93: 45:53:67:af:0b:13:f0:4b:78:b7:46:93:ae:b1:03:38:52:de: a2:83:53:33:98:ec:e2:6e:0b:ba:a3:f4:37:d6:6b:7b:ec:80: 6d:a1:bd:ac:2e:01:31:74:fc:f7:f3:0b:ae:3a:e9:1a:d1:3e: ac:11:01:1a:45:b6:b9:67:d5:1e:b9:fb:d6:2a:71:29:f9:56: 68:c6:d8:01:13:84:b6:c8:cd:99:47:bd:f8:04:32:5c:8a:c5: 1c:34:1e:e9:3d:03:e1:09:dc:1d:83:15:0e:e7:38:9e:2b:e1: cf:b7:db:b8:eb:9a:f3:52:c1:ac:e2:b3:97:c6:cd:b1:5d:a3: 4d:e7:12:ca:ea:2b:a3:ab:41:9a:ee:62:96:f0:7e:b0:2c:d6: fc:8e:5b:09:d3:e8:3a:ab:50:e2:6e:e3:48:f7:91:19:c9:a8: 33:19:56:b1:3d:0c:9d:f1:95:b6:9b:53:14:f9:ae:e6:37:73: 67:73:c1:16:55:38:8c:9f:02:15:78:1c:44:99:06:74:ea:3d: 28:a8:ef:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhczLg2tlV0qPw0tB9egZeKPzMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTA3MjMwNzQ1MDJaFw0yNTA3MjYwODE4MDJaMDMxMTAvBgNV BAMTKENEOUMwMjcyN0E1N0M4ODNGMEVCMUYyMzVBQkYwNzNGMUY2RUE0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7IZbMVriOAhVRtmR2aNDER6q N8cT2olwDbY4w963WcEcDYSbofsooyT28W4FCucIucF0RK5FjZGopEIC6ql9r6WK QUb9XmD2I9j1PTUT7a2XgH+0m5g1uGZds64kxm//dYDuNdD94lQvSm3srVE7g9cb ql8yqXivpjPU+t54s93Sj1SBGmwjaIMqB3s8F4FQ7uzoqNIoquX/szKb2wdftX05 bScBO10FmR7Gtn30dQw1o7Ild237QbVXVOBQXtpilsPY1MFOB81PYM6KDX8doxae srZsFRyvMj2FkWz1Ke1w0FccrWJFWbTo+INpcBT//1xG68QeuErguczpk+kBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZwCcnpXyIPw6x8jWr8HPx9upC8wHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdEKglC9crhV62fqebuoOEmjJ65TyI7D7Qv nme+wrHNHooUN5rpODHoCFTclwxVhbI1BnI/k0VTZ68LE/BLeLdGk66xAzhS3qKD UzOY7OJuC7qj9DfWa3vsgG2hvawuATF0/PfzC6466RrRPqwRARpFtrln1R65+9Yq cSn5VmjG2AEThLbIzZlHvfgEMlyKxRw0Huk9A+EJ3B2DFQ7nOJ4r4c+327jrmvNS wazis5fGzbFdo03nEsrqK6OrQZruYpbwfrAs1vyOWwnT6DqrUOJu40j3kRnJqDMZ VrE9DJ3xlbabUxT5ruY3c2dzwRZVOIyfAhV4HESZBnTqPSio7yI= -----END CERTIFICATE-----Generated at Wed Jul 23 12:12:21 2025 by rpki-client