$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft File: 10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json) Hash identifier: Qd+F1inN9cvJnTybx5/GlI4lGHi+Pgqx3qiYP2H5Veo= Subject key identifier: DF:25:25:2A:ED:DB:B4:0A:FB:48:F2:C6:02:68:64:3D:0B:B1:DF:30 Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Certificate issuer: /CN=10FC4D9D2403FC433C19BB76131325B776505E51 Certificate serial: 23236A2BF00DA334689E452455BF691B9ECBBFD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft Manifest number: 0497 Signing time: Fri 22 Aug 2025 09:00:44 +0000 Manifest this update: Fri 22 Aug 2025 08:55:44 +0000 Manifest next update: Mon 25 Aug 2025 19:15:44 +0000 Files and hashes: 1: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: TFWcJe7P8Qs88Vg5FhFLSAp9T62akG9eg+btkWY8D/w=) 2: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: UmTElIgCbtTh8UFGpo2SUmRFHqf/WI+Hw/LxDpdu038=) 3: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:23:6a:2b:f0:0d:a3:34:68:9e:45:24:55:bf:69:1b:9e:cb:bf:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Validity Not Before: Aug 22 08:55:44 2025 GMT Not After : Aug 25 19:15:44 2025 GMT Subject: CN=DF25252AEDDBB40AFB48F2C60268643D0BB1DF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:c8:4d:81:5b:6d:ee:73:a6:5d:e9:b9:23: a6:14:2d:8c:3f:75:01:2f:48:62:65:f8:a2:1d:03: 2d:90:6e:cb:49:ac:e2:04:fe:48:b9:73:6d:7b:07: aa:06:a1:dc:cb:0f:70:fe:8d:e5:cd:e3:ec:46:5f: d9:a1:22:b8:41:63:0e:46:c0:e0:83:0c:28:61:f9: e0:be:a2:62:ef:74:02:f9:76:a8:89:29:7b:c6:5e: 47:d0:96:27:59:74:7a:9a:69:9b:e1:21:f3:59:80: 22:2e:be:b0:46:3d:de:6a:c3:58:36:7f:95:2e:d6: 58:67:e6:ad:c5:c0:48:f5:a5:e4:76:18:bc:e5:f4: 5a:6a:30:47:a5:7b:2e:b2:38:aa:27:b7:30:e8:dd: de:9f:3e:04:51:13:bf:90:a4:88:b8:7b:75:cf:5a: 24:7f:c9:af:c7:00:c5:34:dd:9b:ab:18:96:49:42: 1c:54:1b:fe:d8:42:84:25:2f:79:7d:bd:21:14:73: 16:7e:10:1e:89:13:b2:e2:8f:fb:f8:8a:14:37:76: 47:25:a4:45:06:b2:95:02:7f:3f:09:d1:1a:17:52: ed:ec:3a:15:2d:9a:a9:45:20:07:a9:b5:e6:4d:2c: 72:7b:8c:d3:6b:5d:0f:ea:61:f3:32:ec:61:fd:6c: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:25:2A:ED:DB:B4:0A:FB:48:F2:C6:02:68:64:3D:0B:B1:DF:30 X509v3 Authority Key Identifier: keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3c:5a:dc:fa:94:0b:e9:35:78:e0:71:8d:6c:eb:0d:87:f8: 09:f2:da:67:12:93:03:d6:31:e0:24:43:f9:d4:8b:6e:d4:69: ad:f6:44:76:62:f9:49:62:59:94:25:be:6b:d4:d9:42:6b:4b: 24:24:d8:21:31:10:10:df:0b:2d:2d:f8:e4:a6:21:bf:1e:76: 22:72:c5:bf:bc:be:91:da:e4:f1:a1:3c:be:cd:92:a2:43:01: 9f:02:6d:a0:00:fd:33:9e:24:d9:dc:e5:3e:f3:00:dc:ea:3d: c1:c9:cc:11:f4:c4:cf:35:c9:be:2a:cc:b9:af:77:6e:0f:69: 55:1d:b9:31:a0:62:37:d1:62:95:f8:7d:72:aa:4b:c9:21:44: e7:cd:4f:92:36:16:1b:a8:9c:f1:4e:d6:52:b9:02:fc:78:33: 87:af:a1:cc:22:7d:d3:0b:25:01:44:0f:31:c0:83:cc:fa:66: a2:a2:c2:ef:bb:3e:d5:77:be:7f:ae:10:25:d2:af:31:14:90: 08:87:73:e3:f1:1c:30:0e:0d:6d:16:c9:39:bc:30:5c:12:68: 1c:a5:e5:b3:71:85:70:0b:84:fe:9e:54:70:92:91:7c:fa:ad: e2:76:2e:e9:58:75:04:7e:db:fb:af:ec:32:16:c5:5a:46:2d: b9:15:e6:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyNqK/ANozRonkUkVb9pG57Lv9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3 NjUwNUU1MTAeFw0yNTA4MjIwODU1NDRaFw0yNTA4MjUxOTE1NDRaMDMxMTAvBgNV BAMTKERGMjUyNTJBRUREQkI0MEFGQjQ4RjJDNjAyNjg2NDNEMEJCMURGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49shNgVtt7nOmXem5I6YULYw/ dQEvSGJl+KIdAy2QbstJrOIE/ki5c217B6oGodzLD3D+jeXN4+xGX9mhIrhBYw5G wOCDDChh+eC+omLvdAL5dqiJKXvGXkfQlidZdHqaaZvhIfNZgCIuvrBGPd5qw1g2 f5Uu1lhn5q3FwEj1peR2GLzl9FpqMEeley6yOKontzDo3d6fPgRRE7+QpIi4e3XP WiR/ya/HAMU03ZurGJZJQhxUG/7YQoQlL3l9vSEUcxZ+EB6JE7Lij/v4ihQ3dkcl pEUGspUCfz8J0RoXUu3sOhUtmqlFIAepteZNLHJ7jNNrXQ/qYfMy7GH9bAyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yUlKu3btAr7SPLGAmhkPQux3zAwHwYDVR0j BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0 MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw NUU1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1 Qjc3NjUwNUU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk8Wtz6lAvpNXjgcY1s6w2H+Any2mcSkwPW MeAkQ/nUi27Uaa32RHZi+UliWZQlvmvU2UJrSyQk2CExEBDfCy0t+OSmIb8ediJy xb+8vpHa5PGhPL7NkqJDAZ8CbaAA/TOeJNnc5T7zANzqPcHJzBH0xM81yb4qzLmv d24PaVUduTGgYjfRYpX4fXKqS8khROfNT5I2FhuonPFO1lK5Avx4M4evocwifdML JQFEDzHAg8z6ZqKiwu+7PtV3vn+uECXSrzEUkAiHc+PxHDAODW0WyTm8MFwSaByl 5bNxhXALhP6eVHCSkXz6reJ2LulYdQR+2/uv7DIWxVpGLbkV5qk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:06:56 2025 by rpki-client