$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft File: 10B7822CA22013D1B3095AB974949FD98A76025C.mft (raw, json) Hash identifier: sDkYK4xcGwqq3eT0e6KzXcZmmLTJsV+eUuMrdr/hx7U= Subject key identifier: 25:21:B9:E1:3C:EF:4E:9F:4C:14:AC:54:B8:B5:4A:6E:01:EB:3D:FF Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C Certificate serial: 43D49238D6A93B88F67DDBE44DD82C9E8F7F3514 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft Manifest number: 0107 Signing time: Mon 30 Jun 2025 06:31:12 +0000 Manifest this update: Mon 30 Jun 2025 06:26:12 +0000 Manifest next update: Thu 03 Jul 2025 11:08:12 +0000 Files and hashes: 1: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (hash: gVzL2LBLN7STi4mLrjjyVW3mXdXUI+ebV+XEsXnxKMQ=) 2: 10B7822CA22013D1B3095AB974949FD98A76025C.crl (hash: GUXig8kkPDcDsE4lrx0eKxmKAWIsOxTBeI/JzDdaH2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d4:92:38:d6:a9:3b:88:f6:7d:db:e4:4d:d8:2c:9e:8f:7f:35:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C Validity Not Before: Jun 30 06:26:12 2025 GMT Not After : Jul 3 11:08:12 2025 GMT Subject: CN=2521B9E13CEF4E9F4C14AC54B8B54A6E01EB3DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:02:1e:3b:2a:7c:75:0c:38:19:f1:80:79: c0:8a:21:63:00:4b:67:07:79:cb:58:78:4c:a7:e4: cb:31:aa:0d:2f:85:86:5e:a4:63:d0:b0:8f:7b:f7: f2:a2:6c:4b:23:af:15:d9:6d:1a:a3:8c:bf:8d:73: c6:96:c7:15:b9:95:52:14:8b:5a:ef:ed:b2:68:e2: 5e:30:e4:23:48:5c:51:6e:1a:f3:4a:bb:9b:33:2d: 2f:e7:11:59:8b:eb:45:39:56:a8:45:50:e9:a9:27: 1c:c3:6e:3d:db:41:5d:93:67:c0:5b:22:ac:4b:9d: 68:81:19:14:64:80:66:70:ef:9c:d6:d0:80:1b:3e: d9:74:2f:af:23:b1:ea:83:9c:db:0f:58:b1:60:76: b9:28:9c:20:4d:73:36:93:da:da:f1:ae:33:a4:2e: b7:5e:b0:a8:1b:59:37:3c:0c:a7:36:20:bb:a2:5f: 2c:73:64:54:29:5b:dc:43:6f:d8:29:cd:df:75:ab: ab:61:8d:c4:d6:0f:49:b0:5e:e5:00:d1:71:9f:3d: 0c:e8:6c:86:a9:46:97:f5:cc:84:6c:f2:ed:8a:0b: 7e:a2:e6:9f:7f:64:e7:de:e8:f3:59:98:c6:05:30: 78:93:98:5e:bc:e5:25:aa:21:73:79:fd:13:57:76: a4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:21:B9:E1:3C:EF:4E:9F:4C:14:AC:54:B8:B5:4A:6E:01:EB:3D:FF X509v3 Authority Key Identifier: keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fb:60:41:d5:f5:e4:bb:5f:fa:17:31:d3:6f:7a:48:5f:bb: f5:1f:16:d1:46:c1:75:5b:11:da:80:0f:86:c1:95:b2:af:f8: 30:b9:af:d7:8e:05:2b:ae:61:02:bf:e8:e7:27:2a:6d:35:ec: d2:7b:46:3b:38:57:e6:fe:29:2f:ee:4e:dc:86:d8:25:59:30: ca:5c:fd:09:9e:5b:7b:8c:04:71:6d:a8:8f:3d:14:6a:26:44: a3:56:68:76:7e:ec:30:51:a2:86:7c:02:6c:c0:72:d0:92:f3: 86:14:8b:ad:ee:a0:cc:4e:67:4f:b9:c5:1e:73:a3:cd:36:12: 3d:6b:52:cb:f1:1a:f8:cb:31:58:f4:44:54:51:7f:75:20:74: 70:5c:d0:d6:f1:53:74:96:84:78:a3:c6:f2:7a:39:29:58:3e: 97:02:90:81:58:f8:a3:b0:5e:f0:46:a8:6c:3a:21:3c:35:ad: 67:fb:c9:cf:e5:73:39:0a:07:31:b2:33:c0:05:82:7f:bc:76: 50:a9:53:7e:57:c6:d4:e8:2c:4d:9e:64:ac:4d:63:01:78:f1: 1d:87:9c:ae:ba:07:e3:0f:9a:66:31:bd:99:65:29:6b:02:d4: 4c:92:8e:c0:83:34:f4:07:ff:d6:0a:a2:d5:96:03:b5:06:df: 1f:0e:a5:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9SSONapO4j2fdvkTdgsno9/NRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4 QTc2MDI1QzAeFw0yNTA2MzAwNjI2MTJaFw0yNTA3MDMxMTA4MTJaMDMxMTAvBgNV BAMTKDI1MjFCOUUxM0NFRjRFOUY0QzE0QUM1NEI4QjU0QTZFMDFFQjNERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbYwIeOyp8dQw4GfGAecCKIWMA S2cHectYeEyn5Msxqg0vhYZepGPQsI979/KibEsjrxXZbRqjjL+Nc8aWxxW5lVIU i1rv7bJo4l4w5CNIXFFuGvNKu5szLS/nEVmL60U5VqhFUOmpJxzDbj3bQV2TZ8Bb IqxLnWiBGRRkgGZw75zW0IAbPtl0L68jseqDnNsPWLFgdrkonCBNczaT2trxrjOk LrdesKgbWTc8DKc2ILuiXyxzZFQpW9xDb9gpzd91q6thjcTWD0mwXuUA0XGfPQzo bIapRpf1zIRs8u2KC36i5p9/ZOfe6PNZmMYFMHiTmF685SWqIXN5/RNXdqSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJSG54TzvTp9MFKxUuLVKbgHrPf8wHwYDVR0j BBgwFoAUELeCLKIgE9GzCVq5dJSf2Yp2AlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC8xMEI3ODIyQ0Ey MjAxM0QxQjMwOTVBQjk3NDk0OUZEOThBNzYwMjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4QTc2 MDI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQwMDI5YzctNzQyYy00ZGE4LWIy ZWUtZDYyOWFlNzhiZjAxLzAvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlG RDk4QTc2MDI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADb7YEHV9eS7X/oXMdNvekhfu/UfFtFGwXVb EdqAD4bBlbKv+DC5r9eOBSuuYQK/6OcnKm017NJ7Rjs4V+b+KS/uTtyG2CVZMMpc /QmeW3uMBHFtqI89FGomRKNWaHZ+7DBRooZ8AmzActCS84YUi63uoMxOZ0+5xR5z o802Ej1rUsvxGvjLMVj0RFRRf3UgdHBc0NbxU3SWhHijxvJ6OSlYPpcCkIFY+KOw XvBGqGw6ITw1rWf7yc/lczkKBzGyM8AFgn+8dlCpU35XxtToLE2eZKxNYwF48R2H nK66B+MPmmYxvZllKWsC1EySjsCDNPQH/9YKotWWA7UG3x8OpQc= -----END CERTIFICATE-----Generated at Tue Jul 1 01:47:46 2025 by rpki-client