$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft File: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft (raw, json) Hash identifier: BPW1QJKL1XFtmXtoLlDSP+CiP3p6MkINezJfff4lpRU= Subject key identifier: F1:36:B5:29:87:00:5D:CB:B9:51:D2:A9:13:74:CE:35:BC:0E:63:7B Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD Certificate issuer: /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Certificate serial: 17D899AAFAF96D02E0613757D1CBC9590FD27966 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft Manifest number: 0519 Signing time: Sat 18 Oct 2025 19:31:20 +0000 Manifest this update: Sat 18 Oct 2025 19:26:20 +0000 Manifest next update: Wed 22 Oct 2025 05:37:20 +0000 Files and hashes: 1: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: IG4+6wpyLqd68emapMZn0l0WwPLKecBNd2LG8+PvHPA=) 2: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: j21itrf8qD4AmUrxncy40ymX8U/GV6CW8szjNUym4g4=) 3: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 624g30p2voUe7YOI6fxkypPwiKquVP6kSsxSvqN561I=) 4: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl (hash: KbMHxV6L4p7zd5of48gk7z9MoAHfP6LI4LdlsAo3lSY=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: Ts5xtS1oQbReAZqtallUwZhr/nW63EWdb9tsEvZsE08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d8:99:aa:fa:f9:6d:02:e0:61:37:57:d1:cb:c9:59:0f:d2:79:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Validity Not Before: Oct 18 19:26:20 2025 GMT Not After : Oct 22 05:37:20 2025 GMT Subject: CN=F136B52987005DCBB951D2A91374CE35BC0E637B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:bf:02:af:13:7c:1e:3d:da:72:96:cd:75: 48:33:25:3d:89:f1:f9:53:9e:b2:22:cc:38:87:c1: fa:ef:fc:c4:79:c8:59:21:4f:bc:12:ee:41:d2:4e: 2b:8c:61:7b:9e:f6:27:9c:74:00:fa:c7:4a:d9:f7: e2:7d:b2:51:b5:e4:18:e8:6c:dd:f5:2c:4b:c3:dd: 0f:b5:ec:05:11:87:b6:c6:4a:15:72:a6:06:50:c4: bc:9f:f2:74:42:7c:4e:c9:80:23:77:43:6b:c8:38: d8:05:b9:ca:bc:ba:10:b1:ae:d5:b0:18:54:6b:13: 4c:2a:dd:77:5a:f1:08:4f:63:af:d5:40:10:d6:15: f0:ea:c9:7b:f0:9b:67:8b:0d:f1:ff:31:5e:1a:4e: 06:91:3e:c9:48:f1:06:94:4d:ff:c5:44:d3:ce:ca: 65:30:29:70:84:c5:2c:79:2c:65:75:75:35:92:b8: 11:f6:6f:a5:20:49:3a:51:04:87:b5:41:5b:c1:ee: 43:7f:7c:f4:b5:30:d3:0d:50:95:1c:59:87:a2:93: df:2e:5e:99:c8:e0:9d:5b:bb:5b:64:f5:9f:3a:a5: 62:70:b4:a3:be:d6:1e:d7:16:ed:2b:65:d9:c9:48: 29:4a:ff:b5:a5:ad:36:5d:17:7e:92:15:31:5a:7d: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:36:B5:29:87:00:5D:CB:B9:51:D2:A9:13:74:CE:35:BC:0E:63:7B X509v3 Authority Key Identifier: keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f7:13:4b:c4:94:76:b0:e4:4f:c6:73:c5:33:46:94:ed:96: 80:70:98:a4:ef:0e:95:81:41:af:d6:18:b7:77:62:61:56:d9: df:86:b4:10:93:69:fd:9b:1e:19:5f:4f:d8:f9:e4:8a:61:70: d3:da:3e:38:c5:eb:ff:d8:0a:d4:ad:d5:48:4c:8d:5d:b3:7c: 5e:d8:88:db:4c:85:2d:dc:4f:26:51:ef:28:39:f4:76:de:9c: 99:bd:14:50:19:cc:0f:5d:74:02:6e:52:46:1e:a6:67:03:e5: 34:54:3b:7c:62:84:1f:00:87:55:b9:24:68:d5:b9:90:4e:ed: e6:b4:6e:5b:8a:76:4f:e3:06:bd:ad:45:68:40:01:26:0b:04: ba:9c:6a:d5:41:a1:a7:bb:11:cf:67:96:e9:2d:18:18:88:29: 4d:64:83:e8:11:cd:ab:04:21:a8:44:f4:4c:ef:44:6e:c7:f9: 92:c4:f1:ed:1a:05:18:e6:a7:13:6f:e9:6e:2b:04:6d:1f:ad: a3:40:c3:4c:41:8c:e8:f0:8f:62:0c:f2:54:b1:e8:73:6d:be: 7f:75:f6:d1:83:69:7b:d3:fa:3e:24:92:aa:72:d5:92:39:b5: 35:8a:7a:4c:66:4f:12:11:e2:1e:ac:ed:63:fc:48:d0:bd:f1: 59:ff:04:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9iZqvr5bQLgYTdX0cvJWQ/SeWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy Q0M5QThBRDAeFw0yNTEwMTgxOTI2MjBaFw0yNTEwMjIwNTM3MjBaMDMxMTAvBgNV BAMTKEYxMzZCNTI5ODcwMDVEQ0JCOTUxRDJBOTEzNzRDRTM1QkMwRTYzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNM78CrxN8Hj3acpbNdUgzJT2J 8flTnrIizDiHwfrv/MR5yFkhT7wS7kHSTiuMYXue9iecdAD6x0rZ9+J9slG15Bjo bN31LEvD3Q+17AURh7bGShVypgZQxLyf8nRCfE7JgCN3Q2vIONgFucq8uhCxrtWw GFRrE0wq3Xda8QhPY6/VQBDWFfDqyXvwm2eLDfH/MV4aTgaRPslI8QaUTf/FRNPO ymUwKXCExSx5LGV1dTWSuBH2b6UgSTpRBIe1QVvB7kN/fPS1MNMNUJUcWYeik98u XpnI4J1bu1tk9Z86pWJwtKO+1h7XFu0rZdnJSClK/7WlrTZdF36SFTFafdw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Ta1KYcAXcu5UdKpE3TONbwOY3swHwYDVR0j BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5 QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5 QThBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0 MzMyQ0M5QThBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD33E0vElHaw5E/Gc8UzRpTtloBwmKTvDpWB Qa/WGLd3YmFW2d+GtBCTaf2bHhlfT9j55IphcNPaPjjF6//YCtSt1UhMjV2zfF7Y iNtMhS3cTyZR7yg59HbenJm9FFAZzA9ddAJuUkYepmcD5TRUO3xihB8Ah1W5JGjV uZBO7ea0bluKdk/jBr2tRWhAASYLBLqcatVBoae7Ec9nluktGBiIKU1kg+gRzasE IahE9EzvRG7H+ZLE8e0aBRjmpxNv6W4rBG0fraNAw0xBjOjwj2IM8lSx6HNtvn91 9tGDaXvT+j4kkqpy1ZI5tTWKekxmTxIR4h6s7WP8SNC98Vn/BKo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:32:36 2025 by rpki-client