$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: tjdk86N8TE+rOsnleD3ReazWaevvoi7/V1kJ6cxWWOQ= Subject key identifier: 88:EC:3C:CD:9F:4F:53:6F:CF:A4:A5:2D:D8:E1:DB:C6:B7:CD:0F:FB Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 4D9B9CE1D99C4B58DBDB413B1821753889AF086F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 055C Signing time: Sun 29 Jun 2025 03:30:03 +0000 Manifest this update: Sun 29 Jun 2025 03:25:03 +0000 Manifest next update: Wed 02 Jul 2025 14:02:03 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: PAnOV6gNBh/TUWCal6TSQTGUcdRVVwXdteM6isD+tsY=) 2: AS24203.roa (hash: oXVZzAc1BVWz8rI4bEPFSzCb/DwmmJ/Nlya3vD+jXrk=) 3: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) 4: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 14:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9b:9c:e1:d9:9c:4b:58:db:db:41:3b:18:21:75:38:89:af:08:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Jun 29 03:25:03 2025 GMT Not After : Jul 2 14:02:03 2025 GMT Subject: CN=88EC3CCD9F4F536FCFA4A52DD8E1DBC6B7CD0FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:30:40:d3:88:b1:83:46:ba:8d:05:e6:04:98: dd:50:d0:97:70:83:48:77:fa:8e:ca:2c:8d:a2:02: a7:0f:a6:a3:46:fe:5d:4f:12:0e:bd:d7:74:0b:6c: dc:8f:da:4f:22:fc:af:6b:98:46:18:bb:83:ac:c0: 60:a2:7b:2d:4b:a0:a5:18:69:02:bc:a8:42:e2:e5: 86:61:55:6b:3c:c4:44:99:91:80:12:12:fc:6d:79: 59:f7:d9:86:84:97:5a:66:23:76:5d:47:9d:f3:77: d9:8f:51:f7:a2:ea:0f:55:95:78:ef:5f:b0:fb:3f: 1a:16:31:fc:a8:65:40:37:19:cf:01:97:95:c1:ac: ac:da:0e:13:38:46:7f:27:38:f7:40:c9:30:4a:bf: c7:74:9d:71:f1:e3:b0:9b:d7:c9:c2:d0:7d:6d:ce: 0a:ac:b9:42:39:a4:17:b9:97:04:81:ce:11:1e:03: 0d:2e:16:44:49:fc:76:36:40:21:de:73:93:a3:08: 26:42:ed:37:c1:ed:34:55:fc:80:ad:a1:65:b4:93: f3:1e:ee:61:db:7f:3e:50:7d:bd:5f:e2:43:41:43: 1d:98:09:c5:c2:50:a0:25:19:fb:a4:93:a5:be:e6: ac:a5:e6:9b:60:6e:e7:fa:7f:44:0d:4e:d9:f3:e0: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EC:3C:CD:9F:4F:53:6F:CF:A4:A5:2D:D8:E1:DB:C6:B7:CD:0F:FB X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a5:9f:f4:01:21:48:f7:50:c1:98:40:e1:f4:d2:c2:55:81: 8a:c4:59:46:3e:67:ed:18:c8:c2:66:89:c4:49:52:f1:d9:51: 35:45:48:dd:ec:4e:99:3a:f1:13:3a:dd:98:70:aa:b7:f3:07: 7f:b2:1e:cf:e0:cc:ec:68:6c:91:c2:dd:fe:f0:f9:b4:79:1a: ef:f5:8b:1f:80:99:b7:f1:21:e5:75:9f:56:31:87:e9:f9:a1: c5:e6:0e:1d:ed:57:c4:60:f3:f2:4e:6b:3a:b8:c5:a9:d4:ad: 16:78:84:8d:8b:92:99:a6:3f:0d:57:1f:de:4d:5e:f2:19:0c: b0:d3:f7:80:89:04:71:f7:73:62:90:ae:21:d0:41:1f:42:6e: 0d:30:4a:9a:87:b8:56:a0:86:43:5e:8d:bd:be:4f:42:e4:9f: ea:2a:65:d4:b2:eb:ca:e1:65:2a:be:db:ef:51:14:3c:d6:01: f4:a1:a6:64:0d:9f:e9:07:2f:e9:d2:bf:a2:22:a4:cb:fa:b4: 6d:92:88:08:e5:e9:da:e6:7a:e8:40:cd:1b:34:d2:46:17:6a: 51:36:04:81:b8:14:86:70:d6:91:6d:47:7a:42:54:a8:80:9d: a2:b1:0d:33:b4:85:d8:d0:84:9e:f1:00:5c:a7:8b:fc:99:02: 53:c6:ef:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZuc4dmcS1jb20E7GCF1OImvCG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTA2MjkwMzI1MDNaFw0yNTA3MDIxNDAyMDNaMDMxMTAvBgNV BAMTKDg4RUMzQ0NEOUY0RjUzNkZDRkE0QTUyREQ4RTFEQkM2QjdDRDBGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMEDTiLGDRrqNBeYEmN1Q0Jdw g0h3+o7KLI2iAqcPpqNG/l1PEg6913QLbNyP2k8i/K9rmEYYu4OswGCiey1LoKUY aQK8qELi5YZhVWs8xESZkYASEvxteVn32YaEl1pmI3ZdR53zd9mPUfei6g9VlXjv X7D7PxoWMfyoZUA3Gc8Bl5XBrKzaDhM4Rn8nOPdAyTBKv8d0nXHx47Cb18nC0H1t zgqsuUI5pBe5lwSBzhEeAw0uFkRJ/HY2QCHec5OjCCZC7TfB7TRV/ICtoWW0k/Me 7mHbfz5Qfb1f4kNBQx2YCcXCUKAlGfukk6W+5qyl5ptgbuf6f0QNTtnz4JZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiOw8zZ9PU2/PpKUt2OHbxrfND/swHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqln/QBIUj3UMGYQOH00sJVgYrEWUY+Z+0Y yMJmicRJUvHZUTVFSN3sTpk68RM63ZhwqrfzB3+yHs/gzOxobJHC3f7w+bR5Gu/1 ix+AmbfxIeV1n1Yxh+n5ocXmDh3tV8Rg8/JOazq4xanUrRZ4hI2LkpmmPw1XH95N XvIZDLDT94CJBHH3c2KQriHQQR9Cbg0wSpqHuFaghkNejb2+T0Lkn+oqZdSy68rh ZSq+2+9RFDzWAfShpmQNn+kHL+nSv6IipMv6tG2SiAjl6drmeuhAzRs00kYXalE2 BIG4FIZw1pFtR3pCVKiAnaKxDTO0hdjQhJ7xAFyni/yZAlPG77s= -----END CERTIFICATE-----Generated at Mon Jun 30 07:39:51 2025 by rpki-client