$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft File: 10B7822CA22013D1B3095AB974949FD98A76025C.mft (raw, json) Hash identifier: nfYHMhIrKTZWTMQJfY/UiPWHwyrfVUsOUHPCdLet50Y= Subject key identifier: AF:39:77:D3:47:03:54:C0:11:90:96:5E:54:D0:E6:42:22:C6:E2:0A Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C Certificate serial: 109AB9B4FA65D4A4A42CC7F6A98DF6D8362295C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft Manifest number: 0174 Signing time: Sun 01 Mar 2026 12:31:23 +0000 Manifest this update: Sun 01 Mar 2026 12:26:23 +0000 Manifest next update: Thu 05 Mar 2026 00:06:23 +0000 Files and hashes: 1: 10B7822CA22013D1B3095AB974949FD98A76025C.crl (hash: VsXgabARfdyN8SdVJonxT52aNl1wNHg+Da7hZGHXxZI=) 2: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (hash: pdj6kWhUHiHBGDkiWMJSGwDu1DiR3cH1bD9Qa0wAwf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9a:b9:b4:fa:65:d4:a4:a4:2c:c7:f6:a9:8d:f6:d8:36:22:95:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C Validity Not Before: Mar 1 12:26:23 2026 GMT Not After : Mar 5 00:06:23 2026 GMT Subject: CN=AF3977D3470354C01190965E54D0E64222C6E20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:ef:3e:2e:f2:62:50:10:a5:25:f7:f9:83: fd:06:91:b9:7e:cd:e9:48:02:d1:07:37:fd:39:11: 09:58:8b:bb:c9:d5:02:cd:06:c0:2b:d3:b1:75:77: cb:ce:39:6e:f3:1a:0f:5b:a6:30:09:6e:dd:75:39: 9f:95:90:75:24:2d:6b:7e:49:cd:99:d1:6e:95:d5: 5b:aa:97:83:3a:04:15:a1:59:46:ff:1a:a3:8f:2c: 1e:92:ba:6f:0f:5b:53:5c:c2:98:e4:04:99:5d:ed: fe:90:b0:e1:05:c3:d6:24:65:df:0c:a4:03:a8:f3: 9a:cf:62:70:46:0b:ef:2e:ca:24:de:ef:8c:3f:84: 65:6a:d4:72:c8:5f:5b:d9:e9:7d:f7:d1:a8:06:49: cc:d6:e3:e1:42:8a:7f:b2:d0:e5:86:8a:51:d5:a9: 2c:05:bf:db:ca:00:fc:6b:db:58:34:0b:ae:8e:df: c9:15:a1:98:67:62:50:f3:6f:98:ef:33:6c:97:dd: 98:53:8b:ef:c7:74:e0:43:9f:64:ad:bc:3e:8b:75: 84:f8:91:35:6f:65:4c:ff:45:a5:c6:c7:59:b9:c7: ec:be:58:74:8f:f6:57:cb:2a:8f:5f:54:65:0b:d4: da:ce:8c:79:f7:f5:f5:10:75:90:93:79:85:20:43: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:77:D3:47:03:54:C0:11:90:96:5E:54:D0:E6:42:22:C6:E2:0A X509v3 Authority Key Identifier: keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:25:36:81:4a:bd:87:76:a2:59:f1:aa:c3:89:c0:fe:ce:32: 71:60:48:9c:34:ae:0a:b5:d9:69:75:28:96:70:a7:68:ed:a2: 33:d6:52:b2:5f:eb:74:6b:bf:04:da:7a:4a:78:3c:4c:67:6c: 12:d8:6d:b0:c7:1b:44:46:42:66:df:5f:de:13:34:bb:48:14: b4:f5:20:7d:bd:af:b9:1f:4f:49:e9:93:08:87:f0:78:9d:0d: 5c:3d:ec:c6:af:7a:f0:8a:82:d9:99:b4:f9:b9:2c:40:30:e9: 02:ff:56:b5:cd:8a:0e:b9:1d:3c:57:7d:80:c3:9a:10:bd:d1: 8d:44:d2:95:f7:56:8e:f7:2b:2b:f6:a5:14:a2:ea:f6:e8:d4: 30:15:ed:ac:41:01:6c:11:d6:89:43:c6:31:89:37:59:55:29: f6:ed:b1:42:8b:05:37:2a:14:cd:53:20:c9:10:74:7e:33:f3: 05:93:99:b5:7b:aa:0b:0e:db:55:ae:c6:fe:ec:42:e4:b1:b0: 25:29:2b:11:d7:28:30:52:e5:e8:d3:5e:c0:36:16:eb:cb:9c: 4a:26:c0:c1:a5:e6:f4:0c:53:14:6b:9d:82:f4:38:6f:db:34: d9:9b:62:72:f3:af:32:88:c5:ff:66:30:f1:46:64:00:e4:98: 79:15:d3:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJq5tPpl1KSkLMf2qY322DYilcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4 QTc2MDI1QzAeFw0yNjAzMDExMjI2MjNaFw0yNjAzMDUwMDA2MjNaMDMxMTAvBgNV BAMTKEFGMzk3N0QzNDcwMzU0QzAxMTkwOTY1RTU0RDBFNjQyMjJDNkUyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiLe8+LvJiUBClJff5g/0Gkbl+ zelIAtEHN/05EQlYi7vJ1QLNBsAr07F1d8vOOW7zGg9bpjAJbt11OZ+VkHUkLWt+ Sc2Z0W6V1Vuql4M6BBWhWUb/GqOPLB6Sum8PW1NcwpjkBJld7f6QsOEFw9YkZd8M pAOo85rPYnBGC+8uyiTe74w/hGVq1HLIX1vZ6X330agGSczW4+FCin+y0OWGilHV qSwFv9vKAPxr21g0C66O38kVoZhnYlDzb5jvM2yX3ZhTi+/HdOBDn2StvD6LdYT4 kTVvZUz/RaXGx1m5x+y+WHSP9lfLKo9fVGUL1NrOjHn39fUQdZCTeYUgQzBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzl300cDVMARkJZeVNDmQiLG4gowHwYDVR0j BBgwFoAUELeCLKIgE9GzCVq5dJSf2Yp2AlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC8xMEI3ODIyQ0Ey MjAxM0QxQjMwOTVBQjk3NDk0OUZEOThBNzYwMjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4QTc2 MDI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQwMDI5YzctNzQyYy00ZGE4LWIy ZWUtZDYyOWFlNzhiZjAxLzAvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlG RDk4QTc2MDI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8lNoFKvYd2olnxqsOJwP7OMnFgSJw0rgq1 2Wl1KJZwp2jtojPWUrJf63RrvwTaekp4PExnbBLYbbDHG0RGQmbfX94TNLtIFLT1 IH29r7kfT0npkwiH8HidDVw97MavevCKgtmZtPm5LEAw6QL/VrXNig65HTxXfYDD mhC90Y1E0pX3Vo73Kyv2pRSi6vbo1DAV7axBAWwR1olDxjGJN1lVKfbtsUKLBTcq FM1TIMkQdH4z8wWTmbV7qgsO21Wuxv7sQuSxsCUpKxHXKDBS5ejTXsA2FuvLnEom wMGl5vQMUxRrnYL0OG/bNNmbYnLzrzKIxf9mMPFGZADkmHkV01A= -----END CERTIFICATE-----Generated at Mon Mar 2 04:36:38 2026 by rpki-client