$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: zNl6c1kV1As19kCyAvh25CkTRE3AnAPsgIN05yzucsQ= Subject key identifier: C1:D0:9A:4C:CD:02:D0:AF:21:46:EE:B0:16:0C:ED:02:EE:49:A1:F3 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 27BEB4008DF6FD17FAA6CEEC7A8A86F2DC92501D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 04FA Signing time: Sun 20 Jul 2025 00:21:57 +0000 Manifest this update: Sun 20 Jul 2025 00:16:57 +0000 Manifest next update: Wed 23 Jul 2025 04:43:57 +0000 Files and hashes: 1: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: 9oKO6g1ubJMPn+KO0b/5NKvsIE0sjvdEPhP+zwJwgK8=) 2: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 3: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: K244iScN8M4O5u7S2cH3/W0yr++iJmaE7tZQk4Lm388=) 4: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 5: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 6: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: /L5xs6PGKpRT/JJeBTXRVK04bWdHgmJFRa12gb3q/ao=) 7: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 8: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 9: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 10: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 11: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 12: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: i8BpctBtDR1cL+NnxkziOtf21/F0kdql2uvKW16NHeU=) 13: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 14: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: 51nm//QzKxvAqnj5VyzlJW8hTBzqch+BEctaPVE1WXE=) 15: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 16: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 17: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 18: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 19: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 20: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 21: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 22: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 23: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 24: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:be:b4:00:8d:f6:fd:17:fa:a6:ce:ec:7a:8a:86:f2:dc:92:50:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jul 20 00:16:57 2025 GMT Not After : Jul 23 04:43:57 2025 GMT Subject: CN=C1D09A4CCD02D0AF2146EEB0160CED02EE49A1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:ce:37:71:23:83:bb:6e:ec:cf:f4:b3:94: a1:51:cd:7c:73:fb:38:bd:82:a2:cc:8e:66:7f:8a: c3:ff:90:5a:1b:72:fe:40:65:9b:d0:6a:92:ec:e8: 59:47:b1:8f:a0:5e:7f:a5:4e:98:00:24:9e:83:e2: 03:f9:ea:9d:b3:73:a8:22:af:1c:c1:0c:0f:3b:24: 0a:58:07:bb:a8:85:f0:7a:b7:3c:34:41:52:de:0b: 2e:6c:e9:fc:aa:6a:6d:1f:1d:5c:33:06:bb:8b:83: e4:c2:f8:79:cf:7f:6a:40:87:b1:fb:a5:ec:38:7d: 65:25:67:a5:86:86:bf:ee:5f:9e:72:36:e3:68:f2: e3:b2:32:88:ce:68:e2:99:b6:89:1e:59:01:9f:d6: 7f:75:75:cb:a9:86:8f:e7:88:70:51:90:72:37:5c: 48:f7:39:e1:68:b5:2f:71:24:3a:fc:75:cc:45:4d: ea:02:9e:34:38:3f:de:1d:cd:cf:e6:0c:19:21:25: cb:dc:33:c4:58:84:f7:ac:44:be:5e:d9:a4:f0:7f: f1:14:6f:4f:9a:81:18:1b:35:1d:37:aa:32:23:c1: 3f:7e:db:cd:95:e7:1e:44:c5:22:a2:c8:5f:a9:97: 5f:b6:e4:21:4f:d5:1f:e0:40:2b:8e:40:3b:6e:fc: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D0:9A:4C:CD:02:D0:AF:21:46:EE:B0:16:0C:ED:02:EE:49:A1:F3 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cf:e4:4c:ec:4d:7e:05:4d:b5:0f:80:6e:76:04:f7:53:e1: 84:84:cf:6d:c1:6a:d7:26:8a:2b:a9:a3:ad:8d:93:b7:6b:e2: c1:ab:fd:a6:0e:1c:b5:80:77:27:1a:fc:13:ca:6d:d4:14:6d: 54:ad:ee:c6:3c:fc:fd:fa:07:15:2b:c5:b0:a0:52:8a:07:8d: 40:bc:99:a0:5d:57:c0:d6:99:ab:02:15:3f:4a:76:25:c4:89: 24:5f:1c:30:60:20:88:2d:0e:0e:66:86:c2:18:25:5a:b6:e2: e4:21:42:e3:55:f1:31:9a:5f:87:52:ae:2f:41:6c:b2:36:7c: 31:37:e9:10:5b:31:d6:36:e1:4f:bd:1a:cd:81:52:48:14:15: 11:ac:03:df:83:c6:35:b2:e2:69:c3:d3:29:a9:c5:9e:63:22: 7a:00:1e:f9:64:ec:9f:b5:bd:1c:13:ac:5f:ae:7e:de:b5:8d: 08:f1:0c:3e:c8:27:6f:ac:26:36:3f:0b:70:a2:c5:68:6f:27: 78:46:37:33:de:c9:0f:19:fe:1a:f8:2b:34:36:53:ca:a5:d6: 0a:e7:a3:70:e0:c9:86:85:40:67:93:95:39:7d:15:0a:b0:16: 99:d4:00:ad:b2:76:1d:1d:2b:14:f7:5b:2c:8c:e3:87:4a:ce: 26:c9:36:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ760AI32/Rf6ps7seoqG8tySUB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA3MjAwMDE2NTdaFw0yNTA3MjMwNDQzNTdaMDMxMTAvBgNV BAMTKEMxRDA5QTRDQ0QwMkQwQUYyMTQ2RUVCMDE2MENFRDAyRUU0OUExRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQc43cSODu27sz/SzlKFRzXxz +zi9gqLMjmZ/isP/kFobcv5AZZvQapLs6FlHsY+gXn+lTpgAJJ6D4gP56p2zc6gi rxzBDA87JApYB7uohfB6tzw0QVLeCy5s6fyqam0fHVwzBruLg+TC+HnPf2pAh7H7 pew4fWUlZ6WGhr/uX55yNuNo8uOyMojOaOKZtokeWQGf1n91dcupho/niHBRkHI3 XEj3OeFotS9xJDr8dcxFTeoCnjQ4P94dzc/mDBkhJcvcM8RYhPesRL5e2aTwf/EU b0+agRgbNR03qjIjwT9+282V5x5ExSKiyF+pl1+25CFP1R/gQCuOQDtu/EfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwdCaTM0C0K8hRu6wFgztAu5JofMwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXP5EzsTX4FTbUPgG52BPdT4YSEz23Batcm iiupo62Nk7dr4sGr/aYOHLWAdyca/BPKbdQUbVSt7sY8/P36BxUrxbCgUooHjUC8 maBdV8DWmasCFT9KdiXEiSRfHDBgIIgtDg5mhsIYJVq24uQhQuNV8TGaX4dSri9B bLI2fDE36RBbMdY24U+9Gs2BUkgUFRGsA9+DxjWy4mnD0ympxZ5jInoAHvlk7J+1 vRwTrF+uft61jQjxDD7IJ2+sJjY/C3CixWhvJ3hGNzPeyQ8Z/hr4KzQ2U8ql1grn o3DgyYaFQGeTlTl9FQqwFpnUAK2ydh0dKxT3WyyM44dKzibJNr8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:17 2025 by rpki-client