$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: ZJweS1WFlDKFISxjyk1TPX7xYr1mjUmGeUfp0lR4yrM= Subject key identifier: 08:19:EF:0C:29:B3:69:38:8D:EB:5B:5E:FE:E7:09:9F:39:D7:B1:11 Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 6D271520999DED8158222488338B43BD89E69582 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 02CB Signing time: Sun 29 Jun 2025 08:50:02 +0000 Manifest this update: Sun 29 Jun 2025 08:45:02 +0000 Manifest next update: Wed 02 Jul 2025 14:35:02 +0000 Files and hashes: 1: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: zx5QZwwIPute95Txk6Wlo+EuZ14iXYOglYlLMDZ6JlY=) 2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: a7PTXgKIuAxPVgmOfgSfIiexn0wfFohzIh28xEr3Sns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 14:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:27:15:20:99:9d:ed:81:58:22:24:88:33:8b:43:bd:89:e6:95:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Jun 29 08:45:02 2025 GMT Not After : Jul 2 14:35:02 2025 GMT Subject: CN=0819EF0C29B369388DEB5B5EFEE7099F39D7B111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:83:b0:62:4c:06:da:e3:6d:45:02:b7:da: d1:d8:63:6d:09:8f:78:8d:00:d8:03:9e:68:f9:c2: ae:07:3a:3e:50:99:4a:52:b1:0a:e8:0f:2e:51:50: 52:37:30:c7:9a:96:f3:aa:a7:8d:33:a4:f9:85:b4: fd:66:c0:d5:4c:90:d1:ae:4e:a4:4f:3e:b3:e1:0e: 39:12:7c:ef:8b:f8:f1:bf:d6:4f:79:ac:5f:f2:b7: 15:ed:a9:e7:f0:1a:17:c0:7a:ba:c2:c1:aa:bf:d3: 71:bc:b6:64:91:dd:58:37:3b:1e:95:23:b8:52:c9: b2:e7:38:be:16:39:eb:9f:e9:b6:bd:08:21:e7:d0: 32:24:02:81:ee:15:b4:50:54:6a:a1:a9:02:98:ac: 62:84:95:48:69:d4:13:06:cf:0b:47:ab:2c:4d:0b: 2d:cd:33:d1:0c:67:d6:b0:ff:f5:af:b6:6c:0a:41: 19:ba:2a:63:6a:63:9b:a1:62:97:bf:9c:c6:48:87: d5:69:04:dd:ca:f3:4e:b5:ce:cf:86:f6:64:96:f4: e3:09:5f:0b:6b:de:05:2c:c2:c7:8b:19:be:d5:0c: 88:12:3e:88:53:bc:de:f2:ec:38:02:d1:1f:75:69: ec:ac:7c:98:0c:ff:97:27:dd:cd:eb:13:1b:6c:de: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:19:EF:0C:29:B3:69:38:8D:EB:5B:5E:FE:E7:09:9F:39:D7:B1:11 X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7b:68:dd:fb:d4:8c:10:43:2b:2c:49:7d:67:38:6f:39:e3: be:16:83:00:9e:d9:34:0a:d9:65:02:d7:1a:25:28:59:42:a7: f6:0d:9c:9c:27:70:16:28:cb:d5:54:28:36:6e:ee:b4:86:94: ef:34:5f:33:73:08:d4:f6:6b:05:f4:8c:2c:c2:91:9b:17:26: f9:3d:41:9d:69:d3:fa:2e:50:94:52:b3:31:f8:7e:5d:60:64: e5:2d:9f:b1:e3:af:ef:26:ff:59:50:93:95:07:52:93:0c:cd: f5:02:d9:68:13:44:f1:fd:56:20:03:d1:11:13:0a:f6:e9:82: cf:9f:8c:07:1b:8a:f6:bc:42:86:72:73:27:ea:45:ba:3b:88: e6:0a:d7:d0:a2:0c:39:a4:ae:ee:58:41:96:f9:43:61:f8:86: 38:4a:69:4f:75:37:4e:5d:14:28:f7:42:a5:46:a2:a8:60:f5: 91:a2:ae:cd:8d:1e:3c:bf:85:e5:48:0e:99:4a:02:36:6e:20: ac:b1:9c:7a:29:6f:bb:ee:e3:1d:c5:39:64:c9:41:34:c7:42: 9f:f0:ab:e4:5b:19:3d:54:37:0d:3b:62:0e:32:d5:d2:a6:19: 49:90:8f:ef:41:b3:70:51:0b:2e:2c:9d:db:d4:6e:9b:8c:bd: 4d:43:45:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbScVIJmd7YFYIiSIM4tDvYnmlYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTA2MjkwODQ1MDJaFw0yNTA3MDIxNDM1MDJaMDMxMTAvBgNV BAMTKDA4MTlFRjBDMjlCMzY5Mzg4REVCNUI1RUZFRTcwOTlGMzlEN0IxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8YOwYkwG2uNtRQK32tHYY20J j3iNANgDnmj5wq4HOj5QmUpSsQroDy5RUFI3MMealvOqp40zpPmFtP1mwNVMkNGu TqRPPrPhDjkSfO+L+PG/1k95rF/ytxXtqefwGhfAerrCwaq/03G8tmSR3Vg3Ox6V I7hSybLnOL4WOeuf6ba9CCHn0DIkAoHuFbRQVGqhqQKYrGKElUhp1BMGzwtHqyxN Cy3NM9EMZ9aw//WvtmwKQRm6KmNqY5uhYpe/nMZIh9VpBN3K8061zs+G9mSW9OMJ Xwtr3gUswseLGb7VDIgSPohTvN7y7DgC0R91aeysfJgM/5cn3c3rExts3mj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCBnvDCmzaTiN61te/ucJnznXsREwHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN7aN371IwQQyssSX1nOG85474WgwCe2TQK 2WUC1xolKFlCp/YNnJwncBYoy9VUKDZu7rSGlO80XzNzCNT2awX0jCzCkZsXJvk9 QZ1p0/ouUJRSszH4fl1gZOUtn7Hjr+8m/1lQk5UHUpMMzfUC2WgTRPH9ViAD0RET Cvbpgs+fjAcbiva8QoZycyfqRbo7iOYK19CiDDmkru5YQZb5Q2H4hjhKaU91N05d FCj3QqVGoqhg9ZGirs2NHjy/heVIDplKAjZuIKyxnHopb7vu4x3FOWTJQTTHQp/w q+RbGT1UNw07Yg4y1dKmGUmQj+9Bs3BRCy4sndvUbpuMvU1DRfg= -----END CERTIFICATE-----Generated at Mon Jun 30 11:23:33 2025 by rpki-client