$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft File: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json) Hash identifier: 5l5v8hqxh/NcDnakhEyA61qAoU+w+/KvVR3sYOMFnYM= Subject key identifier: C2:9A:55:E9:23:7D:87:80:4E:27:55:87:F3:A8:34:D9:8E:29:41:32 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 54F5FEBBE59E54A51DC00AB637DCC258DD07D022 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft Manifest number: 055A Signing time: Wed 25 Mar 2026 01:31:07 +0000 Manifest this update: Wed 25 Mar 2026 01:26:07 +0000 Manifest next update: Sat 28 Mar 2026 05:16:07 +0000 Files and hashes: 1: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: YHgchxUowX4afg18dRitbsm1i2Jr1bcDLdOROkNe9ds=) 2: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: LSvRzZKZqA3NwdEC9iho4W4LPDyE6x1z3v9TKwhHRg0=) 3: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: dHAXVvHNWN3lX3SmokQ/UCj86xJ8/z2lq2nv43vYPc0=) 4: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: tAs35Xh9PvYdZJSIW4FLCQe0rvv+Ua53CMSGfgCNFT4=) 5: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: Ht1Hq2t5jHECGkfmX/IcYH9w/FvJbpzI5faXbMU00j4=) 6: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: wHpTffZ2nuWlAhlZXWgWT5vAarjhnzHKQ1BNdqdBZLA=) 7: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: vyo5RypkFQEnVHU24LrFw7oPwATfGzPKn/kBk5If2Fc=) 8: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: i8E531bAACF/do6q7C690HP7ycKInzio0QMeynldjVQ=) 9: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 0DSPPC3eIjICQ1QgbLgmjGB64GhEc/FiJxgxZMMi2rw=) 10: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: jGoXC4NtMGtzcx+R9/Q81p54SI3SY8CoW+n8Kb2SzRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f5:fe:bb:e5:9e:54:a5:1d:c0:0a:b6:37:dc:c2:58:dd:07:d0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Mar 25 01:26:07 2026 GMT Not After : Mar 28 05:16:07 2026 GMT Subject: CN=C29A55E9237D87804E275587F3A834D98E294132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:ec:20:da:64:2b:d2:4e:6a:c4:43:2d:b8: 47:ab:72:5c:58:ec:c8:64:ad:b9:57:c5:72:0d:c0: 34:75:ca:65:ff:bd:86:70:a0:ef:f1:8f:d3:05:77: 84:24:ad:73:61:db:78:b5:a4:b6:77:17:e8:31:af: 45:21:5b:4d:18:ce:57:14:7c:83:e9:59:a0:22:97: 95:53:3a:89:27:5e:8f:cb:56:6e:3a:77:e3:bc:e8: dd:61:e1:fe:44:09:f6:a9:9f:d8:21:02:d8:ef:0a: 9d:3a:a0:46:fe:6f:35:70:f1:6c:6b:bc:c2:ba:e7: 84:3f:e9:f9:d3:8d:84:03:90:43:89:2f:e5:47:5e: ad:01:ae:7d:f4:83:b4:f9:7d:66:87:69:da:05:97: 71:0c:f1:65:d5:7e:d1:14:2f:62:a8:0d:b0:ee:60: 0f:b1:00:2f:ee:f7:60:c6:6d:1e:00:b3:7d:dd:27: 33:56:7e:ae:08:b6:e8:5f:a3:46:01:b6:df:5c:9b: 99:db:53:b9:48:f2:e5:f9:e3:4b:ad:34:b4:77:03: dd:35:d8:83:06:a8:77:5a:d6:bf:dd:37:8e:89:30: 51:a1:f8:b6:a5:9e:33:da:20:dc:ea:70:7f:49:de: 84:5a:4c:f5:a7:55:b5:61:2d:52:8a:84:21:a6:6c: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9A:55:E9:23:7D:87:80:4E:27:55:87:F3:A8:34:D9:8E:29:41:32 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9c:32:38:ea:3b:35:ec:6a:85:32:0a:3d:5b:f3:d3:06:d5: 27:3b:1a:e8:4e:fd:50:ec:36:4d:e3:22:88:89:db:af:0f:1a: 3e:2c:a8:fc:2d:95:a2:d8:7f:7a:9d:8e:51:ea:eb:78:34:93: 7b:ea:b0:fa:b2:a1:27:74:45:7e:e8:e8:87:62:fe:40:70:90: 07:89:0d:96:85:a5:67:a0:bc:42:7a:33:4e:5b:43:eb:b5:32: ae:79:82:69:76:8e:a8:82:2f:9a:80:1e:b9:10:dd:0f:86:07: aa:d1:cc:20:99:6f:27:f1:26:4a:d4:b2:2c:64:dd:6e:76:21: 60:7f:09:a9:c1:4b:bb:f7:c9:2e:f2:5f:b6:94:6c:cb:70:c7: ea:59:b4:10:90:28:c8:f8:f9:6f:18:4c:9a:30:10:7b:b5:8f: d7:d2:4b:00:29:40:dc:49:33:21:f8:d0:4c:3d:b1:4c:9d:40: 1b:ee:75:24:e8:e7:08:83:a9:c6:f8:70:e0:58:af:0b:87:50: fe:17:41:ad:b9:81:d8:0c:24:56:54:bb:c2:1e:12:eb:61:65: b1:12:b3:c9:65:8d:cc:9a:44:d1:cf:6b:88:a6:9b:0d:b3:6d: 97:ea:2d:ba:02:3c:de:9c:a8:04:1c:d3:92:79:de:56:e3:cb: b7:da:ec:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPX+u+WeVKUdwAq2N9zCWN0H0CIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNjAzMjUwMTI2MDdaFw0yNjAzMjgwNTE2MDdaMDMxMTAvBgNV BAMTKEMyOUE1NUU5MjM3RDg3ODA0RTI3NTU4N0YzQTgzNEQ5OEUyOTQxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4+wg2mQr0k5qxEMtuEerclxY 7MhkrblXxXINwDR1ymX/vYZwoO/xj9MFd4QkrXNh23i1pLZ3F+gxr0UhW00YzlcU fIPpWaAil5VTOoknXo/LVm46d+O86N1h4f5ECfapn9ghAtjvCp06oEb+bzVw8Wxr vMK654Q/6fnTjYQDkEOJL+VHXq0Brn30g7T5fWaHadoFl3EM8WXVftEUL2KoDbDu YA+xAC/u92DGbR4As33dJzNWfq4Ituhfo0YBtt9cm5nbU7lI8uX540utNLR3A901 2IMGqHda1r/dN46JMFGh+LalnjPaINzqcH9J3oRaTPWnVbVhLVKKhCGmbAnLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwppV6SN9h4BOJ1WH86g02Y4pQTIwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMy MzQyN0MxOTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2cMjjqOzXsaoUyCj1b89MG1Sc7GuhO/VDs Nk3jIoiJ268PGj4sqPwtlaLYf3qdjlHq63g0k3vqsPqyoSd0RX7o6Idi/kBwkAeJ DZaFpWegvEJ6M05bQ+u1Mq55gml2jqiCL5qAHrkQ3Q+GB6rRzCCZbyfxJkrUsixk 3W52IWB/CanBS7v3yS7yX7aUbMtwx+pZtBCQKMj4+W8YTJowEHu1j9fSSwApQNxJ MyH40Ew9sUydQBvudSTo5wiDqcb4cOBYrwuHUP4XQa25gdgMJFZUu8IeEuthZbES s8lljcyaRNHPa4immw2zbZfqLboCPN6cqAQc05J53lbjy7fa7M0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:36 2026 by rpki-client