$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: bOiMe1h1gVBxU7AGN+3DKNzeHJNb6pH2y4dvCqlt3/c= Subject key identifier: DD:76:A5:17:CA:9F:B7:A3:6F:13:C2:EF:37:1F:E7:BF:2D:6A:93:54 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 42DC65DA99CED52AA95CD127132F1DA1E0D493BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 0574 Signing time: Fri 17 Apr 2026 09:51:45 +0000 Manifest this update: Fri 17 Apr 2026 09:46:45 +0000 Manifest next update: Mon 20 Apr 2026 10:43:45 +0000 Files and hashes: 1: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: YXWscdbOPG7qvw2mmsnb+X+s9hfMQV8vOG0qP8N0uSc=) 2: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=) 3: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=) 4: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: 5Vmyhi+iY5DhRoiiQrS6TyMQ8NPyeraikbTp9hVgo/c=) 5: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=) 6: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: 8+EEy3ZTdoqMF3BoDCPowshhtIzBWGMgS2V31e+I5jc=) 7: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: Hyks02vm+IrJfJlkt2pLKSjbWcHdF+X+d5q3JiqywOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:dc:65:da:99:ce:d5:2a:a9:5c:d1:27:13:2f:1d:a1:e0:d4:93:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Apr 17 09:46:45 2026 GMT Not After : Apr 20 10:43:45 2026 GMT Subject: CN=DD76A517CA9FB7A36F13C2EF371FE7BF2D6A9354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:ff:80:8e:6d:c8:32:8b:75:af:a5:f0:f6: 17:a7:34:a8:9a:7d:2f:27:7d:8a:19:4a:81:f8:21: fc:cd:89:21:7f:6b:ad:85:0e:50:04:03:4a:e6:7d: 54:23:21:85:89:c7:cb:75:82:24:c4:5c:84:51:3e: ee:c4:b8:53:15:df:76:72:ca:eb:3c:0a:b7:c5:b8: d3:c7:db:53:94:89:0e:0f:f6:e9:0d:38:40:bc:68: a1:b1:12:b2:11:fa:2a:59:b3:97:5a:5c:c0:03:a9: 13:90:18:ff:60:62:3f:49:4e:52:06:4e:fa:25:19: 56:4f:90:b6:b8:cf:f5:f7:cf:f0:4e:e8:b7:48:e7: 9d:a0:f1:88:7c:c8:b6:b5:17:c1:97:20:e3:9d:3b: ba:10:a7:3e:00:62:16:d3:84:db:92:ff:33:0d:50: 4c:d6:b1:fb:ee:56:35:31:50:b0:e8:e3:c6:81:32: 20:b1:42:f8:c7:2b:68:b7:70:3d:9b:74:cd:9b:49: 26:b8:9b:c5:05:77:84:18:f4:64:9e:64:72:01:68: 26:3b:be:e1:c8:23:ad:92:47:22:b4:a7:ba:45:68: c1:14:5f:be:40:18:b1:e2:db:19:e2:2a:2c:d5:95: 89:e8:76:6c:cc:0d:28:d6:c0:0c:40:93:02:d6:74: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:76:A5:17:CA:9F:B7:A3:6F:13:C2:EF:37:1F:E7:BF:2D:6A:93:54 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a3:06:f7:d9:41:6e:5c:66:b2:8e:f7:9e:a9:bf:f4:f1:78: 7a:bf:cd:ec:fd:01:5b:a6:9f:f8:0a:fa:64:e9:cc:68:a4:41: 6f:58:a8:83:1d:ba:62:0e:00:8c:80:97:ca:f6:d9:a6:5c:7b: 36:5b:54:5a:03:01:8f:42:b7:88:3a:0a:fd:26:97:dd:32:fb: b9:cb:e9:13:b1:43:6d:77:3f:16:66:25:b0:f1:c0:86:b1:10: 8e:95:bd:1f:f0:33:dd:91:90:e6:0d:f4:3c:3b:a5:7d:c3:6a: 8e:b1:f0:e1:20:b4:58:57:1f:93:b3:6e:eb:d7:91:9f:45:50: 13:3c:ef:3c:a2:6f:3c:fc:7c:d2:48:77:a7:c8:87:14:9d:8a: d5:d1:68:15:c6:ba:5c:18:2b:bf:1b:74:88:47:29:ca:16:12: 90:27:fd:8a:42:25:cd:73:58:61:62:d2:c2:c4:5f:7c:69:f0: 03:11:13:77:4b:da:57:ce:22:6f:ea:77:2c:70:b4:3a:7f:aa: 73:a6:a8:6d:64:9c:b7:20:e5:b4:4d:c0:62:d6:2e:02:f5:d4: 45:6c:6a:94:d1:48:dc:44:db:7c:02:60:32:aa:cb:c4:db:81: 4f:c7:ba:d6:d3:53:02:70:53:7e:07:34:30:fc:2a:9b:87:29: 78:b4:d4:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtxl2pnO1SqpXNEnEy8doeDUk7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNjA0MTcwOTQ2NDVaFw0yNjA0MjAxMDQzNDVaMDMxMTAvBgNV BAMTKERENzZBNTE3Q0E5RkI3QTM2RjEzQzJFRjM3MUZFN0JGMkQ2QTkzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1o/+Ajm3IMot1r6Xw9henNKia fS8nfYoZSoH4IfzNiSF/a62FDlAEA0rmfVQjIYWJx8t1giTEXIRRPu7EuFMV33Zy yus8CrfFuNPH21OUiQ4P9ukNOEC8aKGxErIR+ipZs5daXMADqROQGP9gYj9JTlIG TvolGVZPkLa4z/X3z/BO6LdI552g8Yh8yLa1F8GXIOOdO7oQpz4AYhbThNuS/zMN UEzWsfvuVjUxULDo48aBMiCxQvjHK2i3cD2bdM2bSSa4m8UFd4QY9GSeZHIBaCY7 vuHII62SRyK0p7pFaMEUX75AGLHi2xniKizVlYnodmzMDSjWwAxAkwLWdG2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XalF8qft6NvE8LvNx/nvy1qk1QwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGijBvfZQW5cZrKO956pv/TxeHq/zez9AVum n/gK+mTpzGikQW9YqIMdumIOAIyAl8r22aZcezZbVFoDAY9Ct4g6Cv0ml90y+7nL 6ROxQ213PxZmJbDxwIaxEI6VvR/wM92RkOYN9Dw7pX3Dao6x8OEgtFhXH5OzbuvX kZ9FUBM87zyibzz8fNJId6fIhxSditXRaBXGulwYK78bdIhHKcoWEpAn/YpCJc1z WGFi0sLEX3xp8AMRE3dL2lfOIm/qdyxwtDp/qnOmqG1knLcg5bRNwGLWLgL11EVs apTRSNxE23wCYDKqy8TbgU/HutbTUwJwU34HNDD8KpuHKXi01Ec= -----END CERTIFICATE-----Generated at Fri Apr 17 22:29:17 2026 by rpki-client