$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: DrVic/Go4bTzliJUAbM9At1jI9cKwc5MbXi7yRU3BDY= Subject key identifier: 09:60:7B:B4:86:0F:FD:AC:E6:82:56:24:86:70:DC:B7:00:47:3C:19 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 2306A33E61E3C30690330D52CA7FF9C2A4E49907 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 0596 Signing time: Mon 20 Oct 2025 09:20:04 +0000 Manifest this update: Mon 20 Oct 2025 09:15:04 +0000 Manifest next update: Thu 23 Oct 2025 10:00:04 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: 86H0OHw0F6Go3Cgmt23CKa0AaAHXc2Gv3iKRQKf9f38=) 2: AS139994.roa (hash: /jbw/eVosR4HWJLaikWHpVoJLXOxZIZ252amT1c/IaM=) 3: AS24203.roa (hash: ROjHujVXG4cB58VK5zlYjPWTnOEgQBZXwj9Frk00Q8s=) 4: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:06:a3:3e:61:e3:c3:06:90:33:0d:52:ca:7f:f9:c2:a4:e4:99:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Oct 20 09:15:04 2025 GMT Not After : Oct 23 10:00:04 2025 GMT Subject: CN=09607BB4860FFDACE68256248670DCB700473C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:96:c3:67:22:e1:44:c9:21:9a:16:f7:72: f5:38:23:44:75:b5:1c:f6:6f:0b:ff:54:ab:c5:c8: ae:92:ca:4d:4c:53:f5:3d:7e:14:f5:89:f4:47:d8: 9a:cb:c9:f7:fc:5f:00:03:73:30:d3:3c:57:f0:9a: ac:92:e3:2d:ef:18:9f:67:40:03:31:44:26:ca:e8: 5f:df:81:4f:00:5f:4f:80:bb:bc:41:95:a7:ac:fa: cb:bf:e1:bf:00:48:8d:dd:82:62:20:fa:b9:c2:cd: 27:8f:23:b0:54:f4:46:a3:c7:df:e6:8f:d7:8b:4b: 8d:ec:4e:a9:57:8c:96:57:7d:22:20:51:dc:ab:dc: dc:b6:3c:36:2e:05:30:eb:cc:94:ff:5f:c1:10:c8: 38:60:25:75:16:e9:fb:ba:11:d5:b7:0b:f9:19:50: 8b:e4:e0:6f:b8:44:73:19:9f:91:7a:9e:ff:a6:91: b5:b3:e0:44:45:37:d8:88:23:82:e2:7a:b7:75:6c: 1f:da:92:c9:51:29:d8:d8:f2:b1:35:74:cc:f9:0b: ee:90:50:a9:3a:c4:0c:6b:c1:db:ec:62:6a:8d:76: 13:dc:4c:d4:ab:64:23:ed:14:4c:72:21:17:e0:0b: c8:e6:a8:e4:f7:f5:e7:56:62:51:82:05:65:ed:d7: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:7B:B4:86:0F:FD:AC:E6:82:56:24:86:70:DC:B7:00:47:3C:19 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:07:5f:ab:b1:d0:f3:8a:b3:ff:00:f2:61:78:c8:88:b4:19: 2b:78:36:53:e7:73:d9:05:c7:c7:f9:b6:c2:f9:d2:df:56:05: 0f:8a:31:60:2d:5a:dc:2a:df:46:f7:6d:f7:40:f6:df:d7:4c: 6e:5c:3b:45:49:4b:23:59:63:7d:61:61:6b:e0:12:97:0b:35: 2a:be:c9:bb:ac:07:e5:a1:38:9c:94:40:25:0e:76:ec:44:82: da:36:94:11:25:37:7c:ba:97:c9:7e:d3:01:2a:2d:33:0e:7d: 24:75:3e:87:2c:68:46:95:0e:6d:c7:a6:51:3b:99:0f:ae:37: db:f4:f9:58:71:bb:36:08:9e:a9:29:9f:96:53:b6:f6:f6:7f: b9:de:25:9f:7c:be:94:6e:4b:b0:8c:bf:63:e4:98:60:3f:53: 1d:96:7c:cb:0b:43:74:55:49:c2:e4:0c:a0:34:b1:4f:e8:21: 5d:1b:c2:b8:83:c7:ee:43:ff:65:01:e2:08:19:1a:17:fb:00: 32:50:ba:09:15:a5:a3:be:e2:25:c6:39:80:5d:3d:b7:74:ad: 88:95:7c:e8:d0:52:a9:25:10:72:a9:92:a6:55:64:0d:23:70: ca:d3:c5:6b:12:f7:73:40:65:db:7b:dc:05:f2:23:8e:e5:3d: 98:c7:27:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwajPmHjwwaQMw1Syn/5wqTkmQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTEwMjAwOTE1MDRaFw0yNTEwMjMxMDAwMDRaMDMxMTAvBgNV BAMTKDA5NjA3QkI0ODYwRkZEQUNFNjgyNTYyNDg2NzBEQ0I3MDA0NzNDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFJbDZyLhRMkhmhb3cvU4I0R1 tRz2bwv/VKvFyK6Syk1MU/U9fhT1ifRH2JrLyff8XwADczDTPFfwmqyS4y3vGJ9n QAMxRCbK6F/fgU8AX0+Au7xBlaes+su/4b8ASI3dgmIg+rnCzSePI7BU9Eajx9/m j9eLS43sTqlXjJZXfSIgUdyr3Ny2PDYuBTDrzJT/X8EQyDhgJXUW6fu6EdW3C/kZ UIvk4G+4RHMZn5F6nv+mkbWz4ERFN9iII4Lierd1bB/akslRKdjY8rE1dMz5C+6Q UKk6xAxrwdvsYmqNdhPcTNSrZCPtFExyIRfgC8jmqOT39edWYlGCBWXt14wDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWB7tIYP/azmglYkhnDctwBHPBkwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoHX6ux0POKs/8A8mF4yIi0GSt4NlPnc9kF x8f5tsL50t9WBQ+KMWAtWtwq30b3bfdA9t/XTG5cO0VJSyNZY31hYWvgEpcLNSq+ ybusB+WhOJyUQCUOduxEgto2lBElN3y6l8l+0wEqLTMOfSR1PocsaEaVDm3HplE7 mQ+uN9v0+VhxuzYInqkpn5ZTtvb2f7neJZ98vpRuS7CMv2PkmGA/Ux2WfMsLQ3RV ScLkDKA0sU/oIV0bwriDx+5D/2UB4ggZGhf7ADJQugkVpaO+4iXGOYBdPbd0rYiV fOjQUqklEHKpkqZVZA0jcMrTxWsS93NAZdt73AXyI47lPZjHJ4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:27 2025 by rpki-client