$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: oiIPe80KiQVrt1VDIJIFrjAVgL7TXzLHidRJQMnj+wI= Subject key identifier: A8:40:B8:8B:A7:95:54:05:56:AF:CE:86:0F:72:41:C3:35:BA:49:34 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 45EE9DD6E37191BD4A91A2CCF506FDB7F7EB4E4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 04CB Signing time: Sat 05 Apr 2025 12:21:55 +0000 Manifest this update: Sat 05 Apr 2025 12:16:55 +0000 Manifest next update: Tue 08 Apr 2025 19:36:55 +0000 Files and hashes: 1: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: KrEtWRccS8E2kb/NiZKX5203rXDO0eg1fl/97xaWdK0=) 2: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: xaLCqb9BSlOw22qrcy3sXp6sp0UG31m5gaLC+F0ihjc=) 3: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +yvyeF1Eot4HYMVmlpHdLW9PkKkaiWArut4ApdSjAJ0=) 4: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: KYT+Q0QdA+7lJOIYWRYGedtQ8m66EUEb2FwATZn7b2I=) 5: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: qpuK7V2nx9vyZ2D5zBXh89xjEgPE/ctXWC9yCVNhPpA=) 6: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: FvNCUc/W/tc6wy40MDBuc5e/y9zU4oHO6PrUzX5qOO4=) 7: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: xp9Yt+QgIOFGTJ0EWMSSSxYFyLJGG1Wsr7vVcpcuymo=) 8: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 9: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: bYdJ74u/3uGNPygrk82DdhGJdVHp2fQPuwAhsR/UbOs=) 10: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: i8BpctBtDR1cL+NnxkziOtf21/F0kdql2uvKW16NHeU=) 11: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: ZkDD1PXfJ1uxwAaNgZHZX7a5tpBbHZ0kvj8I0Rwjsd8=) 12: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: wIKkZC0BEQN2L8x/O6JuMjatfph1dX23Nbg/SnzGC+Y=) 13: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: /L5xs6PGKpRT/JJeBTXRVK04bWdHgmJFRa12gb3q/ao=) 14: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: yD3+h/70LNRy7k+grqlLvUiRpTBwDIrPcXy82xCrK1k=) 15: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: TUeak5jHDtbvargpCDqZuQl+RjoYojBe2s7CTDzVmuA=) 16: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: K244iScN8M4O5u7S2cH3/W0yr++iJmaE7tZQk4Lm388=) 17: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: lGaCHoR1Jvjo/a1sb4ZgW3ziv1aSQlPU5NtVxtpLBn4=) 18: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: lKc98uyaChQPn1CaGH2R2he43NF0eULLFB1Ix5Ch2+Y=) 19: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: 9oKO6g1ubJMPn+KO0b/5NKvsIE0sjvdEPhP+zwJwgK8=) 20: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 21: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: kv4gHUJB2d9DdDBCo8qtak4t/uj/DrPz8kIid7pFc6M=) 22: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: XmQiAGgrXEk9JWo7jplQEJQlCfJ18ZwvyzwVTH15z5g=) 23: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: coDrWqzbyq2BQseK5NrvbOtXAj1+xnAkREKfl4Q2n4g=) 24: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: jzRutxmwCaj+qL/12+BUDxY9FM50TTowvhnOTHxn89o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ee:9d:d6:e3:71:91:bd:4a:91:a2:cc:f5:06:fd:b7:f7:eb:4e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Apr 5 