$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: 0RDYwjyMXfEiOe0t7W3zyHdg25ZaLBtat6lrN+RJrn4= Subject key identifier: E3:16:DE:D2:90:96:AC:4D:39:10:CC:07:24:7A:B4:77:26:8D:44:97 Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 2CD6F9AA23D0E7CB3670DCAC19037AB0E395EB5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: E0 Signing time: Sun 01 Mar 2026 05:32:56 +0000 Manifest this update: Sun 01 Mar 2026 05:27:56 +0000 Manifest next update: Wed 04 Mar 2026 15:23:56 +0000 Files and hashes: 1: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: fusl3NEovGyXG2z2795cjBOU5ox5FmCcGsOCt4fOD70=) 2: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: lR/hW+eaZsPiXrhVudMo+pOinjFXG0anTiMBOASqmGk=) 3: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: HSGQJXythRbZW0WejIr3eu8cpvINsUXbBgpQ3Hdpzbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d6:f9:aa:23:d0:e7:cb:36:70:dc:ac:19:03:7a:b0:e3:95:eb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Mar 1 05:27:56 2026 GMT Not After : Mar 4 15:23:56 2026 GMT Subject: CN=E316DED29096AC4D3910CC07247AB477268D4497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:54:4f:e7:0e:dc:d7:13:6f:32:d4:af:c7: c3:3c:e9:01:9e:80:0c:52:6a:f2:55:38:3e:c2:fd: 1e:fd:56:a8:ee:6a:c4:79:32:1d:dd:1e:ed:88:d6: 41:e6:db:34:28:db:ff:15:9e:c9:fb:5a:27:fe:49: ec:4c:57:dc:8d:a1:9e:f4:47:c9:df:45:7c:aa:7a: f2:f9:07:49:db:b0:e5:d3:67:96:b0:45:a5:4a:90: c0:51:73:f1:a2:db:ea:ed:ef:04:8b:18:f0:9a:71: 43:15:69:b5:55:ba:64:ad:18:21:f6:7e:bd:4a:bd: a1:ae:c9:84:bf:71:60:05:81:85:a5:38:01:39:a6: d2:44:fa:7f:fb:39:1c:6a:65:c6:3b:b6:37:b1:bf: 36:fa:0b:58:e9:44:40:6f:12:6c:26:04:4e:8e:af: 65:70:af:10:14:97:3f:dc:e9:c1:b4:6a:c9:4a:36: 54:6a:97:50:a7:52:7a:58:d0:43:65:bf:70:7a:e7: 15:6c:23:f0:26:fc:61:f0:68:13:be:e4:44:fc:b9: 18:ef:73:cc:99:60:d7:fa:07:73:94:17:54:56:cf: a6:6c:63:6c:d8:0d:b3:a1:b3:5e:c9:dc:e8:53:8d: 4f:d9:e8:b4:38:dc:8c:1e:ee:27:82:0d:d6:92:f3: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:16:DE:D2:90:96:AC:4D:39:10:CC:07:24:7A:B4:77:26:8D:44:97 X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6e:36:5d:b0:93:be:6e:97:58:f4:d7:d4:48:b6:db:81:ef: 0c:7a:8f:14:c5:57:98:88:f0:15:60:f3:22:18:83:8b:85:f7: ae:ac:11:46:2d:a6:9c:41:2d:31:50:76:5c:cd:a5:6d:f6:c8: a3:d2:86:8a:a5:94:13:df:c7:b5:63:b2:c4:0e:ba:04:51:93: 59:6b:a4:da:9e:60:6d:77:c6:f6:60:6f:ac:01:d7:05:b8:78: c5:55:4f:89:d0:47:f8:2f:f0:b8:01:ce:1b:67:9e:fe:c8:f9: 7d:3c:14:37:07:6a:e1:e5:5a:e3:fe:48:93:d2:99:91:4b:1e: 4d:2c:8e:97:2f:fa:33:29:bf:0a:7f:d7:ba:0b:5e:5b:d7:99: ed:36:b9:28:0e:f1:6a:ac:29:8b:46:3c:4c:3b:8a:94:1f:34: 12:31:d6:00:51:f9:b1:9f:af:1e:13:18:c2:04:cf:45:35:fb: fb:19:15:91:0d:6a:12:73:09:00:0e:39:e0:a2:86:e3:f0:af: c8:1d:1b:a3:19:cc:75:22:fa:47:7a:4b:9f:53:95:91:59:e4: a1:bb:41:28:0c:55:88:14:a2:5f:c3:f1:d2:31:45:94:af:13: 50:dc:2d:01:5e:d9:22:fb:cf:e5:26:7d:85:d7:c4:55:6f:0c: 15:78:35:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNb5qiPQ58s2cNysGQN6sOOV618wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNjAzMDEwNTI3NTZaFw0yNjAzMDQxNTIzNTZaMDMxMTAvBgNV BAMTKEUzMTZERUQyOTA5NkFDNEQzOTEwQ0MwNzI0N0FCNDc3MjY4RDQ0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG61RP5w7c1xNvMtSvx8M86QGe gAxSavJVOD7C/R79VqjuasR5Mh3dHu2I1kHm2zQo2/8Vnsn7Wif+SexMV9yNoZ70 R8nfRXyqevL5B0nbsOXTZ5awRaVKkMBRc/Gi2+rt7wSLGPCacUMVabVVumStGCH2 fr1KvaGuyYS/cWAFgYWlOAE5ptJE+n/7ORxqZcY7tjexvzb6C1jpREBvEmwmBE6O r2VwrxAUlz/c6cG0aslKNlRql1CnUnpY0ENlv3B65xVsI/Am/GHwaBO+5ET8uRjv c8yZYNf6B3OUF1RWz6ZsY2zYDbOhs17J3OhTjU/Z6LQ43Iwe7ieCDdaS87UZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4xbe0pCWrE05EMwHJHq0dyaNRJcwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtuNl2wk75ul1j019RIttuB7wx6jxTFV5iI 8BVg8yIYg4uF966sEUYtppxBLTFQdlzNpW32yKPShoqllBPfx7VjssQOugRRk1lr pNqeYG13xvZgb6wB1wW4eMVVT4nQR/gv8LgBzhtnnv7I+X08FDcHauHlWuP+SJPS mZFLHk0sjpcv+jMpvwp/17oLXlvXme02uSgO8WqsKYtGPEw7ipQfNBIx1gBR+bGf rx4TGMIEz0U1+/sZFZENahJzCQAOOeCihuPwr8gdG6MZzHUi+kd6S59TlZFZ5KG7 QSgMVYgUol/D8dIxRZSvE1DcLQFe2SL7z+UmfYXXxFVvDBV4NcE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:37 2026 by rpki-client