$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft File: 10B7822CA22013D1B3095AB974949FD98A76025C.mft (raw, json) Hash identifier: U1c2sdwoWm1nRETd7WJhKwplw0KqaA7Yi83tVE6pSz8= Subject key identifier: 7F:88:5D:37:23:C5:36:45:18:1D:A9:2F:A0:15:3C:5D:13:2E:0D:18 Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C Certificate serial: 19CEC30536FC34606FBCFA649AC78092F93369F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft Manifest number: 0139 Signing time: Mon 20 Oct 2025 16:11:14 +0000 Manifest this update: Mon 20 Oct 2025 16:06:14 +0000 Manifest next update: Fri 24 Oct 2025 00:46:14 +0000 Files and hashes: 1: 10B7822CA22013D1B3095AB974949FD98A76025C.crl (hash: RHq/WW6Cw3zK00NXCYHhHPBBxic2zSZ0Uryzf2/nH30=) 2: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (hash: gVzL2LBLN7STi4mLrjjyVW3mXdXUI+ebV+XEsXnxKMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ce:c3:05:36:fc:34:60:6f:bc:fa:64:9a:c7:80:92:f9:33:69:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C Validity Not Before: Oct 20 16:06:14 2025 GMT Not After : Oct 24 00:46:14 2025 GMT Subject: CN=7F885D3723C53645181DA92FA0153C5D132E0D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:86:e3:f3:d5:7b:b6:c4:b1:65:98:f3:d3: f9:83:27:17:3f:85:67:50:63:8d:52:a3:e5:86:be: de:e0:b7:90:90:b4:36:40:aa:1c:62:98:61:2b:4e: bd:73:43:c8:67:b9:16:91:84:38:21:41:4b:fa:51: 4d:5b:30:0e:fa:5b:c9:47:93:82:25:0f:ae:40:9f: a6:56:26:1f:0c:08:64:e6:b3:39:a5:9b:d7:26:eb: b8:e1:fd:b4:70:36:af:2e:f5:b5:f1:76:e9:36:c0: 6b:e2:1c:4d:37:a2:db:68:90:05:ad:45:cc:4f:49: 5f:54:8b:2a:79:17:69:0e:ef:3a:13:8b:11:50:ae: 53:a2:e7:dc:65:da:e3:fb:75:8d:62:2a:5e:1c:16: 01:87:1b:2b:00:bd:2b:e5:e5:4e:f3:77:3c:4a:b3: 91:f7:cd:50:0c:f4:50:2e:e3:02:2c:a1:c2:9d:4f: 12:72:f7:14:9e:f2:ec:e2:14:3b:e3:aa:c5:57:c1: be:c6:e7:17:4a:36:35:64:d6:de:4a:81:f6:b4:d5: 06:d5:90:5a:49:c8:52:81:31:14:89:b9:ef:e7:8d: d9:b2:36:47:64:64:85:83:b6:be:8b:1c:06:9f:52: 79:be:1f:2f:69:c3:e2:1c:62:85:1c:fb:af:79:f6: de:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:88:5D:37:23:C5:36:45:18:1D:A9:2F:A0:15:3C:5D:13:2E:0D:18 X509v3 Authority Key Identifier: keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9c:cd:1c:e8:f5:1f:ae:d6:f8:15:98:f7:22:e2:20:3a:bf: 9b:26:d7:06:59:b1:20:09:86:bf:c6:e8:70:68:06:3d:47:54: 09:86:17:8a:bc:c9:a7:1d:ee:00:6e:0b:b9:42:f6:dd:2b:f2: b5:7b:c0:49:db:46:0d:eb:3a:b8:53:1c:0f:a6:3e:ec:e1:73: 75:1a:20:5d:62:bc:6f:51:fd:ec:28:09:e5:e9:2e:72:1c:76: 3f:ed:6b:76:28:36:83:92:fc:b3:39:08:b5:2c:d3:80:83:a2: 96:27:46:58:79:58:91:02:d3:cc:42:b3:bc:40:0d:0e:63:ed: ef:76:b2:5a:a3:ff:7d:6d:ef:3b:15:ee:c4:c5:dc:95:e2:55: 66:c1:ea:a4:68:80:74:03:20:48:2f:77:b9:a8:b5:b1:56:50: a1:22:e1:5e:7e:46:15:d0:b0:75:6c:17:14:0a:5b:ad:0c:44: 25:9d:24:e2:68:bb:95:e3:7a:a7:96:5b:e4:b9:6d:ad:c9:7d: 41:d6:3d:f7:95:93:ec:ad:7d:8b:13:5f:e2:80:a0:4d:80:43: 56:b8:66:86:4c:9d:ef:25:38:54:3c:27:ce:c7:b0:89:47:8d: be:53:ab:7f:de:58:4e:a2:c1:01:70:b6:f5:31:36:f8:f2:ba: 56:9a:54:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGc7DBTb8NGBvvPpkmseAkvkzafAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4 QTc2MDI1QzAeFw0yNTEwMjAxNjA2MTRaFw0yNTEwMjQwMDQ2MTRaMDMxMTAvBgNV BAMTKDdGODg1RDM3MjNDNTM2NDUxODFEQTkyRkEwMTUzQzVEMTMyRTBEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMf4bj89V7tsSxZZjz0/mDJxc/ hWdQY41So+WGvt7gt5CQtDZAqhximGErTr1zQ8hnuRaRhDghQUv6UU1bMA76W8lH k4IlD65An6ZWJh8MCGTmszmlm9cm67jh/bRwNq8u9bXxduk2wGviHE03ottokAWt RcxPSV9Uiyp5F2kO7zoTixFQrlOi59xl2uP7dY1iKl4cFgGHGysAvSvl5U7zdzxK s5H3zVAM9FAu4wIsocKdTxJy9xSe8uziFDvjqsVXwb7G5xdKNjVk1t5Kgfa01QbV kFpJyFKBMRSJue/njdmyNkdkZIWDtr6LHAafUnm+Hy9pw+IcYoUc+6959t7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4hdNyPFNkUYHakvoBU8XRMuDRgwHwYDVR0j BBgwFoAUELeCLKIgE9GzCVq5dJSf2Yp2AlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC8xMEI3ODIyQ0Ey MjAxM0QxQjMwOTVBQjk3NDk0OUZEOThBNzYwMjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4QTc2 MDI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQwMDI5YzctNzQyYy00ZGE4LWIy ZWUtZDYyOWFlNzhiZjAxLzAvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlG RDk4QTc2MDI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCczRzo9R+u1vgVmPci4iA6v5sm1wZZsSAJ hr/G6HBoBj1HVAmGF4q8yacd7gBuC7lC9t0r8rV7wEnbRg3rOrhTHA+mPuzhc3Ua IF1ivG9R/ewoCeXpLnIcdj/ta3YoNoOS/LM5CLUs04CDopYnRlh5WJEC08xCs7xA DQ5j7e92slqj/31t7zsV7sTF3JXiVWbB6qRogHQDIEgvd7motbFWUKEi4V5+RhXQ sHVsFxQKW60MRCWdJOJou5XjeqeWW+S5ba3JfUHWPfeVk+ytfYsTX+KAoE2AQ1a4 ZoZMne8lOFQ8J87HsIlHjb5Tq3/eWE6iwQFwtvUxNvjyulaaVDw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:09 2025 by rpki-client