$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: j+AVee1tmsHw7SRBKhb07pUlAvOCeERMwxAfnmnJlNE= Subject key identifier: B9:00:89:AC:1C:8C:EB:B6:E7:67:9B:18:55:02:19:23:3F:D7:02:39 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 75115C3B207AD9F5EB8C495D41760FA822CDCCAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 056C Signing time: Sun 03 Aug 2025 14:30:03 +0000 Manifest this update: Sun 03 Aug 2025 14:25:03 +0000 Manifest next update: Wed 06 Aug 2025 23:56:03 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: vtSVJ57jlKgerq97kKdpp86Ps8cAHD6ieM8HCl+em/o=) 2: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) 3: AS24203.roa (hash: 3ctNwS0OLEagtpsog+lsYjjt5y+57xskBp0Ci+lN1S8=) 4: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 23:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:11:5c:3b:20:7a:d9:f5:eb:8c:49:5d:41:76:0f:a8:22:cd:cc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Aug 3 14:25:03 2025 GMT Not After : Aug 6 23:56:03 2025 GMT Subject: CN=B90089AC1C8CEBB6E7679B18550219233FD70239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4b:60:ad:16:19:57:c7:ae:e2:e0:10:44:b5: 32:5e:00:85:09:fd:5b:69:9f:cb:6f:07:f3:c9:24: 58:bb:c0:da:38:a0:1b:f7:e3:d9:6b:fc:12:f1:ab: 95:54:b8:7f:40:2f:da:72:bd:74:a3:01:a0:da:af: 9e:30:ef:ca:cb:7f:e5:92:a4:34:e7:8c:1e:b6:f9: cc:b6:3a:35:0d:24:89:d4:ca:98:7e:1e:3f:ef:b9: 1c:6b:5f:6c:d2:35:1c:4f:0f:7e:90:d4:89:47:49: 7c:77:b5:11:26:ea:79:9f:93:6e:66:4b:99:4a:6e: b5:2a:1c:7e:6e:84:b3:2b:47:46:02:95:5d:b4:18: c6:b9:f5:57:b0:87:36:c8:5d:76:a4:00:cb:6c:d2: bf:86:16:6c:b4:71:fd:8b:86:3d:44:b5:24:5f:00: 3f:c4:70:90:03:c1:c9:07:9a:49:ff:c8:e6:3d:f4: c0:43:64:57:af:f2:8a:04:d0:3f:11:5c:bc:ed:d5: 30:ab:62:89:a8:e7:7e:bc:13:61:12:a2:29:6b:5e: 18:a4:5c:c1:56:0f:48:c5:b6:de:ea:4c:2d:33:97: ab:d3:01:e6:c6:a6:9b:05:1a:da:32:d5:7b:6a:09: a6:45:6e:fb:38:27:b2:c4:06:89:7d:4a:0b:23:9c: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:00:89:AC:1C:8C:EB:B6:E7:67:9B:18:55:02:19:23:3F:D7:02:39 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ec:14:72:c9:13:e6:47:7e:5b:f1:36:1a:c4:cf:7c:78:03: b3:6a:7b:da:c0:f0:6a:37:c3:6d:59:22:60:32:07:70:94:4f: ad:f6:ab:57:7c:1d:63:df:1e:0f:1b:10:8c:31:ee:fb:70:2a: 28:1e:5e:cb:4f:1f:b2:21:27:84:06:77:6d:cd:9b:2b:d7:89: 7b:d0:12:16:f1:60:55:08:6c:5f:06:fe:ca:bf:d3:04:eb:f6: e3:d8:cf:47:1a:38:2d:11:38:43:69:f1:17:ca:de:ed:1e:01: de:c4:df:53:4c:7a:27:98:89:e2:0e:ea:05:b1:b9:12:aa:e8: 27:3b:33:b9:09:2a:d1:db:13:ae:37:97:7d:5c:dd:ee:64:fb: e6:52:bc:a1:a9:53:94:d2:42:71:18:f8:b9:6d:c5:d1:db:33: 9c:96:ac:59:78:63:fd:f6:0d:3a:a0:9c:a1:24:3c:3f:b9:cc: a6:e9:eb:f1:f8:37:34:5b:9c:2f:9c:97:1f:8c:8d:f6:e0:b9: 37:51:c9:11:d8:e9:87:87:a1:ec:aa:99:28:8f:b1:68:70:5f: 6e:b8:38:0f:a8:4b:83:ef:d0:ad:be:f3:8f:20:4e:66:d1:f9: d9:7f:64:c2:9b:c7:0f:5c:83:10:f7:93:7d:26:cf:53:39:31: 17:84:f4:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRFcOyB62fXrjEldQXYPqCLNzKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTA4MDMxNDI1MDNaFw0yNTA4MDYyMzU2MDNaMDMxMTAvBgNV BAMTKEI5MDA4OUFDMUM4Q0VCQjZFNzY3OUIxODU1MDIxOTIzM0ZENzAyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsS2CtFhlXx67i4BBEtTJeAIUJ /Vtpn8tvB/PJJFi7wNo4oBv349lr/BLxq5VUuH9AL9pyvXSjAaDar54w78rLf+WS pDTnjB62+cy2OjUNJInUyph+Hj/vuRxrX2zSNRxPD36Q1IlHSXx3tREm6nmfk25m S5lKbrUqHH5uhLMrR0YClV20GMa59VewhzbIXXakAMts0r+GFmy0cf2Lhj1EtSRf AD/EcJADwckHmkn/yOY99MBDZFev8ooE0D8RXLzt1TCrYomo5368E2ESoilrXhik XMFWD0jFtt7qTC0zl6vTAebGppsFGtoy1XtqCaZFbvs4J7LEBol9SgsjnHmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQCJrByM67bnZ5sYVQIZIz/XAjkwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrsFHLJE+ZHflvxNhrEz3x4A7Nqe9rA8Go3 w21ZImAyB3CUT632q1d8HWPfHg8bEIwx7vtwKigeXstPH7IhJ4QGd23NmyvXiXvQ EhbxYFUIbF8G/sq/0wTr9uPYz0caOC0ROENp8RfK3u0eAd7E31NMeieYieIO6gWx uRKq6Cc7M7kJKtHbE643l31c3e5k++ZSvKGpU5TSQnEY+LltxdHbM5yWrFl4Y/32 DTqgnKEkPD+5zKbp6/H4NzRbnC+clx+MjfbguTdRyRHY6YeHoeyqmSiPsWhwX264 OA+oS4Pv0K2+848gTmbR+dl/ZMKbxw9cgxD3k30mz1M5MReE9CE= -----END CERTIFICATE-----Generated at Tue Aug 5 20:18:46 2025 by rpki-client