$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: 02EUmtoW6vyZtGiCklXEUehkEy6Ih37yv1RLjEnY9u8= Subject key identifier: E0:19:07:2B:43:9C:6D:DF:4C:70:16:6B:8E:96:6F:7E:B2:DF:96:F4 Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 54B6F6D1000E95C013425D1977260B8E37A94B5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: E3 Signing time: Thu 21 Aug 2025 23:01:48 +0000 Manifest this update: Thu 21 Aug 2025 22:56:48 +0000 Manifest next update: Mon 25 Aug 2025 07:36:48 +0000 Files and hashes: 1: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: SnVzmW28Qau3350GHvbjUPG7RqP7p+g79S8zzI64Aww=) 2: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: HTw9Cl2Fs32af6ncqUWb2VZyVEbloFAYBEqWNq2Mzws=) 3: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: wcDH9AdpabWfc3QDSNUcqcNVJyS1nJjFmeaYmT+uW0g=) 4: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: gUosjAgXVzbDSO3SLIPnQM2jycHvd3EtJFyhi4PT5RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b6:f6:d1:00:0e:95:c0:13:42:5d:19:77:26:0b:8e:37:a9:4b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Aug 21 22:56:48 2025 GMT Not After : Aug 25 07:36:48 2025 GMT Subject: CN=E019072B439C6DDF4C70166B8E966F7EB2DF96F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:12:3d:de:68:e9:c0:24:d4:be:b8:ce:b9: cb:26:99:51:31:e4:df:ef:21:d9:e1:2e:c6:a3:2d: 1d:69:64:e2:34:e9:cd:91:55:c3:aa:6a:e1:84:32: b9:8d:12:44:fa:b1:81:28:58:b7:93:70:4a:6f:40: 94:7a:e4:46:b7:8e:32:b5:9c:50:5f:0c:ea:fb:78: e5:e6:36:7a:24:2c:c4:2c:98:a5:c1:66:c8:f2:34: 42:70:81:cd:a3:bd:d4:df:ac:8e:91:50:c3:26:f7: c1:19:96:bd:3c:a4:7e:91:3e:ae:14:93:dd:9e:ca: 0b:d7:74:b5:6e:ba:a3:b0:7e:1b:17:6f:7e:8d:36: dc:ca:70:1a:2a:19:24:1d:27:0b:65:a7:08:39:c2: b3:a6:90:0a:85:ba:0a:dc:ed:45:8e:61:82:ed:b3: a8:84:9e:5d:da:2f:55:5b:f3:d3:1d:8d:d0:5c:9d: a8:f0:fd:bb:a9:32:91:9d:31:f6:ca:14:a4:7d:01: f7:39:92:b6:03:11:19:0e:3c:e4:9f:a4:8c:16:ae: 20:91:3b:63:65:75:0e:65:5e:55:a1:d8:35:4c:56: b0:00:5d:b0:e6:33:7e:94:6e:cf:27:69:e7:03:41: b1:e0:26:b9:92:44:c8:f7:53:34:9a:35:b8:45:32: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:07:2B:43:9C:6D:DF:4C:70:16:6B:8E:96:6F:7E:B2:DF:96:F4 X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:83:13:c4:a7:5d:8e:f7:c2:75:41:d3:11:ef:cd:82:70: 43:41:9e:d7:7c:e7:35:bc:79:0f:6c:3a:95:63:98:06:72:e3: c0:eb:57:93:c5:8a:d1:ab:7a:7b:e7:da:7b:e8:23:11:bd:f9: aa:c0:b0:49:86:fc:aa:fd:1d:06:fe:42:9d:de:e0:cd:9f:75: d0:9c:df:af:42:ae:a2:a1:e6:f3:f8:1b:8d:a4:99:15:fd:08: 42:98:84:02:aa:68:92:a3:2d:1f:f0:3f:d3:8b:10:1e:72:b9: c8:90:94:55:8b:c9:2f:c6:59:f6:08:2c:f1:d7:94:7b:95:3d: 05:77:3b:d9:a0:9d:4f:49:88:3a:46:1a:d2:d6:41:e9:0a:16: ed:03:51:3e:67:3f:fa:11:22:15:1e:9e:8d:b6:2c:cd:83:6c: 61:f3:31:14:19:e8:c6:31:17:f1:8d:ef:92:f6:cc:39:41:45: bc:19:41:68:ac:10:9e:e8:9d:79:13:19:97:c5:1f:6f:73:de: 20:7e:f8:4b:b3:3b:2e:8b:b2:ad:c1:ea:78:2d:f0:6d:c1:5f: 89:c9:4b:30:f3:6c:e7:4e:21:93:99:11:36:77:72:37:41:3f: 7c:f2:8c:5d:f9:33:3a:25:44:27:b0:d8:35:ec:22:f4:9f:07: d1:c1:3a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLb20QAOlcATQl0ZdyYLjjepS10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNTA4MjEyMjU2NDhaFw0yNTA4MjUwNzM2NDhaMDMxMTAvBgNV BAMTKEUwMTkwNzJCNDM5QzZEREY0QzcwMTY2QjhFOTY2RjdFQjJERjk2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldhI93mjpwCTUvrjOucsmmVEx 5N/vIdnhLsajLR1pZOI06c2RVcOqauGEMrmNEkT6sYEoWLeTcEpvQJR65Ea3jjK1 nFBfDOr7eOXmNnokLMQsmKXBZsjyNEJwgc2jvdTfrI6RUMMm98EZlr08pH6RPq4U k92eygvXdLVuuqOwfhsXb36NNtzKcBoqGSQdJwtlpwg5wrOmkAqFugrc7UWOYYLt s6iEnl3aL1Vb89MdjdBcnajw/bupMpGdMfbKFKR9Afc5krYDERkOPOSfpIwWriCR O2NldQ5lXlWh2DVMVrAAXbDmM36Ubs8naecDQbHgJrmSRMj3UzSaNbhFMiWFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4BkHK0Ocbd9McBZrjpZvfrLflvQwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHsgxPEp12O98J1QdMR782CcENBntd85zW8 eQ9sOpVjmAZy48DrV5PFitGrenvn2nvoIxG9+arAsEmG/Kr9HQb+Qp3e4M2fddCc 369CrqKh5vP4G42kmRX9CEKYhAKqaJKjLR/wP9OLEB5yuciQlFWLyS/GWfYILPHX lHuVPQV3O9mgnU9JiDpGGtLWQekKFu0DUT5nP/oRIhUeno22LM2DbGHzMRQZ6MYx F/GN75L2zDlBRbwZQWisEJ7onXkTGZfFH29z3iB++EuzOy6Lsq3B6ngt8G3BX4nJ SzDzbOdOIZOZETZ3cjdBP3zyjF35MzolRCew2DXsIvSfB9HBOqQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:03 2025 by rpki-client