$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: bXCYNbs6s36mILrlhXJaSCXty2n+a1QN1JUXEvW6Yn8= Subject key identifier: 11:5A:1D:EB:D8:56:3D:47:92:EB:F1:8C:FD:DB:A5:BB:B4:63:AE:21 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 5E0D07B2652228B6C7FCE2130B62DD54A138A8AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 057B Signing time: Fri 22 Aug 2025 10:20:03 +0000 Manifest this update: Fri 22 Aug 2025 10:15:03 +0000 Manifest next update: Mon 25 Aug 2025 10:26:03 +0000 Files and hashes: 1: AS24203.roa (hash: ROjHujVXG4cB58VK5zlYjPWTnOEgQBZXwj9Frk00Q8s=) 2: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) 3: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: DLbXhu4apm9OvSMz3tT4BI/F6HTDrQMgS6nbgCfQJJU=) 4: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0d:07:b2:65:22:28:b6:c7:fc:e2:13:0b:62:dd:54:a1:38:a8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Aug 22 10:15:03 2025 GMT Not After : Aug 25 10:26:03 2025 GMT Subject: CN=115A1DEBD8563D4792EBF18CFDDBA5BBB463AE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e0:b0:fe:88:64:3c:ea:2e:69:17:d2:66:ca: ba:67:61:cb:8e:36:a4:27:46:b4:f0:c3:38:8d:6a: ea:bb:a3:6c:99:2a:b7:ee:e7:ce:41:09:4d:82:5e: 70:76:36:20:7f:4d:4b:d7:b1:24:30:f5:c2:4f:95: d9:9c:8f:66:93:ed:c0:3c:0d:d0:6a:f3:a0:08:4f: cb:a2:9d:a4:c0:b3:35:63:f3:8c:15:ae:61:ad:77: 1e:9b:72:cb:62:2e:55:3e:73:c9:d3:5f:aa:02:d6: 7f:54:54:bb:4e:e7:74:7f:07:c8:74:48:fd:d4:97: c9:32:d8:b0:5d:50:d4:e2:e4:88:5d:25:97:d1:c8: e0:3d:f0:c8:a2:8b:9d:33:a5:ac:29:97:31:63:c5: b7:5c:6a:d8:5f:e1:3b:c5:8b:7a:f6:df:be:63:1e: 8b:c8:8e:bd:ec:39:18:0c:5c:3c:24:a2:e6:be:04: 85:b5:66:8d:f9:fc:ce:81:93:ab:ab:8c:2b:38:fd: a6:eb:59:f9:c1:ba:80:e5:e9:21:4e:8d:dc:6d:8b: 5a:9c:31:28:82:c6:c6:a7:05:2b:fc:ed:65:b7:f8: eb:76:c7:7e:54:37:31:19:cd:60:4a:96:13:42:07: 84:af:be:7e:70:a9:bb:47:bd:34:5b:2b:e5:d9:e1: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:1D:EB:D8:56:3D:47:92:EB:F1:8C:FD:DB:A5:BB:B4:63:AE:21 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:76:c3:ce:63:34:17:0e:5e:63:f2:77:1d:32:26:9b:55:5b: e4:f4:1b:04:66:b5:1f:42:38:f8:17:ef:03:fc:71:5d:17:8a: c4:14:1e:fc:7b:72:cd:b3:c4:ca:6d:b7:9c:86:85:4e:29:23: df:e3:b6:44:23:c2:de:4c:ae:aa:1a:29:f4:6a:bd:5f:01:a3: 28:46:6e:04:0e:af:1a:9b:5f:fa:b5:a5:f6:ba:90:31:23:5f: c1:87:3a:94:79:1f:c5:73:f4:87:aa:12:82:4b:15:36:fa:ae: 96:e7:d0:45:cc:2b:87:bd:f8:94:7e:18:4a:c4:ef:37:3c:bf: 14:60:dc:1e:10:ee:48:a5:1f:0a:a7:49:60:82:8e:26:62:67: 1c:79:e7:d9:3e:74:b9:c9:97:4b:94:03:dc:b2:05:78:c2:b2: 76:7c:83:16:5b:a1:7f:ee:49:a8:b6:78:5e:a6:e5:65:44:c4: df:55:c0:06:c4:b8:7c:84:41:88:03:12:c2:f4:4f:01:8c:1f: 68:a4:73:33:c6:db:22:8a:23:50:09:8d:5c:61:a4:b9:33:81: 65:2b:0e:52:7f:35:92:09:56:d2:c5:12:f0:a5:b3:ed:89:c0: 43:d1:12:3c:29:34:a5:bf:3f:e5:7d:78:76:28:d5:be:34:56: 90:5b:d5:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXg0HsmUiKLbH/OITC2LdVKE4qK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTA4MjIxMDE1MDNaFw0yNTA4MjUxMDI2MDNaMDMxMTAvBgNV BAMTKDExNUExREVCRDg1NjNENDc5MkVCRjE4Q0ZEREJBNUJCQjQ2M0FFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn4LD+iGQ86i5pF9JmyrpnYcuO NqQnRrTwwziNauq7o2yZKrfu585BCU2CXnB2NiB/TUvXsSQw9cJPldmcj2aT7cA8 DdBq86AIT8uinaTAszVj84wVrmGtdx6bcstiLlU+c8nTX6oC1n9UVLtO53R/B8h0 SP3Ul8ky2LBdUNTi5IhdJZfRyOA98Miii50zpawplzFjxbdcathf4TvFi3r2375j HovIjr3sORgMXDwkoua+BIW1Zo35/M6Bk6urjCs4/abrWfnBuoDl6SFOjdxti1qc MSiCxsanBSv87WW3+Ot2x35UNzEZzWBKlhNCB4Svvn5wqbtHvTRbK+XZ4dpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVod69hWPUeS6/GM/dulu7RjriEwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN2w85jNBcOXmPydx0yJptVW+T0GwRmtR9C OPgX7wP8cV0XisQUHvx7cs2zxMptt5yGhU4pI9/jtkQjwt5MrqoaKfRqvV8BoyhG bgQOrxqbX/q1pfa6kDEjX8GHOpR5H8Vz9IeqEoJLFTb6rpbn0EXMK4e9+JR+GErE 7zc8vxRg3B4Q7kilHwqnSWCCjiZiZxx559k+dLnJl0uUA9yyBXjCsnZ8gxZboX/u Sai2eF6m5WVExN9VwAbEuHyEQYgDEsL0TwGMH2ikczPG2yKKI1AJjVxhpLkzgWUr DlJ/NZIJVtLFEvCls+2JwEPREjwpNKW/P+V9eHYo1b40VpBb1Q4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:53:04 2025 by rpki-client