$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: 578WwxIvqunR0qGJ7zZ8tJsDA7S3Nz5p0y51h+tYLFM= Subject key identifier: 17:A7:A0:7E:DD:08:FC:9C:E0:F4:8B:63:23:F6:D8:02:E3:23:CF:15 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 0C3A5EEEF7AE70023BD1E7D815A695E2E1839E8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 04F2 Signing time: Sun 29 Jun 2025 00:21:28 +0000 Manifest this update: Sun 29 Jun 2025 00:16:28 +0000 Manifest next update: Wed 02 Jul 2025 09:48:28 +0000 Files and hashes: 1: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=) 2: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=) 3: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: VtSHPpHz897ZJ3HuEQCX3VpjRwZW4+wnaxBUfQOPzAs=) 4: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=) 5: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=) 6: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=) 7: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3a:5e:ee:f7:ae:70:02:3b:d1:e7:d8:15:a6:95:e2:e1:83:9e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Jun 29 00:16:28 2025 GMT Not After : Jul 2 09:48:28 2025 GMT Subject: CN=17A7A07EDD08FC9CE0F48B6323F6D802E323CF15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:3e:fc:91:10:9e:76:5a:83:24:55:e1:85: fa:eb:da:bb:15:da:7b:91:5f:72:43:8b:c5:4a:f0: f0:8b:87:5f:f8:c9:34:41:b1:7b:01:15:47:10:a0: 86:90:11:fd:fa:d9:14:34:23:42:58:9c:05:c5:b5: f0:79:fc:8e:f8:ab:22:f5:27:15:9b:a1:8f:d2:6e: d5:f9:fc:7d:2d:e9:2f:a6:fb:e1:8d:ae:87:0d:ff: ac:fe:aa:8b:a5:d4:4e:71:9e:1a:91:b0:04:c4:d4: 99:f5:05:43:c6:79:df:d5:da:c5:64:d9:7b:b0:fd: 04:08:93:f9:a6:96:4d:54:d1:b0:39:35:e4:cb:f4: 2d:02:ac:ac:33:fc:fb:76:53:75:e7:fa:b3:46:3e: d3:16:1e:73:89:c4:b3:8b:d0:56:c3:af:4a:40:15: 25:ea:a2:6f:7a:c9:40:c6:e3:1b:27:7c:09:89:81: 70:c2:9b:cf:08:7f:21:82:b6:55:5c:fb:64:a1:95: d3:56:a7:8c:f7:6b:af:cb:1d:1e:f0:8c:94:93:00: bf:de:ec:6c:94:60:9b:e0:e4:2e:6d:84:4a:ad:c3: e9:7d:89:4c:5d:8a:28:2e:b0:33:74:ff:c5:1c:43: cf:cb:63:f9:01:83:2c:62:78:4f:c5:80:fb:3d:ef: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:A0:7E:DD:08:FC:9C:E0:F4:8B:63:23:F6:D8:02:E3:23:CF:15 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:47:09:39:38:9c:24:83:b2:0c:70:14:07:bf:24:98:25:0c: 17:e3:93:12:a7:eb:17:05:85:c7:18:72:43:e2:d4:07:71:db: ff:4b:63:48:e4:f9:67:72:b7:70:62:5f:c0:6c:73:e2:31:79: e9:21:9d:3e:6f:39:2f:b1:b8:93:f3:b3:3e:10:26:72:ef:52: 01:6c:5c:c0:02:57:dc:35:88:f3:7e:47:f6:c1:ea:be:a7:ca: ee:d1:12:83:28:9a:51:e2:8c:84:4a:ea:ef:c2:34:42:e6:1d: d1:8b:bb:a4:65:c9:52:eb:1b:5d:df:3a:99:97:71:99:ca:5b: 24:f2:b5:e0:8b:71:45:37:aa:3b:2f:bc:40:1f:29:9f:ef:da: 0b:5e:22:35:b2:a8:f7:83:e9:2e:a6:fa:bd:ad:a9:27:42:8a: 7e:c2:73:05:54:e6:98:cc:18:1c:0b:ab:6a:0f:6a:c8:4c:85: 85:d9:60:41:01:b2:1c:6b:05:62:a7:95:13:bd:c7:7d:6a:f9: 84:13:05:01:01:ce:b9:58:54:69:e3:b3:55:9c:4d:56:23:ac: 53:36:8b:d6:e2:ac:e9:fe:a3:d8:43:a0:f1:79:4a:91:12:e6: fe:80:60:59:61:cc:58:82:e7:cc:db:cd:74:0a:02:6e:4e:10: fb:aa:42:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDpe7veucAI70efYFaaV4uGDno8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA2MjkwMDE2MjhaFw0yNTA3MDIwOTQ4MjhaMDMxMTAvBgNV BAMTKDE3QTdBMDdFREQwOEZDOUNFMEY0OEI2MzIzRjZEODAyRTMyM0NGMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQz78kRCedlqDJFXhhfrr2rsV 2nuRX3JDi8VK8PCLh1/4yTRBsXsBFUcQoIaQEf362RQ0I0JYnAXFtfB5/I74qyL1 JxWboY/SbtX5/H0t6S+m++GNrocN/6z+qoul1E5xnhqRsATE1Jn1BUPGed/V2sVk 2Xuw/QQIk/mmlk1U0bA5NeTL9C0CrKwz/Pt2U3Xn+rNGPtMWHnOJxLOL0FbDr0pA FSXqom96yUDG4xsnfAmJgXDCm88IfyGCtlVc+2ShldNWp4z3a6/LHR7wjJSTAL/e 7GyUYJvg5C5thEqtw+l9iUxdiigusDN0/8UcQ8/LY/kBgyxieE/FgPs97yOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6egft0I/Jzg9ItjI/bYAuMjzxUwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZHCTk4nCSDsgxwFAe/JJglDBfjkxKn6xcF hccYckPi1Adx2/9LY0jk+Wdyt3BiX8Bsc+IxeekhnT5vOS+xuJPzsz4QJnLvUgFs XMACV9w1iPN+R/bB6r6nyu7REoMomlHijIRK6u/CNELmHdGLu6RlyVLrG13fOpmX cZnKWyTyteCLcUU3qjsvvEAfKZ/v2gteIjWyqPeD6S6m+r2tqSdCin7CcwVU5pjM GBwLq2oPashMhYXZYEEBshxrBWKnlRO9x31q+YQTBQEBzrlYVGnjs1WcTVYjrFM2 i9birOn+o9hDoPF5SpES5v6AYFlhzFiC58zbzXQKAm5OEPuqQm8= -----END CERTIFICATE-----Generated at Sun Jun 29 18:36:34 2025 by rpki-client