$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: R9aA8/PTHoHEnPvC6cqegMWEB9H5isxnmHOb4qaNJHc= Subject key identifier: 84:31:05:54:3C:1D:D8:72:73:47:5C:F3:A9:FA:7F:F4:6A:24:88:46 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 3CE5B8216E5A7741209F2118D8A2FFE8F7FF510F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 0561 Signing time: Sun 01 Mar 2026 09:02:14 +0000 Manifest this update: Sun 01 Mar 2026 08:57:14 +0000 Manifest next update: Wed 04 Mar 2026 14:27:14 +0000 Files and hashes: 1: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: Fv3PzH/PpXCb1xS63tcNe76mWTrdMYYDd+HvPixKLKI=) 2: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=) 3: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 4: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 5: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 6: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: zN2GyvO6V2ZmdgltaXV0bKTi3bhn26wRhsiJfpgQVR4=) 7: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: AM+aiplYUdhH8KU+dJBKvmqgp4vQ5YGIVFo2krKpct4=) 8: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 9: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 10: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=) 11: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 12: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 13: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=) 14: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=) 15: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 16: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 17: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 18: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 19: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 20: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 21: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 22: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 23: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 24: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e5:b8:21:6e:5a:77:41:20:9f:21:18:d8:a2:ff:e8:f7:ff:51:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Mar 1 08:57:14 2026 GMT Not After : Mar 4 14:27:14 2026 GMT Subject: CN=843105543C1DD87273475CF3A9FA7FF46A248846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1d:3c:dd:4d:1d:2c:fb:e0:80:90:98:29:21: 2b:26:53:13:03:42:58:15:08:40:73:ba:ce:ef:2e: db:70:3b:d1:c6:b2:cf:a5:71:4b:24:b9:6a:27:aa: d4:b9:e1:a5:ea:7f:76:22:93:86:67:13:8f:2f:ef: e7:61:67:db:a4:67:4b:e0:4f:b2:dd:4f:f8:3d:e5: a9:fc:c1:6a:16:0d:67:2b:84:4a:f2:54:38:6b:74: 8f:81:d2:86:ba:6b:33:5b:51:6d:67:65:b4:2e:ec: 3e:77:e3:d6:05:99:11:04:20:c9:16:1e:70:67:c9: fb:5e:48:af:ae:a9:74:0b:75:c1:4f:00:26:dd:ef: 8f:bb:1d:1a:a7:dc:f3:24:09:24:88:70:ae:0f:8e: 09:de:f1:81:10:7a:6d:6d:a8:0d:c2:98:4e:47:73: 04:d4:c5:18:d5:f0:c4:a9:fa:8c:aa:80:d6:cf:b6: c5:c5:37:3d:47:82:d9:c7:e0:d1:f2:54:44:b7:89: 53:7f:b2:e6:ee:91:84:90:78:7f:64:b8:c4:d4:1d: de:11:1b:97:8b:aa:03:02:a5:57:d0:98:c8:47:76: ea:45:57:4a:49:7e:1b:9c:a4:27:c4:bd:7d:88:57: 00:11:ea:e4:23:86:91:8c:e1:40:a3:dc:4b:2b:42: 02:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:31:05:54:3C:1D:D8:72:73:47:5C:F3:A9:FA:7F:F4:6A:24:88:46 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:4e:45:e0:e6:4d:f2:f6:28:8e:b6:1c:e0:e1:48:ce:c7: 0a:55:15:a9:f0:0a:c9:ea:cd:de:37:70:fe:a9:be:08:e6:cb: 61:c4:9c:f3:3e:21:95:ad:4f:2f:13:7d:db:89:e0:87:88:45: 65:14:14:b2:f5:f4:53:56:ba:78:1f:98:bf:4f:2b:fc:46:9f: 31:15:83:fa:b2:ac:0f:b3:ef:13:a5:c8:14:cc:f3:c4:40:35: 15:65:dd:c2:34:60:a1:9f:e1:a5:7f:46:ad:e7:58:a3:14:ca: 2e:40:19:09:69:b4:66:82:ca:4a:73:45:3d:51:cf:3a:16:63: f7:51:88:c4:59:e3:9a:da:b7:44:8e:61:d4:bb:dc:13:ac:d4: ee:5f:cb:1a:84:61:67:67:62:ea:7e:26:cf:bd:2f:3d:86:9b: d9:d6:4c:59:77:a1:77:0c:4d:fe:00:da:6e:e1:28:84:bb:ce: 5e:0e:79:4f:bb:32:75:7b:fe:48:71:25:47:06:be:43:9b:c1: e5:69:46:da:ff:a3:93:39:07:9a:e9:17:94:1a:55:4c:50:15: df:a6:22:a6:e0:20:09:63:80:8a:b7:e3:a6:ac:4a:62:a7:29: e0:fd:ab:3e:b2:10:5c:a6:cc:54:94:ca:2b:fe:30:48:2d:23: 2a:2c:b7:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOW4IW5ad0EgnyEY2KL/6Pf/UQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNjAzMDEwODU3MTRaFw0yNjAzMDQxNDI3MTRaMDMxMTAvBgNV BAMTKDg0MzEwNTU0M0MxREQ4NzI3MzQ3NUNGM0E5RkE3RkY0NkEyNDg4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHTzdTR0s++CAkJgpISsmUxMD QlgVCEBzus7vLttwO9HGss+lcUskuWonqtS54aXqf3Yik4ZnE48v7+dhZ9ukZ0vg T7LdT/g95an8wWoWDWcrhEryVDhrdI+B0oa6azNbUW1nZbQu7D5349YFmREEIMkW HnBnyfteSK+uqXQLdcFPACbd74+7HRqn3PMkCSSIcK4Pjgne8YEQem1tqA3CmE5H cwTUxRjV8MSp+oyqgNbPtsXFNz1HgtnH4NHyVES3iVN/subukYSQeH9kuMTUHd4R G5eLqgMCpVfQmMhHdupFV0pJfhucpCfEvX2IVwAR6uQjhpGM4UCj3EsrQgKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDEFVDwd2HJzR1zzqfp/9GokiEYwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9STkXg5k3y9iiOthzg4UjOxwpVFanwCsnq zd43cP6pvgjmy2HEnPM+IZWtTy8TfduJ4IeIRWUUFLL19FNWungfmL9PK/xGnzEV g/qyrA+z7xOlyBTM88RANRVl3cI0YKGf4aV/Rq3nWKMUyi5AGQlptGaCykpzRT1R zzoWY/dRiMRZ45rat0SOYdS73BOs1O5fyxqEYWdnYup+Js+9Lz2Gm9nWTFl3oXcM Tf4A2m7hKIS7zl4OeU+7MnV7/khxJUcGvkObweVpRtr/o5M5B5rpF5QaVUxQFd+m IqbgIAljgIq346asSmKnKeD9qz6yEFymzFSUyiv+MEgtIyost4M= -----END CERTIFICATE-----Generated at Mon Mar 2 08:37:59 2026 by rpki-client