$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: ndiQhrdog2R5E6bPFk6oX022ZSMBD/86QxpvK7WTq2w= Subject key identifier: 40:8D:EC:E4:AE:B7:4D:98:44:9A:52:86:20:E1:7B:E6:13:C9:19:63 Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 60C67BCB0F48D7212FD3F4A4451AC4B388334DD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: 0104 Signing time: Sun 02 Nov 2025 18:31:48 +0000 Manifest this update: Sun 02 Nov 2025 18:26:48 +0000 Manifest next update: Thu 06 Nov 2025 04:15:48 +0000 Files and hashes: 1: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: FzHs2jrisPTXDjeyqpBMhWr9H2CINutW4PdDxdrM/c4=) 2: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: FGJYNZoP2u1g1d+TkTJl3d+9k8ceosOMmerRJ7rCX7Y=) 3: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: 859yRYxg6dYMZDhycmHxCWbBfEwXNU7EIcEdV25XiMg=) 4: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: iWWMBNz/ap73hzzhd0AgzEZTSYI9UVHD2G0NxQBjFlw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c6:7b:cb:0f:48:d7:21:2f:d3:f4:a4:45:1a:c4:b3:88:33:4d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Nov 2 18:26:48 2025 GMT Not After : Nov 6 04:15:48 2025 GMT Subject: CN=408DECE4AEB74D98449A528620E17BE613C91963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:b2:9d:14:6f:a5:2a:22:59:88:55:95:07: 3a:0a:37:08:9b:0b:ef:47:c9:89:e4:b7:a7:7a:e4: 40:6f:87:c6:7a:9c:6b:ab:a7:8b:51:ca:b2:e2:9e: fa:14:cf:d5:e4:1a:d4:52:88:f4:7e:12:0e:76:97: e7:83:b8:5e:c3:22:12:09:f9:c7:6d:f5:c5:9f:c6: 6b:94:c4:6a:49:1e:1a:7c:b6:e8:d3:6f:78:d5:01: 0c:06:c9:b5:61:14:76:97:15:5f:70:8a:80:1a:5e: 47:30:79:b2:ca:2f:09:60:af:c0:8d:3e:5a:1f:f9: 36:7e:6b:9d:13:d6:31:d4:b4:52:2e:f4:7f:d6:5f: 81:31:38:8c:1a:8a:28:5a:73:24:75:29:83:78:42: 04:3b:b2:cb:90:41:a0:cf:2d:b3:65:29:26:27:6d: f5:d4:08:ed:24:cb:cd:3f:0e:d5:4f:06:d2:ea:31: ff:62:ca:3d:b4:19:0e:48:02:02:4d:1f:3e:7a:18: f8:1f:d0:2b:fb:c5:64:9a:e8:c6:d8:21:27:68:29: 02:1a:1e:9b:8e:ac:95:83:91:2f:33:00:eb:38:76: 04:e3:04:83:57:8b:98:4d:65:12:71:92:eb:f3:cb: cb:d9:7b:0b:01:44:14:63:57:b2:aa:d2:b7:1f:20: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8D:EC:E4:AE:B7:4D:98:44:9A:52:86:20:E1:7B:E6:13:C9:19:63 X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5b:ff:3a:6b:b1:ba:ad:2f:ac:06:7e:56:fc:4c:05:06:41: 7f:fb:b2:ae:4d:5e:1f:17:13:50:c5:dc:4a:6e:59:ab:5a:44: 65:f7:ca:ff:fe:98:c1:42:fc:99:df:6d:15:54:7b:97:10:33: 09:e5:fd:58:33:96:33:ef:4c:dc:f7:3a:6e:ab:3e:2c:c5:78: 46:ed:ec:1e:1a:3e:e5:6d:51:fa:c8:a7:a8:54:af:08:26:88: 0a:0e:be:e4:85:ce:b2:b9:87:f7:96:77:4d:17:11:58:a4:4e: b5:49:72:0e:c7:1d:30:8a:72:db:6b:0d:46:2d:1d:ba:f5:9f: 5c:b1:5e:71:c0:9b:b6:a0:a8:63:40:2a:76:43:6b:73:b5:08: 92:fe:ee:77:a2:07:87:88:28:a7:a2:cc:f1:35:99:4c:dc:f6: 3e:20:e5:ef:6a:00:8c:d6:c4:c0:15:de:1c:d9:e9:1b:09:0a: 4e:10:d5:e1:d7:ba:42:c2:9c:f7:04:e7:c7:44:bc:45:51:eb: ae:de:46:72:35:18:9d:f0:0a:8c:5c:c7:8e:33:d2:46:26:03: 4e:78:17:6c:53:d9:db:c8:f4:82:04:cb:b9:e5:45:58:6d:6f: c4:7b:29:f1:35:a3:67:c4:31:4e:d9:94:1b:2a:b7:6d:e1:c3: 2f:30:63:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMZ7yw9I1yEv0/SkRRrEs4gzTdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNTExMDIxODI2NDhaFw0yNTExMDYwNDE1NDhaMDMxMTAvBgNV BAMTKDQwOERFQ0U0QUVCNzREOTg0NDlBNTI4NjIwRTE3QkU2MTNDOTE5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1I7KdFG+lKiJZiFWVBzoKNwib C+9HyYnkt6d65EBvh8Z6nGurp4tRyrLinvoUz9XkGtRSiPR+Eg52l+eDuF7DIhIJ +cdt9cWfxmuUxGpJHhp8tujTb3jVAQwGybVhFHaXFV9wioAaXkcwebLKLwlgr8CN Plof+TZ+a50T1jHUtFIu9H/WX4ExOIwaiihacyR1KYN4QgQ7ssuQQaDPLbNlKSYn bfXUCO0ky80/DtVPBtLqMf9iyj20GQ5IAgJNHz56GPgf0Cv7xWSa6MbYISdoKQIa HpuOrJWDkS8zAOs4dgTjBINXi5hNZRJxkuvzy8vZewsBRBRjV7Kq0rcfIK9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQI3s5K63TZhEmlKGIOF75hPJGWMwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERb/zprsbqtL6wGflb8TAUGQX/7sq5NXh8X E1DF3EpuWataRGX3yv/+mMFC/JnfbRVUe5cQMwnl/VgzljPvTNz3Om6rPizFeEbt 7B4aPuVtUfrIp6hUrwgmiAoOvuSFzrK5h/eWd00XEVikTrVJcg7HHTCKcttrDUYt Hbr1n1yxXnHAm7agqGNAKnZDa3O1CJL+7neiB4eIKKeizPE1mUzc9j4g5e9qAIzW xMAV3hzZ6RsJCk4Q1eHXukLCnPcE58dEvEVR667eRnI1GJ3wCoxcx44z0kYmA054 F2xT2dvI9IIEy7nlRVhtb8R7KfE1o2fEMU7ZlBsqt23hwy8wY+E= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:35 2025 by rpki-client