$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: Zt0k8iuFTrSNyjTe3ap61V2P8tj/csZ5uu1zPxDrMLY= Subject key identifier: 26:0C:4C:D5:6C:BD:89:8D:FB:97:09:79:B1:62:28:61:9F:C9:E2:24 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 3C59869D60766441D5DCFD0E323732307BF7AB1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 0511 Signing time: Sun 07 Sep 2025 01:51:29 +0000 Manifest this update: Sun 07 Sep 2025 01:46:29 +0000 Manifest next update: Wed 10 Sep 2025 07:07:29 +0000 Files and hashes: 1: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=) 2: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: UOShHOSEeYkhoeIwpoJabbtYTV7QfoZv0rwX2ntPov0=) 3: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=) 4: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=) 5: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=) 6: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=) 7: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:59:86:9d:60:76:64:41:d5:dc:fd:0e:32:37:32:30:7b:f7:ab:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Sep 7 01:46:29 2025 GMT Not After : Sep 10 07:07:29 2025 GMT Subject: CN=260C4CD56CBD898DFB970979B16228619FC9E224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d3:66:7e:56:21:f2:83:0a:16:8f:65:73:63: 53:4f:d9:96:b7:9c:b0:ba:8f:9d:20:2f:9e:0b:ad: 1e:2f:30:f1:e9:4a:6f:f6:ac:4d:ae:67:58:57:74: 8b:00:b8:0e:3f:6c:c2:b6:5d:55:f9:1d:d8:82:61: 06:c6:f3:40:f1:c6:3b:f6:b9:5a:d0:bf:18:4a:fa: 95:ba:77:b9:5d:4c:7e:1d:94:b4:13:af:45:7d:37: 90:52:94:86:5b:ee:83:ab:0c:ba:ae:56:a8:89:cb: df:31:d2:40:5a:c0:9b:f0:7b:4b:1e:51:ba:c4:dd: 9a:35:90:6b:43:8d:1e:23:08:45:8c:d9:5e:51:41: 9a:63:fa:7e:20:d7:f0:a9:da:8d:d5:27:2e:f4:e1: 61:df:17:e5:c5:b0:2b:06:39:8c:3c:96:7b:3f:b5: 57:ae:cc:83:c1:f1:16:3a:b2:c0:3b:90:e2:93:86: 51:0c:22:aa:a0:f3:a8:7d:0a:c8:a1:a2:d0:90:13: 9e:34:ce:3a:ea:ae:51:18:5b:63:a9:ad:08:6e:37: 25:f4:06:4d:0c:d1:f6:0d:29:8d:2e:e4:a9:5c:52: 90:7a:6a:4d:89:72:81:06:19:0a:35:76:8e:f4:c6: 06:92:06:47:2b:43:85:6d:68:e8:f1:f6:6e:b6:21: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0C:4C:D5:6C:BD:89:8D:FB:97:09:79:B1:62:28:61:9F:C9:E2:24 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:70:71:c9:cc:49:10:6a:bf:5e:3e:09:90:ca:30:28:1c:d3: 7d:1e:1b:ca:d9:e2:f1:7e:40:85:6a:aa:92:1e:f2:c8:a0:07: 5f:00:a7:5c:c7:5a:ea:c6:5d:82:65:b7:3e:8d:85:43:71:a6: 87:50:85:4e:14:c5:a9:45:cc:54:99:b9:0b:2b:99:eb:35:18: 0a:b1:c9:60:72:42:9a:a3:0f:79:ef:d5:cd:9d:bf:ee:b2:44: e7:f7:38:f1:99:69:10:b0:d7:9a:04:23:c1:83:bc:61:83:20: c3:79:38:4e:91:a1:00:e2:9a:2b:d6:00:ef:b0:a2:56:cb:72: c0:fc:25:92:7c:bb:64:95:36:6e:d0:62:80:16:77:6d:4e:d4: 0f:b5:52:1e:ca:9b:1f:7e:8d:1d:4b:07:ea:5b:f7:83:63:d4: d8:a1:50:bd:a8:51:23:24:7c:98:83:c4:a2:7f:e4:47:0a:cf: 89:54:61:32:1b:2f:69:f9:bf:55:7b:37:f5:3d:a1:a0:22:b8: 0d:24:ac:f4:73:2f:48:49:8f:da:63:48:d9:bd:d6:36:9d:93: 45:01:40:59:9a:62:ba:d5:e3:3a:ef:48:ae:6d:00:01:3f:a9: 7e:d2:52:4d:48:c3:a6:be:d4:be:4c:9b:56:54:0b:d7:c3:15: 4a:fa:f9:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPFmGnWB2ZEHV3P0OMjcyMHv3qx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA5MDcwMTQ2MjlaFw0yNTA5MTAwNzA3MjlaMDMxMTAvBgNV BAMTKDI2MEM0Q0Q1NkNCRDg5OERGQjk3MDk3OUIxNjIyODYxOUZDOUUyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD702Z+ViHygwoWj2VzY1NP2Za3 nLC6j50gL54LrR4vMPHpSm/2rE2uZ1hXdIsAuA4/bMK2XVX5HdiCYQbG80Dxxjv2 uVrQvxhK+pW6d7ldTH4dlLQTr0V9N5BSlIZb7oOrDLquVqiJy98x0kBawJvwe0se UbrE3Zo1kGtDjR4jCEWM2V5RQZpj+n4g1/Cp2o3VJy704WHfF+XFsCsGOYw8lns/ tVeuzIPB8RY6ssA7kOKThlEMIqqg86h9CsihotCQE540zjrqrlEYW2OprQhuNyX0 Bk0M0fYNKY0u5KlcUpB6ak2JcoEGGQo1do70xgaSBkcrQ4VtaOjx9m62IVxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgxM1Wy9iY37lwl5sWIoYZ/J4iQwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExwccnMSRBqv14+CZDKMCgc030eG8rZ4vF+ QIVqqpIe8sigB18Ap1zHWurGXYJltz6NhUNxpodQhU4UxalFzFSZuQsrmes1GAqx yWByQpqjD3nv1c2dv+6yROf3OPGZaRCw15oEI8GDvGGDIMN5OE6RoQDimivWAO+w olbLcsD8JZJ8u2SVNm7QYoAWd21O1A+1Uh7Kmx9+jR1LB+pb94Nj1NihUL2oUSMk fJiDxKJ/5EcKz4lUYTIbL2n5v1V7N/U9oaAiuA0krPRzL0hJj9pjSNm91jadk0UB QFmaYrrV4zrvSK5tAAE/qX7SUk1Iw6a+1L5Mm1ZUC9fDFUr6+YY= -----END CERTIFICATE-----Generated at Tue Sep 9 02:36:37 2025 by rpki-client