$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: cwvMZ0Rcq9LRwuvZPwAfot9qktKbuCDrzQ41iGeXGi0= Subject key identifier: 09:E5:11:10:96:D0:2A:5E:28:67:8E:D2:00:2D:45:91:F6:70:D6:79 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 0EE7D777E38B72DDF269EC6A1E84F802E264F9DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 050A Signing time: Fri 22 Aug 2025 07:32:27 +0000 Manifest this update: Fri 22 Aug 2025 07:27:27 +0000 Manifest next update: Mon 25 Aug 2025 17:09:27 +0000 Files and hashes: 1: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: cQu1gX2/RojNdG/Z6VMjuxKs+bscVx93v4Z1p1oWIRs=) 2: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=) 3: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=) 4: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=) 5: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=) 6: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=) 7: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e7:d7:77:e3:8b:72:dd:f2:69:ec:6a:1e:84:f8:02:e2:64:f9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Aug 22 07:27:27 2025 GMT Not After : Aug 25 17:09:27 2025 GMT Subject: CN=09E5111096D02A5E28678ED2002D4591F670D679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:30:49:89:9f:a8:ea:b6:0d:87:b9:ec:68: 46:82:f3:ce:12:57:ff:57:14:55:1b:1f:00:20:18: 5d:ae:d0:1f:a0:43:70:fd:81:37:ec:a9:50:0f:d5: 3e:40:6b:c5:98:80:b4:4f:e3:cf:bb:70:b9:df:30: 91:e9:78:c9:f2:77:e3:d4:34:a6:a2:28:c3:d0:9a: 53:bd:71:34:ff:19:b9:2b:e0:dc:58:1d:be:b7:0d: 09:dd:4a:a1:71:c7:d9:dd:09:ab:d3:8c:fc:9e:6d: 54:47:37:2c:1e:92:d9:0d:5d:a7:d6:a2:3f:64:ac: 55:58:93:f7:90:d3:e0:9d:92:d2:ca:ec:0a:08:02: d3:80:65:0f:64:5a:f6:b8:0e:46:aa:2a:cb:4f:66: 68:28:fb:29:60:d0:96:cf:b9:c1:73:45:9f:72:1d: f4:e3:13:d9:5d:31:4f:25:6d:c4:34:af:c6:26:40: d8:80:07:2a:58:35:f5:1b:61:c6:c9:a9:7f:52:e4: 29:2c:d4:22:15:4c:8d:f2:70:22:b1:8a:cc:42:0b: 4a:c3:ae:a8:28:17:c2:3e:99:f8:ae:48:22:9d:b2: 4d:a6:67:f5:59:5e:d6:88:78:ca:6e:21:a7:60:41: f0:0e:ae:07:5d:c1:c9:1c:04:2d:5e:11:b2:ff:d6: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E5:11:10:96:D0:2A:5E:28:67:8E:D2:00:2D:45:91:F6:70:D6:79 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:dd:4d:79:5f:26:0a:de:07:d7:45:27:4d:23:34:ce:c2:76: 41:d2:97:c8:c0:26:24:a6:b7:79:25:3f:52:7e:fb:5d:6c:a7: 03:ee:71:30:77:2a:5c:c9:d7:38:bb:05:8a:a9:42:2e:40:f5: 73:d6:be:f0:0b:79:d3:ea:23:1e:53:35:df:73:94:a1:16:49: ac:a8:9b:e8:88:7e:9d:ad:cb:11:ce:02:ea:0f:bb:27:bf:56: 97:bb:13:96:ba:16:4d:02:67:38:8a:1b:b0:e9:6a:a5:9e:e1: 23:a7:b8:c9:ca:15:7f:69:5d:d2:2a:09:27:1d:b5:11:b0:ba: 27:ef:bd:cd:95:9e:47:7a:47:d0:0b:ac:a9:4a:49:e3:3a:5e: ac:a0:fd:d7:ff:5d:cd:a5:61:14:ae:b1:b8:19:70:2c:bf:c7: 82:6d:59:3c:ef:9a:f9:21:15:a0:59:48:f2:39:12:6c:e0:3a: 0f:dc:7a:76:a1:1a:64:45:1f:9c:f2:97:47:dc:80:19:2f:5e: d5:f1:42:a0:fe:01:1a:bd:77:3a:09:d9:8c:81:d6:ca:23:98: 94:de:c7:19:24:d1:64:e2:a6:41:8d:a4:79:70:b5:a7:1c:ab: e2:ce:13:37:de:30:24:c8:93:c0:91:19:b8:fc:b1:53:63:db: 8f:33:34:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDufXd+OLct3yaexqHoT4AuJk+d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA4MjIwNzI3MjdaFw0yNTA4MjUxNzA5MjdaMDMxMTAvBgNV BAMTKDA5RTUxMTEwOTZEMDJBNUUyODY3OEVEMjAwMkQ0NTkxRjY3MEQ2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fjBJiZ+o6rYNh7nsaEaC884S V/9XFFUbHwAgGF2u0B+gQ3D9gTfsqVAP1T5Aa8WYgLRP48+7cLnfMJHpeMnyd+PU NKaiKMPQmlO9cTT/Gbkr4NxYHb63DQndSqFxx9ndCavTjPyebVRHNywektkNXafW oj9krFVYk/eQ0+CdktLK7AoIAtOAZQ9kWva4DkaqKstPZmgo+ylg0JbPucFzRZ9y HfTjE9ldMU8lbcQ0r8YmQNiABypYNfUbYcbJqX9S5Cks1CIVTI3ycCKxisxCC0rD rqgoF8I+mfiuSCKdsk2mZ/VZXtaIeMpuIadgQfAOrgddwckcBC1eEbL/1spHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCeUREJbQKl4oZ47SAC1FkfZw1nkwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjdTXlfJgreB9dFJ00jNM7CdkHSl8jAJiSm t3klP1J++11spwPucTB3KlzJ1zi7BYqpQi5A9XPWvvALedPqIx5TNd9zlKEWSayo m+iIfp2tyxHOAuoPuye/Vpe7E5a6Fk0CZziKG7DpaqWe4SOnuMnKFX9pXdIqCScd tRGwuifvvc2Vnkd6R9ALrKlKSeM6Xqyg/df/Xc2lYRSusbgZcCy/x4JtWTzvmvkh FaBZSPI5EmzgOg/cenahGmRFH5zyl0fcgBkvXtXxQqD+ARq9dzoJ2YyB1sojmJTe xxkk0WTipkGNpHlwtaccq+LOEzfeMCTIk8CRGbj8sVNj248zNEQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:33 2025 by rpki-client