$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft File: 10B7822CA22013D1B3095AB974949FD98A76025C.mft (raw, json) Hash identifier: y7hGKy7kzncOrMUKl9ZhMSTo3mmWP0NS+njjNAoUUAs= Subject key identifier: AB:93:02:ED:97:06:A4:87:52:48:C0:26:C2:E0:86:30:F7:56:4E:35 Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C Certificate serial: 2EF477655DE0B03AB3833E04A57621804476A83F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft Manifest number: 017E Signing time: Tue 24 Mar 2026 15:51:44 +0000 Manifest this update: Tue 24 Mar 2026 15:46:44 +0000 Manifest next update: Fri 27 Mar 2026 20:46:44 +0000 Files and hashes: 1: 10B7822CA22013D1B3095AB974949FD98A76025C.crl (hash: 2y9eECz17e1bde71Ee3BS65OQO9LqJ8PeFpHOHVwIjw=) 2: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (hash: pdj6kWhUHiHBGDkiWMJSGwDu1DiR3cH1bD9Qa0wAwf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f4:77:65:5d:e0:b0:3a:b3:83:3e:04:a5:76:21:80:44:76:a8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C Validity Not Before: Mar 24 15:46:44 2026 GMT Not After : Mar 27 20:46:44 2026 GMT Subject: CN=AB9302ED9706A4875248C026C2E08630F7564E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:63:b0:c0:00:6f:81:fb:7c:e4:6f:3e:10: f1:c3:c4:95:ac:8a:ac:16:4f:9d:ff:58:b0:f6:06: bb:06:99:35:14:77:13:57:2e:fb:7b:51:71:d0:ef: e3:de:50:9d:3e:72:bb:ea:d2:04:80:f0:59:7b:7b: 06:97:64:18:89:0a:94:67:3e:37:d4:1b:10:ad:9a: 19:52:60:56:a1:be:6e:b9:01:11:3b:db:cf:df:90: fa:6b:6f:16:55:e5:de:47:e6:2f:11:81:de:0c:e8: b2:a3:5c:0e:d2:d5:5c:ba:2e:7d:8a:4d:d4:be:21: ae:9e:c9:f8:4a:3b:34:2f:27:8c:f1:25:95:73:d7: 1b:2b:21:29:63:22:fc:86:7f:df:13:2d:d5:15:d0: 4c:82:ea:04:e0:42:80:63:e3:dd:5e:d5:11:6f:b8: 72:78:5c:57:e4:9d:cc:05:b1:5c:09:24:b4:31:4a: 9b:b7:63:02:b0:d6:c5:46:72:07:46:0b:5c:09:94: ac:a0:dc:35:2f:ef:d1:77:29:b4:8c:83:3f:a2:5d: 5d:89:02:a0:75:43:47:77:ac:26:82:9a:15:08:68: dd:69:58:c2:c7:53:0e:86:f7:14:dc:91:7f:f7:04: d0:49:d3:d6:2e:43:bd:55:f8:3c:73:0d:87:da:5c: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:93:02:ED:97:06:A4:87:52:48:C0:26:C2:E0:86:30:F7:56:4E:35 X509v3 Authority Key Identifier: keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9d:be:a4:02:28:16:db:26:92:53:79:21:16:04:27:38:e4: a0:dc:d4:de:03:64:42:eb:57:7d:74:2a:95:74:b4:80:2c:cf: 6f:d5:44:08:e2:82:52:bf:5e:de:fd:fb:64:e7:15:1a:d4:37: 1e:5e:f7:f8:16:34:c3:0c:d0:26:e2:93:83:66:81:95:ad:28: bb:3c:97:3b:84:a8:11:8e:67:94:93:b5:56:cd:8c:6d:35:5a: 2e:ef:83:42:4e:44:2a:14:bc:36:c0:17:ac:7e:11:fc:40:7a: 67:51:95:85:83:04:78:17:03:6f:bc:fa:92:91:12:c5:9d:fd: df:e0:f0:6b:d9:95:a2:14:06:87:c3:50:d5:5b:a9:d8:b1:5e: af:80:5d:b3:43:ef:0f:b0:ed:c6:97:1f:ba:bc:51:a0:2c:23: aa:bc:6d:95:2a:f0:ae:01:3d:f2:cb:b4:2e:98:5f:14:31:9d: 50:7e:28:5b:7e:d8:d6:c9:f2:6f:26:c7:85:06:c6:1c:16:cb: cc:bd:57:2e:da:24:9d:cb:58:5a:41:49:5c:83:79:d0:8f:7e: ca:20:92:a5:92:aa:c5:9e:f5:be:5c:5b:51:47:ef:fa:61:f7: b8:2c:ab:98:3b:68:38:ed:04:1e:f3:45:08:be:5c:14:7a:26: c4:6e:82:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvR3ZV3gsDqzgz4EpXYhgER2qD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4 QTc2MDI1QzAeFw0yNjAzMjQxNTQ2NDRaFw0yNjAzMjcyMDQ2NDRaMDMxMTAvBgNV BAMTKEFCOTMwMkVEOTcwNkE0ODc1MjQ4QzAyNkMyRTA4NjMwRjc1NjRFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2imOwwABvgft85G8+EPHDxJWs iqwWT53/WLD2BrsGmTUUdxNXLvt7UXHQ7+PeUJ0+crvq0gSA8Fl7ewaXZBiJCpRn PjfUGxCtmhlSYFahvm65ARE728/fkPprbxZV5d5H5i8Rgd4M6LKjXA7S1Vy6Ln2K TdS+Ia6eyfhKOzQvJ4zxJZVz1xsrISljIvyGf98TLdUV0EyC6gTgQoBj491e1RFv uHJ4XFfkncwFsVwJJLQxSpu3YwKw1sVGcgdGC1wJlKyg3DUv79F3KbSMgz+iXV2J AqB1Q0d3rCaCmhUIaN1pWMLHUw6G9xTckX/3BNBJ09YuQ71V+DxzDYfaXC2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5MC7ZcGpIdSSMAmwuCGMPdWTjUwHwYDVR0j BBgwFoAUELeCLKIgE9GzCVq5dJSf2Yp2AlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC8xMEI3ODIyQ0Ey MjAxM0QxQjMwOTVBQjk3NDk0OUZEOThBNzYwMjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4QTc2 MDI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQwMDI5YzctNzQyYy00ZGE4LWIy ZWUtZDYyOWFlNzhiZjAxLzAvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlG RDk4QTc2MDI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+dvqQCKBbbJpJTeSEWBCc45KDc1N4DZELr V310KpV0tIAsz2/VRAjiglK/Xt79+2TnFRrUNx5e9/gWNMMM0Cbik4NmgZWtKLs8 lzuEqBGOZ5STtVbNjG01Wi7vg0JORCoUvDbAF6x+EfxAemdRlYWDBHgXA2+8+pKR EsWd/d/g8GvZlaIUBofDUNVbqdixXq+AXbND7w+w7caXH7q8UaAsI6q8bZUq8K4B PfLLtC6YXxQxnVB+KFt+2NbJ8m8mx4UGxhwWy8y9Vy7aJJ3LWFpBSVyDedCPfsog kqWSqsWe9b5cW1FH7/ph97gsq5g7aDjtBB7zRQi+XBR6JsRuglE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:29 2026 by rpki-client