$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: 4FcE9+qYO6H+Ruump/8MroTzhd4jpW8sbliAfAfdBgc= Subject key identifier: 74:CB:B1:1E:57:3E:9C:33:8F:60:1E:E9:8C:F4:F4:FB:0C:31:40:3F Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 648BABE515E22CC049496F273E3F86CBFDDAC7DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 04DB Signing time: Sun 11 May 2025 05:11:55 +0000 Manifest this update: Sun 11 May 2025 05:06:55 +0000 Manifest next update: Wed 14 May 2025 06:14:55 +0000 Files and hashes: 1: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: lGaCHoR1Jvjo/a1sb4ZgW3ziv1aSQlPU5NtVxtpLBn4=) 2: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: xp9Yt+QgIOFGTJ0EWMSSSxYFyLJGG1Wsr7vVcpcuymo=) 3: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: kv4gHUJB2d9DdDBCo8qtak4t/uj/DrPz8kIid7pFc6M=) 4: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: TUeak5jHDtbvargpCDqZuQl+RjoYojBe2s7CTDzVmuA=) 5: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: ZkDD1PXfJ1uxwAaNgZHZX7a5tpBbHZ0kvj8I0Rwjsd8=) 6: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: qpuK7V2nx9vyZ2D5zBXh89xjEgPE/ctXWC9yCVNhPpA=) 7: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: K244iScN8M4O5u7S2cH3/W0yr++iJmaE7tZQk4Lm388=) 8: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=) 9: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: bYdJ74u/3uGNPygrk82DdhGJdVHp2fQPuwAhsR/UbOs=) 10: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: i8BpctBtDR1cL+NnxkziOtf21/F0kdql2uvKW16NHeU=) 11: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +yvyeF1Eot4HYMVmlpHdLW9PkKkaiWArut4ApdSjAJ0=) 12: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: coDrWqzbyq2BQseK5NrvbOtXAj1+xnAkREKfl4Q2n4g=) 13: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: /L5xs6PGKpRT/JJeBTXRVK04bWdHgmJFRa12gb3q/ao=) 14: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: lKc98uyaChQPn1CaGH2R2he43NF0eULLFB1Ix5Ch2+Y=) 15: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: yD3+h/70LNRy7k+grqlLvUiRpTBwDIrPcXy82xCrK1k=) 16: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: 9oKO6g1ubJMPn+KO0b/5NKvsIE0sjvdEPhP+zwJwgK8=) 17: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=) 18: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: 1vpYJGsrh91Q511wGSyU3RdE6pqJNKWWpNQ1+uRQoPc=) 19: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: XmQiAGgrXEk9JWo7jplQEJQlCfJ18ZwvyzwVTH15z5g=) 20: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: xaLCqb9BSlOw22qrcy3sXp6sp0UG31m5gaLC+F0ihjc=) 21: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: KYT+Q0QdA+7lJOIYWRYGedtQ8m66EUEb2FwATZn7b2I=) 22: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: FvNCUc/W/tc6wy40MDBuc5e/y9zU4oHO6PrUzX5qOO4=) 23: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: jzRutxmwCaj+qL/12+BUDxY9FM50TTowvhnOTHxn89o=) 24: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: wIKkZC0BEQN2L8x/O6JuMjatfph1dX23Nbg/SnzGC+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 06:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8b:ab:e5:15:e2:2c:c0:49:49:6f:27:3e:3f:86:cb:fd:da:c7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: