$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: 8+QS4bNwii+fHhCp4uIUpaUj734G0oW4yX0r1kHY1bw= Subject key identifier: B9:DF:A4:41:4A:E1:C2:A8:B3:95:75:9D:00:60:FA:E0:6B:64:C1:50 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 63A402FDB9D32EBBA3DF70AAE006FA91199FBB81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 04FD Signing time: Thu 24 Jul 2025 13:01:29 +0000 Manifest this update: Thu 24 Jul 2025 12:56:29 +0000 Manifest next update: Sun 27 Jul 2025 14:26:29 +0000 Files and hashes: 1: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=) 2: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=) 3: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=) 4: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=) 5: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=) 6: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=) 7: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: j0RLWN802B806EcA/0L5bkKeTbdgtKERNXluxnPajIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a4:02:fd:b9:d3:2e:bb:a3:df:70:aa:e0:06:fa:91:19:9f:bb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Jul 24 12:56:29 2025 GMT Not After : Jul 27 14:26:29 2025 GMT Subject: CN=B9DFA4414AE1C2A8B395759D0060FAE06B64C150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:82:cd:a4:32:d3:cb:03:7e:5f:ba:8e:75: 65:e7:a3:7f:aa:28:70:0b:59:21:78:3e:46:0a:25: 01:0a:c3:2b:37:64:08:bc:2d:eb:2e:1f:18:c0:e1: 0e:ac:f8:4e:c3:42:4c:f1:cc:6a:8c:e9:19:5c:af: 3c:b7:90:0e:12:bd:d6:a6:63:b8:4b:6a:91:81:ab: 48:9b:93:57:cc:90:e9:18:51:6e:18:42:8f:7b:7f: e4:ea:ae:a0:37:20:7a:9c:bf:f3:34:0b:06:30:0b: 82:4f:0d:98:32:8d:14:40:5c:93:f5:83:68:1f:f1: 64:a8:d2:1c:c7:5e:0c:47:1e:5f:b8:7d:99:11:13: d6:f6:26:97:4c:9d:d7:03:c0:17:1c:fa:ad:cc:d7: 76:c5:f9:ec:0b:12:ff:60:93:13:e8:a5:ff:07:98: 49:35:c1:34:83:40:45:da:00:4d:71:f7:39:22:2d: 7e:75:21:31:96:6a:90:cf:76:96:24:bc:70:4c:94: f4:21:d4:90:35:9e:c4:1f:7a:ad:88:1b:6f:9c:47: 95:69:31:fd:fd:0f:40:16:5a:24:a4:6c:ad:db:66: 4a:c4:74:6f:73:21:ea:03:30:12:71:6a:52:c5:b7: 34:16:06:59:58:1a:ac:21:44:2d:c2:5c:59:56:59: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DF:A4:41:4A:E1:C2:A8:B3:95:75:9D:00:60:FA:E0:6B:64:C1:50 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:01:42:26:27:0f:89:74:43:fa:c5:43:22:66:5c:82:d4:f0: 76:a3:26:7e:23:9b:dd:1c:7c:d5:6f:6b:b6:31:9a:0a:6a:31: ba:b2:af:7b:97:ac:ed:79:f9:94:6d:05:b8:e5:cc:8c:f5:e0: 8a:74:2a:8a:fa:70:6a:83:11:62:36:98:08:1a:3e:f1:44:c3: a0:6f:ff:22:7a:3c:68:06:32:44:36:af:a4:7b:31:48:d1:c2: 68:2e:28:1d:8d:b7:3b:d4:65:65:73:6e:45:24:39:cb:c9:3e: 20:e0:4e:86:75:1b:e9:3e:5b:ce:0b:d1:b2:f6:bd:92:36:a7: 70:0c:d8:11:ef:b9:4b:bb:29:06:de:db:1c:5e:18:88:d1:c5: a4:29:c9:79:ec:48:4e:4f:86:77:98:9d:14:70:72:68:6f:e2: 3b:15:dc:5d:a2:ab:4f:ac:56:2f:35:ce:d2:f3:f2:4d:55:aa: b5:ae:1c:77:f7:4c:b1:1d:e6:14:f1:4f:44:ce:2a:cc:98:b6: 10:d1:dd:a9:b1:fd:37:e4:7c:56:9e:3f:c7:9a:cf:d8:d5:db: 6a:d7:29:91:cf:48:d2:16:09:6b:15:80:5d:fc:5c:b6:a1:f7: 74:9f:00:c7:c2:6c:63:b5:9f:19:fc:34:21:e1:8d:0b:c2:c1: 9f:36:ed:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6QC/bnTLruj33Cq4Ab6kRmfu4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA3MjQxMjU2MjlaFw0yNTA3MjcxNDI2MjlaMDMxMTAvBgNV BAMTKEI5REZBNDQxNEFFMUMyQThCMzk1NzU5RDAwNjBGQUUwNkI2NEMxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqYLNpDLTywN+X7qOdWXno3+q KHALWSF4PkYKJQEKwys3ZAi8LesuHxjA4Q6s+E7DQkzxzGqM6Rlcrzy3kA4Svdam Y7hLapGBq0ibk1fMkOkYUW4YQo97f+TqrqA3IHqcv/M0CwYwC4JPDZgyjRRAXJP1 g2gf8WSo0hzHXgxHHl+4fZkRE9b2JpdMndcDwBcc+q3M13bF+ewLEv9gkxPopf8H mEk1wTSDQEXaAE1x9zkiLX51ITGWapDPdpYkvHBMlPQh1JA1nsQfeq2IG2+cR5Vp Mf39D0AWWiSkbK3bZkrEdG9zIeoDMBJxalLFtzQWBllYGqwhRC3CXFlWWQ1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUud+kQUrhwqizlXWdAGD64GtkwVAwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEBQiYnD4l0Q/rFQyJmXILU8HajJn4jm90c fNVva7YxmgpqMbqyr3uXrO15+ZRtBbjlzIz14Ip0Kor6cGqDEWI2mAgaPvFEw6Bv /yJ6PGgGMkQ2r6R7MUjRwmguKB2NtzvUZWVzbkUkOcvJPiDgToZ1G+k+W84L0bL2 vZI2p3AM2BHvuUu7KQbe2xxeGIjRxaQpyXnsSE5PhneYnRRwcmhv4jsV3F2iq0+s Vi81ztLz8k1VqrWuHHf3TLEd5hTxT0TOKsyYthDR3amx/TfkfFaeP8eaz9jV22rX KZHPSNIWCWsVgF38XLah93SfAMfCbGO1nxn8NCHhjQvCwZ827Zo= -----END CERTIFICATE-----Generated at Fri Jul 25 12:56:30 2025 by rpki-client