$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: FMPkxlTiMUg5km9wJ1I1pfZ0xzoeNdhlqXajmbL5j7s= Subject key identifier: CA:98:16:93:9A:4B:E5:BA:11:A7:FA:CD:C4:FD:47:05:6B:16:D3:1D Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 058EB7D6EF355704578F245E4CA1CF1C2A596CE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05D2 Signing time: Sun 01 Mar 2026 10:00:04 +0000 Manifest this update: Sun 01 Mar 2026 09:55:04 +0000 Manifest next update: Wed 04 Mar 2026 20:35:04 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: E3z/oTV+vdrqrQKj4nF+e9fwMke+/p3lVMfsqsUN6Us=) 2: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 3: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) 4: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8e:b7:d6:ef:35:57:04:57:8f:24:5e:4c:a1:cf:1c:2a:59:6c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Mar 1 09:55:04 2026 GMT Not After : Mar 4 20:35:04 2026 GMT Subject: CN=CA9816939A4BE5BA11A7FACDC4FD47056B16D31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:b5:6c:2f:eb:eb:45:01:2b:73:47:73:0a: 2f:5f:f7:d3:22:4f:a5:ec:a8:e7:7d:ca:33:7d:e8: 1f:20:23:f9:5c:26:46:67:fb:bd:dc:20:7b:e9:51: 54:f7:32:46:bd:f3:83:7a:48:26:56:b5:9d:8b:00: 0f:d6:85:db:02:3d:da:d4:9c:5e:8e:a9:ed:1c:c7: ee:d2:02:70:14:fa:68:6c:9d:38:3f:fc:3d:0d:f8: 90:b9:83:cf:e1:cd:a0:b8:f3:83:c4:51:67:48:fd: 3a:5a:86:e3:64:cc:2a:ed:68:92:a0:28:47:f3:5a: 86:4f:72:9c:bd:0d:a3:c9:ed:76:ff:89:ab:e6:5a: 8d:76:4d:a4:1a:c6:7e:07:c8:e9:2f:b8:b3:3b:65: a6:0e:f0:0b:ce:3e:a1:47:16:de:aa:f0:b3:0c:5a: d1:06:d6:25:47:80:60:f1:42:91:7c:e0:86:2a:81: 61:cb:2c:2a:89:4c:5a:5a:91:59:b8:6f:2e:98:c9: 8f:19:87:53:b3:78:51:8e:30:b3:27:ae:15:4f:2f: 32:a0:d6:00:ee:09:c5:88:89:17:93:67:a0:a5:d0: ba:80:05:86:74:81:bf:79:9b:5d:13:88:26:7d:02: 05:35:de:ee:ca:da:c6:9b:24:8b:a0:18:52:87:f9: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:98:16:93:9A:4B:E5:BA:11:A7:FA:CD:C4:FD:47:05:6B:16:D3:1D X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:43:da:c9:fe:dd:66:08:7e:c1:42:27:25:eb:36:85:5c:1c: 78:38:cc:cb:9e:43:dc:8c:69:9d:38:54:a7:c2:2a:5f:d6:6a: 09:53:3c:89:2e:d3:09:a1:41:a1:c7:75:9b:13:69:5b:54:1a: d2:d9:13:22:bb:39:1b:59:7a:72:2b:d9:48:39:a4:87:3a:73: 52:df:3a:dd:3c:a4:97:fe:30:3b:2c:1f:62:32:87:fd:2e:1f: 51:d0:b8:16:a7:21:79:34:a2:41:07:a7:ba:b6:5f:5e:74:95: a7:6b:58:6d:a2:c2:7a:cb:76:23:76:94:11:14:e1:74:e6:cb: 3a:b1:14:a9:f8:a4:04:e4:05:46:77:43:5c:60:a3:6e:e5:76: 0d:e7:66:71:9a:44:e9:bd:0a:f9:bb:e2:b1:9e:df:96:34:e2: 03:ac:54:b5:58:1d:f0:5b:ee:c0:5d:a8:07:12:63:0c:ed:22: c8:f6:f3:36:b6:bf:e5:40:a9:1f:6e:40:e1:54:5a:ec:b5:56: 4d:8b:cf:9d:34:e6:fc:e0:52:99:6c:ce:10:62:01:f7:fa:44: 41:b3:82:37:78:81:b6:a3:b7:57:9a:7f:bb:26:33:2e:82:6a: 1f:e9:08:8b:fa:9f:f9:6e:9f:15:e3:b5:08:2a:9e:b0:4c:37: 39:06:cc:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBY631u81VwRXjyReTKHPHCpZbOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNjAzMDEwOTU1MDRaFw0yNjAzMDQyMDM1MDRaMDMxMTAvBgNV BAMTKENBOTgxNjkzOUE0QkU1QkExMUE3RkFDREM0RkQ0NzA1NkIxNkQzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjbVsL+vrRQErc0dzCi9f99Mi T6XsqOd9yjN96B8gI/lcJkZn+73cIHvpUVT3Mka984N6SCZWtZ2LAA/WhdsCPdrU nF6Oqe0cx+7SAnAU+mhsnTg//D0N+JC5g8/hzaC484PEUWdI/TpahuNkzCrtaJKg KEfzWoZPcpy9DaPJ7Xb/iavmWo12TaQaxn4HyOkvuLM7ZaYO8AvOPqFHFt6q8LMM WtEG1iVHgGDxQpF84IYqgWHLLCqJTFpakVm4by6YyY8Zh1OzeFGOMLMnrhVPLzKg 1gDuCcWIiReTZ6Cl0LqABYZ0gb95m10TiCZ9AgU13u7K2sabJIugGFKH+cqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypgWk5pL5boRp/rNxP1HBWsW0x0wHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJD2sn+3WYIfsFCJyXrNoVcHHg4zMueQ9yM aZ04VKfCKl/WaglTPIku0wmhQaHHdZsTaVtUGtLZEyK7ORtZenIr2Ug5pIc6c1Lf Ot08pJf+MDssH2Iyh/0uH1HQuBanIXk0okEHp7q2X150ladrWG2iwnrLdiN2lBEU 4XTmyzqxFKn4pATkBUZ3Q1xgo27ldg3nZnGaROm9Cvm74rGe35Y04gOsVLVYHfBb 7sBdqAcSYwztIsj28za2v+VAqR9uQOFUWuy1Vk2Lz5005vzgUplszhBiAff6REGz gjd4gbajt1eaf7smMy6Cah/pCIv6n/lunxXjtQgqnrBMNzkGzKc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:43:22 2026 by rpki-client