$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft File: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json) Hash identifier: MmogKZ2scfb9KARTthnSmKs/ZqheWwL4Zd6211O5A+Y= Subject key identifier: 7F:D0:CB:E6:8D:AF:18:90:77:5C:0E:44:AB:38:A4:D0:59:D1:40:7C Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 765CEFE888B04592B364866FA62B0BC723011D4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft Manifest number: 0119 Signing time: Mon 20 Oct 2025 12:41:36 +0000 Manifest this update: Mon 20 Oct 2025 12:36:36 +0000 Manifest next update: Fri 24 Oct 2025 00:23:36 +0000 Files and hashes: 1: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: 9iQrzztLoFvpsEnzNnL5P1t1/bjXuRlh5hUEQazNDWU=) 2: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: x21M7bZOj5o5claw3tPecbFKX4zlXj+D0IWBQsKnrks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5c:ef:e8:88:b0:45:92:b3:64:86:6f:a6:2b:0b:c7:23:01:1d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: Oct 20 12:36:36 2025 GMT Not After : Oct 24 00:23:36 2025 GMT Subject: CN=7FD0CBE68DAF1890775C0E44AB38A4D059D1407C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:8a:16:6c:f4:59:ea:81:80:bf:01:02:d3: 84:1a:99:28:48:55:5d:76:f5:0d:da:94:04:e2:f0: c1:39:2a:86:af:1e:ed:63:99:f2:bf:0d:b2:f9:d9: 33:a6:5a:9c:2c:a2:b7:2b:2b:2d:9b:b5:80:d3:16: 57:d2:2b:67:98:b9:b6:08:4e:87:e9:08:dd:9b:e5: ea:b9:f9:ba:1a:8f:97:07:88:17:ea:05:43:c2:f9: 65:e3:ec:9e:eb:52:a8:aa:b6:76:47:69:57:a2:5a: ef:80:7c:4a:35:d1:c0:01:e3:be:25:d6:f1:d9:1b: 98:db:c0:e3:46:08:0f:86:57:8a:fc:7f:a6:51:cf: cb:a3:12:28:fc:d4:23:54:60:9d:ce:95:cb:10:74: 1b:a7:c4:6c:32:28:29:56:8c:52:92:2b:a5:15:0f: 53:88:34:6b:17:0b:46:98:e2:fc:e9:fe:21:f2:5c: c6:48:df:f3:80:d8:5d:c0:e6:cd:02:94:8f:b9:46: 0f:3b:63:c5:fe:ed:1d:a2:46:64:59:76:1a:55:5e: 93:54:d1:0c:71:86:0e:93:93:2c:b2:be:f2:24:28: 06:8c:ba:56:ca:65:48:0a:da:ff:55:00:82:6f:76: be:55:0d:f4:b2:21:e7:0c:f5:62:3c:f6:16:bd:46: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D0:CB:E6:8D:AF:18:90:77:5C:0E:44:AB:38:A4:D0:59:D1:40:7C X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:58:bb:77:94:4e:7b:ea:6c:f0:2e:ea:d4:0a:54:26:4c:90: fd:00:96:f3:85:89:16:43:97:72:81:10:30:1d:75:21:0b:db: 18:c6:eb:df:b9:52:82:e9:80:dc:33:fd:45:61:d9:18:d9:e9: a0:dc:87:f4:cd:14:6a:05:7f:eb:03:20:b9:02:68:04:5f:17: 29:4c:c0:a1:11:2c:60:bb:1e:33:20:15:b0:dc:c7:da:3f:fc: 2a:92:51:03:11:f8:17:69:04:2b:6c:89:97:38:02:2d:d6:b7: 30:4b:06:33:18:d8:47:b3:06:01:8e:4c:5e:44:04:10:91:46: bb:87:96:00:95:fd:c9:9b:79:83:25:ba:c3:b4:30:c1:dc:b1: 30:df:bb:68:9d:5b:6c:43:8b:12:58:89:c3:49:4a:04:74:3b: 65:08:7a:20:db:c5:a3:f9:c3:89:e7:9b:59:60:61:ac:b3:bf: 6e:56:7e:cb:01:3b:85:49:3b:c5:03:65:f2:22:7d:0f:6a:db: 66:1f:d4:30:3e:94:52:45:9c:35:05:e8:c7:87:13:6b:67:d8: c4:2b:17:19:5f:5a:cf:0c:19:d1:8e:9a:11:4a:e0:3c:b6:7e: 38:a5:93:64:c5:1d:69:5c:e4:0a:cb:eb:33:37:c2:3a:64:4b: ef:1a:14:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlzv6IiwRZKzZIZvpisLxyMBHU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNTEwMjAxMjM2MzZaFw0yNTEwMjQwMDIzMzZaMDMxMTAvBgNV BAMTKDdGRDBDQkU2OERBRjE4OTA3NzVDMEU0NEFCMzhBNEQwNTlEMTQwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dIoWbPRZ6oGAvwEC04QamShI VV129Q3alATi8ME5KoavHu1jmfK/DbL52TOmWpwsorcrKy2btYDTFlfSK2eYubYI TofpCN2b5eq5+boaj5cHiBfqBUPC+WXj7J7rUqiqtnZHaVeiWu+AfEo10cAB474l 1vHZG5jbwONGCA+GV4r8f6ZRz8ujEij81CNUYJ3OlcsQdBunxGwyKClWjFKSK6UV D1OINGsXC0aY4vzp/iHyXMZI3/OA2F3A5s0ClI+5Rg87Y8X+7R2iRmRZdhpVXpNU 0Qxxhg6TkyyyvvIkKAaMulbKZUgK2v9VAIJvdr5VDfSyIecM9WI89ha9RmmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9DL5o2vGJB3XA5Eqzik0FnRQHwwHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi YzItYWIwNWUwNjUwNjU1LzAvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZD Njc5QTREN0JENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRYu3eUTnvqbPAu6tQKVCZMkP0AlvOFiRZD l3KBEDAddSEL2xjG69+5UoLpgNwz/UVh2RjZ6aDch/TNFGoFf+sDILkCaARfFylM wKERLGC7HjMgFbDcx9o//CqSUQMR+BdpBCtsiZc4Ai3WtzBLBjMY2EezBgGOTF5E BBCRRruHlgCV/cmbeYMlusO0MMHcsTDfu2idW2xDixJYicNJSgR0O2UIeiDbxaP5 w4nnm1lgYayzv25WfssBO4VJO8UDZfIifQ9q22Yf1DA+lFJFnDUF6MeHE2tn2MQr FxlfWs8MGdGOmhFK4Dy2fjilk2TFHWlc5ArL6zM3wjpkS+8aFJM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:33 2025 by rpki-client