$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft File: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json) Hash identifier: /q0+hhok70o0++RJ5e0tUHDx+eWca28R4pV/yiAmzNY= Subject key identifier: CE:D7:2B:E6:EB:7B:5D:30:1C:8D:CE:78:5D:E9:B6:C7:8E:DD:32:B7 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 60F2EC5D2991D73532F87FF4AE1F0FA233131610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft Manifest number: 0515 Signing time: Mon 20 Oct 2025 11:20:59 +0000 Manifest this update: Mon 20 Oct 2025 11:15:59 +0000 Manifest next update: Thu 23 Oct 2025 16:06:59 +0000 Files and hashes: 1: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: jGoXC4NtMGtzcx+R9/Q81p54SI3SY8CoW+n8Kb2SzRU=) 2: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: i8E531bAACF/do6q7C690HP7ycKInzio0QMeynldjVQ=) 3: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: vyo5RypkFQEnVHU24LrFw7oPwATfGzPKn/kBk5If2Fc=) 4: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 0DSPPC3eIjICQ1QgbLgmjGB64GhEc/FiJxgxZMMi2rw=) 5: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: dHAXVvHNWN3lX3SmokQ/UCj86xJ8/z2lq2nv43vYPc0=) 6: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: wHpTffZ2nuWlAhlZXWgWT5vAarjhnzHKQ1BNdqdBZLA=) 7: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: YHgchxUowX4afg18dRitbsm1i2Jr1bcDLdOROkNe9ds=) 8: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: LSvRzZKZqA3NwdEC9iho4W4LPDyE6x1z3v9TKwhHRg0=) 9: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: tAs35Xh9PvYdZJSIW4FLCQe0rvv+Ua53CMSGfgCNFT4=) 10: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: PRAIWxV7hqJc8SSD6XdLja17MJZsBrjOKyPsw39wZ00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f2:ec:5d:29:91:d7:35:32:f8:7f:f4:ae:1f:0f:a2:33:13:16:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Oct 20 11:15:59 2025 GMT Not After : Oct 23 16:06:59 2025 GMT Subject: CN=CED72BE6EB7B5D301C8DCE785DE9B6C78EDD32B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:1f:06:a7:5f:38:93:d1:90:0b:6c:e3:a7: ea:2f:34:58:15:97:93:16:7d:47:2d:37:1c:8b:7a: 94:0d:73:65:9f:76:21:2e:f4:42:b0:df:0b:1b:15: 2e:7c:ce:57:dd:5f:32:78:1f:05:09:b7:a9:d9:03: 89:53:15:62:36:d8:2d:00:73:cd:d2:64:7d:fb:6e: a8:d2:77:44:30:24:bd:5f:75:24:e0:e8:35:d8:8d: c6:95:98:76:1f:9a:5a:d2:75:d3:68:6a:a2:d6:56: 14:ad:fd:18:54:37:0c:c4:c8:5d:73:69:18:7b:59: 37:b4:59:c5:d5:95:7a:25:d6:cc:5b:4b:fb:fb:76: 57:d9:1c:e8:ba:04:cb:24:d8:74:6d:8e:9f:5e:5c: f6:d9:77:87:c4:61:60:b5:48:38:81:cd:75:3c:c3: f9:2f:d7:2a:6c:f0:e3:b1:c2:1b:e5:53:e4:54:c9: ab:5d:f8:83:83:e5:dc:ca:9a:b4:de:5a:f4:ca:ad: 4e:47:c8:32:0e:19:ee:fb:b5:b2:ae:c3:dc:9d:c9: c8:58:38:d2:26:2e:4e:d9:90:14:be:1f:93:21:7a: 3c:26:55:98:5d:d8:e9:c2:fd:c8:28:db:57:bb:2e: 2a:e5:0f:61:36:31:73:bc:1f:9f:07:b3:e6:90:87: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D7:2B:E6:EB:7B:5D:30:1C:8D:CE:78:5D:E9:B6:C7:8E:DD:32:B7 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5c:30:60:56:9a:33:ac:58:10:b2:18:44:c5:56:bd:fd:87: 6f:de:6f:22:41:b4:56:14:40:bb:c4:83:af:fd:f2:81:85:6f: d5:ce:4a:bb:8f:f0:ea:7f:b3:75:e5:63:c4:ca:fc:98:3f:e3: 1a:92:e6:c4:e9:e6:74:d5:71:bf:7f:01:ef:23:80:64:6c:ce: 72:3e:70:47:23:4f:6d:9b:f3:f8:28:5f:c6:ff:53:80:a9:5a: f3:72:87:63:d6:b4:21:bd:e0:2f:2e:1c:b4:ce:b2:43:1f:3a: cd:35:7d:ac:a9:58:0a:0a:a1:59:e3:82:09:90:fc:bf:1e:20: 6a:97:7b:33:b6:6a:78:0c:70:2a:26:2b:7d:cb:b2:10:65:88: 3e:1f:5f:ad:1a:de:be:51:d7:48:10:13:e8:9e:29:00:f1:01: 73:84:88:68:61:3a:15:4e:61:e3:3f:77:4f:1a:46:60:29:41: 58:f0:3d:52:bd:e6:82:fa:04:1b:3b:12:19:c2:c3:d2:af:37: 24:be:33:a1:1e:56:d5:c3:19:04:20:2a:f2:b5:53:e4:16:d9: 95:eb:ab:66:67:58:c4:94:fa:9c:2e:d3:8b:83:f6:4a:2a:8c: b9:40:bd:33:aa:4e:a8:2e:df:bf:28:f3:b3:17:85:7a:7f:ed: 62:c8:c5:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPLsXSmR1zUy+H/0rh8PojMTFhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNTEwMjAxMTE1NTlaFw0yNTEwMjMxNjA2NTlaMDMxMTAvBgNV BAMTKENFRDcyQkU2RUI3QjVEMzAxQzhEQ0U3ODVERTlCNkM3OEVERDMyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVx8Gp184k9GQC2zjp+ovNFgV l5MWfUctNxyLepQNc2WfdiEu9EKw3wsbFS58zlfdXzJ4HwUJt6nZA4lTFWI22C0A c83SZH37bqjSd0QwJL1fdSTg6DXYjcaVmHYfmlrSddNoaqLWVhSt/RhUNwzEyF1z aRh7WTe0WcXVlXol1sxbS/v7dlfZHOi6BMsk2HRtjp9eXPbZd4fEYWC1SDiBzXU8 w/kv1yps8OOxwhvlU+RUyatd+IOD5dzKmrTeWvTKrU5HyDIOGe77tbKuw9ydychY ONImLk7ZkBS+H5MhejwmVZhd2OnC/cgo21e7LirlD2E2MXO8H58Hs+aQhw0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUztcr5ut7XTAcjc54Xem2x47dMrcwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMy MzQyN0MxOTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9cMGBWmjOsWBCyGETFVr39h2/ebyJBtFYU QLvEg6/98oGFb9XOSruP8Op/s3XlY8TK/Jg/4xqS5sTp5nTVcb9/Ae8jgGRsznI+ cEcjT22b8/goX8b/U4CpWvNyh2PWtCG94C8uHLTOskMfOs01faypWAoKoVnjggmQ /L8eIGqXezO2angMcComK33LshBliD4fX60a3r5R10gQE+ieKQDxAXOEiGhhOhVO YeM/d08aRmApQVjwPVK95oL6BBs7EhnCw9KvNyS+M6EeVtXDGQQgKvK1U+QW2ZXr q2ZnWMSU+pwu04uD9koqjLlAvTOqTqgu378o87MXhXp/7WLIxZU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:31 2025 by rpki-client