$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: Hf8uVO+AXgx4+CnaQ7paWqHKPIdpCHanTdesaobEeYM= Subject key identifier: E9:C8:BD:46:0C:50:E2:22:B8:96:8E:95:40:36:47:7A:C6:13:DA:03 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 594D1E6FBCFF6F128CC6773F04A53803D632DC34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 0581 Signing time: Fri 05 Sep 2025 07:20:03 +0000 Manifest this update: Fri 05 Sep 2025 07:15:03 +0000 Manifest next update: Mon 08 Sep 2025 12:46:03 +0000 Files and hashes: 1: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) 2: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: q1AKXYGeyDMj6OGXioUJZJrLa4OoTu4HQIQZh6zVgPs=) 3: AS24203.roa (hash: ROjHujVXG4cB58VK5zlYjPWTnOEgQBZXwj9Frk00Q8s=) 4: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4d:1e:6f:bc:ff:6f:12:8c:c6:77:3f:04:a5:38:03:d6:32:dc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Sep 5 07:15:03 2025 GMT Not After : Sep 8 12:46:03 2025 GMT Subject: CN=E9C8BD460C50E222B8968E954036477AC613DA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:fa:b7:34:04:3a:70:e2:fb:23:33:18:52: 51:c8:cd:b1:cb:c3:54:1d:e4:c7:53:9e:8e:43:57: 4f:cf:09:77:e0:83:d2:d1:2f:c1:99:f5:2d:9a:81: aa:13:b4:c8:8d:3e:cf:e0:d9:fd:e8:0b:4d:d0:c8: b7:6d:0b:cb:c6:79:b1:d3:1f:11:07:ef:81:8f:e3: f9:4f:e7:be:66:d9:d5:18:89:b0:f1:ed:6b:65:3d: 60:20:4b:e3:d9:4a:84:73:ad:ca:a3:81:b9:fc:cc: 5f:fe:b4:21:b0:1f:21:28:8f:fe:98:7a:a0:bf:ff: 3a:9b:5f:ca:11:bf:ac:25:f2:44:41:22:51:df:3f: 4a:71:d4:1c:2d:4d:f9:42:b3:28:3e:1b:56:8d:70: 1f:c0:ca:99:55:8f:c7:94:88:79:ef:48:20:ea:10: a1:a2:3e:94:df:dd:e0:e5:fb:4b:f5:39:ed:9f:66: 12:0a:f3:6b:cc:76:e7:4a:83:f0:d1:8f:27:65:8f: 00:1f:18:8a:f5:6f:91:42:dc:3b:fd:aa:e5:39:4f: f9:8f:18:c3:fc:5e:5f:f4:a6:f2:b3:64:cd:48:46: bc:56:ff:24:bf:48:61:3a:4c:d3:b7:ed:1a:e8:52: 07:d5:50:6d:b5:e1:cb:6f:a1:ec:69:3b:e1:4e:ef: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:BD:46:0C:50:E2:22:B8:96:8E:95:40:36:47:7A:C6:13:DA:03 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2d:e5:a4:65:47:e8:e4:5e:c2:16:e2:db:6d:77:18:d0:15: 9b:c9:3a:8b:17:a5:23:bd:81:98:d7:ff:54:32:d9:60:72:29: 29:bc:6f:7a:f2:16:73:b8:f3:6d:95:78:b1:ee:46:f3:bd:4f: 1a:a3:a4:6d:24:0f:76:8f:1a:3f:0b:41:d6:d5:44:c1:ea:ae: 56:41:0b:de:67:b8:7c:e1:08:50:fd:ee:9b:d5:a9:6b:de:1b: 95:59:92:cf:8f:1c:4f:c9:b7:fc:35:5a:45:3a:06:7d:fa:92: 51:52:26:f2:89:9e:83:a0:d0:31:c2:f3:82:9a:e0:b1:62:7b: db:ad:a3:bc:26:fd:aa:62:21:0f:84:12:2a:b5:9a:36:7b:ec: ef:e5:12:f8:f9:cb:68:fb:51:1a:fd:f3:db:0f:06:ed:0a:48: 39:46:91:52:ab:8a:69:92:e6:08:0e:59:a6:36:78:81:4b:92: 5d:da:ea:f5:3a:a8:93:4c:90:b5:d1:85:07:5f:f1:0d:1d:69: cf:81:01:94:d5:bd:07:63:d4:86:e1:6d:fc:cc:15:69:e4:35: 40:1e:f0:b5:c6:1b:89:db:01:00:b6:bf:5b:ba:47:3d:8b:3e: 0e:82:1e:2b:9e:14:d4:6b:0e:05:c3:ae:34:e0:c4:f3:1f:e3: a2:fa:ab:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWU0eb7z/bxKMxnc/BKU4A9Yy3DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTA5MDUwNzE1MDNaFw0yNTA5MDgxMjQ2MDNaMDMxMTAvBgNV BAMTKEU5QzhCRDQ2MEM1MEUyMjJCODk2OEU5NTQwMzY0NzdBQzYxM0RBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoPq3NAQ6cOL7IzMYUlHIzbHL w1Qd5MdTno5DV0/PCXfgg9LRL8GZ9S2agaoTtMiNPs/g2f3oC03QyLdtC8vGebHT HxEH74GP4/lP575m2dUYibDx7WtlPWAgS+PZSoRzrcqjgbn8zF/+tCGwHyEoj/6Y eqC//zqbX8oRv6wl8kRBIlHfP0px1BwtTflCsyg+G1aNcB/AyplVj8eUiHnvSCDq EKGiPpTf3eDl+0v1Oe2fZhIK82vMdudKg/DRjydljwAfGIr1b5FC3Dv9quU5T/mP GMP8Xl/0pvKzZM1IRrxW/yS/SGE6TNO37RroUgfVUG214ctvoexpO+FO767pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ci9RgxQ4iK4lo6VQDZHesYT2gMwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJst5aRlR+jkXsIW4tttdxjQFZvJOosXpSO9 gZjX/1Qy2WByKSm8b3ryFnO4822VeLHuRvO9TxqjpG0kD3aPGj8LQdbVRMHqrlZB C95nuHzhCFD97pvVqWveG5VZks+PHE/Jt/w1WkU6Bn36klFSJvKJnoOg0DHC84Ka 4LFie9uto7wm/apiIQ+EEiq1mjZ77O/lEvj5y2j7URr989sPBu0KSDlGkVKrimmS 5ggOWaY2eIFLkl3a6vU6qJNMkLXRhQdf8Q0dac+BAZTVvQdj1IbhbfzMFWnkNUAe 8LXGG4nbAQC2v1u6Rz2LPg6CHiueFNRrDgXDrjTgxPMf46L6q5A= -----END CERTIFICATE-----Generated at Sat Sep 6 11:45:32 2025 by rpki-client