$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: azNl/Ox0YnkcOqBbvb2d57PL2n6koIlscCbDfFvu9+8= Subject key identifier: 6A:08:92:E1:46:5D:AF:3A:79:76:DF:09:20:F0:32:E3:A5:77:6B:42 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 34AA232B55C98FB5F8E3841505EE991F0D316128 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 0599 Signing time: Mon 27 Oct 2025 09:00:03 +0000 Manifest this update: Mon 27 Oct 2025 08:55:03 +0000 Manifest next update: Thu 30 Oct 2025 12:40:03 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: dX0Y1KJgSbKJqL6r1paTJpI/WIBqSwxetxqUJQlFq4I=) 2: AS139994.roa (hash: /jbw/eVosR4HWJLaikWHpVoJLXOxZIZ252amT1c/IaM=) 3: AS24203.roa (hash: ROjHujVXG4cB58VK5zlYjPWTnOEgQBZXwj9Frk00Q8s=) 4: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 12:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:aa:23:2b:55:c9:8f:b5:f8:e3:84:15:05:ee:99:1f:0d:31:61:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Oct 27 08:55:03 2025 GMT Not After : Oct 30 12:40:03 2025 GMT Subject: CN=6A0892E1465DAF3A7976DF0920F032E3A5776B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:14:7d:d1:6c:cb:71:ea:ee:01:90:3b:27:5f: 82:f8:0e:c4:12:57:e1:b8:8a:57:72:63:fd:3e:f4: 56:b3:20:c3:2f:9a:12:5b:fa:44:62:be:ed:d1:02: 2d:2e:50:7f:3a:d6:22:04:11:28:f3:23:a9:0c:96: 5a:eb:fa:cd:7e:92:a1:05:5f:62:e5:f6:7b:fa:9e: f5:4c:29:29:07:a9:8e:7d:3b:f7:38:0e:c9:60:b5: 8e:69:e0:ce:75:76:02:c3:11:9f:4f:e6:69:83:70: d1:76:65:18:73:79:9a:68:99:60:f0:5d:57:c1:23: 7c:fe:68:4d:4c:c9:90:9c:81:8e:bc:fe:6b:b9:6a: ed:53:04:2e:c3:bf:1a:b0:d2:16:d6:16:4f:44:83: 81:41:37:2e:6d:8f:b6:d7:24:2b:9c:ac:aa:82:2a: ee:2d:46:ad:06:10:ec:81:07:62:ac:d0:19:d7:e6: 85:cd:45:1b:48:d1:a8:de:72:bc:55:80:15:e1:75: 5f:64:b3:0b:ac:0e:78:e2:86:63:98:48:5b:85:90: 9f:72:93:c0:53:ef:7c:d6:ca:bb:d5:08:15:9b:51: ea:1e:4e:34:90:80:57:2d:78:f2:1e:71:13:82:1a: ed:1e:7f:3f:67:a2:f3:af:b9:ea:86:e5:7b:a2:4f: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:08:92:E1:46:5D:AF:3A:79:76:DF:09:20:F0:32:E3:A5:77:6B:42 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:09:45:e8:16:5e:42:bd:f9:fd:88:80:e3:7e:4f:77:be:14: 60:65:c2:19:1b:3b:6d:df:45:f5:e1:1d:0b:26:d6:cb:22:d7: 0f:24:ca:e7:30:52:c7:6e:a0:c0:4d:73:4a:ae:1e:a2:37:5a: 72:d4:00:cb:43:9a:73:73:31:2e:3f:b6:ca:f5:35:18:84:28: d6:4d:f0:55:de:72:fc:66:8f:26:5b:62:c3:e4:f1:9e:02:55: 7b:e1:ff:ef:e4:4c:1e:67:68:f1:a5:99:4a:b0:e4:b5:b4:e3: c3:a3:d4:81:ae:14:34:6c:7e:f2:79:0d:06:d4:66:4e:3b:17: bb:e6:29:80:e3:4a:f2:ad:be:1e:94:bb:a5:ce:9b:c5:00:0d: 70:0d:a5:eb:1b:05:74:05:1e:57:b7:bf:8f:95:b7:e3:34:29: 1b:e8:67:4c:4c:5e:cc:66:e3:a2:c9:44:10:df:34:20:c5:14: 22:ba:9a:14:72:cc:4b:75:7b:1f:ff:bd:7d:61:2d:45:cf:72: 9b:fe:42:29:b5:6d:2e:ed:b6:a4:1a:85:73:19:12:bd:4f:c3: 0a:04:2e:44:8f:12:df:0b:67:50:d4:28:3f:1b:c2:65:95:9e: b4:35:e7:67:98:97:6b:ba:7e:54:13:ac:70:65:de:d7:7f:66: bf:c6:0c:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKojK1XJj7X444QVBe6ZHw0xYSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTEwMjcwODU1MDNaFw0yNTEwMzAxMjQwMDNaMDMxMTAvBgNV BAMTKDZBMDg5MkUxNDY1REFGM0E3OTc2REYwOTIwRjAzMkUzQTU3NzZCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFH3RbMtx6u4BkDsnX4L4DsQS V+G4ildyY/0+9FazIMMvmhJb+kRivu3RAi0uUH861iIEESjzI6kMllrr+s1+kqEF X2Ll9nv6nvVMKSkHqY59O/c4DslgtY5p4M51dgLDEZ9P5mmDcNF2ZRhzeZpomWDw XVfBI3z+aE1MyZCcgY68/mu5au1TBC7Dvxqw0hbWFk9Eg4FBNy5tj7bXJCucrKqC Ku4tRq0GEOyBB2Ks0BnX5oXNRRtI0ajecrxVgBXhdV9kswusDnjihmOYSFuFkJ9y k8BT73zWyrvVCBWbUeoeTjSQgFctePIecROCGu0efz9novOvueqG5XuiTyORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUagiS4UZdrzp5dt8JIPAy46V3a0IwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYJRegWXkK9+f2IgON+T3e+FGBlwhkbO23f RfXhHQsm1ssi1w8kyucwUsduoMBNc0quHqI3WnLUAMtDmnNzMS4/tsr1NRiEKNZN 8FXecvxmjyZbYsPk8Z4CVXvh/+/kTB5naPGlmUqw5LW048Oj1IGuFDRsfvJ5DQbU Zk47F7vmKYDjSvKtvh6Uu6XOm8UADXANpesbBXQFHle3v4+Vt+M0KRvoZ0xMXsxm 46LJRBDfNCDFFCK6mhRyzEt1ex//vX1hLUXPcpv+Qim1bS7ttqQahXMZEr1PwwoE LkSPEt8LZ1DUKD8bwmWVnrQ152eYl2u6flQTrHBl3td/Zr/GDLk= -----END CERTIFICATE-----Generated at Tue Oct 28 08:29:51 2025 by rpki-client