$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: vTo+tOVqj7nv4VXfYcCL/9QJ/XQuTCNRHnECDYjCIIY= Subject key identifier: A2:CF:C8:30:AE:C6:30:83:1E:59:C3:A1:6F:0F:23:E2:3B:8B:E9:C3 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 2F71D459BD5D7478F25599D147526AE6B261647D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 056C Signing time: Wed 25 Mar 2026 16:42:14 +0000 Manifest this update: Wed 25 Mar 2026 16:37:14 +0000 Manifest next update: Sun 29 Mar 2026 01:01:14 +0000 Files and hashes: 1: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=) 2: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 3: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 4: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 5: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=) 6: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 7: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=) 8: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=) 9: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 10: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: Fv3PzH/PpXCb1xS63tcNe76mWTrdMYYDd+HvPixKLKI=) 11: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 12: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 13: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 14: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 15: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 16: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 17: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 18: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 19: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 20: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 21: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 22: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 23: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: AM+aiplYUdhH8KU+dJBKvmqgp4vQ5YGIVFo2krKpct4=) 24: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: jeFXZX5qVUcnX0QqNq2RdM7HRS0e88c5J8MU8V3GUZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:71:d4:59:bd:5d:74:78:f2:55:99:d1:47:52:6a:e6:b2:61:64:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Mar 25 16:37:14 2026 GMT Not After : Mar 29 01:01:14 2026 GMT Subject: CN=A2CFC830AEC630831E59C3A16F0F23E23B8BE9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:d2:8c:72:2a:f2:9c:d7:68:ca:44:09:4d: 60:38:de:53:a5:d5:c9:ca:1f:8a:7f:e5:db:52:10: 6b:cf:b2:48:f6:0d:e5:a0:b7:0c:67:3c:8f:8a:bc: f0:dd:fb:a7:d0:00:f8:11:50:a7:1e:53:31:0c:d0: 5d:2b:9c:93:26:d5:32:7a:7a:49:45:b6:d9:37:54: 7a:90:01:8d:6f:c2:69:e5:d4:bf:d8:88:ba:c9:25: 30:4b:c4:b0:1d:19:36:b5:e2:da:66:85:44:95:68: 8e:48:26:7c:b2:a8:b0:ec:cf:af:58:1a:fb:7d:fd: 33:f5:69:b9:0e:25:c2:d5:21:dd:6e:e1:ce:a3:72: af:89:b1:08:67:5c:ee:b3:40:06:88:02:61:f8:a0: 2a:7e:21:95:eb:11:ea:b3:57:36:d9:f5:a4:ee:22: 71:22:cb:2b:f3:a3:cc:cc:5c:d2:e8:7d:6c:ab:08: 3d:e0:cd:91:1c:44:2c:31:68:3a:71:ee:79:dc:65: e5:2e:5c:cc:81:53:26:da:98:1c:83:c6:48:52:0d: 69:bf:5d:bb:9e:55:c4:9d:82:f9:f7:4e:23:40:42: 12:e9:ac:79:5f:80:a5:29:a6:2a:3e:5a:b3:cd:bb: 0b:46:e4:c8:0b:fa:fb:25:2a:da:b9:10:90:cd:20: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CF:C8:30:AE:C6:30:83:1E:59:C3:A1:6F:0F:23:E2:3B:8B:E9:C3 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:64:50:c8:7e:b0:e4:a7:b5:6e:04:34:ac:2c:9a:ca:52:71: 6f:73:a4:f7:75:17:9d:15:fe:f2:3e:54:bc:17:6e:83:36:55: 33:00:a8:f9:37:07:88:b2:77:6a:6f:eb:a9:c8:39:d2:e4:e5: 2f:c2:10:c9:9c:72:cd:13:8d:6b:3c:f2:79:0f:6e:e4:49:7f: 77:a0:0a:c5:a6:c4:6b:b6:af:b3:04:30:ea:7e:01:a5:71:90: 57:c1:76:39:dc:7a:ad:de:f3:04:41:b3:52:3d:47:22:9d:b2: 12:b2:4a:41:a3:a8:a8:45:fa:aa:62:9f:9a:7e:29:f5:a0:40: e0:7d:23:59:44:45:37:0f:78:4d:f3:b2:56:b9:8c:3a:53:0b: 9e:bd:93:60:6d:9b:fd:8d:7f:32:07:4a:9c:13:b4:a1:ec:a6: 7d:91:ec:ed:70:98:d2:ba:1f:f7:8e:1c:1d:55:8e:f8:90:b9: 24:dd:43:a3:9b:4c:6d:3b:27:14:ed:68:00:e0:84:e4:45:d2: e4:6e:e0:5c:60:86:29:12:a5:49:6d:ee:89:ec:31:42:b1:b6: b3:43:b4:f4:d2:75:4e:22:79:58:1c:2b:9d:d9:71:13:e3:fb: 61:c0:72:46:4c:5a:c1:ae:d1:54:70:4d:fe:b6:dc:a1:7b:7d: 07:b8:25:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3HUWb1ddHjyVZnRR1Jq5rJhZH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNjAzMjUxNjM3MTRaFw0yNjAzMjkwMTAxMTRaMDMxMTAvBgNV BAMTKEEyQ0ZDODMwQUVDNjMwODMxRTU5QzNBMTZGMEYyM0UyM0I4QkU5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoNKMcirynNdoykQJTWA43lOl 1cnKH4p/5dtSEGvPskj2DeWgtwxnPI+KvPDd+6fQAPgRUKceUzEM0F0rnJMm1TJ6 eklFttk3VHqQAY1vwmnl1L/YiLrJJTBLxLAdGTa14tpmhUSVaI5IJnyyqLDsz69Y Gvt9/TP1abkOJcLVId1u4c6jcq+JsQhnXO6zQAaIAmH4oCp+IZXrEeqzVzbZ9aTu InEiyyvzo8zMXNLofWyrCD3gzZEcRCwxaDpx7nncZeUuXMyBUybamByDxkhSDWm/ XbueVcSdgvn3TiNAQhLprHlfgKUppio+WrPNuwtG5MgL+vslKtq5EJDNIOELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUos/IMK7GMIMeWcOhbw8j4juL6cMwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVkUMh+sOSntW4ENKwsmspScW9zpPd1F50V /vI+VLwXboM2VTMAqPk3B4iyd2pv66nIOdLk5S/CEMmccs0TjWs88nkPbuRJf3eg CsWmxGu2r7MEMOp+AaVxkFfBdjnceq3e8wRBs1I9RyKdshKySkGjqKhF+qpin5p+ KfWgQOB9I1lERTcPeE3zsla5jDpTC569k2Btm/2NfzIHSpwTtKHspn2R7O1wmNK6 H/eOHB1VjviQuSTdQ6ObTG07JxTtaADghORF0uRu4FxghikSpUlt7onsMUKxtrND tPTSdU4ieVgcK53ZcRPj+2HAckZMWsGu0VRwTf623KF7fQe4JUA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:01 2026 by rpki-client