$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: hAC8hTiCF6CK2oYqRG94JQ43VxeOxPbXltTrWquJuYs= Subject key identifier: E2:2A:97:4B:A8:A8:F7:0C:1F:15:D3:23:8B:08:B6:AD:1C:5C:51:56 Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 18C0C21C0E5FFC25CFCDB3C83F663259EFF6648D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: EA Signing time: Sat 06 Sep 2025 18:01:46 +0000 Manifest this update: Sat 06 Sep 2025 17:56:46 +0000 Manifest next update: Wed 10 Sep 2025 01:05:46 +0000 Files and hashes: 1: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: wcDH9AdpabWfc3QDSNUcqcNVJyS1nJjFmeaYmT+uW0g=) 2: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: ztIo3A2ctTRNMf4aOOnv3JjOxZRvj18FKMingH9UzPs=) 3: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: SnVzmW28Qau3350GHvbjUPG7RqP7p+g79S8zzI64Aww=) 4: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: gUosjAgXVzbDSO3SLIPnQM2jycHvd3EtJFyhi4PT5RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c0:c2:1c:0e:5f:fc:25:cf:cd:b3:c8:3f:66:32:59:ef:f6:64:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Sep 6 17:56:46 2025 GMT Not After : Sep 10 01:05:46 2025 GMT Subject: CN=E22A974BA8A8F70C1F15D3238B08B6AD1C5C5156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bc:55:88:b2:06:f2:d6:6d:2f:80:69:04:b5: d7:35:90:15:87:46:c1:a0:2a:91:a4:41:59:4e:b7: 58:e7:3f:fa:d5:13:9c:77:79:30:7a:05:29:86:ef: 2f:1b:1c:2c:6e:da:67:ce:50:43:b9:5b:fb:bf:5b: ea:68:d4:2f:42:56:d1:ff:a0:b2:fe:78:20:76:62: 2a:d4:59:3d:5a:da:56:f8:2d:60:e3:af:11:46:32: b1:5d:7b:c5:16:ba:50:45:fe:1f:41:77:87:21:ba: d8:86:60:45:ba:32:77:5c:c3:e9:ed:6f:cf:0b:06: 21:95:38:ac:ce:05:ec:6d:4d:9f:16:d0:de:01:20: d8:b8:ad:28:dd:c7:8c:64:f6:52:0a:02:0c:0b:e2: 6f:83:66:b4:ae:01:e3:f0:78:bc:72:da:49:ba:f5: 52:91:70:42:36:ea:b6:68:4c:63:ea:df:0c:bf:5b: d1:84:17:38:f2:e0:c5:4b:6e:b4:37:18:2c:83:ba: f7:4e:5c:1e:8a:31:7e:0a:38:89:e2:2b:fe:b4:16: 40:4c:09:d7:b5:c2:67:49:e2:40:61:9b:6b:86:02: 0d:b8:44:06:c5:2a:43:4a:ef:06:e8:68:61:ca:81: d5:25:d3:b1:60:e6:89:22:c1:58:a3:a2:92:36:54: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2A:97:4B:A8:A8:F7:0C:1F:15:D3:23:8B:08:B6:AD:1C:5C:51:56 X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0c:06:d7:86:46:f9:35:f8:15:6a:34:cf:13:80:35:de:4a: 1c:eb:71:db:38:a2:7f:b0:50:6d:93:bf:e0:ff:ff:e3:90:45: b2:07:1b:ce:f3:84:db:1a:10:aa:9c:23:6d:f2:05:f4:f4:70: 21:d6:1e:8e:d1:31:08:dd:16:94:2d:23:7e:47:3b:70:28:41: 08:b0:f4:b4:e7:26:33:90:c2:95:fc:5e:2d:ad:41:8d:55:d5: 62:36:1f:15:71:13:1c:a0:51:72:4e:77:95:31:8f:3f:28:c0: 42:6d:6f:ba:3f:7b:87:36:9f:e9:01:57:64:65:f6:43:9f:20: ef:93:89:13:89:fa:bd:a6:cb:e5:73:51:da:ac:80:77:8c:c4: 1c:05:0e:b5:66:dd:ed:d5:39:57:cd:d0:23:47:bd:28:0d:60: 69:00:9b:f9:4d:18:f5:3a:a1:92:42:7c:60:cc:28:26:3d:e7: ba:99:61:4c:34:7b:e4:5c:5b:7c:e1:0c:5e:50:01:50:8b:53: bd:fd:af:67:49:fc:c2:fa:39:85:04:f9:11:31:5e:6b:28:6e: 2b:bc:df:7d:0f:90:d4:e5:07:f5:c0:a8:37:39:1b:1a:3a:6f: 8a:61:d8:70:24:76:81:79:fb:c9:82:c5:57:34:46:43:20:55: 99:91:01:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMDCHA5f/CXPzbPIP2YyWe/2ZI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNTA5MDYxNzU2NDZaFw0yNTA5MTAwMTA1NDZaMDMxMTAvBgNV BAMTKEUyMkE5NzRCQThBOEY3MEMxRjE1RDMyMzhCMDhCNkFEMUM1QzUxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtvFWIsgby1m0vgGkEtdc1kBWH RsGgKpGkQVlOt1jnP/rVE5x3eTB6BSmG7y8bHCxu2mfOUEO5W/u/W+po1C9CVtH/ oLL+eCB2YirUWT1a2lb4LWDjrxFGMrFde8UWulBF/h9Bd4chutiGYEW6Mndcw+nt b88LBiGVOKzOBextTZ8W0N4BINi4rSjdx4xk9lIKAgwL4m+DZrSuAePweLxy2km6 9VKRcEI26rZoTGPq3wy/W9GEFzjy4MVLbrQ3GCyDuvdOXB6KMX4KOIniK/60FkBM Cde1wmdJ4kBhm2uGAg24RAbFKkNK7wboaGHKgdUl07Fg5okiwVijopI2VCZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4iqXS6io9wwfFdMjiwi2rRxcUVYwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsMBteGRvk1+BVqNM8TgDXeShzrcds4on+w UG2Tv+D//+OQRbIHG87zhNsaEKqcI23yBfT0cCHWHo7RMQjdFpQtI35HO3AoQQiw 9LTnJjOQwpX8Xi2tQY1V1WI2HxVxExygUXJOd5Uxjz8owEJtb7o/e4c2n+kBV2Rl 9kOfIO+TiROJ+r2my+VzUdqsgHeMxBwFDrVm3e3VOVfN0CNHvSgNYGkAm/lNGPU6 oZJCfGDMKCY957qZYUw0e+RcW3zhDF5QAVCLU739r2dJ/ML6OYUE+RExXmsobiu8 330PkNTlB/XAqDc5Gxo6b4ph2HAkdoF5+8mCxVc0RkMgVZmRAdM= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:50 2025 by rpki-client