$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft File: 10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json) Hash identifier: V8BeFrLZnK4ud7ooVmLQX+tlW5nWRYhBaa1m/PYaX8s= Subject key identifier: 4E:81:7D:06:62:91:F2:98:A5:3F:99:2A:22:78:15:B4:08:37:33:0F Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Certificate issuer: /CN=10FC4D9D2403FC433C19BB76131325B776505E51 Certificate serial: 393C6E2EAA5B358CF28A8B1FDF315BA7EB4415C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft Manifest number: 04ED Signing time: Sun 01 Mar 2026 16:30:48 +0000 Manifest this update: Sun 01 Mar 2026 16:25:48 +0000 Manifest next update: Wed 04 Mar 2026 21:34:48 +0000 Files and hashes: 1: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY=) 2: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: PCVo1cgg3kg8vB/kfua0pXgMoRp9gqCKvcpL+80IYlc=) 3: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: vnOWOE8ANRJB3kxmh2kTgRDOD4mP6pnBNqxwGmSsQIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3c:6e:2e:aa:5b:35:8c:f2:8a:8b:1f:df:31:5b:a7:eb:44:15:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Validity Not Before: Mar 1 16:25:48 2026 GMT Not After : Mar 4 21:34:48 2026 GMT Subject: CN=4E817D066291F298A53F992A227815B40837330F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:73:79:d0:ca:a9:5e:e3:13:6f:af:69:cd: b7:16:6d:eb:7c:2b:1a:c0:b1:59:99:b3:79:ac:3e: c1:33:c6:59:4f:fe:79:2e:bd:1f:77:c0:a3:96:b7: 95:3e:67:c6:ff:e3:32:d0:71:c5:d0:39:c6:fa:43: 47:71:ba:c3:56:8c:e3:5e:1b:63:48:3a:b3:3a:96: bf:60:ad:d0:f0:f1:32:fa:86:c4:a9:88:f3:de:81: 9b:e7:bf:cc:04:0a:2b:c7:de:d2:15:92:8f:dc:bf: 4d:7a:e0:8b:ba:ca:05:90:4d:4c:d8:e1:cf:a1:16: 2a:6e:f8:83:be:66:ac:af:64:8b:69:d2:d6:db:47: ea:8b:31:7d:2c:fd:6a:81:4e:51:f0:d1:66:35:31: df:22:43:9e:e8:a0:42:64:7c:b1:dd:97:8f:77:df: 1f:70:cd:a7:93:e8:98:a2:a9:c9:ab:df:02:e7:5f: c4:81:9c:88:9b:99:d8:9f:66:a4:20:80:f4:86:11: f5:74:a5:0a:9f:f0:9f:56:26:ca:67:09:f7:34:6e: 87:bc:bf:79:77:db:de:63:20:ef:13:89:06:60:ef: 17:74:d4:3b:8d:b9:bf:43:d2:47:69:41:2e:94:ee: a1:14:8c:be:06:67:25:ad:fa:e6:ee:c7:72:cf:7d: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:7D:06:62:91:F2:98:A5:3F:99:2A:22:78:15:B4:08:37:33:0F X509v3 Authority Key Identifier: keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:38:d2:3c:20:fa:64:b4:3c:99:ae:bf:e5:b1:f5:95:53:5e: 1f:67:ed:21:e6:26:af:12:6b:11:df:97:5b:00:bc:b2:52:68: 9d:96:07:22:aa:0f:8a:cb:bb:76:bd:58:69:72:98:95:42:d3: 56:43:e9:5a:68:dc:28:87:a9:b6:d8:62:2d:da:84:8b:ec:86: 92:87:33:13:fb:5f:f2:79:fd:4d:86:46:e4:1f:55:c5:5b:7d: 99:e3:33:7b:c2:3c:ed:dd:20:71:32:3c:14:ff:af:b4:f9:88: 36:0e:89:ab:7f:96:0a:be:45:d9:43:91:74:01:4d:71:d8:da: 89:6f:c5:d3:05:f1:ca:a9:e0:52:1d:29:35:1d:8d:ee:f4:0b: f5:b6:73:e4:8d:60:13:8b:a4:51:6a:df:77:c2:fb:c0:8f:f4: 9d:b1:50:21:b3:0b:fa:8c:ed:f0:81:eb:67:ad:31:27:17:d0: 37:60:92:66:bc:4f:5a:32:96:64:39:4e:9c:f1:a1:99:08:17: 3c:69:c2:ee:67:67:e1:ff:86:ea:41:60:ec:b3:4b:c9:30:4b: 83:1d:98:57:89:f0:51:ac:c7:ad:67:5b:fb:67:09:00:61:f4: b0:fc:99:fd:65:44:df:aa:38:cd:82:df:10:52:cd:69:83:50: 89:d4:2c:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTxuLqpbNYzyiosf3zFbp+tEFcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3 NjUwNUU1MTAeFw0yNjAzMDExNjI1NDhaFw0yNjAzMDQyMTM0NDhaMDMxMTAvBgNV BAMTKDRFODE3RDA2NjI5MUYyOThBNTNGOTkyQTIyNzgxNUI0MDgzNzMzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgXN50MqpXuMTb69pzbcWbet8 KxrAsVmZs3msPsEzxllP/nkuvR93wKOWt5U+Z8b/4zLQccXQOcb6Q0dxusNWjONe G2NIOrM6lr9grdDw8TL6hsSpiPPegZvnv8wECivH3tIVko/cv0164Iu6ygWQTUzY 4c+hFipu+IO+ZqyvZItp0tbbR+qLMX0s/WqBTlHw0WY1Md8iQ57ooEJkfLHdl493 3x9wzaeT6Jiiqcmr3wLnX8SBnIibmdifZqQggPSGEfV0pQqf8J9WJspnCfc0boe8 v3l3295jIO8TiQZg7xd01DuNub9D0kdpQS6U7qEUjL4GZyWt+ubux3LPfVyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUToF9BmKR8pilP5kqIngVtAg3Mw8wHwYDVR0j BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0 MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw NUU1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1 Qjc3NjUwNUU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU40jwg+mS0PJmuv+Wx9ZVTXh9n7SHmJq8S axHfl1sAvLJSaJ2WByKqD4rLu3a9WGlymJVC01ZD6Vpo3CiHqbbYYi3ahIvshpKH MxP7X/J5/U2GRuQfVcVbfZnjM3vCPO3dIHEyPBT/r7T5iDYOiat/lgq+RdlDkXQB TXHY2olvxdMF8cqp4FIdKTUdje70C/W2c+SNYBOLpFFq33fC+8CP9J2xUCGzC/qM 7fCB62etMScX0Ddgkma8T1oylmQ5TpzxoZkIFzxpwu5nZ+H/hupBYOyzS8kwS4Md mFeJ8FGsx61nW/tnCQBh9LD8mf1lRN+qOM2C3xBSzWmDUInULOs= -----END CERTIFICATE-----Generated at Mon Mar 2 11:23:49 2026 by rpki-client