$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft File: 10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json) Hash identifier: IygdlY/WPGQEFUhjApKhcDgaqmb4nzX4cQVwLSOwMOA= Subject key identifier: 77:CC:CB:8D:1B:9E:EC:44:6D:26:3D:22:96:21:E1:CC:58:F9:04:AA Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Certificate issuer: /CN=10FC4D9D2403FC433C19BB76131325B776505E51 Certificate serial: 6DDF3267DDAAF9430A69469B2360FDA5F7C21F51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft Manifest number: 04F8 Signing time: Thu 26 Mar 2026 11:10:49 +0000 Manifest this update: Thu 26 Mar 2026 11:05:49 +0000 Manifest next update: Sun 29 Mar 2026 22:16:49 +0000 Files and hashes: 1: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: vnOWOE8ANRJB3kxmh2kTgRDOD4mP6pnBNqxwGmSsQIw=) 2: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY=) 3: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: Tuzv0/phn3FNTaldkRWkzAblZWzr/e7TVzSIHOtVvHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:df:32:67:dd:aa:f9:43:0a:69:46:9b:23:60:fd:a5:f7:c2:1f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Validity Not Before: Mar 26 11:05:49 2026 GMT Not After : Mar 29 22:16:49 2026 GMT Subject: CN=77CCCB8D1B9EEC446D263D229621E1CC58F904AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:3c:69:d7:63:c5:e8:79:ed:6f:d4:3f:12: ae:dd:9e:fc:ee:51:7a:0d:0d:90:65:33:62:fb:98: 92:cb:ce:87:96:cf:b0:d6:fb:07:4b:f9:bd:87:de: 88:2e:3b:8d:dd:8d:be:f7:25:aa:39:62:84:95:f9: c2:11:88:6d:fb:ba:7c:7d:1f:93:e2:17:14:78:d3: 22:cf:be:47:8b:8a:d3:4f:87:05:2d:c0:28:da:37: 26:f6:1d:26:c8:1f:47:24:2b:ac:56:20:e2:d7:75: 3d:54:ed:12:21:ad:8d:b3:27:94:58:83:b4:03:01: 80:cf:d2:d2:85:30:3f:da:f6:c6:ae:76:61:1b:16: b7:55:ff:b7:17:6a:69:7a:15:8f:7c:08:5b:83:07: bd:dc:3a:45:c0:e1:fc:00:44:33:b2:8f:c7:6a:1b: 95:9e:0e:ef:60:83:b7:be:c6:61:db:3d:80:5d:70: 45:1a:7e:2d:45:1c:a9:54:89:1d:dd:c1:9a:2e:24: 0e:ab:93:5c:5d:b8:9d:e9:eb:56:89:76:91:fa:ea: a9:14:25:69:df:75:39:d5:ac:21:21:61:08:51:b7: c8:05:12:d2:b9:9a:ca:0d:65:df:7f:22:41:b3:93: 4f:52:f1:d8:e4:b5:47:2a:a5:21:2c:8c:e4:b9:e0: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CC:CB:8D:1B:9E:EC:44:6D:26:3D:22:96:21:E1:CC:58:F9:04:AA X509v3 Authority Key Identifier: keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:70:14:26:0b:dd:9a:a2:3d:2e:54:dd:d3:bd:6c:65:81:09: 54:82:0b:37:ec:6a:71:4a:71:e7:e1:93:94:09:b2:d1:5e:bc: 72:4d:5e:27:fa:29:58:03:f2:e8:bc:3f:55:08:9c:70:09:8c: 92:a2:ad:f9:3e:7b:13:77:a9:bc:db:db:3f:bc:8c:0c:78:2c: 99:b2:90:71:1b:fa:a4:c1:40:5d:8d:24:78:70:56:fd:82:c1: 3b:31:d4:55:67:dd:6a:f0:81:47:be:5c:2e:ae:87:79:a7:06: 3d:04:ee:a7:66:aa:cd:05:bf:a3:43:f2:e6:bb:42:04:3f:40: 69:84:22:54:7e:28:6b:f2:20:27:34:0f:85:82:7d:74:9d:5e: ea:be:4e:8f:35:a4:54:65:3b:f6:2f:22:ea:b2:4a:96:ad:68: 5d:09:a9:69:fa:df:b8:82:75:c0:fd:9a:31:91:18:d1:74:92: 42:3b:02:98:1a:52:8b:fc:d1:6e:dc:61:62:8b:d3:f6:47:d9: b5:65:2d:a8:a1:10:4e:d9:f8:0a:85:84:06:b1:5b:79:75:71: 20:f5:19:d0:76:01:cd:30:8e:5b:21:bf:7f:aa:8b:47:e6:47: 32:48:c3:21:af:59:1e:8d:1a:ae:d7:ed:96:d6:98:e2:73:82: 38:5d:be:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbd8yZ92q+UMKaUabI2D9pffCH1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3 NjUwNUU1MTAeFw0yNjAzMjYxMTA1NDlaFw0yNjAzMjkyMjE2NDlaMDMxMTAvBgNV BAMTKDc3Q0NDQjhEMUI5RUVDNDQ2RDI2M0QyMjk2MjFFMUNDNThGOTA0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDTxp12PF6Hntb9Q/Eq7dnvzu UXoNDZBlM2L7mJLLzoeWz7DW+wdL+b2H3oguO43djb73Jao5YoSV+cIRiG37unx9 H5PiFxR40yLPvkeLitNPhwUtwCjaNyb2HSbIH0ckK6xWIOLXdT1U7RIhrY2zJ5RY g7QDAYDP0tKFMD/a9saudmEbFrdV/7cXaml6FY98CFuDB73cOkXA4fwARDOyj8dq G5WeDu9gg7e+xmHbPYBdcEUafi1FHKlUiR3dwZouJA6rk1xduJ3p61aJdpH66qkU JWnfdTnVrCEhYQhRt8gFEtK5msoNZd9/IkGzk09S8djktUcqpSEsjOS54IMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd8zLjRue7ERtJj0iliHhzFj5BKowHwYDVR0j BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0 MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw NUU1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1 Qjc3NjUwNUU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxwFCYL3ZqiPS5U3dO9bGWBCVSCCzfsanFK cefhk5QJstFevHJNXif6KVgD8ui8P1UInHAJjJKirfk+exN3qbzb2z+8jAx4LJmy kHEb+qTBQF2NJHhwVv2CwTsx1FVn3WrwgUe+XC6uh3mnBj0E7qdmqs0Fv6ND8ua7 QgQ/QGmEIlR+KGvyICc0D4WCfXSdXuq+To81pFRlO/YvIuqySpataF0JqWn637iC dcD9mjGRGNF0kkI7ApgaUov80W7cYWKL0/ZH2bVlLaihEE7Z+AqFhAaxW3l1cSD1 GdB2Ac0wjlshv3+qi0fmRzJIwyGvWR6NGq7X7ZbWmOJzgjhdvps= -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:39 2026 by rpki-client