$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: TNSGbOTBV/p/VyV2l3lCaNfVoaKscdu4qEbObSA6NSw= Subject key identifier: 51:FE:D8:2E:46:41:7C:ED:F6:DA:E3:45:38:06:13:67:D7:3C:93:3D Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 47C6EDA7A84BCB70D1B1021D41AA2BDB8AC8C767 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05E6 Signing time: Thu 16 Apr 2026 10:40:04 +0000 Manifest this update: Thu 16 Apr 2026 10:35:04 +0000 Manifest next update: Sun 19 Apr 2026 17:19:04 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: r/ZnxC1rRQ9tz6wuyvIU+ac3yQOQEavEiAk3cw+kjPA=) 2: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) 3: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 4: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c6:ed:a7:a8:4b:cb:70:d1:b1:02:1d:41:aa:2b:db:8a:c8:c7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Apr 16 10:35:04 2026 GMT Not After : Apr 19 17:19:04 2026 GMT Subject: CN=51FED82E46417CEDF6DAE34538061367D73C933D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:54:8a:b3:d1:7c:a1:88:47:92:53:29:a4:39: 55:2a:ac:a7:fa:a2:89:da:e9:ee:0d:95:26:5c:e5: 48:cc:56:21:20:0c:1f:4c:f9:30:24:54:6e:7e:2d: 24:34:9f:6e:eb:f6:0d:34:8e:0f:ba:a8:07:f4:55: e2:22:38:16:63:94:3e:bc:05:12:f2:5a:6d:16:57: 1a:8a:9e:00:86:cd:29:4b:0c:da:4d:ee:f8:88:65: 7c:55:b4:1f:3f:8b:c1:be:15:94:7c:4b:a3:20:d7: b2:6a:f7:bf:75:75:1f:0e:69:71:a2:c4:fc:8d:f8: b5:21:62:99:eb:73:9e:be:9d:01:b0:39:d2:f0:7a: 8d:9c:c8:9d:20:34:11:aa:2e:9f:6d:a5:5a:74:2f: 27:59:a7:63:3d:1d:0e:a9:3a:74:b6:b5:3f:7c:57: 5f:f9:80:34:91:d8:68:ba:ff:74:17:01:49:f2:1d: 0c:84:30:b3:9a:a9:50:13:41:80:2c:16:26:39:d3: b2:e4:63:5e:6d:92:48:d5:57:dc:91:e0:4e:5e:09: 76:0e:de:c8:a2:a4:e4:c2:8a:7f:ee:1f:70:9f:b1: 66:da:bd:c6:0e:e8:4a:f8:71:b4:cf:82:ae:02:be: de:88:a4:b3:a3:a5:30:d8:f6:c9:10:c0:26:d5:95: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FE:D8:2E:46:41:7C:ED:F6:DA:E3:45:38:06:13:67:D7:3C:93:3D X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:68:85:6b:c2:24:12:9e:56:3f:29:fc:34:79:25:43:fe:8f: 58:1e:67:c3:c9:d4:0e:9f:03:0f:96:77:d0:78:6d:a7:d4:c6: 1a:29:f3:dc:6a:0d:5b:c4:cc:8b:ad:e4:27:2b:df:5d:a8:90: 1c:25:01:86:c8:47:b0:bc:05:28:84:56:9f:53:5c:31:75:21: 16:ac:34:b8:dd:30:dc:8f:9c:6f:bd:66:0b:3c:93:03:ff:98: 56:51:c9:b5:64:67:e9:b2:d5:66:7a:54:86:8a:e6:e4:df:ef: 6f:7d:e4:32:5e:75:95:e6:52:6a:1b:99:0b:e8:5b:cc:9c:91: 57:e6:b2:19:3d:33:8f:a1:37:bb:5b:2b:7b:d6:14:74:66:ad: 33:ef:95:56:32:5e:98:1e:a5:f8:72:9a:28:c2:21:70:cd:24: c2:75:de:80:90:73:71:3a:58:d2:65:9c:cb:20:54:43:f5:7a: 44:71:63:6a:f0:3a:f2:50:52:08:c5:7a:f9:4e:e1:e1:99:6a: 9a:f5:d3:d8:2a:2a:12:fe:81:af:30:8c:ab:db:80:c1:1e:55: 75:23:1a:0c:6f:d6:3f:1a:07:0b:cc:7e:32:39:1d:b6:2f:d5: be:1e:85:62:4d:03:10:d5:83:a7:0e:e9:be:00:4d:57:6c:cc: ee:9a:ef:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8btp6hLy3DRsQIdQaor24rIx2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNjA0MTYxMDM1MDRaFw0yNjA0MTkxNzE5MDRaMDMxMTAvBgNV BAMTKDUxRkVEODJFNDY0MTdDRURGNkRBRTM0NTM4MDYxMzY3RDczQzkzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRVIqz0XyhiEeSUymkOVUqrKf6 oona6e4NlSZc5UjMViEgDB9M+TAkVG5+LSQ0n27r9g00jg+6qAf0VeIiOBZjlD68 BRLyWm0WVxqKngCGzSlLDNpN7viIZXxVtB8/i8G+FZR8S6Mg17Jq9791dR8OaXGi xPyN+LUhYpnrc56+nQGwOdLweo2cyJ0gNBGqLp9tpVp0LydZp2M9HQ6pOnS2tT98 V1/5gDSR2Gi6/3QXAUnyHQyEMLOaqVATQYAsFiY507LkY15tkkjVV9yR4E5eCXYO 3siipOTCin/uH3CfsWbavcYO6Er4cbTPgq4Cvt6IpLOjpTDY9skQwCbVleQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUf7YLkZBfO322uNFOAYTZ9c8kz0wHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBohWvCJBKeVj8p/DR5JUP+j1geZ8PJ1A6f Aw+Wd9B4bafUxhop89xqDVvEzIut5Ccr312okBwlAYbIR7C8BSiEVp9TXDF1IRas NLjdMNyPnG+9Zgs8kwP/mFZRybVkZ+my1WZ6VIaK5uTf72995DJedZXmUmobmQvo W8yckVfmshk9M4+hN7tbK3vWFHRmrTPvlVYyXpgepfhymijCIXDNJMJ13oCQc3E6 WNJlnMsgVEP1ekRxY2rwOvJQUgjFevlO4eGZapr109gqKhL+ga8wjKvbgMEeVXUj Ggxv1j8aBwvMfjI5HbYv1b4ehWJNAxDVg6cO6b4ATVdszO6a7zY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:27:17 2026 by rpki-client