$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: VhmYAd0DOq2n6t+oqOuCdwDxrXfFDFBdVeV3enU4mRE= Subject key identifier: D6:CE:2C:8D:5E:C7:A4:84:1F:38:C0:07:9D:A8:F4:36:19:C0:20:EB Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 61F75182757E5F553AE448FF89D270F1D4F58B57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: 7B Signing time: Sat 19 Jul 2025 00:51:36 +0000 Manifest this update: Sat 19 Jul 2025 00:46:36 +0000 Manifest next update: Tue 22 Jul 2025 09:36:36 +0000 Files and hashes: 1: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: GAvBA+CWwMRDhdw7a6HIQZgc/8rBgPNkicRZV6ZIbLY=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: J4isEyK1ySJtCWVpvhGVyfTYrZDUM8aentftYxqK7KA=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: EfPoQqtxgLuobpoazcJOzehsaHb5tIneq6Zek5DzcaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f7:51:82:75:7e:5f:55:3a:e4:48:ff:89:d2:70:f1:d4:f5:8b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Jul 19 00:46:36 2025 GMT Not After : Jul 22 09:36:36 2025 GMT Subject: CN=D6CE2C8D5EC7A4841F38C0079DA8F43619C020EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:36:71:05:5e:04:57:fd:53:93:c4:4d:af: 9a:cd:95:2a:cf:77:ce:09:54:fa:be:98:59:dd:f9: 81:d1:45:67:61:3a:6d:7f:da:f8:8c:90:7e:4f:2c: 01:6a:62:4a:6b:59:05:39:70:6d:61:de:fc:a7:e3: 3b:f2:11:6c:73:19:a5:5c:b6:94:1c:d2:f1:fd:ae: 67:20:7e:03:08:de:58:f3:6f:3c:d6:77:d9:8d:f0: 76:42:24:39:87:9f:b5:9c:51:4f:df:8e:78:13:8f: a6:2f:24:74:28:73:10:04:14:b9:df:f6:09:e6:0b: 3b:fa:f4:9b:bd:36:c0:fb:a8:c4:15:39:64:98:4c: 0b:d8:ac:9a:fd:57:31:2f:80:fa:de:90:c9:5c:29: 1b:fe:9d:b5:35:d1:44:95:d3:c3:d8:21:f5:2e:92: 5b:d9:9e:1b:fc:f6:8d:c0:50:4c:42:9b:cb:18:45: 15:39:21:a2:e1:f3:d3:76:5f:a1:ae:96:76:36:ee: d2:e2:ef:66:4f:74:09:46:94:9b:26:4c:d3:ea:6a: 6f:ce:01:e9:f6:85:80:01:35:e9:58:99:23:94:dc: 6c:5c:2a:25:92:0b:77:2e:02:82:52:67:2f:06:9f: 71:bd:7c:08:e3:81:9f:30:44:8f:89:3c:ec:30:9f: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CE:2C:8D:5E:C7:A4:84:1F:38:C0:07:9D:A8:F4:36:19:C0:20:EB X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:db:a6:a7:9a:ce:46:52:53:f1:c0:01:1c:90:f8:73:0e:8f: 6c:ce:ee:a1:4b:89:38:2d:9a:42:88:8a:de:e3:f6:9d:ce:e7: a2:21:b3:47:5a:14:c8:4d:f3:f8:c2:cd:16:c0:0b:fc:9b:b1: ca:68:ea:24:e5:7f:ff:28:a2:d5:92:0e:d6:56:c6:09:18:12: 99:df:ef:2d:b1:b5:85:2e:19:3f:a6:af:ac:fe:13:64:7b:1d: 77:76:34:c4:51:9e:74:99:11:47:d4:46:30:79:23:74:60:59: df:06:7b:cf:f6:93:27:94:fc:91:1b:82:9f:29:d5:a2:77:af: ea:09:c4:92:29:a6:9f:8c:b5:2d:fc:63:5e:98:52:6c:04:37: 40:79:d8:17:10:1f:6c:84:cb:36:47:b3:26:75:6e:ca:31:4e: 83:f8:89:16:b7:9e:e4:2e:96:37:46:69:94:0f:e0:4c:2e:05: 9a:50:60:43:26:7c:19:b7:dc:a2:16:f8:a6:00:cb:aa:c1:81: 48:e2:6a:10:1b:ac:2b:2f:b1:b7:70:b8:12:d4:5c:ff:ce:23: 3e:ae:03:f5:84:67:a0:5d:ca:27:2c:9f:5a:dd:bb:03:89:38: 5c:5f:4c:55:84:14:38:63:92:a9:a5:82:b1:8f:92:5b:46:e8: b6:5c:06:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfdRgnV+X1U65Ej/idJw8dT1i1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNTA3MTkwMDQ2MzZaFw0yNTA3MjIwOTM2MzZaMDMxMTAvBgNV BAMTKEQ2Q0UyQzhENUVDN0E0ODQxRjM4QzAwNzlEQThGNDM2MTlDMDIwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqTZxBV4EV/1Tk8RNr5rNlSrP d84JVPq+mFnd+YHRRWdhOm1/2viMkH5PLAFqYkprWQU5cG1h3vyn4zvyEWxzGaVc tpQc0vH9rmcgfgMI3ljzbzzWd9mN8HZCJDmHn7WcUU/fjngTj6YvJHQocxAEFLnf 9gnmCzv69Ju9NsD7qMQVOWSYTAvYrJr9VzEvgPrekMlcKRv+nbU10USV08PYIfUu klvZnhv89o3AUExCm8sYRRU5IaLh89N2X6GulnY27tLi72ZPdAlGlJsmTNPqam/O Aen2hYABNelYmSOU3GxcKiWSC3cuAoJSZy8Gn3G9fAjjgZ8wRI+JPOwwn0yfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1s4sjV7HpIQfOMAHnaj0NhnAIOswHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbbpqeazkZSU/HAARyQ+HMOj2zO7qFLiTgt mkKIit7j9p3O56Ihs0daFMhN8/jCzRbAC/ybscpo6iTlf/8ootWSDtZWxgkYEpnf 7y2xtYUuGT+mr6z+E2R7HXd2NMRRnnSZEUfURjB5I3RgWd8Ge8/2kyeU/JEbgp8p 1aJ3r+oJxJIppp+MtS38Y16YUmwEN0B52BcQH2yEyzZHsyZ1bsoxToP4iRa3nuQu ljdGaZQP4EwuBZpQYEMmfBm33KIW+KYAy6rBgUjiahAbrCsvsbdwuBLUXP/OIz6u A/WEZ6Bdyicsn1rduwOJOFxfTFWEFDhjkqmlgrGPkltG6LZcBiY= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:37 2025 by rpki-client