$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft File: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft (raw, json) Hash identifier: XIwKEIu5s5UARhJQNlfcBt9I74cPNtq229a3lZH2sLQ= Subject key identifier: 51:3E:58:07:FB:9D:F4:55:A2:C2:99:27:D1:BA:D4:B1:6C:59:62:3A Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD Certificate issuer: /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Certificate serial: 7E5B1978C325FDD0A6B54DF3FDB37AC5E4D4C7B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft Manifest number: 051E Signing time: Tue 28 Oct 2025 04:11:21 +0000 Manifest this update: Tue 28 Oct 2025 04:06:21 +0000 Manifest next update: Fri 31 Oct 2025 09:51:21 +0000 Files and hashes: 1: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl (hash: HZ8XFqjRItpyvU0MtdLZGXQFgEuKN9gtf7REbkvXS4w=) 2: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 624g30p2voUe7YOI6fxkypPwiKquVP6kSsxSvqN561I=) 3: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: j21itrf8qD4AmUrxncy40ymX8U/GV6CW8szjNUym4g4=) 4: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: ceBLgXby2aRGoAlIoNZmevBafi2ZgxeFVTgfIExcxzY=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: Ts5xtS1oQbReAZqtallUwZhr/nW63EWdb9tsEvZsE08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 09:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5b:19:78:c3:25:fd:d0:a6:b5:4d:f3:fd:b3:7a:c5:e4:d4:c7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Validity Not Before: Oct 28 04:06:21 2025 GMT Not After : Oct 31 09:51:21 2025 GMT Subject: CN=513E5807FB9DF455A2C29927D1BAD4B16C59623A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:b9:f3:41:6d:77:25:bd:9a:85:02:4d:1a: a0:77:f9:39:39:dc:27:13:36:3c:78:be:23:38:9e: 9c:d7:c9:7d:a3:67:6b:35:9f:d6:d9:d1:92:6c:6b: 43:d1:7c:b7:59:57:37:1b:b1:53:ce:c8:2e:8d:ca: d4:41:e2:9c:69:5e:7a:c3:86:b8:37:0f:7a:81:b8: 34:30:a9:51:5b:77:a7:d5:5d:3c:34:78:d4:fe:b2: f7:27:32:e4:f9:83:4e:d6:aa:4e:38:cf:22:5e:da: 0e:e8:09:ec:c1:bf:1b:ca:63:aa:34:55:f4:ac:b5: 5d:b8:4d:d8:4a:d3:7d:02:6f:2c:d4:e3:4c:13:04: 32:4b:d0:88:66:bd:48:dd:ba:fd:53:63:cc:9a:93: 4d:08:cc:66:73:4b:5b:a4:ac:1b:fc:2a:03:70:b8: 8a:92:89:51:00:2d:da:71:ab:45:40:b1:fb:f3:13: 3f:a7:2b:9b:e7:ba:9b:3e:95:79:91:7a:aa:0c:03: 1a:d3:0a:c5:6e:8c:8b:28:79:98:37:7e:9b:b2:17: 73:73:90:e5:0b:6f:e0:f0:b7:fb:4c:d0:0b:10:2d: 81:6d:c5:24:06:ec:28:80:73:15:3d:68:8d:c1:e6: 45:1f:65:15:b6:68:4d:42:f3:3b:8c:fb:dd:47:0e: b2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3E:58:07:FB:9D:F4:55:A2:C2:99:27:D1:BA:D4:B1:6C:59:62:3A X509v3 Authority Key Identifier: keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:59:29:cd:cc:c7:b9:82:b0:20:0e:9d:63:d2:c5:dd:dd:e4: 8d:59:9a:43:dc:a0:a3:53:f4:af:f4:a2:3b:27:4d:e5:04:78: 38:68:04:ae:49:a6:b4:9c:bb:9e:b5:bf:f6:9b:dc:18:77:a3: a4:7d:e4:dc:72:2e:67:de:5d:63:44:90:fc:31:4e:e1:63:95: fd:23:0b:fa:b3:37:05:cb:05:18:44:2d:f4:98:6c:05:5a:40: 67:8a:e8:18:f3:22:ce:9c:3a:32:29:9a:46:ac:51:44:d2:ab: ef:0c:b1:d8:7e:4c:30:b0:26:10:96:67:6d:0b:10:ff:fa:b1: 15:cb:cd:b3:26:16:bd:cd:fc:de:73:6a:2e:30:71:e6:ca:aa: 40:51:4c:24:b4:c1:59:13:91:18:08:25:b9:6d:7f:02:b7:6f: b8:5b:83:fd:0e:e8:d9:e9:a2:79:fb:ac:9d:9e:1e:3d:41:6b: 01:4d:d7:0b:58:f8:ca:ad:f2:2a:c1:e9:54:c0:a6:a9:23:84: ab:42:c1:76:24:19:c2:a7:ab:00:4b:8b:42:fa:f2:b0:87:af: ea:c9:b5:76:48:c4:38:55:50:27:dd:83:75:ad:f2:07:21:7f: ed:49:05:58:02:c7:9e:d2:44:9b:77:19:89:b4:67:49:fc:d2: 82:96:81:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflsZeMMl/dCmtU3z/bN6xeTUx7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy Q0M5QThBRDAeFw0yNTEwMjgwNDA2MjFaFw0yNTEwMzEwOTUxMjFaMDMxMTAvBgNV BAMTKDUxM0U1ODA3RkI5REY0NTVBMkMyOTkyN0QxQkFENEIxNkM1OTYyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBLnzQW13Jb2ahQJNGqB3+Tk5 3CcTNjx4viM4npzXyX2jZ2s1n9bZ0ZJsa0PRfLdZVzcbsVPOyC6NytRB4pxpXnrD hrg3D3qBuDQwqVFbd6fVXTw0eNT+svcnMuT5g07Wqk44zyJe2g7oCezBvxvKY6o0 VfSstV24TdhK030CbyzU40wTBDJL0IhmvUjduv1TY8yak00IzGZzS1ukrBv8KgNw uIqSiVEALdpxq0VAsfvzEz+nK5vnups+lXmReqoMAxrTCsVujIsoeZg3fpuyF3Nz kOULb+Dwt/tM0AsQLYFtxSQG7CiAcxU9aI3B5kUfZRW2aE1C8zuM+91HDrJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUT5YB/ud9FWiwpkn0brUsWxZYjowHwYDVR0j BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5 QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5 QThBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0 MzMyQ0M5QThBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBZKc3Mx7mCsCAOnWPSxd3d5I1ZmkPcoKNT 9K/0ojsnTeUEeDhoBK5JprScu561v/ab3Bh3o6R95NxyLmfeXWNEkPwxTuFjlf0j C/qzNwXLBRhELfSYbAVaQGeK6BjzIs6cOjIpmkasUUTSq+8Msdh+TDCwJhCWZ20L EP/6sRXLzbMmFr3N/N5zai4wcebKqkBRTCS0wVkTkRgIJbltfwK3b7hbg/0O6Nnp onn7rJ2eHj1BawFN1wtY+Mqt8irB6VTApqkjhKtCwXYkGcKnqwBLi0L68rCHr+rJ tXZIxDhVUCfdg3Wt8gchf+1JBVgCx57SRJt3GYm0Z0n80oKWges= -----END CERTIFICATE-----Generated at Thu Oct 30 05:03:07 2025 by rpki-client