$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: wVR6dv2P7fcWuTuVMZFej1qXrMGQ43NX7GwToAp/Sg8= Subject key identifier: AF:20:18:CA:5C:C6:50:B0:D7:B2:2C:B5:DD:16:DA:F6:B0:DD:03:43 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 6E339B62C9C998BC285BDDF4F60D27A402436D05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 0511 Signing time: Fri 05 Sep 2025 07:32:00 +0000 Manifest this update: Fri 05 Sep 2025 07:27:00 +0000 Manifest next update: Mon 08 Sep 2025 18:53:00 +0000 Files and hashes: 1: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 2: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 3: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 4: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: GJhyNQEnwNSQsLMihvCqPF64Bu2LvvC2+brd3341WP8=) 5: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 6: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 7: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 8: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 9: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 10: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=) 11: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=) 12: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 13: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 14: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 15: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 16: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 17: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 18: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 19: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 20: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=) 21: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=) 22: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 23: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 24: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:33:9b:62:c9:c9:98:bc:28:5b:dd:f4:f6:0d:27:a4:02:43:6d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Sep 5 07:27:00 2025 GMT Not After : Sep 8 18:53:00 2025 GMT Subject: CN=AF2018CA5CC650B0D7B22CB5DD16DAF6B0DD0343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:2a:ff:63:74:8b:b4:7f:e7:d7:aa:77:42: 88:9a:25:40:6a:29:fb:ff:1f:e0:fc:58:48:67:a8: 04:15:4b:2b:ae:01:8b:a3:8e:4f:35:fc:51:37:96: 33:60:09:79:ee:26:0f:1f:fc:0e:3b:02:ed:68:7b: 70:cf:87:c0:1b:8c:9d:56:30:76:d8:32:07:ec:13: 2b:36:6c:14:3e:05:52:1a:bd:3a:88:e8:fc:54:2c: ad:e8:36:b9:4c:7b:a7:8f:e3:b4:08:a9:e4:44:64: 41:cb:1d:6e:c7:97:4e:a1:27:85:f7:d9:b0:3f:43: ab:27:c0:e5:f6:f4:81:78:c5:98:61:07:ee:a1:b7: a1:a5:5a:12:1c:07:eb:d0:09:c4:95:84:6a:72:36: 7d:c1:c9:ee:f8:9f:46:53:e6:42:57:82:f1:f9:ff: 45:2b:d6:51:b7:f5:ca:50:9d:b2:01:32:7e:4d:6f: 01:45:b7:df:55:16:cd:d9:0f:d2:c4:00:04:3c:76: d9:c5:45:85:3b:21:ed:5f:fd:3e:6a:36:6b:6a:93: f4:4e:c3:ee:b4:6a:10:0a:21:e2:9d:05:a3:57:dd: c4:5b:2a:c6:f2:e6:a6:d6:0e:cf:fb:f2:ba:5d:88: 47:b7:91:99:e6:b0:56:3c:35:80:8f:6b:7c:3e:a1: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:18:CA:5C:C6:50:B0:D7:B2:2C:B5:DD:16:DA:F6:B0:DD:03:43 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c2:af:d5:70:19:62:ba:e6:63:2e:92:fd:bd:73:2f:b9:21: aa:a7:a8:af:c8:b9:c5:8c:ba:1c:01:5b:6b:7d:31:18:5c:38: 81:6c:80:8d:01:44:b8:97:d1:74:f5:2a:3e:b0:1c:2e:9f:bd: 69:14:d9:45:b1:3b:ac:03:82:90:49:75:c4:b5:3b:fe:86:7c: 36:ef:64:99:06:42:b3:24:14:66:70:e0:f9:71:81:2d:5a:36: c5:a5:77:f8:c3:80:41:9c:c4:68:b3:45:2d:ed:da:ec:f7:dd: 60:72:a1:71:da:56:7e:ac:d8:b8:70:10:99:7a:1b:07:15:db: 22:da:a9:b7:6a:66:9e:12:ef:07:a5:10:fa:c7:2f:2f:1a:37: 76:77:fb:08:a8:b3:c9:d6:c4:e0:29:cb:b4:a7:fd:5b:2f:76: fb:0c:8c:f6:a4:f1:6e:f3:3a:1d:60:ec:3f:e1:ac:ef:34:4c: 29:98:7f:8d:4e:38:3d:40:7a:d5:19:27:80:b4:fd:be:78:d1: 21:c6:87:db:47:18:fc:de:5b:6c:56:ee:94:77:ee:0d:b6:2f: 0b:8c:a3:6b:b6:f6:c7:c5:80:92:bb:c1:b6:03:dc:2f:ea:69: d8:70:d8:db:0d:3e:06:3a:aa:64:aa:58:35:7f:5f:f7:81:ff: b1:aa:61:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjObYsnJmLwoW9309g0npAJDbQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA5MDUwNzI3MDBaFw0yNTA5MDgxODUzMDBaMDMxMTAvBgNV BAMTKEFGMjAxOENBNUNDNjUwQjBEN0IyMkNCNUREMTZEQUY2QjBERDAzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMSr/Y3SLtH/n16p3QoiaJUBq Kfv/H+D8WEhnqAQVSyuuAYujjk81/FE3ljNgCXnuJg8f/A47Au1oe3DPh8AbjJ1W MHbYMgfsEys2bBQ+BVIavTqI6PxULK3oNrlMe6eP47QIqeREZEHLHW7Hl06hJ4X3 2bA/Q6snwOX29IF4xZhhB+6ht6GlWhIcB+vQCcSVhGpyNn3Bye74n0ZT5kJXgvH5 /0Ur1lG39cpQnbIBMn5NbwFFt99VFs3ZD9LEAAQ8dtnFRYU7Ie1f/T5qNmtqk/RO w+60ahAKIeKdBaNX3cRbKsby5qbWDs/78rpdiEe3kZnmsFY8NYCPa3w+obUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUryAYylzGULDXsiy13Rba9rDdA0MwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7Cr9VwGWK65mMukv29cy+5IaqnqK/IucWM uhwBW2t9MRhcOIFsgI0BRLiX0XT1Kj6wHC6fvWkU2UWxO6wDgpBJdcS1O/6GfDbv ZJkGQrMkFGZw4PlxgS1aNsWld/jDgEGcxGizRS3t2uz33WByoXHaVn6s2LhwEJl6 GwcV2yLaqbdqZp4S7welEPrHLy8aN3Z3+wios8nWxOApy7Sn/VsvdvsMjPak8W7z Oh1g7D/hrO80TCmYf41OOD1AetUZJ4C0/b540SHGh9tHGPzeW2xW7pR37g22LwuM o2u29sfFgJK7wbYD3C/qadhw2NsNPgY6qmSqWDV/X/eB/7GqYe0= -----END CERTIFICATE-----Generated at Fri Sep 5 12:06:04 2025 by rpki-client