$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: 1XzqhmEPi1UUC5U8qQlFe2yKUFTS9C/uqLcLV8K8Mxs= Subject key identifier: 0B:BE:CD:BE:C8:7D:AC:7E:EF:48:66:53:B8:D2:A5:DC:88:A0:DF:32 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 1F68D9643A5E6BED134D8402DF6E25208B45F0F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05DC Signing time: Tue 24 Mar 2026 16:00:04 +0000 Manifest this update: Tue 24 Mar 2026 15:55:04 +0000 Manifest next update: Fri 27 Mar 2026 22:36:04 +0000 Files and hashes: 1: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) 2: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) 3: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 4: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: L2ufLG0shUOPnCjdOOYaz/B5Urwfo020tFEFfHaInDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:68:d9:64:3a:5e:6b:ed:13:4d:84:02:df:6e:25:20:8b:45:f0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Mar 24 15:55:04 2026 GMT Not After : Mar 27 22:36:04 2026 GMT Subject: CN=0BBECDBEC87DAC7EEF486653B8D2A5DC88A0DF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:33:d4:a6:6f:62:1a:e3:96:a3:1c:e4:0a: 3c:25:4e:0c:bb:a0:15:66:dc:c4:92:65:86:73:cb: 1d:68:b8:96:b8:a2:a6:48:84:07:4a:dd:85:51:27: 81:d3:75:f2:c4:42:ce:16:fb:87:0e:54:45:53:7d: bd:ce:e1:85:80:60:c0:54:26:f0:f9:ed:86:cb:73: 2a:53:96:bf:e0:40:4b:b4:ba:ab:c1:eb:0e:41:bb: 94:03:5a:7f:eb:24:03:a9:35:42:34:88:c3:49:63: fd:a7:f8:83:76:09:4d:bc:2b:e4:6d:18:a7:d7:4a: 13:53:03:19:45:6d:53:b8:6f:36:fe:21:3c:34:58: 1b:5c:cb:1f:12:13:fc:c8:fe:cd:4f:7f:db:3a:d4: 46:0f:77:1d:10:9c:f6:4e:bd:c5:93:75:8d:80:43: 46:53:67:f3:57:08:26:27:d9:c0:8c:16:a4:5a:b9: 48:6b:1b:bf:e7:30:d8:17:d4:c5:93:bc:a4:d4:3c: 36:82:58:1f:1e:95:ba:a5:b4:44:75:ea:71:28:b3: 18:d9:69:81:c3:21:ea:c9:0d:c8:2a:7a:d0:2b:e3: f5:24:32:29:31:16:d7:6d:13:af:0d:0d:be:58:a5: 4a:dc:c3:4f:0f:5c:05:25:22:19:35:51:9e:50:a0: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BE:CD:BE:C8:7D:AC:7E:EF:48:66:53:B8:D2:A5:DC:88:A0:DF:32 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b0:02:83:a5:7a:f6:bf:0f:b8:90:db:22:13:59:f3:48:bb: a9:8f:39:ef:b5:21:dd:d6:74:7f:08:bf:3f:ca:32:be:94:40: 8c:25:e8:38:29:ed:41:5d:c0:f3:6d:4f:60:bd:f1:6c:a4:80: 3a:fe:ba:1f:18:e3:65:de:60:ec:4a:99:52:20:62:e2:bb:36: 45:d9:1a:2b:8e:51:a2:b8:72:e1:e9:b8:70:03:34:79:94:1d: 5b:5b:5d:eb:03:a7:fe:af:6b:4d:2c:3b:57:de:69:45:66:e2: 50:14:74:58:ee:0a:e9:9e:c6:d0:ba:be:d7:03:d8:9d:fd:46: 3f:d8:1c:45:0e:a0:4f:4f:90:97:b4:b7:31:89:dc:43:96:f3: 66:e3:b0:ff:81:3a:fe:78:55:56:a0:c2:35:27:33:9f:5c:9d: 86:31:e1:d8:f7:e5:5a:3b:77:76:0a:84:b2:dc:0e:dc:a6:b3: 87:51:89:2a:42:4a:c0:31:fc:eb:7c:49:b2:d2:85:38:1e:a0: 4f:14:65:ad:43:04:8f:52:8c:af:3f:58:29:17:d5:4f:26:6e: f5:b7:99:61:b3:3f:da:ff:d4:6c:50:ab:b2:f5:fc:0b:29:22: 5c:f6:ef:7a:bb:5f:21:4f:26:6a:93:0d:cf:02:87:f6:32:41: 28:8f:20:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2jZZDpea+0TTYQC324lIItF8PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNjAzMjQxNTU1MDRaFw0yNjAzMjcyMjM2MDRaMDMxMTAvBgNV BAMTKDBCQkVDREJFQzg3REFDN0VFRjQ4NjY1M0I4RDJBNURDODhBMERGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BDPUpm9iGuOWoxzkCjwlTgy7 oBVm3MSSZYZzyx1ouJa4oqZIhAdK3YVRJ4HTdfLEQs4W+4cOVEVTfb3O4YWAYMBU JvD57YbLcypTlr/gQEu0uqvB6w5Bu5QDWn/rJAOpNUI0iMNJY/2n+IN2CU28K+Rt GKfXShNTAxlFbVO4bzb+ITw0WBtcyx8SE/zI/s1Pf9s61EYPdx0QnPZOvcWTdY2A Q0ZTZ/NXCCYn2cCMFqRauUhrG7/nMNgX1MWTvKTUPDaCWB8elbqltER16nEosxjZ aYHDIerJDcgqetAr4/UkMikxFtdtE68NDb5YpUrcw08PXAUlIhk1UZ5QoJjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC77Nvsh9rH7vSGZTuNKl3Iig3zIwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKwAoOleva/D7iQ2yITWfNIu6mPOe+1Id3W dH8Ivz/KMr6UQIwl6Dgp7UFdwPNtT2C98WykgDr+uh8Y42XeYOxKmVIgYuK7NkXZ GiuOUaK4cuHpuHADNHmUHVtbXesDp/6va00sO1feaUVm4lAUdFjuCumextC6vtcD 2J39Rj/YHEUOoE9PkJe0tzGJ3EOW82bjsP+BOv54VVagwjUnM59cnYYx4dj35Vo7 d3YKhLLcDtyms4dRiSpCSsAx/Ot8SbLShTgeoE8UZa1DBI9SjK8/WCkX1U8mbvW3 mWGzP9r/1GxQq7L1/AspIlz273q7XyFPJmqTDc8Ch/YyQSiPIMk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:09 2026 by rpki-client