May 11 05:06:55 2025 GMT Not After : May 14 06:14:55 2025 GMT Subject: CN=74CBB11E573E9C338F601EE98CF4F4FB0C31403F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:24:af:e8:df:47:68:af:6e:b5:98:89:15: 86:a4:dc:71:3b:4c:bb:76:ad:36:d0:97:3a:0f:2e: fa:51:75:a5:46:97:09:95:a0:80:14:69:38:67:53: ad:ac:93:c6:01:33:1b:55:b3:2e:68:7b:a0:c9:97: 9c:e1:a4:43:2d:28:cb:44:d7:db:88:29:43:05:5d: f5:b2:8c:a3:db:6f:eb:10:0e:78:93:b9:38:0a:a5: 6e:a7:cd:e7:88:6e:da:5b:56:b0:03:d5:24:f5:90: b9:4d:b0:6f:a7:14:48:1b:b4:45:6f:6a:2d:33:3a: ae:9a:5d:cd:e0:b9:fa:78:5b:0c:45:2f:26:bb:de: 98:33:81:4b:8f:df:59:e6:a4:66:18:66:4d:0e:79: 4c:d5:aa:83:4a:ba:c9:e7:53:a4:9e:d2:c4:21:ef: c3:c6:19:c5:90:a8:cf:96:77:0e:e5:35:07:8c:fc: 45:2e:87:70:b3:16:41:16:4a:69:95:d4:61:f0:a0: 8f:51:82:c5:bc:b6:61:ec:19:50:b3:e6:c5:58:7e: 95:16:2b:c0:21:ae:ce:3e:ee:e0:84:d5:6d:f7:26: 81:e0:f7:0b:26:92:dd:07:3e:96:01:d1:d2:6a:6c: 45:24:47:df:2f:40:aa:c1:31:6f:a4:ae:22:47:de: ff:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CB:B1:1E:57:3E:9C:33:8F:60:1E:E9:8C:F4:F4:FB:0C:31:40:3F X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c5:1e:cf:75:2a:ca:d7:e8:30:73:49:cf:42:89:64:88:30: e1:7d:de:62:8b:7f:74:ec:ef:e9:67:db:53:44:6a:7c:01:06: 9f:89:9b:ff:0e:4d:c9:85:ca:ec:c1:a7:9d:88:cb:48:4f:0a: d2:9d:32:cb:26:fe:f9:7b:6e:26:bf:6a:73:d5:d4:4c:81:a0: d8:04:5f:7b:3d:58:63:4f:97:ed:8d:05:94:53:75:1d:15:cd: 65:06:9e:fb:5e:f8:ef:fe:77:69:e7:79:a0:48:cd:03:28:f7: 1b:f0:d3:38:92:9c:ce:03:ff:6c:4d:93:27:c0:f4:be:c0:ad: fd:36:c5:ae:8c:fe:85:74:e7:e6:5f:37:9c:45:9a:82:bd:aa: 0c:c8:30:63:16:d9:d5:bd:a6:cd:49:7c:d2:f2:74:35:ee:1c: fa:0d:7d:4d:10:c6:78:62:59:bc:4c:b6:2a:bd:96:52:87:f8: e7:72:49:ba:c9:2f:00:b9:68:8a:f9:03:05:50:4f:eb:86:92: 81:4a:82:de:a1:0d:bb:75:b7:39:73:5f:fe:69:e9:d7:10:d9: 09:0c:e9:04:cc:f0:29:d9:6b:53:86:9e:e9:c8:d0:40:a2:c1: b4:4e:9c:12:f6:aa:db:59:18:af:82:1b:ab:11:ae:06:b4:d5: 15:65:e6:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIur5RXiLMBJSW8nPj+Gy/3ax9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA1MTEwNTA2NTVaFw0yNTA1MTQwNjE0NTVaMDMxMTAvBgNV BAMTKDc0Q0JCMTFFNTczRTlDMzM4RjYwMUVFOThDRjRGNEZCMEMzMTQwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOiSv6N9HaK9utZiJFYak3HE7 TLt2rTbQlzoPLvpRdaVGlwmVoIAUaThnU62sk8YBMxtVsy5oe6DJl5zhpEMtKMtE 19uIKUMFXfWyjKPbb+sQDniTuTgKpW6nzeeIbtpbVrAD1ST1kLlNsG+nFEgbtEVv ai0zOq6aXc3gufp4WwxFLya73pgzgUuP31nmpGYYZk0OeUzVqoNKusnnU6Se0sQh 78PGGcWQqM+Wdw7lNQeM/EUuh3CzFkEWSmmV1GHwoI9RgsW8tmHsGVCz5sVYfpUW K8Ahrs4+7uCE1W33JoHg9wsmkt0HPpYB0dJqbEUkR98vQKrBMW+kriJH3v8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdMuxHlc+nDOPYB7pjPT0+wwxQD8wHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/FHs91KsrX6DBzSc9CiWSIMOF93mKLf3Ts 7+ln21NEanwBBp+Jm/8OTcmFyuzBp52Iy0hPCtKdMssm/vl7bia/anPV1EyBoNgE X3s9WGNPl+2NBZRTdR0VzWUGnvte+O/+d2nneaBIzQMo9xvw0ziSnM4D/2xNkyfA 9L7Arf02xa6M/oV05+ZfN5xFmoK9qgzIMGMW2dW9ps1JfNLydDXuHPoNfU0Qxnhi WbxMtiq9llKH+OdySbrJLwC5aIr5AwVQT+uGkoFKgt6hDbt1tzlzX/5p6dcQ2QkM 6QTM8CnZa1OGnunI0ECiwbROnBL2qttZGK+CG6sRrga01RVl5rM= -----END CERTIFICATE-----Generated at Sun May 11 20:20:54 2025 by rpki-client