12:16:55 2025 GMT Not After : Apr 8 19:36:55 2025 GMT Subject: CN=A840B88BA795540556AFCE860F7241C335BA4934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:d3:8e:6f:61:14:38:e3:33:80:4f:13:31: a6:04:26:97:ea:1b:42:0b:ab:a6:9e:88:6b:00:a2: d7:c8:cd:7c:b9:19:50:1e:a8:6d:bf:39:3d:4b:3b: 57:d1:c7:d4:a0:fc:00:a6:c7:b2:4f:07:36:eb:35: bb:84:e1:34:29:f7:3c:6e:a6:04:a1:d6:b2:28:f9: 26:7d:54:94:bc:3f:7c:d3:84:1f:4a:03:59:92:92: b3:ee:57:91:e9:b5:8f:50:cc:cc:f4:d9:c2:4a:94: ea:f9:a8:31:12:d4:f5:9d:b8:52:f2:12:c3:9d:d2: ba:7c:b3:4d:f6:a1:37:aa:7c:37:cf:29:36:ac:ba: 4f:32:ff:26:c6:01:ac:78:05:98:ff:94:0c:16:7f: 3b:17:c2:bd:ea:47:ea:73:b5:3c:e9:9d:93:d3:65: 86:28:9e:bf:88:e4:87:87:a3:ee:3c:28:de:10:c8: c8:cf:2c:bb:aa:0e:9e:0c:53:2e:76:9b:41:c7:b9: 56:6f:59:e9:05:f0:9e:dd:34:6f:56:81:ce:94:63: f9:61:c9:b2:1d:d0:37:12:70:9f:0b:45:1a:21:b3: 15:1d:3f:bc:2a:df:04:e6:28:30:49:28:c9:01:3f: 76:22:3a:ea:15:c4:2c:ae:ab:df:61:19:b2:e3:75: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:40:B8:8B:A7:95:54:05:56:AF:CE:86:0F:72:41:C3:35:BA:49:34 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f5:9b:cb:9f:72:e5:63:e8:8e:56:d9:25:0e:d7:f5:21:4b: 11:4c:e9:95:34:7a:60:fd:7f:93:25:bc:98:cc:28:54:43:d3: 38:d3:7c:79:68:8e:36:fc:79:f0:6a:b8:4b:60:96:51:60:b1: 7e:96:95:70:ca:13:0e:ba:72:a2:73:dd:e2:97:83:67:2e:af: d5:a5:c0:62:9a:3a:ae:ba:6c:35:14:2a:0a:e7:57:4b:9b:f0: 36:18:aa:0d:eb:8a:b2:36:22:44:fd:67:48:b9:d7:bb:c7:47: d8:f3:b4:ca:aa:e1:98:48:26:b2:87:6e:4d:02:e8:9f:ab:59: db:0c:42:06:cf:12:f1:37:64:82:25:dc:aa:c9:f1:7f:85:7f: c0:0b:33:f3:7a:46:09:92:87:e0:86:98:c8:dd:25:e5:87:10: fc:71:1d:20:5d:53:8d:bc:de:eb:49:a2:0f:4a:49:5a:7d:53: 75:5a:1b:46:5d:77:fb:b2:70:2e:c4:85:df:30:42:16:b7:a9: 1c:08:fc:6c:bc:ab:45:e4:d2:14:64:ef:5d:06:dd:26:5c:fa: 9d:3e:30:0f:d2:23:1a:74:fe:75:b7:22:72:f2:e4:88:73:6f: 29:42:77:3f:b1:96:8e:11:f3:d8:9e:7b:26:bc:2b:8e:08:0f: bb:a6:6d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURe6d1uNxkb1KkaLM9Qb9t/frTk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA0MDUxMjE2NTVaFw0yNTA0MDgxOTM2NTVaMDMxMTAvBgNV BAMTKEE4NDBCODhCQTc5NTU0MDU1NkFGQ0U4NjBGNzI0MUMzMzVCQTQ5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnIdOOb2EUOOMzgE8TMaYEJpfq G0ILq6aeiGsAotfIzXy5GVAeqG2/OT1LO1fRx9Sg/ACmx7JPBzbrNbuE4TQp9zxu pgSh1rIo+SZ9VJS8P3zThB9KA1mSkrPuV5HptY9QzMz02cJKlOr5qDES1PWduFLy EsOd0rp8s032oTeqfDfPKTasuk8y/ybGAax4BZj/lAwWfzsXwr3qR+pztTzpnZPT ZYYonr+I5IeHo+48KN4QyMjPLLuqDp4MUy52m0HHuVZvWekF8J7dNG9Wgc6UY/lh ybId0DcScJ8LRRohsxUdP7wq3wTmKDBJKMkBP3YiOuoVxCyuq99hGbLjdderAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqEC4i6eVVAVWr86GD3JBwzW6STQwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG31m8ufcuVj6I5W2SUO1/UhSxFM6ZU0emD9 f5MlvJjMKFRD0zjTfHlojjb8efBquEtgllFgsX6WlXDKEw66cqJz3eKXg2cur9Wl wGKaOq66bDUUKgrnV0ub8DYYqg3rirI2IkT9Z0i517vHR9jztMqq4ZhIJrKHbk0C 6J+rWdsMQgbPEvE3ZIIl3KrJ8X+Ff8ALM/N6RgmSh+CGmMjdJeWHEPxxHSBdU428 3utJog9KSVp9U3VaG0Zdd/uycC7Ehd8wQha3qRwI/Gy8q0Xk0hRk710G3SZc+p0+ MA/SIxp0/nW3InLy5IhzbylCdz+xlo4R89ieeya8K44ID7umbao= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:26 2025 by rpki-client