$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft File: 10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft (raw, json) Hash identifier: dKAaCdO/NrmtLNjiYqmI11XkCzEOG+jLFtrGx8rxSIU= Subject key identifier: 6E:67:C6:86:20:47:E3:9B:FC:0A:08:1E:D1:93:16:21:F3:9B:1B:6E Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 5C5BB3853EDE7EC4EA3795045A64FCD34B648FFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft Manifest number: 0208 Signing time: Wed 04 Jun 2025 02:40:05 +0000 Manifest this update: Wed 04 Jun 2025 02:35:05 +0000 Manifest next update: Sat 07 Jun 2025 13:24:05 +0000 Files and hashes: 1: 3230322e3135342e34302e302f32332d3234203d3e2034343334.roa (hash: HWrCmLzv9FOghcRGOCjzPvQBrBEvQbW5Lx00MLELOEw=) 2: 3230322e3135342e322e302f32332d3234203d3e2034343334.roa (hash: TNbFyl/jlwsVUrXlA5IzRiHJGBMzTu3toN7/vwLuJJc=) 3: 3230322e3135342e35322e302f32332d3234203d3e2034343334.roa (hash: hv1+yU30bwaj3zWzWwbGR2N1jMqN4d1iq1zl2jijNFI=) 4: 3230322e3135342e34362e302f32332d3234203d3e2034343334.roa (hash: dWZkAVyGFs/V/rqytKSBBITzF0slD9toSYOQajyVcTY=) 5: 3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (hash: DXBBTTa5VR7TK6Q1LOLMBpTKsjoeuaRI9YBN3Kwe908=) 6: 3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa (hash: 4azYJIfIwLBN6QOXYJQcD/4KChhMtRRTK+Od9tKQdq8=) 7: 3230322e3135342e35302e302f32332d3234203d3e2034343334.roa (hash: f12qT6s82jZZTJg4KYFPhwtV1VW5cVuMgEqzyWophTc=) 8: 3230322e3135342e342e302f32332d3234203d3e2034343334.roa (hash: wGvnfNbaor4Bwt4NeS+sPG+zM2adOzyLVa1DC7z8xNs=) 9: 3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa (hash: fP4hNA2uEzHr5eJDUSmt0gsGgJey+aWljQi65QQOvIM=) 10: 3230322e3135342e362e302f32332d3234203d3e2034343334.roa (hash: TcCUr8XG7fwKAkDMxfnRcxOlaaY/g147747wMwzfWHA=) 11: 3230322e3135342e34342e302f32332d3234203d3e20313338383836.roa (hash: lZqH3Wsutt6yR+euDDRxJPNsXm0m+fe89x8M/G2u/kc=) 12: 3230322e3135342e302e302f31382d3231203d3e2034343334.roa (hash: KxXKZOPmpPOkzaJxqfzgwGtbeUZQKNuCCVsT6BCykP4=) 13: 3230322e3135342e33302e302f32332d3234203d3e2034343334.roa (hash: zoeowKJvSzvuY+GvQ8McOKqVJl+lWLpjA0Rv/dJXYDY=) 14: 3230322e3135342e302e302f32332d3234203d3e2034343334.roa (hash: u+i7/TtEdsH5+uxesVKthNAiYZvoz9vOBTyOWWXH0+Y=) 15: 3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa (hash: hRMbXY/SPrvtrumTeit5wHEhR58sSHopU0MHh+GLlgo=) 16: 3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa (hash: 89fPROhZUZi50QkEt+kZi8eXkrlknS00tp8+CAUNlvs=) 17: 3230322e3135342e31312e302f32342d3234203d3e20313431383938.roa (hash: DZ0x1I7NkySboSphSERlmIFkwahn/6zX8sEnJwX5e5g=) 18: 3230322e3135342e34382e302f32332d3234203d3e2034343334.roa (hash: gpKvVhoy0IBz2/tkxRYt6jJzGm/E5FdCdMawesFcj/Q=) 19: 3230322e3135342e32362e302f32332d3234203d3e2034343334.roa (hash: