$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: 4w0E7y5AubMSB5oY4P775UqYoNyraOGs8PxDw/Igxik= Subject key identifier: C9:28:7D:4E:7C:5D:75:39:A3:7C:27:A0:31:05:73:EC:10:0D:DF:69 Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 63259D3EAEB50DCAA2AF2D8F55C7712402047FEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: 0144 Signing time: Wed 25 Mar 2026 17:32:01 +0000 Manifest this update: Wed 25 Mar 2026 17:27:01 +0000 Manifest next update: Sat 28 Mar 2026 22:28:01 +0000 Files and hashes: 1: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: 84a9utdxoM3YBibXWtZt0NTazFN0XX0PMcbXcVKr1ME=) 2: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: FzHs2jrisPTXDjeyqpBMhWr9H2CINutW4PdDxdrM/c4=) 3: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: iWWMBNz/ap73hzzhd0AgzEZTSYI9UVHD2G0NxQBjFlw=) 4: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: 859yRYxg6dYMZDhycmHxCWbBfEwXNU7EIcEdV25XiMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:25:9d:3e:ae:b5:0d:ca:a2:af:2d:8f:55:c7:71:24:02:04:7f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Mar 25 17:27:01 2026 GMT Not After : Mar 28 22:28:01 2026 GMT Subject: CN=C9287D4E7C5D7539A37C27A0310573EC100DDF69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:ce:3f:4a:03:7c:03:e9:80:f2:c3:cf:e6: 29:02:ac:61:44:f0:2b:ee:6c:6e:2c:e3:00:b5:85: 8b:6f:74:e4:46:e8:c3:1d:3d:bc:22:bd:1d:65:64: 67:04:78:e0:f8:f8:2b:f8:a6:ea:ed:1f:36:6b:51: d9:ef:a9:cc:b1:74:ff:d5:85:8d:3e:8a:12:b2:81: 89:33:48:58:ec:48:0f:2f:74:73:cd:af:61:f6:2f: 12:4d:36:46:79:24:1e:35:3b:27:d5:20:cf:82:22: d1:aa:cc:a0:d5:5d:c0:52:cd:7d:7c:e5:c4:36:39: ab:c6:a4:87:17:ec:0d:db:8c:76:21:cb:c4:07:85: 6c:a8:21:cd:16:3a:74:c8:ec:5a:6a:8c:93:ee:3b: 7e:5e:7f:72:3c:23:8d:ba:b9:fd:05:1c:85:3f:74: a6:b0:7a:75:6d:2c:3f:04:71:c4:51:4e:15:0c:53: 75:69:44:a2:e5:11:85:00:a5:ae:ad:c2:69:a7:e4: 15:8e:87:77:ec:31:a3:76:a2:8b:1c:b8:6d:57:d0: c2:0f:41:52:75:e6:0f:e7:e3:a9:9d:f1:54:5e:fb: 7e:ec:ed:2b:e0:38:3f:34:3e:3b:3f:84:96:b0:e3: c1:fc:6a:c6:32:7d:9a:17:d7:7f:d1:4a:53:68:9b: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:28:7D:4E:7C:5D:75:39:A3:7C:27:A0:31:05:73:EC:10:0D:DF:69 X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f6:bd:9d:97:ce:7e:93:cf:71:3f:b1:79:52:45:8e:f2:73: e7:9d:6e:ef:9a:36:60:8a:51:27:be:7e:03:11:57:0d:3e:8a: 35:93:8e:c0:9c:b5:3c:5a:70:d3:81:a8:4c:c5:09:f1:1f:3f: c2:d0:c6:02:e4:64:c4:b7:c8:62:2c:de:fe:48:c6:1b:8f:2c: f7:b3:4e:96:31:6b:64:4a:69:6a:28:05:b5:46:7f:35:1e:17: ab:95:cc:64:8c:0e:a5:e9:8f:d6:8b:a1:8d:4d:5c:13:4c:e6: 40:32:38:c5:cb:94:11:81:83:61:e2:8f:1e:72:6a:5a:ff:95: 20:5f:7a:c9:e6:69:36:98:3f:e1:2e:cf:35:5c:da:ae:fc:58: b0:3e:5c:41:21:e1:d6:dd:d4:13:0e:03:68:25:71:9e:f8:fb: 21:d7:17:ab:5d:ac:59:e8:36:85:f3:bc:41:32:be:23:fd:5a: cb:3c:8d:c1:70:4b:a3:28:94:5a:70:55:bc:84:f1:75:c8:1f: f4:94:cb:5a:d3:58:ce:fd:09:fc:ed:80:a3:2e:a6:3a:41:c4: de:9b:d2:af:1c:f5:47:8c:f0:18:75:e7:92:79:81:c5:34:42: 37:8e:4e:17:e3:48:97:95:b2:74:8d:af:3b:34:64:fd:59:30: 4e:a1:6d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyWdPq61Dcqiry2PVcdxJAIEf+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNjAzMjUxNzI3MDFaFw0yNjAzMjgyMjI4MDFaMDMxMTAvBgNV BAMTKEM5Mjg3RDRFN0M1RDc1MzlBMzdDMjdBMDMxMDU3M0VDMTAwRERGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7M4/SgN8A+mA8sPP5ikCrGFE 8CvubG4s4wC1hYtvdORG6MMdPbwivR1lZGcEeOD4+Cv4purtHzZrUdnvqcyxdP/V hY0+ihKygYkzSFjsSA8vdHPNr2H2LxJNNkZ5JB41OyfVIM+CItGqzKDVXcBSzX18 5cQ2OavGpIcX7A3bjHYhy8QHhWyoIc0WOnTI7FpqjJPuO35ef3I8I426uf0FHIU/ dKawenVtLD8EccRRThUMU3VpRKLlEYUApa6twmmn5BWOh3fsMaN2ooscuG1X0MIP QVJ15g/n46md8VRe+37s7SvgOD80Pjs/hJaw48H8asYyfZoX13/RSlNom6axAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySh9TnxddTmjfCegMQVz7BAN32kwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADz2vZ2Xzn6Tz3E/sXlSRY7yc+edbu+aNmCK USe+fgMRVw0+ijWTjsCctTxacNOBqEzFCfEfP8LQxgLkZMS3yGIs3v5IxhuPLPez TpYxa2RKaWooBbVGfzUeF6uVzGSMDqXpj9aLoY1NXBNM5kAyOMXLlBGBg2Hijx5y alr/lSBfesnmaTaYP+EuzzVc2q78WLA+XEEh4dbd1BMOA2glcZ74+yHXF6tdrFno NoXzvEEyviP9Wss8jcFwS6MolFpwVbyE8XXIH/SUy1rTWM79CfztgKMupjpBxN6b 0q8c9UeM8Bh155J5gcU0QjeOThfjSJeVsnSNrzs0ZP1ZME6hbRg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:38:22 2026 by rpki-client