$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft File: 10B7822CA22013D1B3095AB974949FD98A76025C.mft (raw, json) Hash identifier: i2QCwMT6UhJQP3xj6lSFK1SUaEj9TICVXab7n70gTy0= Subject key identifier: 68:1E:EF:5D:FC:31:A1:72:3D:30:87:66:5D:6C:6E:91:FF:D2:DE:5B Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C Certificate serial: 194471D80434D0A709090511691E53B7D7B1BADE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft Manifest number: 013F Signing time: Mon 03 Nov 2025 08:41:13 +0000 Manifest this update: Mon 03 Nov 2025 08:36:13 +0000 Manifest next update: Thu 06 Nov 2025 15:58:13 +0000 Files and hashes: 1: 10B7822CA22013D1B3095AB974949FD98A76025C.crl (hash: 6PX0xAZmenW+t+Mn+pM+JIzj2GaqPUJiSrrDq0CPLaI=) 2: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (hash: gVzL2LBLN7STi4mLrjjyVW3mXdXUI+ebV+XEsXnxKMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:44:71:d8:04:34:d0:a7:09:09:05:11:69:1e:53:b7:d7:b1:ba:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C Validity Not Before: Nov 3 08:36:13 2025 GMT Not After : Nov 6 15:58:13 2025 GMT Subject: CN=681EEF5DFC31A1723D3087665D6C6E91FFD2DE5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:ab:0e:9f:cb:19:72:ab:eb:73:69:07:20: 00:87:dd:7f:1a:7b:5b:9c:38:fb:e7:75:65:c1:3a: 5d:79:2a:ab:2b:f7:62:5a:db:55:0d:e0:db:88:77: b5:11:8d:73:0f:e0:cb:f9:3e:63:f0:0a:4f:41:81: 30:2d:d7:eb:fd:d9:6a:d0:c2:c5:b2:c6:c7:26:42: 67:3d:58:6a:56:5c:52:11:53:51:64:09:2a:a4:93: 31:e0:d9:a0:e7:58:01:cd:df:23:59:72:f8:ab:bb: 7e:f2:e8:2e:ea:72:4d:cb:ef:59:7c:8f:c9:60:f0: 46:00:a0:1a:7f:d3:cc:27:6a:29:17:ec:3b:e9:d2: 95:0a:09:70:16:be:92:48:58:bd:20:f0:12:10:8a: 96:e2:9c:7f:60:29:30:02:bd:2a:56:15:9e:c2:99: 24:47:f6:f7:67:b1:85:bc:20:7b:10:23:7b:3c:63: 2a:4b:66:74:e7:76:92:ce:9d:22:1f:78:1c:ae:eb: af:8e:68:65:05:5d:1a:9f:d5:c2:e7:3f:27:b0:d9: 8d:0d:3a:66:25:c3:98:ab:20:2d:7f:a5:04:46:a0: 10:a8:7b:1c:ef:35:f5:52:84:06:2e:99:c6:20:e8: de:3f:0c:25:99:c2:5c:f4:77:0d:39:00:7b:b0:07: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1E:EF:5D:FC:31:A1:72:3D:30:87:66:5D:6C:6E:91:FF:D2:DE:5B X509v3 Authority Key Identifier: keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:19:c3:df:4e:47:8b:c8:dd:da:4f:09:72:c5:2f:9d:da:22: c2:44:95:01:ee:69:6a:48:cc:50:59:f1:43:02:02:c5:dd:d0: 83:79:f2:8d:31:15:66:c2:a9:3b:78:ba:eb:e1:87:7b:bc:03: 9a:e9:53:b8:76:52:b4:1f:19:be:f0:46:e7:3c:cb:55:a7:c1: f3:c4:31:d7:99:a7:a3:67:13:b0:34:c6:f5:18:4f:b2:4c:9b: b3:66:e9:02:d2:a4:a7:63:04:b4:4e:76:03:38:c3:bd:66:84: 20:86:f6:3a:41:ef:16:65:41:f0:59:28:a2:9d:8a:d1:f3:0a: fc:25:b4:4d:58:46:7d:0d:d6:b9:d8:0c:36:4b:fe:40:a6:46: e9:4d:c4:c0:c0:71:d3:79:c5:9c:03:63:c7:17:1a:78:a3:e1: 7a:3d:49:a9:dd:0d:b7:8a:c1:9d:47:d0:91:14:79:b1:c4:c4: 23:41:17:df:7d:21:22:5c:be:37:21:4c:c7:bf:60:a5:e8:f8: 76:61:1c:7a:d9:17:cf:3f:55:76:aa:4e:60:c7:dd:ec:6b:06: 34:b8:24:e7:c9:34:93:2b:ba:9f:59:ea:98:20:cc:f2:d2:5c: 6f:eb:0b:08:ff:97:7a:48:24:2d:20:87:3c:83:b9:5e:ad:8e: 53:42:33:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGURx2AQ00KcJCQURaR5Tt9exut4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4 QTc2MDI1QzAeFw0yNTExMDMwODM2MTNaFw0yNTExMDYxNTU4MTNaMDMxMTAvBgNV BAMTKDY4MUVFRjVERkMzMUExNzIzRDMwODc2NjVENkM2RTkxRkZEMkRFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWqsOn8sZcqvrc2kHIACH3X8a e1ucOPvndWXBOl15Kqsr92Ja21UN4NuId7URjXMP4Mv5PmPwCk9BgTAt1+v92WrQ wsWyxscmQmc9WGpWXFIRU1FkCSqkkzHg2aDnWAHN3yNZcviru37y6C7qck3L71l8 j8lg8EYAoBp/08wnaikX7Dvp0pUKCXAWvpJIWL0g8BIQipbinH9gKTACvSpWFZ7C mSRH9vdnsYW8IHsQI3s8YypLZnTndpLOnSIfeByu66+OaGUFXRqf1cLnPyew2Y0N OmYlw5irIC1/pQRGoBCoexzvNfVShAYumcYg6N4/DCWZwlz0dw05AHuwB9kFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaB7vXfwxoXI9MIdmXWxukf/S3lswHwYDVR0j BBgwFoAUELeCLKIgE9GzCVq5dJSf2Yp2AlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC8xMEI3ODIyQ0Ey MjAxM0QxQjMwOTVBQjk3NDk0OUZEOThBNzYwMjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4QTc2 MDI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQwMDI5YzctNzQyYy00ZGE4LWIy ZWUtZDYyOWFlNzhiZjAxLzAvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlG RDk4QTc2MDI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4Zw99OR4vI3dpPCXLFL53aIsJElQHuaWpI zFBZ8UMCAsXd0IN58o0xFWbCqTt4uuvhh3u8A5rpU7h2UrQfGb7wRuc8y1WnwfPE MdeZp6NnE7A0xvUYT7JMm7Nm6QLSpKdjBLROdgM4w71mhCCG9jpB7xZlQfBZKKKd itHzCvwltE1YRn0N1rnYDDZL/kCmRulNxMDAcdN5xZwDY8cXGnij4Xo9SandDbeK wZ1H0JEUebHExCNBF999ISJcvjchTMe/YKXo+HZhHHrZF88/VXaqTmDH3exrBjS4 JOfJNJMrup9Z6pggzPLSXG/rCwj/l3pIJC0ghzyDuV6tjlNCMy8= -----END CERTIFICATE-----Generated at Mon Nov 3 15:13:24 2025 by rpki-client