$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: SY13j2SZUYWqHowXqfrG/1DNny1eu702jCvqNnP2dVU= Subject key identifier: 3D:08:1D:12:46:BA:28:58:A1:35:A2:45:C6:D2:A3:40:83:43:8C:A3 Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 23A9F88EF51BEB7A55D34F2F5BD04A5A02D3C500 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 0343 Signing time: Tue 24 Mar 2026 15:50:20 +0000 Manifest this update: Tue 24 Mar 2026 15:45:20 +0000 Manifest next update: Fri 27 Mar 2026 21:33:20 +0000 Files and hashes: 1: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: 8E3EWlUxezKMgO08UBrqH8eMgdQCQACtaNrEh7UU5Ek=) 2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a9:f8:8e:f5:1b:eb:7a:55:d3:4f:2f:5b:d0:4a:5a:02:d3:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Mar 24 15:45:20 2026 GMT Not After : Mar 27 21:33:20 2026 GMT Subject: CN=3D081D1246BA2858A135A245C6D2A34083438CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:5d:59:00:5c:59:77:37:37:db:d2:83:55: c1:1e:8a:41:a3:08:0e:b2:8e:eb:cc:68:d3:c0:f4: ad:0d:47:e7:1f:d4:74:2a:c5:65:d0:8a:59:31:bd: 12:ca:3c:55:b7:34:72:4a:57:ec:41:66:1c:ed:5c: 18:72:89:a5:a5:db:95:ed:98:e8:8c:45:b4:2c:58: 03:3b:1a:b7:d0:9b:87:01:f5:0f:de:8e:18:4c:f3: 1e:a5:0a:b0:bc:23:0c:54:ff:de:7e:b4:38:73:3b: 7b:1a:0c:02:3f:45:48:ef:08:12:b2:06:b6:18:d9: 98:80:f0:07:51:e6:96:56:69:ff:95:cd:eb:0d:03: 44:29:23:00:64:f4:b7:df:47:7f:aa:f1:44:7c:c5: 32:f2:cb:cb:3a:f9:f6:9c:2f:b2:89:bc:3f:df:ab: 84:bf:c0:15:c4:64:42:4b:26:a0:87:b4:0a:60:25: 10:d6:4a:70:e0:32:d7:e4:93:6f:3f:f9:27:da:9c: 81:d4:84:8a:4f:23:b1:1c:ad:1a:40:c8:46:62:4d: a7:e3:12:ff:56:58:7a:c0:99:d8:95:4d:32:dd:a2: 39:6b:80:cd:b8:3d:5d:13:d5:24:fc:32:31:d6:1a: b9:41:65:c2:17:47:07:26:4f:af:35:44:f6:4c:a4: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:08:1D:12:46:BA:28:58:A1:35:A2:45:C6:D2:A3:40:83:43:8C:A3 X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:27:af:bb:72:d6:3a:8a:01:ff:91:5b:61:ef:d0:7c:1a:30: 9c:b0:03:b3:53:ff:e8:17:1d:ac:e4:7f:d8:bd:47:5d:ef:c6: 71:ce:1a:1d:bc:04:7d:56:4b:36:af:78:9b:cd:10:54:7a:7e: 82:70:39:ff:c4:42:b5:5f:78:41:f8:50:f8:88:eb:4d:f5:34: 92:15:9b:2e:63:fa:d2:21:d5:d5:c5:63:db:3c:d1:da:ee:ec: 59:ba:5d:44:31:ca:68:9f:7b:d9:35:fb:75:a2:e6:a2:15:d1: d8:af:ff:9d:fd:67:5b:ec:d7:7a:c6:53:49:21:c1:e0:fb:11: b8:f2:ed:97:14:cd:da:97:13:8f:7d:81:84:b3:f9:ee:04:7d: ee:d6:b3:ca:c6:a2:51:43:66:35:23:3f:23:1a:20:35:05:bb: 17:fa:e9:8b:ad:51:81:e2:2d:86:72:ad:3f:41:80:4f:5f:6b: 2f:27:81:40:13:df:98:89:f1:66:5a:2c:6e:82:af:8e:d5:e3: b4:30:35:45:c8:17:cc:70:f0:ff:7f:1a:da:21:f8:0a:5d:65: ab:b2:0f:ae:3d:02:fe:1e:9c:69:00:8b:bf:3c:db:2e:b3:49: 63:f6:13:f8:d6:78:1c:e2:e1:8d:81:8b:ad:9c:3b:6f:e8:0e: 8b:81:88:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6n4jvUb63pV008vW9BKWgLTxQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNjAzMjQxNTQ1MjBaFw0yNjAzMjcyMTMzMjBaMDMxMTAvBgNV BAMTKDNEMDgxRDEyNDZCQTI4NThBMTM1QTI0NUM2RDJBMzQwODM0MzhDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWIl1ZAFxZdzc329KDVcEeikGj CA6yjuvMaNPA9K0NR+cf1HQqxWXQilkxvRLKPFW3NHJKV+xBZhztXBhyiaWl25Xt mOiMRbQsWAM7GrfQm4cB9Q/ejhhM8x6lCrC8IwxU/95+tDhzO3saDAI/RUjvCBKy BrYY2ZiA8AdR5pZWaf+VzesNA0QpIwBk9LffR3+q8UR8xTLyy8s6+facL7KJvD/f q4S/wBXEZEJLJqCHtApgJRDWSnDgMtfkk28/+SfanIHUhIpPI7EcrRpAyEZiTafj Ev9WWHrAmdiVTTLdojlrgM24PV0T1ST8MjHWGrlBZcIXRwcmT681RPZMpJD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQgdEka6KFihNaJFxtKjQINDjKMwHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAnr7ty1jqKAf+RW2Hv0HwaMJywA7NT/+gX Hazkf9i9R13vxnHOGh28BH1WSzaveJvNEFR6foJwOf/EQrVfeEH4UPiI6031NJIV my5j+tIh1dXFY9s80dru7Fm6XUQxymife9k1+3Wi5qIV0div/539Z1vs13rGU0kh weD7Ebjy7ZcUzdqXE499gYSz+e4Efe7Ws8rGolFDZjUjPyMaIDUFuxf66YutUYHi LYZyrT9BgE9fay8ngUAT35iJ8WZaLG6Cr47V47QwNUXIF8xw8P9/Gtoh+ApdZauy D649Av4enGkAi7882y6zSWP2E/jWeBzi4Y2Bi62cO2/oDouBiGo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:31 2026 by rpki-client