$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: rNrZcsqReVR6COEOU04FtqoOSUINjNMbjc7jK1G5tIY= Subject key identifier: B2:F7:F2:74:E5:F2:13:FC:EB:7D:0E:37:2F:2A:89:66:3F:E4:93:1F Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 1E1857126360756ADA553BC590535BD6C66D6CD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 0339 Signing time: Mon 02 Mar 2026 05:10:03 +0000 Manifest this update: Mon 02 Mar 2026 05:05:03 +0000 Manifest next update: Thu 05 Mar 2026 13:06:03 +0000 Files and hashes: 1: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: prBXObpysCqGtxbDliCBK/MIbB+acp25T2+tf6Q8BxU=) 2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:18:57:12:63:60:75:6a:da:55:3b:c5:90:53:5b:d6:c6:6d:6c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Mar 2 05:05:03 2026 GMT Not After : Mar 5 13:06:03 2026 GMT Subject: CN=B2F7F274E5F213FCEB7D0E372F2A89663FE4931F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:43:cd:09:f7:41:8f:95:30:40:99:6d:8d: 5d:5f:46:c0:c2:15:41:3c:85:a5:65:49:e9:f4:76: 4a:d0:89:d1:24:cd:91:aa:ee:63:e6:64:97:fc:0f: af:ed:11:2c:f7:8b:48:1f:31:aa:cb:64:7c:00:dd: 53:8d:1f:8b:cc:9f:b1:66:4f:0b:02:65:45:8c:af: b3:18:d8:0f:5c:e0:df:d9:10:f0:f0:26:47:a6:71: 9c:96:88:66:ca:cd:50:43:27:04:46:76:8a:eb:56: 7c:5b:bf:41:74:58:64:e4:97:de:8d:88:c9:d4:56: ea:d3:63:d2:49:ac:2e:cf:e6:13:b8:92:df:68:75: de:a5:dd:74:6e:dd:43:45:fc:e9:16:c6:23:ad:05: 80:ff:2c:7e:92:49:47:7a:ba:c3:ee:86:73:ac:da: a6:23:e6:9c:79:ba:29:59:3f:d8:d2:76:f5:2a:33: e3:8b:9c:36:be:51:db:99:7e:7f:85:c9:5d:7e:f6: f5:e5:f2:ed:ff:72:8d:fc:f3:f6:c4:d8:bc:27:7a: 59:52:80:39:83:23:7c:53:27:0b:1f:1c:8d:b9:08: be:cb:87:7c:93:41:c2:f5:5a:cc:47:4e:26:4f:a0: f1:79:cc:a4:92:b5:ac:97:09:ff:ce:ed:bb:6b:1f: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F7:F2:74:E5:F2:13:FC:EB:7D:0E:37:2F:2A:89:66:3F:E4:93:1F X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:bf:3d:8f:6f:80:7d:a7:2a:c9:94:40:30:3d:02:ff:75:4d: 64:6b:34:aa:c1:37:ee:19:33:ea:1d:04:8a:c2:d9:4f:d9:c2: 7a:c4:0c:20:0a:7d:de:55:75:a6:5d:6a:a8:f0:f7:31:d4:68: ee:48:5d:9f:9b:df:b7:e5:dc:ab:2a:8a:60:e6:4a:17:8c:f9: 97:62:61:86:67:c7:bd:75:c0:58:05:a5:58:73:9b:0c:67:51: 74:0b:05:28:69:f1:cf:dd:7e:ab:14:82:88:8b:ff:35:43:01: 36:c0:a0:e8:a2:86:fd:00:ea:fd:8c:b4:8e:20:38:f1:6f:56: a4:8d:ca:99:4f:d1:1a:1b:24:7b:cc:54:fb:b7:0e:72:64:97: f9:fd:17:5d:46:a9:27:54:9b:3b:95:a8:bc:76:d5:e6:6c:94: fa:a1:fe:27:ea:9c:cc:73:02:be:9f:41:4e:cb:ee:0b:d0:4f: 01:be:8b:63:f7:16:db:73:35:fd:44:b5:e7:8e:da:08:f0:8f: 88:5f:a7:1c:25:46:5c:5d:8d:f7:d9:b7:5f:48:1a:0e:80:b1: a0:22:b0:24:f0:00:67:3a:f8:20:b0:94:5f:7c:d1:a8:91:12: 21:f1:69:4b:86:bd:26:97:50:81:c7:06:8b:2b:1c:a1:a6:fe: db:8c:11:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhhXEmNgdWraVTvFkFNb1sZtbNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNjAzMDIwNTA1MDNaFw0yNjAzMDUxMzA2MDNaMDMxMTAvBgNV BAMTKEIyRjdGMjc0RTVGMjEzRkNFQjdEMEUzNzJGMkE4OTY2M0ZFNDkzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU0PNCfdBj5UwQJltjV1fRsDC FUE8haVlSen0dkrQidEkzZGq7mPmZJf8D6/tESz3i0gfMarLZHwA3VONH4vMn7Fm TwsCZUWMr7MY2A9c4N/ZEPDwJkemcZyWiGbKzVBDJwRGdorrVnxbv0F0WGTkl96N iMnUVurTY9JJrC7P5hO4kt9odd6l3XRu3UNF/OkWxiOtBYD/LH6SSUd6usPuhnOs 2qYj5px5uilZP9jSdvUqM+OLnDa+UduZfn+FyV1+9vXl8u3/co388/bE2LwnellS gDmDI3xTJwsfHI25CL7Lh3yTQcL1WsxHTiZPoPF5zKSStayXCf/O7btrHxudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvfydOXyE/zrfQ43LyqJZj/kkx8wHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACW/PY9vgH2nKsmUQDA9Av91TWRrNKrBN+4Z M+odBIrC2U/ZwnrEDCAKfd5VdaZdaqjw9zHUaO5IXZ+b37fl3KsqimDmSheM+Zdi YYZnx711wFgFpVhzmwxnUXQLBShp8c/dfqsUgoiL/zVDATbAoOiihv0A6v2MtI4g OPFvVqSNyplP0RobJHvMVPu3DnJkl/n9F11GqSdUmzuVqLx21eZslPqh/ifqnMxz Ar6fQU7L7gvQTwG+i2P3FttzNf1EteeO2gjwj4hfpxwlRlxdjffZt19IGg6AsaAi sCTwAGc6+CCwlF980aiREiHxaUuGvSaXUIHHBosrHKGm/tuMEaA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:59 2026 by rpki-client