z4eLgoQl1iq0W85zQEp/6/9rBFI7qRaNP8UhdKbnLVo=) 20: 3230322e3135342e33382e302f32332d3234203d3e2034343334.roa (hash: 3R+xMVeEY/uhsFZu5+frjjskSYdvqvLldy0FUga9hrA=) 21: 3230322e3135342e34322e302f32332d3234203d3e2034343334.roa (hash: mwL/0c6F6l/+89NoodMS//oKeHJN7KacUZxkZDzC88Y=) 22: 3230322e3135342e33342e302f32332d3234203d3e2034343334.roa (hash: +drRhBlzkw2NRnJ+K8zWun6YCQ15R+hclRgrcPNNyHI=) 23: 3230322e3135342e32322e302f32332d3234203d3e2034343334.roa (hash: atQkuzWjUpqYWHaWZbP+/n/sslqGTtCz6j9yy2b2BFo=) 24: 3230322e3135342e31362e302f32342d3234203d3e2034343334.roa (hash: 8AxJwf0RYw6G3Da8sgCR01OvWr9FAHqrbrtgro4wc4Q=) 25: 3230322e3135342e31302e302f32342d3234203d3e2034343334.roa (hash: ZpeBe7mFPzRy0Xq+EOYdgnsyG4slFk56sszTgA3jwV4=) 26: 323430313a353430303a3a2f33322d3438203d3e2034343334.roa (hash: rBn6Oy9jE/eYVpniphDhsMY51AmaLjT08hUDLnF++Bs=) 27: 3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa (hash: BlFJ6j0ZUFTbl6b52jlclFCV7eqrWZRPS5YZadFVZ8Y=) 28: 3230322e3135342e32342e302f32332d3234203d3e2034343334.roa (hash: lWcf/sdRi/TIZfL21MmwI7pBI6Duuh33nEdmgJ3lTqw=) 29: 3230322e3135342e35342e302f32332d3234203d3e2034343334.roa (hash: nKl7JuMt35UhMXq3JNyBcLUEpb1l1wSJ6UJgz0eShwI=) 30: 3230322e3135342e32382e302f32332d3234203d3e2034343334.roa (hash: jHkw0hS82Qm8jTxfvCGj94rp07aZCDneaKfTxYAlP+c=) 31: 3230322e3135342e382e302f32332d3234203d3e2034343334.roa (hash: wbqvOEkmmfyLYP9Zzj7jIocggD2UTOc4eUWF/fVKcyE=) 32: 3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (hash: vsVamVUBMTKANhMAeppT9+J9M/iZDaPm12oxsublMoE=) 33: 3230322e3135342e31352e302f32342d3234203d3e20313431383938.roa (hash: POVvcZtyGZnLThkLZitYUgwLyPmCItDncNPZb6ZJh9U=) 34: 3230322e3135342e32302e302f32332d3234203d3e2034343334.roa (hash: KYuQfo2TBNZCzSJM5H+eAp7WMKysBepp+H9k7RnneX8=) 35: 3230322e3135342e35362e302f32312d3234203d3e2034343334.roa (hash: ImBWhv4g7+Ep4gsnVQ0kC14jzVGxseRnARyf0fl4Q+4=) 36: 3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa (hash: M3r4b9c8/DErXf4U1BIJdcCG8IUtdgF6Nod0vWyiGY4=) 37: 10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl (hash: Zn5UAjVF/cyeA/W3TqBbqysjAH8pfkjsVwv2J7gi680=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5b:b3:85:3e:de:7e:c4:ea:37:95:04:5a:64:fc:d3:4b:64:8f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Jun 4 02:35:05 2025 GMT Not After : Jun 7 13:24:05 2025 GMT Subject: CN=6E67C6862047E39BFC0A081ED1931621F39B1B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:bf:c4:fe:a9:9c:f8:93:59:d5:45:78:c8: f1:c1:76:de:36:39:c5:63:f8:76:d5:cd:04:02:f7: 45:09:c1:91:50:a0:34:4d:34:12:a0:cd:7c:47:2c: 35:73:53:d6:06:50:81:0c:29:64:53:bd:6f:3b:c8: 10:a8:a4:6c:6f:0b:52:1d:90:e2:17:e7:a4:55:26: 99:d7:dd:30:6c:70:a8:52:31:16:a7:71:62:57:d5: f8:ff:7a:cb:75:72:4c:7a:f6:7d:ff:05:42:97:2a: