$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: Nr1nsGoY/BCDG0/htd7MELcQdOfwH9fxyX5/raMAs8Q= Subject key identifier: E4:18:9A:44:97:E0:9A:5C:7C:D8:5C:D6:38:37:7E:CD:C5:68:AE:08 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 4094D5785C30897A2A1F29B7401FC086D2F43A0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 04E7 Signing time: Sat 07 Jun 2025 03:31:29 +0000 Manifest this update: Sat 07 Jun 2025 03:26:29 +0000 Manifest next update: Tue 10 Jun 2025 04:14:29 +0000 Files and hashes: 1: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: mUcob6mNPVtaC2cAyewbubJLNqooSa74h75vGIg1vNY=) 2: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=) 3: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: eQag8HLHZu1kiCQwBVORmEZkcS9c5Ry+vEgpFVk0Re8=) 4: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=) 5: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=) 6: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: gglX1Ue7msHCOwrGTgIXx/95UkxFKDwgs3VTDwnAgLA=) 7: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: EGergzWDAprJ0pWqTKnjEV/FMMwX4Eg9ePrJ+3sYH/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:94:d5:78:5c:30:89:7a:2a:1f:29:b7:40:1f:c0:86:d2:f4:3a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Jun 7 03:26:29 2025 GMT Not After : Jun 10 04:14:29 2025 GMT Subject: CN=E4189A4497E09A5C7CD85CD638377ECDC568AE08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2c:bc:cc:46:5c:65:e7:42:12:e7:45:c5:55: 60:58:ec:fd:c7:30:03:88:27:e1:fb:1d:8f:a6:c8: c6:c4:65:a8:f0:f0:80:c1:70:8e:8d:c4:13:0c:3b: 4d:51:89:67:8d:5c:b8:8e:d2:86:d0:6b:a7:52:0c: 56:43:4c:cb:e0:88:a2:13:2d:9f:e4:a2:76:a7:85: 6b:98:8e:64:64:c2:bb:bd:55:8e:02:f4:c0:61:88: 39:23:75:14:3c:ec:57:e0:7d:68:ec:2c:fb:8f:b8: 00:1a:6e:d7:a2:e8:42:a8:36:a1:22:c6:3f:2f:ed: 9f:78:43:20:da:8e:3e:01:95:60:e3:89:0e:cd:d6: 28:a4:8e:1a:e6:ca:76:73:7c:7a:cf:e2:ae:e5:7b: 42:47:72:8f:26:4b:2b:4d:6d:1c:15:af:1e:7b:5d: cd:cc:c5:80:27:ab:a5:4b:33:76:9b:85:6a:d2:a1: 92:c6:38:ad:eb:2f:c3:b2:f7:a4:5c:54:6c:23:51: e0:d7:63:8f:56:7a:b6:2f:79:9a:bc:4e:44:7e:55: 49:e5:b1:9c:d7:66:b6:93:e0:de:6a:96:81:1e:81: 04:e4:54:c9:71:58:8a:72:83:06:5f:46:9c:a0:40: 24:79:88:4b:ad:b7:1f:5c:94:30:0c:06:6c:3b:2e: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:18:9A:44:97:E0:9A:5C:7C:D8:5C:D6:38:37:7E:CD:C5:68:AE:08 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c6:68:06:a0:fa:c2:12:d7:e3:09:9b:61:9a:9c:12:92:a4: 6d:8a:be:1c:95:62:91:d1:43:82:1a:61:d7:cd:3b:52:11:91: 75:a5:91:f7:54:0e:74:65:4f:7e:70:27:20:8f:c1:8e:68:62: d0:16:74:42:07:85:3d:4e:1a:34:d2:47:8d:0d:c8:35:67:bc: 57:0e:cc:69:a1:3e:1d:50:4f:ea:cd:2a:dc:20:93:ae:d5:cd: ee:12:9e:ed:25:9f:46:0c:92:0f:18:8d:56:e9:d5:f7:7c:86: bb:e8:d9:80:d7:fc:35:2a:b9:f1:93:66:59:61:10:a3:34:a0: 84:77:64:3c:fc:1c:cb:a7:4b:f4:4d:33:81:38:cd:7d:01:b7: 6e:a9:1a:a1:88:c9:90:10:1d:c7:d3:38:a5:8b:a0:bc:f9:79: 2d:41:1b:eb:4a:86:c5:44:6b:5f:67:94:c8:24:39:80:ab:fb: 70:7f:51:52:e7:b7:34:8f:d6:20:d5:93:a9:d6:01:b9:39:4d: 9c:9a:af:45:76:d3:31:19:d4:cf:a4:27:c7:2b:9f:ef:dd:54: 56:3e:3c:d6:96:4b:94:ef:6f:90:2b:c3:ef:28:7c:46:87:05: 85:ae:92:83:a9:f1:db:47:31:ea:b2:f4:55:53:a6:4f:bb:df: d3:d3:76:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJTVeFwwiXoqHym3QB/AhtL0Og8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA2MDcwMzI2MjlaFw0yNTA2MTAwNDE0MjlaMDMxMTAvBgNV BAMTKEU0MTg5QTQ0OTdFMDlBNUM3Q0Q4NUNENjM4Mzc3RUNEQzU2OEFFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtLLzMRlxl50IS50XFVWBY7P3H MAOIJ+H7HY+myMbEZajw8IDBcI6NxBMMO01RiWeNXLiO0obQa6dSDFZDTMvgiKIT LZ/konanhWuYjmRkwru9VY4C9MBhiDkjdRQ87FfgfWjsLPuPuAAabtei6EKoNqEi xj8v7Z94QyDajj4BlWDjiQ7N1iikjhrmynZzfHrP4q7le0JHco8mSytNbRwVrx57 Xc3MxYAnq6VLM3abhWrSoZLGOK3rL8Oy96RcVGwjUeDXY49WerYveZq8TkR+VUnl sZzXZraT4N5qloEegQTkVMlxWIpygwZfRpygQCR5iEuttx9clDAMBmw7LrxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5BiaRJfgmlx82FzWODd+zcVorggwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/GaAag+sIS1+MJm2GanBKSpG2KvhyVYpHR Q4IaYdfNO1IRkXWlkfdUDnRlT35wJyCPwY5oYtAWdEIHhT1OGjTSR40NyDVnvFcO zGmhPh1QT+rNKtwgk67Vze4Snu0ln0YMkg8YjVbp1fd8hrvo2YDX/DUqufGTZllh EKM0oIR3ZDz8HMunS/RNM4E4zX0Bt26pGqGIyZAQHcfTOKWLoLz5eS1BG+tKhsVE a19nlMgkOYCr+3B/UVLntzSP1iDVk6nWAbk5TZyar0V20zEZ1M+kJ8crn+/dVFY+ PNaWS5Tvb5Arw+8ofEaHBYWukoOp8dtHMeqy9FVTpk+739PTdtk= -----END CERTIFICATE-----Generated at Sat Jun 7 13:40:34 2025 by rpki-client