$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: ejYZkJXwmxSydNT9MFSuP6m3oDQbsD1UcKmvGi+F7dg= Subject key identifier: 67:BD:7E:69:B4:64:34:94:CB:E4:40:93:62:64:AC:A4:D7:0D:31:07 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 6C2AB982BFF2E788F554E34FDA4D7AF2A7C0FA7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 059C Signing time: Sun 02 Nov 2025 21:10:04 +0000 Manifest this update: Sun 02 Nov 2025 21:05:04 +0000 Manifest next update: Thu 06 Nov 2025 05:15:04 +0000 Files and hashes: 1: AS24203.roa (hash: ROjHujVXG4cB58VK5zlYjPWTnOEgQBZXwj9Frk00Q8s=) 2: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 3: AS139994.roa (hash: /jbw/eVosR4HWJLaikWHpVoJLXOxZIZ252amT1c/IaM=) 4: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: DjKZJoaync/IND9lyiRZdCFenIpUfBIepr5DNJZO+CM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2a:b9:82:bf:f2:e7:88:f5:54:e3:4f:da:4d:7a:f2:a7:c0:fa:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Nov 2 21:05:04 2025 GMT Not After : Nov 6 05:15:04 2025 GMT Subject: CN=67BD7E69B4643494CBE440936264ACA4D70D3107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:81:95:7c:14:e4:7f:af:7a:fa:4e:9b:a3: 8a:b8:ea:d5:8b:80:8a:9a:f8:4b:0e:bd:24:34:7c: a8:15:9e:d3:57:46:c6:82:7b:aa:ce:86:ab:44:c6: d5:09:cf:ea:0e:53:93:7b:0a:7b:ba:20:57:3f:28: 99:c5:48:65:f5:ac:40:36:8a:aa:a1:28:55:a0:c6: 10:b2:3a:72:06:3d:85:c0:b4:c6:65:63:5e:ce:54: 71:ee:eb:0c:dd:05:e6:db:f0:f1:a9:18:41:a9:95: 5e:26:97:96:d1:7b:ef:2f:7a:71:92:d2:56:72:6f: 5d:6b:94:dc:4c:e2:1a:8e:f6:c4:96:34:88:7c:de: 74:d7:32:2a:94:b5:bf:5d:51:8a:e8:42:fb:b4:a9: 04:9c:5a:12:b1:99:40:ed:93:d8:b5:31:4b:a7:b4: b7:18:8e:f4:92:56:27:ad:10:6c:32:4b:50:08:c4: e4:1d:a9:30:8d:7b:fb:03:50:79:f5:ab:f1:ae:db: ee:c3:42:86:93:dc:e7:e7:53:e5:99:2e:31:f5:a7: 50:10:7d:36:01:9a:f1:a0:20:7e:60:e2:03:9f:d6: c9:80:af:2e:6f:bf:05:44:8c:2a:cd:21:16:2a:81: 8a:b1:60:66:ee:e2:48:98:b2:25:19:d1:28:51:30: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BD:7E:69:B4:64:34:94:CB:E4:40:93:62:64:AC:A4:D7:0D:31:07 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5f:ec:65:6e:93:c9:a7:1e:9a:34:02:99:7c:36:ef:d4:80: e4:dd:76:63:f3:0b:02:df:50:b9:f8:be:57:95:67:ea:a6:ac: 05:ca:23:a6:58:9b:85:c8:13:7b:ef:f1:bd:8d:2b:07:4c:f1: 4c:1c:fc:26:17:9c:73:d4:8a:55:e0:f6:8a:2d:0d:91:df:54: 78:a9:56:4f:1e:1e:9b:52:9d:fc:1b:49:b0:62:c3:94:fd:8f: 31:e9:f1:6b:85:a7:5c:1e:68:f4:78:5a:1a:c7:f2:32:96:de: 4c:e6:ad:85:23:cb:d9:f2:d7:46:ac:80:c3:90:88:bf:89:eb: 90:a5:bb:c9:24:ce:33:d2:6e:59:fd:60:5f:93:e9:1d:00:96: 36:f7:4e:76:b6:b9:fe:ff:74:23:e5:e8:ab:b7:66:a8:b3:56: ea:c6:a4:d3:99:02:81:8f:f7:13:c1:85:76:df:a2:0a:10:0c: 52:41:a7:6a:bf:99:99:3f:5e:99:a1:c7:42:67:ef:02:a9:fc: a5:51:a6:58:f1:2f:f0:bc:86:f2:c6:f9:3f:15:89:95:e1:f3: a2:06:eb:c4:10:4e:83:4e:6f:4a:f7:88:3d:56:92:5f:1b:65: 09:3c:15:fd:4a:3d:bb:44:1a:cf:e6:e6:b3:a5:4b:1a:3a:eb: c5:7d:4c:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCq5gr/y54j1VONP2k168qfA+n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTExMDIyMTA1MDRaFw0yNTExMDYwNTE1MDRaMDMxMTAvBgNV BAMTKDY3QkQ3RTY5QjQ2NDM0OTRDQkU0NDA5MzYyNjRBQ0E0RDcwRDMxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3oGVfBTkf696+k6bo4q46tWL gIqa+EsOvSQ0fKgVntNXRsaCe6rOhqtExtUJz+oOU5N7Cnu6IFc/KJnFSGX1rEA2 iqqhKFWgxhCyOnIGPYXAtMZlY17OVHHu6wzdBebb8PGpGEGplV4ml5bRe+8venGS 0lZyb11rlNxM4hqO9sSWNIh83nTXMiqUtb9dUYroQvu0qQScWhKxmUDtk9i1MUun tLcYjvSSVietEGwyS1AIxOQdqTCNe/sDUHn1q/Gu2+7DQoaT3OfnU+WZLjH1p1AQ fTYBmvGgIH5g4gOf1smAry5vvwVEjCrNIRYqgYqxYGbu4kiYsiUZ0ShRMML/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ71+abRkNJTL5ECTYmSspNcNMQcwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhf7GVuk8mnHpo0Apl8Nu/UgOTddmPzCwLf ULn4vleVZ+qmrAXKI6ZYm4XIE3vv8b2NKwdM8Uwc/CYXnHPUilXg9ootDZHfVHip Vk8eHptSnfwbSbBiw5T9jzHp8WuFp1weaPR4WhrH8jKW3kzmrYUjy9ny10asgMOQ iL+J65Clu8kkzjPSbln9YF+T6R0Aljb3Tna2uf7/dCPl6Ku3ZqizVurGpNOZAoGP 9xPBhXbfogoQDFJBp2q/mZk/Xpmhx0Jn7wKp/KVRpljxL/C8hvLG+T8ViZXh86IG 68QQToNOb0r3iD1Wkl8bZQk8Ff1KPbtEGs/m5rOlSxo668V9TPU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:59:48 2025 by rpki-client