$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft File: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json) Hash identifier: L9JIDvrem+cBjmFFIzB9dHuVv0JI/ZyjgiYaanarmIg= Subject key identifier: 9C:AD:C1:B1:71:42:4E:A6:88:90:51:4D:C7:E9:4F:91:A9:AC:3E:85 Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 2ADB4550F71BDEBCEE5847BE1C180DC870D6F401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft Manifest number: 0105 Signing time: Thu 04 Sep 2025 10:11:36 +0000 Manifest this update: Thu 04 Sep 2025 10:06:36 +0000 Manifest next update: Sun 07 Sep 2025 20:23:36 +0000 Files and hashes: 1: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: 9iQrzztLoFvpsEnzNnL5P1t1/bjXuRlh5hUEQazNDWU=) 2: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: G9cc7E0CBt9eZOgQH+h5FDF/xv3JICzypOPlsHH5aEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:db:45:50:f7:1b:de:bc:ee:58:47:be:1c:18:0d:c8:70:d6:f4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: Sep 4 10:06:36 2025 GMT Not After : Sep 7 20:23:36 2025 GMT Subject: CN=9CADC1B171424EA68890514DC7E94F91A9AC3E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:14:11:c9:4a:cd:1a:bf:75:29:37:e4:4e: e5:ec:bd:8b:ae:3b:05:cd:36:79:6f:72:9e:9c:97: b1:8c:28:13:e2:12:20:ba:3b:07:fc:c1:e1:7a:3f: b7:5b:42:a6:2d:74:d1:8f:77:a0:2a:c1:80:ca:0b: c6:9c:39:2f:4f:c2:8b:40:d3:96:c2:e8:aa:40:95: c4:27:48:38:0f:4a:85:4b:cd:17:b7:2f:33:4c:05: ea:25:ba:3c:c1:14:b3:18:1e:fa:7a:dc:17:c1:41: 3d:34:50:bf:d6:f7:e7:16:f2:b1:ad:36:7e:8d:2e: 91:69:d4:18:0b:87:26:b4:b2:8c:4d:99:aa:8a:a7: d3:64:f2:20:b4:0c:34:dc:76:22:b5:29:2c:1b:4a: 57:a2:0c:e2:b4:e4:80:fd:a8:ac:fd:7f:a7:8b:ff: cd:95:3f:ec:5c:37:cf:32:26:44:9d:d6:8a:3f:17: 1a:17:9a:97:04:20:82:a2:f3:99:96:d0:6e:3b:f7: a1:df:f6:3e:f5:29:7f:02:ac:1e:4a:d3:b7:ad:26: b3:76:b4:7c:1b:7e:c9:c4:6a:fe:74:c4:89:b9:58: 25:a1:3a:57:8d:3c:cf:c2:e4:53:29:3e:3f:9a:4a: 51:e0:17:62:f3:96:d2:0d:26:dd:1b:bc:26:78:a5: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:C1:B1:71:42:4E:A6:88:90:51:4D:C7:E9:4F:91:A9:AC:3E:85 X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:49:5c:93:37:df:82:99:1d:2a:93:27:da:60:18:8a:da:58: 95:70:1d:bc:f7:26:e8:fd:10:82:2d:9d:c5:22:36:f7:cc:b0: c5:e9:66:dd:c0:ae:58:54:8e:26:bd:c6:6f:57:cd:dd:04:1a: ae:3e:c4:e6:db:d6:8a:4c:4c:e0:5a:87:12:92:94:bc:75:18: d1:38:d1:e4:3c:79:ce:a9:7e:25:bb:d7:c4:04:2b:2e:35:80: a9:fd:61:73:1d:e8:f4:3a:2a:a4:35:d5:d5:ae:83:92:56:b3: ce:aa:b3:68:29:bb:36:dc:f5:70:e2:79:01:95:46:a1:46:59: 7a:4b:12:9e:4b:e5:3f:19:1b:cf:7b:09:ff:60:38:2b:fd:63: 0a:4b:e9:77:b5:1a:5a:68:dd:32:a5:eb:63:53:2f:27:8a:c5: 9e:fa:71:53:ea:d6:ad:a8:de:a8:d1:ca:73:8f:b1:f1:7c:c1: e1:56:c1:c1:16:d4:79:97:fb:b6:f6:4e:e3:b1:f5:36:f6:fe: a6:a6:9c:ee:ac:fe:6d:08:ed:8d:e4:6f:a2:60:22:89:6f:3d: 16:4f:9a:70:62:55:1c:10:94:9f:b3:2c:51:25:f6:d5:da:4b: b3:85:27:b0:9f:af:0c:a6:a1:96:61:1e:c8:3a:3c:be:d4:a2: 5a:c6:d7:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKttFUPcb3rzuWEe+HBgNyHDW9AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNTA5MDQxMDA2MzZaFw0yNTA5MDcyMDIzMzZaMDMxMTAvBgNV BAMTKDlDQURDMUIxNzE0MjRFQTY4ODkwNTE0REM3RTk0RjkxQTlBQzNFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXxQRyUrNGr91KTfkTuXsvYuu OwXNNnlvcp6cl7GMKBPiEiC6Owf8weF6P7dbQqYtdNGPd6AqwYDKC8acOS9PwotA 05bC6KpAlcQnSDgPSoVLzRe3LzNMBeolujzBFLMYHvp63BfBQT00UL/W9+cW8rGt Nn6NLpFp1BgLhya0soxNmaqKp9Nk8iC0DDTcdiK1KSwbSleiDOK05ID9qKz9f6eL /82VP+xcN88yJkSd1oo/FxoXmpcEIIKi85mW0G4796Hf9j71KX8CrB5K07etJrN2 tHwbfsnEav50xIm5WCWhOleNPM/C5FMpPj+aSlHgF2LzltINJt0bvCZ4paa/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnK3BsXFCTqaIkFFNx+lPkamsPoUwHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi YzItYWIwNWUwNjUwNjU1LzAvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZD Njc5QTREN0JENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1JXJM334KZHSqTJ9pgGIraWJVwHbz3Juj9 EIItncUiNvfMsMXpZt3ArlhUjia9xm9Xzd0EGq4+xObb1opMTOBahxKSlLx1GNE4 0eQ8ec6pfiW718QEKy41gKn9YXMd6PQ6KqQ11dWug5JWs86qs2gpuzbc9XDieQGV RqFGWXpLEp5L5T8ZG897Cf9gOCv9YwpL6Xe1Glpo3TKl62NTLyeKxZ76cVPq1q2o 3qjRynOPsfF8weFWwcEW1HmX+7b2TuOx9Tb2/qamnO6s/m0I7Y3kb6JgIolvPRZP mnBiVRwQlJ+zLFEl9tXaS7OFJ7CfrwymoZZhHsg6PL7UolrG184= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:38 2025 by rpki-client