$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: TIvgKl7R2RQRHdJcJVfTw80TasVbObwPPU5qnuK865g= Subject key identifier: 3E:39:47:74:F8:13:93:AB:82:6A:AB:DD:82:73:D8:7E:FC:E3:4E:04 Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 0D50120D37EFBADD5F9BE8118DE8EBD7CAA90062 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: 66 Signing time: Mon 02 Jun 2025 10:01:37 +0000 Manifest this update: Mon 02 Jun 2025 09:56:37 +0000 Manifest next update: Thu 05 Jun 2025 12:55:37 +0000 Files and hashes: 1: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: J4isEyK1ySJtCWVpvhGVyfTYrZDUM8aentftYxqK7KA=) 2: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: LQ31BqEsODwNLs1KeMa2zm2Xt3nwGnNj1nmEvP+pi0I=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: EfPoQqtxgLuobpoazcJOzehsaHb5tIneq6Zek5DzcaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:50:12:0d:37:ef:ba:dd:5f:9b:e8:11:8d:e8:eb:d7:ca:a9:00:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Jun 2 09:56:37 2025 GMT Not After : Jun 5 12:55:37 2025 GMT Subject: CN=3E394774F81393AB826AABDD8273D87EFCE34E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:68:4f:8c:bc:84:22:b5:c1:0f:ac:89:0d: ae:4e:84:3a:6a:09:02:c7:11:8b:64:ef:aa:7b:7c: 6e:bb:24:5b:d8:69:1d:af:94:26:4f:f1:43:36:4b: 82:14:46:92:2b:5b:96:e6:41:e6:3c:76:2d:c5:e3: 31:32:de:08:e6:b0:cc:0d:82:f5:2f:5f:2e:02:f6: c0:8d:22:42:7d:9e:79:2a:eb:6c:9e:fe:8e:b8:c1: ad:7f:7b:27:4b:29:15:a2:00:fc:37:bc:7c:55:bd: 86:26:2a:3d:a1:fd:91:9e:2d:09:1f:60:64:5c:b0: 18:9e:91:b1:c8:45:a1:42:5b:ee:0c:80:df:ea:b6: 67:2d:fe:9e:e4:d8:af:f9:a7:de:c9:53:d2:58:00: 0c:85:60:85:8f:be:53:3f:cd:c2:58:8b:fc:b6:80: ba:a2:17:d4:85:25:36:c2:95:51:74:aa:0e:df:80: 57:ce:28:e5:01:9e:8d:74:ac:e9:a7:7f:df:5a:b6: 62:b9:a4:c5:93:a7:29:a9:cf:74:90:f3:7c:b7:2f: 77:98:cb:e1:b9:76:9f:28:7f:9e:1a:6f:36:db:8d: 7e:1d:45:bf:7d:da:2f:38:6b:4f:4b:14:1e:3b:45: 63:42:02:b3:2c:ad:9a:b6:7c:30:7d:cb:3e:38:33: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:39:47:74:F8:13:93:AB:82:6A:AB:DD:82:73:D8:7E:FC:E3:4E:04 X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e0:4c:3a:a3:f5:82:71:69:b5:31:20:43:68:e8:fd:a5:16: 30:00:c9:c1:36:11:c0:7e:5d:c2:67:b0:f6:16:31:22:ae:ae: f5:74:dd:1a:ea:13:a2:9c:76:4c:f4:25:81:cd:06:33:5f:0f: 71:2d:20:f2:0b:73:c5:03:db:b3:0e:9e:39:f6:a4:88:89:f8: 97:c7:b7:7c:dc:62:de:ff:87:b6:51:b6:3c:ff:1f:4d:bd:34: e6:3d:19:d3:60:07:78:d2:e9:f4:4a:31:be:19:9d:99:cc:70: fa:8a:f5:14:1b:23:18:09:3b:1e:92:88:a6:8b:43:31:53:28: 75:ce:a2:0a:13:45:02:50:c5:88:0d:87:0c:27:b0:58:fa:a5: 05:9b:65:2d:c4:68:71:81:3d:a3:ca:d2:06:fd:bf:e4:0f:16: a7:79:fc:2a:34:91:94:fa:0b:e6:cb:60:8a:4a:17:1e:9d:1e: a3:94:ea:1e:3f:3e:ce:f1:15:cc:f5:ac:90:57:d3:8a:7a:af: 02:5e:dd:7b:8d:4d:30:87:3a:61:5a:f4:97:8c:3f:aa:b0:db: 6d:95:1d:28:87:d1:40:d3:f9:c0:0d:73:5e:23:72:54:b1:17: 4d:9a:5b:e8:4b:d8:20:f9:25:69:14:f7:df:f4:37:5b:14:46: 80:29:eb:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVASDTfvut1fm+gRjejr18qpAGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNTA2MDIwOTU2MzdaFw0yNTA2MDUxMjU1MzdaMDMxMTAvBgNV BAMTKDNFMzk0Nzc0RjgxMzkzQUI4MjZBQUJERDgyNzNEODdFRkNFMzRFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKR2hPjLyEIrXBD6yJDa5OhDpq CQLHEYtk76p7fG67JFvYaR2vlCZP8UM2S4IURpIrW5bmQeY8di3F4zEy3gjmsMwN gvUvXy4C9sCNIkJ9nnkq62ye/o64wa1/eydLKRWiAPw3vHxVvYYmKj2h/ZGeLQkf YGRcsBiekbHIRaFCW+4MgN/qtmct/p7k2K/5p97JU9JYAAyFYIWPvlM/zcJYi/y2 gLqiF9SFJTbClVF0qg7fgFfOKOUBno10rOmnf99atmK5pMWTpympz3SQ83y3L3eY y+G5dp8of54abzbbjX4dRb992i84a09LFB47RWNCArMsrZq2fDB9yz44M35jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjlHdPgTk6uCaqvdgnPYfvzjTgQwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITgTDqj9YJxabUxIENo6P2lFjAAycE2EcB+ XcJnsPYWMSKurvV03RrqE6Kcdkz0JYHNBjNfD3EtIPILc8UD27MOnjn2pIiJ+JfH t3zcYt7/h7ZRtjz/H029NOY9GdNgB3jS6fRKMb4ZnZnMcPqK9RQbIxgJOx6SiKaL QzFTKHXOogoTRQJQxYgNhwwnsFj6pQWbZS3EaHGBPaPK0gb9v+QPFqd5/Co0kZT6 C+bLYIpKFx6dHqOU6h4/Ps7xFcz1rJBX04p6rwJe3XuNTTCHOmFa9JeMP6qw222V HSiH0UDT+cANc14jclSxF02aW+hL2CD5JWkU99/0N1sURoAp654= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:36 2025 by rpki-client