dd:84:9e:4d:f0:0b:f5:ab:37:23:8b:1e:4e:87:3a: b5:40:c4:b8:a0:9e:c4:d9:32:14:1b:82:d6:fb:73: 89:82:e1:6e:d5:fa:65:6d:76:86:f2:3e:62:7e:64: a5:f8:de:7b:cc:f2:07:58:8c:9e:c5:10:c9:1f:ae: e2:62:5f:19:e7:f6:9d:79:28:46:59:08:4b:d5:00: c7:91:ab:0d:c6:12:01:b6:d9:80:5f:1d:51:4b:9c: 16:e7:ef:72:ae:01:c7:18:64:f3:c5:0e:6e:3a:ce: 91:4f:9c:9a:54:21:4d:24:22:fb:32:4c:fc:4a:39: 5c:05:87:36:5a:de:fd:01:77:da:79:13:19:ec:ea: 7d:5d:60:83:d3:bb:11:be:67:58:61:9c:60:16:75: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:67:C6:86:20:47:E3:9B:FC:0A:08:1E:D1:93:16:21:F3:9B:1B:6E X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fb:8f:a3:0b:4e:4a:7a:c5:f5:ad:79:77:ef:87:94:b8:62: f9:89:27:7f:d4:8f:aa:f5:33:a7:35:f3:e9:4f:4e:a4:30:1e: df:32:0b:5f:3e:11:0f:b5:57:62:a3:e7:4e:d4:19:17:2a:8a: 48:d8:dc:ff:f8:96:c4:92:03:a9:95:02:67:10:48:15:d9:87: 00:e3:d8:b1:9e:60:c3:60:f3:55:05:a5:46:dc:6a:4b:97:a4: 9c:2b:c1:65:c2:cd:60:36:dd:00:59:ad:f0:e2:1c:ef:80:94: 2c:3a:f1:39:bf:e5:4f:02:81:4f:20:69:bd:0f:81:aa:15:11: 00:f6:df:9a:78:02:34:d4:a9:59:83:3d:af:a6:6e:41:db:4d: e4:53:fe:5b:00:a4:f7:51:41:21:72:e0:59:42:c7:dd:8e:40: 71:ba:79:ef:b1:67:79:d9:19:26:fe:59:c8:f6:b6:29:27:96: 3c:7c:b1:9c:5a:6f:97:e9:6b:80:c1:28:50:05:94:e1:69:2c: 27:6c:01:07:b1:8e:97:8b:74:e9:67:86:74:cf:c5:db:dd:b0: 82:2e:e4:2f:d2:17:1c:26:49:b4:28:b7:b2:86:fe:4e:93:80: ca:be:4a:5a:ee:e9:33:7a:39:3f:00:b8:70:29:ce:72:7a:d3: d3:bc:1c:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFuzhT7efsTqN5UEWmT800tkj/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTA2MDQwMjM1MDVaFw0yNTA2MDcxMzI0MDVaMDMxMTAvBgNV BAMTKDZFNjdDNjg2MjA0N0UzOUJGQzBBMDgxRUQxOTMxNjIxRjM5QjFCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZML/E/qmc+JNZ1UV4yPHBdt42 OcVj+HbVzQQC90UJwZFQoDRNNBKgzXxHLDVzU9YGUIEMKWRTvW87yBCopGxvC1Id kOIX56RVJpnX3TBscKhSMRancWJX1fj/est1ckx69n3/BUKXKt2Enk3wC/WrNyOL Hk6HOrVAxLignsTZMhQbgtb7c4mC4W7V+mVtdobyPmJ+ZKX43nvM8gdYjJ7FEMkf ruJiXxnn9p15KEZZCEvVAMeRqw3GEgG22YBfHVFLnBbn73KuAccYZPPFDm46zpFP nJpUIU0kIvsyTPxKOVwFhzZa3v0Bd9p5Exns6n1dYIPTuxG+Z1hhnGAWdcbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmfGhiBH45v8Cgge0ZMWIfObG24wHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx OTQtNDhkMDkxMzQ1OGIyLzAvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzND MTg5QUU5MjdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb7j6MLTkp6xfWteXfvh5S4YvmJJ3/Uj6r1 M6c18+lPTqQwHt8yC18+EQ+1V2Kj507UGRcqikjY3P/4lsSSA6mVAmcQSBXZhwDj 2LGeYMNg81UFpUbcakuXpJwrwWXCzWA23QBZrfDiHO+AlCw68Tm/5U8CgU8gab0P gaoVEQD235p4AjTUqVmDPa+mbkHbTeRT/lsApPdRQSFy4FlCx92OQHG6ee+xZ3nZ GSb+Wcj2tiknljx8sZxab5fpa4DBKFAFlOFpLCdsAQexjpeLdOlnhnTPxdvdsIIu 5C/SFxwmSbQot7KG/k6TgMq+Slru6TN6OT8AuHApznJ609O8HKc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:27 2025 by rpki-client