$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft File: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json) Hash identifier: GmyVv7wkNNUxGX1v9bGDKI348hLhLE1UtNEvIWo5E1k= Subject key identifier: DF:81:31:22:76:46:A5:CD:42:BA:26:AA:D1:8F:23:79:6E:DE:FD:D3 Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 7C594CD17FA4D067F8E700CCF0A0EFEF8F8F1935 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft Manifest number: DF Signing time: Mon 09 Jun 2025 06:41:38 +0000 Manifest this update: Mon 09 Jun 2025 06:36:38 +0000 Manifest next update: Thu 12 Jun 2025 17:09:38 +0000 Files and hashes: 1: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: lpNlZeyVXZm4LZjlbdNIBfYPMavxbo6h/c895WJieQ0=) 2: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: 9iQrzztLoFvpsEnzNnL5P1t1/bjXuRlh5hUEQazNDWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 17:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:59:4c:d1:7f:a4:d0:67:f8:e7:00:cc:f0:a0:ef:ef:8f:8f:19:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: Jun 9 06:36:38 2025 GMT Not After : Jun 12 17:09:38 2025 GMT Subject: CN=DF8131227646A5CD42BA26AAD18F23796EDEFDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:01:fc:0e:39:b8:07:dc:24:5a:77:3a:fa: 3f:68:fe:6a:d1:8f:3d:46:4b:19:11:83:20:20:2a: e1:00:8a:5c:a7:d4:5b:75:bd:ec:35:f1:98:2b:2c: 8b:be:ff:2b:e0:7d:e4:a5:ae:2d:9a:2c:f7:b1:22: 7b:a8:05:14:1d:ed:42:ac:28:7c:12:5c:f3:a8:0f: 31:80:ee:c3:c8:28:28:87:9d:bc:cd:9d:88:dc:76: 65:b7:d1:8b:5c:7b:88:8e:d4:8a:fc:60:4f:a0:04: e2:02:41:75:e2:96:96:49:c6:73:a4:bd:09:68:05: 90:c6:67:7f:b1:e5:a7:8f:a9:09:3f:db:37:19:5e: 02:07:52:46:c2:67:43:bf:64:dd:5b:c5:34:2c:8f: 50:af:d5:ab:55:ab:22:6b:84:46:46:25:05:98:87: e0:78:69:72:4f:d7:9c:46:b6:1a:3d:be:43:08:3d: 90:3c:6c:52:0f:2e:81:e9:b9:f3:7b:46:39:34:bf: c8:14:ec:46:4c:4b:54:9c:3b:90:15:ad:a2:35:e6: c3:2f:b4:24:b1:5d:38:07:6b:2c:28:59:13:69:e2: 01:a8:7a:5e:37:ba:5d:6e:1f:7d:4b:12:f3:8f:bf: 7f:b9:45:fb:09:aa:c8:88:d7:3c:d1:ab:22:1b:84: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:81:31:22:76:46:A5:CD:42:BA:26:AA:D1:8F:23:79:6E:DE:FD:D3 X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a6:29:70:12:68:76:a6:65:8a:8c:0a:15:40:0c:5c:dd:09: 33:58:b9:46:75:2b:1b:f8:88:30:1c:3d:dc:a8:a7:a9:75:84: 98:77:fd:7c:b0:1d:aa:04:7c:68:6f:71:7b:4b:cd:08:2c:d0: 2f:f2:e1:5b:21:c9:62:51:2d:fc:56:f1:cd:ae:14:73:86:25: 2d:64:97:64:e8:7e:fc:bd:47:dc:68:8b:3f:53:d7:e5:d6:c4: a4:b9:76:76:62:5f:b1:62:68:a2:34:b0:f1:be:77:47:25:53: db:04:c1:a1:94:ad:24:65:9b:af:62:a3:49:e5:b0:dd:d1:2f: 12:f0:3c:67:1d:b8:ad:29:06:1f:c9:c6:dd:e2:83:c5:73:ea: 6a:60:48:46:1f:bd:aa:d6:9a:fd:5d:3f:2f:6c:49:54:ad:a4: 1b:ef:d8:f6:ac:72:e7:97:c8:c6:fb:3b:b0:98:30:63:d2:b4: 53:75:f7:51:33:16:6b:03:0a:61:51:39:b5:b0:c0:83:ed:22: da:87:90:31:06:75:9e:05:0f:af:fc:0e:b3:57:bf:c4:30:5c: ab:e8:6a:93:b1:fa:a4:8a:f8:96:be:14:1f:b2:fb:e8:35:2a: 8c:b0:9a:57:f7:3f:56:2a:53:d8:84:75:80:1b:9f:e8:0f:57: df:59:5d:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFlM0X+k0Gf45wDM8KDv74+PGTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNTA2MDkwNjM2MzhaFw0yNTA2MTIxNzA5MzhaMDMxMTAvBgNV BAMTKERGODEzMTIyNzY0NkE1Q0Q0MkJBMjZBQUQxOEYyMzc5NkVERUZERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4gH8Djm4B9wkWnc6+j9o/mrR jz1GSxkRgyAgKuEAilyn1Ft1vew18ZgrLIu+/yvgfeSlri2aLPexInuoBRQd7UKs KHwSXPOoDzGA7sPIKCiHnbzNnYjcdmW30Ytce4iO1Ir8YE+gBOICQXXilpZJxnOk vQloBZDGZ3+x5aePqQk/2zcZXgIHUkbCZ0O/ZN1bxTQsj1Cv1atVqyJrhEZGJQWY h+B4aXJP15xGtho9vkMIPZA8bFIPLoHpufN7Rjk0v8gU7EZMS1ScO5AVraI15sMv tCSxXTgHaywoWRNp4gGoel43ul1uH31LEvOPv3+5RfsJqsiI1zzRqyIbhK8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU34ExInZGpc1Cuiaq0Y8jeW7e/dMwHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi YzItYWIwNWUwNjUwNjU1LzAvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZD Njc5QTREN0JENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmmKXASaHamZYqMChVADFzdCTNYuUZ1Kxv4 iDAcPdyop6l1hJh3/XywHaoEfGhvcXtLzQgs0C/y4VshyWJRLfxW8c2uFHOGJS1k l2Tofvy9R9xoiz9T1+XWxKS5dnZiX7FiaKI0sPG+d0clU9sEwaGUrSRlm69io0nl sN3RLxLwPGcduK0pBh/Jxt3ig8Vz6mpgSEYfvarWmv1dPy9sSVStpBvv2PascueX yMb7O7CYMGPStFN191EzFmsDCmFRObWwwIPtItqHkDEGdZ4FD6/8DrNXv8QwXKvo apOx+qSK+Ja+FB+y++g1Koywmlf3P1YqU9iEdYAbn+gPV99ZXRU= -----END CERTIFICATE-----Generated at Wed Jun 11 13:39:21 2025 by rpki-client