$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: IJFYQYRSwGXP6iwI4BEAuxZm6CIW7FLwjqmEOIlvdeU= Subject key identifier: 82:C9:AE:CE:25:4D:16:F9:5F:87:FF:8B:28:BA:16:E1:34:DF:40:C4 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 6F8C11EE32112AC6E2982937428411F60ABB6594 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 04E5 Signing time: Mon 02 Jun 2025 01:02:42 +0000 Manifest this update: Mon 02 Jun 2025 00:57:42 +0000 Manifest next update: Thu 05 Jun 2025 05:35:42 +0000 Files and hashes: 1: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 2: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: ulKjjBTPgaNfZ7v1bRtX4z+W6s4A74kKPhDYpzLMDuA=) 3: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 4: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 5: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 6: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 7: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 8: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 9: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 10: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 11: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 12: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: 9oKO6g1ubJMPn+KO0b/5NKvsIE0sjvdEPhP+zwJwgK8=) 13: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 14: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 15: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: K244iScN8M4O5u7S2cH3/W0yr++iJmaE7tZQk4Lm388=) 16: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 17: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: i8BpctBtDR1cL+NnxkziOtf21/F0kdql2uvKW16NHeU=) 18: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 19: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: /L5xs6PGKpRT/JJeBTXRVK04bWdHgmJFRa12gb3q/ao=) 20: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 21: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 22: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 23: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 24: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8c:11:ee:32:11:2a:c6:e2:98:29:37:42:84:11:f6:0a:bb:65:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jun 2 00:57:42 2025 GMT Not After : Jun 5 05:35:42 2025 GMT Subject: CN=82C9AECE254D16F95F87FF8B28BA16E134DF40C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:bf:18:fb:f1:e5:fe:41:1e:f5:cf:12:3f: b5:7f:76:fd:d5:6e:5b:3b:9a:29:63:44:cb:1d:0d: 3d:44:a9:94:3f:ca:bc:c6:6b:8f:96:44:16:29:f4: 95:4f:d0:96:62:c3:ca:c7:3c:de:3e:21:05:9e:e6: 4c:36:10:47:a6:cb:38:03:9e:12:4d:d5:f2:bb:d1: 26:73:ab:4c:27:96:d9:04:43:1c:54:3a:00:b3:62: 44:4a:ce:96:f8:ca:f8:7b:23:a8:ef:d0:28:39:e9: 84:0c:aa:f8:04:3d:c3:75:29:48:81:e8:99:e3:39: a5:54:6e:1f:f3:6a:97:41:db:12:e2:10:85:66:e5: 8d:32:b7:38:4a:70:2f:e7:27:cd:21:f9:95:33:72: b7:53:3c:fb:56:e8:5e:2a:c2:45:c5:8f:3f:cb:21: e1:92:e7:48:a6:64:34:40:fa:17:d5:d7:1e:94:30: 30:b2:76:b5:76:d1:50:d5:61:72:46:70:3b:76:b1: c6:98:ba:60:4e:d0:0c:7f:eb:2a:ad:25:e0:13:ca: 8e:b7:64:e9:e3:5e:8b:82:4b:b2:d1:8c:b2:2f:0d: 1b:fa:95:1c:f3:6d:8a:f5:ef:0f:f8:63:bc:c4:bc: fd:dd:99:49:61:75:e7:63:89:c6:b4:83:5a:d1:4e: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C9:AE:CE:25:4D:16:F9:5F:87:FF:8B:28:BA:16:E1:34:DF:40:C4 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e1:9d:00:81:96:7c:c6:c9:e7:3c:5a:fe:b8:cb:2c:6e:d3: 8a:5c:ae:03:f8:c8:11:1a:21:de:10:11:99:8e:4f:17:c4:0b: 38:b3:c5:58:4f:ab:e6:eb:74:00:6f:c8:9a:7d:e4:18:a4:c5: 77:61:6a:f8:54:f0:ff:7d:93:08:ba:ac:c8:e1:32:49:d1:00: 8a:85:06:a0:f7:83:44:b1:79:bb:14:48:a1:6b:78:62:9d:fa: 3f:0e:fd:0d:1c:33:4a:07:25:c7:be:24:0c:eb:4a:fc:d6:a2: b8:98:a4:af:09:a4:a3:25:48:ba:de:80:ef:21:e0:42:d6:48: bb:9c:a3:dd:e8:a6:99:df:a6:23:39:eb:2e:33:8f:77:85:26: 0f:a1:8a:ef:e0:24:df:54:aa:e5:a4:3f:c0:9b:c0:1e:98:8e: 2a:84:70:2e:e9:bc:38:a3:c3:d3:87:57:bf:68:99:7a:23:60: 8e:45:e0:e7:57:59:97:f0:0b:7a:92:7b:37:46:85:ca:68:1f: 32:9c:47:d1:a8:08:0c:e1:be:bb:c8:5f:bc:6a:db:24:b5:58: 8b:ae:a8:f2:62:c2:6f:ff:28:a1:c4:68:69:82:aa:17:d8:c1: 08:42:c6:5e:7a:b2:69:3b:55:08:db:a4:38:fa:e4:52:d5:b9: 10:cd:93:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4wR7jIRKsbimCk3QoQR9gq7ZZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA2MDIwMDU3NDJaFw0yNTA2MDUwNTM1NDJaMDMxMTAvBgNV BAMTKDgyQzlBRUNFMjU0RDE2Rjk1Rjg3RkY4QjI4QkExNkUxMzRERjQwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5t78Y+/Hl/kEe9c8SP7V/dv3V bls7miljRMsdDT1EqZQ/yrzGa4+WRBYp9JVP0JZiw8rHPN4+IQWe5kw2EEemyzgD nhJN1fK70SZzq0wnltkEQxxUOgCzYkRKzpb4yvh7I6jv0Cg56YQMqvgEPcN1KUiB 6JnjOaVUbh/zapdB2xLiEIVm5Y0ytzhKcC/nJ80h+ZUzcrdTPPtW6F4qwkXFjz/L IeGS50imZDRA+hfV1x6UMDCydrV20VDVYXJGcDt2scaYumBO0Ax/6yqtJeATyo63 ZOnjXouCS7LRjLIvDRv6lRzzbYr17w/4Y7zEvP3dmUlhdedjica0g1rRTvUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsmuziVNFvlfh/+LKLoW4TTfQMQwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvhnQCBlnzGyec8Wv64yyxu04pcrgP4yBEa Id4QEZmOTxfECzizxVhPq+brdABvyJp95BikxXdhavhU8P99kwi6rMjhMknRAIqF BqD3g0SxebsUSKFreGKd+j8O/Q0cM0oHJce+JAzrSvzWoriYpK8JpKMlSLregO8h 4ELWSLuco93oppnfpiM56y4zj3eFJg+hiu/gJN9UquWkP8CbwB6YjiqEcC7pvDij w9OHV79omXojYI5F4OdXWZfwC3qSezdGhcpoHzKcR9GoCAzhvrvIX7xq2yS1WIuu qPJiwm//KKHEaGmCqhfYwQhCxl56smk7VQjbpDj65FLVuRDNkyc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:53 2025 by rpki-client