$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: uDylXMVPtA2cI3aXYwRsJMam3rwA8WYeQRmet7w+YS0= Subject key identifier: 55:E4:78:72:25:DB:1A:B6:7D:26:55:54:91:4B:11:03:71:7F:81:3C Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 16E41E278962CF4D6DCA4545D069A941C26051BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: F5 Signing time: Fri 17 Apr 2026 09:21:57 +0000 Manifest this update: Fri 17 Apr 2026 09:16:57 +0000 Manifest next update: Mon 20 Apr 2026 19:57:57 +0000 Files and hashes: 1: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: 6MHgqL5RqMrvQ7PbfRS0ylIkeV+Xjb1GRz07SLOWdF0=) 2: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: lR/hW+eaZsPiXrhVudMo+pOinjFXG0anTiMBOASqmGk=) 3: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: HSGQJXythRbZW0WejIr3eu8cpvINsUXbBgpQ3Hdpzbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e4:1e:27:89:62:cf:4d:6d:ca:45:45:d0:69:a9:41:c2:60:51:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Apr 17 09:16:57 2026 GMT Not After : Apr 20 19:57:57 2026 GMT Subject: CN=55E4787225DB1AB67D265554914B1103717F813C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:80:b0:4b:9f:79:0b:52:ca:9e:07:e0:6c: d3:c4:82:f0:c7:28:c1:23:00:10:5a:dd:bd:08:e2: 2c:18:12:bd:ee:0d:27:84:7f:e6:4c:57:fd:b5:44: c8:c4:f6:2c:47:d0:ce:18:8e:36:98:e9:f1:89:20: 4d:ee:5e:60:50:74:c1:c6:7d:13:07:8a:77:4d:82: 26:19:15:99:cc:2e:9f:33:05:99:7e:81:8d:66:41: 5a:4e:89:70:37:9e:93:f8:2d:98:ff:d8:60:4d:bd: f3:e0:1d:79:2a:17:62:e0:bc:d5:f2:c9:a5:38:97: a5:2a:1e:05:09:ad:55:1a:c0:96:4d:79:cd:62:61: 5f:65:ad:22:1c:a2:34:03:91:c5:a8:6d:56:47:23: 2d:93:42:05:8f:fa:6f:1a:eb:07:8a:5f:d0:70:8b: 0c:e6:a7:47:8f:42:18:a1:97:ca:1f:4a:4e:2a:4b: 02:6b:7f:d9:08:8e:ba:12:6e:0a:f3:c9:e5:d8:13: 6e:37:89:97:c5:a9:02:b8:9d:97:72:93:7a:41:43: e6:8a:3b:ca:02:4b:94:b2:01:66:ca:49:ed:7c:85: a4:87:52:95:ce:71:87:e8:97:9d:5c:be:62:4b:d1: da:06:72:6e:84:5c:d4:f8:e0:ef:75:1e:24:04:a7: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E4:78:72:25:DB:1A:B6:7D:26:55:54:91:4B:11:03:71:7F:81:3C X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1e:d2:f4:67:09:64:76:70:64:f2:4c:5d:55:cf:60:3f:dc: e8:fa:fa:7d:32:6c:6f:65:27:c7:14:6f:4e:ed:a7:71:2e:e9: a5:56:05:e1:30:8e:4b:38:21:88:39:7c:aa:57:82:47:4f:a0: 92:16:d0:b8:bb:83:7c:1b:dd:02:bd:06:48:a9:da:21:f8:12: cb:2f:61:2b:7b:fb:16:d2:8b:85:67:df:61:8c:0a:c1:22:ab: ba:94:68:4b:23:18:51:48:3c:3d:25:36:97:a6:41:e3:98:91: c2:12:b5:a1:22:a6:02:bc:f6:a2:25:57:3b:b1:34:fc:ec:af: 0f:6a:90:7a:26:88:c2:78:ab:9d:f5:64:68:0c:e4:79:6d:4f: a6:4b:b1:c3:1a:aa:26:93:27:5d:f0:1b:78:3f:c0:51:c2:27: 2e:76:6c:58:e3:61:93:74:ba:6b:e7:f5:66:47:92:32:00:0a: c0:d4:80:cb:7a:6c:a1:0c:81:1c:90:98:03:46:76:d2:f1:60: c3:76:05:d9:88:f0:3d:2f:49:44:ca:bb:2a:db:9a:b7:59:37: 6b:e0:72:6e:00:66:7c:f7:75:e2:7f:aa:ed:57:6b:1a:7e:dc: e6:d9:4a:74:b3:d1:86:9c:23:81:8d:93:3c:10:93:0b:db:2e: e8:a9:5a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuQeJ4liz01tykVF0GmpQcJgUb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNjA0MTcwOTE2NTdaFw0yNjA0MjAxOTU3NTdaMDMxMTAvBgNV BAMTKDU1RTQ3ODcyMjVEQjFBQjY3RDI2NTU1NDkxNEIxMTAzNzE3RjgxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozYCwS595C1LKngfgbNPEgvDH KMEjABBa3b0I4iwYEr3uDSeEf+ZMV/21RMjE9ixH0M4YjjaY6fGJIE3uXmBQdMHG fRMHindNgiYZFZnMLp8zBZl+gY1mQVpOiXA3npP4LZj/2GBNvfPgHXkqF2LgvNXy yaU4l6UqHgUJrVUawJZNec1iYV9lrSIcojQDkcWobVZHIy2TQgWP+m8a6weKX9Bw iwzmp0ePQhihl8ofSk4qSwJrf9kIjroSbgrzyeXYE243iZfFqQK4nZdyk3pBQ+aK O8oCS5SyAWbKSe18haSHUpXOcYfol51cvmJL0doGcm6EXNT44O91HiQEpzJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVeR4ciXbGrZ9JlVUkUsRA3F/gTwwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwe0vRnCWR2cGTyTF1Vz2A/3Oj6+n0ybG9l J8cUb07tp3Eu6aVWBeEwjks4IYg5fKpXgkdPoJIW0Li7g3wb3QK9Bkip2iH4Essv YSt7+xbSi4Vn32GMCsEiq7qUaEsjGFFIPD0lNpemQeOYkcIStaEipgK89qIlVzux NPzsrw9qkHomiMJ4q531ZGgM5HltT6ZLscMaqiaTJ13wG3g/wFHCJy52bFjjYZN0 umvn9WZHkjIACsDUgMt6bKEMgRyQmANGdtLxYMN2BdmI8D0vSUTKuyrbmrdZN2vg cm4AZnz3deJ/qu1Xaxp+3ObZSnSz0YacI4GNkzwQkwvbLuipWls= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:24 2026 by rpki-client