$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft File: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft (raw, json) Hash identifier: kwtEc66ohTCSyygk2mwFyXZC2lI70vuYHT3rykHce60= Subject key identifier: 64:FA:4A:F7:EA:95:33:C7:D5:CE:AE:0A:F1:40:BD:0A:C8:2E:A6:69 Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD Certificate issuer: /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Certificate serial: 6715E69D159E184308875E2FCD9F2D17AF3B65E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft Manifest number: 0506 Signing time: Fri 05 Sep 2025 10:41:18 +0000 Manifest this update: Fri 05 Sep 2025 10:36:18 +0000 Manifest next update: Mon 08 Sep 2025 15:27:18 +0000 Files and hashes: 1: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 624g30p2voUe7YOI6fxkypPwiKquVP6kSsxSvqN561I=) 2: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: j21itrf8qD4AmUrxncy40ymX8U/GV6CW8szjNUym4g4=) 3: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: IG4+6wpyLqd68emapMZn0l0WwPLKecBNd2LG8+PvHPA=) 4: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl (hash: ZLMpU4n8hPn1O2xFT6E7L3PR2WKS9IMm5QqJyYxCQWw=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: Ts5xtS1oQbReAZqtallUwZhr/nW63EWdb9tsEvZsE08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:15:e6:9d:15:9e:18:43:08:87:5e:2f:cd:9f:2d:17:af:3b:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Validity Not Before: Sep 5 10:36:18 2025 GMT Not After : Sep 8 15:27:18 2025 GMT Subject: CN=64FA4AF7EA9533C7D5CEAE0AF140BD0AC82EA669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:69:a9:2a:49:b1:ad:85:e5:65:87:88:94: 82:16:12:40:11:13:3d:8e:22:9e:20:e3:93:e4:6c: c9:44:c0:21:56:71:7d:a6:c2:97:5e:65:15:dc:9b: 87:f1:2c:11:d7:dc:b1:fd:40:ca:95:8f:94:05:c6: 9c:38:05:c5:af:1a:71:46:9c:e8:8b:e0:52:1b:e4: 0a:bd:ca:0b:16:40:86:a9:d4:50:b5:95:a0:39:f5: 82:58:fa:cb:f8:75:ef:ba:0f:57:f3:89:08:c1:dc: 03:c8:f8:19:ba:df:1d:3e:6d:e5:9b:33:53:9f:83: e0:02:f2:93:87:27:ce:e4:bb:8b:45:07:8f:1d:2b: f3:b6:49:72:77:ba:09:60:82:b7:8d:19:5a:60:42: 38:8d:16:cd:2d:c4:19:b5:46:ed:eb:df:96:09:0e: 38:b0:ea:a7:dd:ad:76:4c:3d:81:fd:0f:37:2f:ea: 77:2e:e4:f4:6f:ed:62:25:00:13:ed:74:df:ac:42: 25:65:fc:7c:df:eb:d3:87:6b:23:94:d8:09:c6:21: bf:d3:98:81:b5:53:de:e7:a0:7c:3e:ba:65:1f:bc: c8:72:1b:8a:4c:47:91:fa:7e:1c:ef:0a:81:a7:f8: fc:a7:7b:db:3e:e8:e2:c8:57:1f:3b:f6:95:f2:b4: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:4A:F7:EA:95:33:C7:D5:CE:AE:0A:F1:40:BD:0A:C8:2E:A6:69 X509v3 Authority Key Identifier: keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:77:d2:62:fe:1e:a5:ed:ce:22:7b:42:0b:c3:58:f2:a4:c0: e4:10:36:a6:85:d9:9e:0f:c9:62:8f:f2:a6:23:71:92:5f:71: e9:ab:fb:c9:e3:f3:39:01:b1:83:89:39:f4:9a:7f:2e:1b:8e: fd:12:65:2d:62:23:85:b1:56:a0:4e:f0:5d:f5:31:5a:77:0e: 3f:30:72:f5:30:37:b3:44:63:c8:b5:36:c4:02:13:14:ee:12: 71:a4:71:2a:af:44:94:64:44:9c:14:cb:8e:b7:4f:30:5b:9a: 7d:51:13:33:8e:97:b6:dc:8a:ed:db:8c:ef:3a:a6:71:2c:f1: ec:92:51:1f:b2:59:26:85:43:9b:2c:61:b3:fe:27:1c:f5:81: 8d:c7:80:e2:6e:56:b1:49:02:d3:08:fe:00:52:f8:c9:f6:13: 76:67:19:7a:06:01:58:d9:fa:19:ac:74:1d:f4:b7:f4:6f:7b: a0:9a:f0:48:15:aa:69:c6:56:ce:6b:f3:f3:23:92:af:43:b5: 11:e9:f3:9e:17:ff:35:69:bb:b3:fe:7b:79:ea:df:36:25:07: 8e:96:14:67:2c:da:0c:a3:11:97:ad:5b:6b:bc:88:5e:f1:6d: 6f:de:40:85:4f:77:44:0f:84:95:71:d2:8b:f3:49:69:44:2b: 29:80:73:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxXmnRWeGEMIh14vzZ8tF687ZeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy Q0M5QThBRDAeFw0yNTA5MDUxMDM2MThaFw0yNTA5MDgxNTI3MThaMDMxMTAvBgNV BAMTKDY0RkE0QUY3RUE5NTMzQzdENUNFQUUwQUYxNDBCRDBBQzgyRUE2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxWmpKkmxrYXlZYeIlIIWEkAR Ez2OIp4g45PkbMlEwCFWcX2mwpdeZRXcm4fxLBHX3LH9QMqVj5QFxpw4BcWvGnFG nOiL4FIb5Aq9ygsWQIap1FC1laA59YJY+sv4de+6D1fziQjB3API+Bm63x0+beWb M1Ofg+AC8pOHJ87ku4tFB48dK/O2SXJ3uglggreNGVpgQjiNFs0txBm1Ru3r35YJ Djiw6qfdrXZMPYH9Dzcv6ncu5PRv7WIlABPtdN+sQiVl/Hzf69OHayOU2AnGIb/T mIG1U97noHw+umUfvMhyG4pMR5H6fhzvCoGn+Pyne9s+6OLIVx879pXytDNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZPpK9+qVM8fVzq4K8UC9CsgupmkwHwYDVR0j BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5 QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5 QThBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0 MzMyQ0M5QThBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF30mL+HqXtziJ7QgvDWPKkwOQQNqaF2Z4P yWKP8qYjcZJfcemr+8nj8zkBsYOJOfSafy4bjv0SZS1iI4WxVqBO8F31MVp3Dj8w cvUwN7NEY8i1NsQCExTuEnGkcSqvRJRkRJwUy463TzBbmn1REzOOl7bciu3bjO86 pnEs8eySUR+yWSaFQ5ssYbP+Jxz1gY3HgOJuVrFJAtMI/gBS+Mn2E3ZnGXoGAVjZ +hmsdB30t/Rve6Ca8EgVqmnGVs5r8/Mjkq9DtRHp854X/zVpu7P+e3nq3zYlB46W FGcs2gyjEZetW2u8iF7xbW/eQIVPd0QPhJVx0ovzSWlEKymAc6A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:11 2025 by rpki-client