$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: 1vPv9VZ+xOYG7wvOT3L8OHzdBQ73AOTZXOIOPE01dOg= Subject key identifier: D8:37:40:8F:A4:E8:79:6B:F6:E3:2B:59:D6:B6:3D:42:C0:54:40:18 Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 7E277EB3248827E73401DCB8886D4A09DC8482C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 0334 Signing time: Wed 25 Mar 2026 13:30:57 +0000 Manifest this update: Wed 25 Mar 2026 13:25:57 +0000 Manifest next update: Sat 28 Mar 2026 20:40:57 +0000 Files and hashes: 1: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: ChEhWEb9M0YcIW7Z+rger4nJwdx6bXzVMbQgFmKxmX4=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:27:7e:b3:24:88:27:e7:34:01:dc:b8:88:6d:4a:09:dc:84:82:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Mar 25 13:25:57 2026 GMT Not After : Mar 28 20:40:57 2026 GMT Subject: CN=D837408FA4E8796BF6E32B59D6B63D42C0544018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:69:40:eb:1d:5e:7c:2e:d9:c6:48:12:56: d7:34:5b:ee:87:a3:6c:b5:d0:d1:b3:3b:00:5e:89: 52:d0:4b:37:cc:04:94:b4:ca:bb:4d:14:ab:27:34: 59:f7:42:de:d4:04:9a:55:18:4d:d9:ca:7f:7e:ed: 10:39:e1:79:f2:a0:ad:5b:1a:11:c2:a6:e7:32:10: 6b:0c:3f:25:e5:d5:b0:10:7e:e6:f7:fb:53:01:53: 57:73:94:bb:7d:ab:b9:16:78:07:62:32:83:6d:4b: 25:d4:52:58:34:53:5d:cb:f4:09:30:cb:6b:44:a1: 51:d3:1f:46:03:b1:c1:63:45:ce:7c:2c:f4:57:5f: b2:9c:15:ee:f2:e4:68:88:59:a5:97:4c:65:ce:4c: a3:e7:51:96:1d:ad:d5:31:00:08:97:bc:66:73:a6: 0c:b9:cd:14:e5:29:56:34:2f:50:79:c8:95:73:7b: cd:02:51:f3:0b:30:88:68:d6:da:68:92:40:93:56: 5d:8d:46:c8:7a:5a:f9:f8:97:e3:72:99:1b:ef:55: 53:9c:59:52:d9:f7:d5:25:82:5d:53:dc:6e:cd:f8: 4a:91:9e:bd:84:17:b5:36:ad:52:c6:e1:8b:95:e0: 7a:87:39:7a:86:af:f9:b5:78:19:71:90:b2:c2:a5: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:37:40:8F:A4:E8:79:6B:F6:E3:2B:59:D6:B6:3D:42:C0:54:40:18 X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:02:e7:cd:5b:93:4b:c6:dc:36:19:2a:ed:b6:f4:24:30:4d: 56:ea:a3:1c:f7:ef:ca:be:bf:d6:09:04:a6:67:8b:a3:13:50: 1a:c7:bf:d2:af:58:10:11:70:71:23:8b:86:3f:20:de:bb:b4: a4:0d:c1:c0:88:d2:63:b5:fc:91:f7:15:5e:b1:17:b3:f8:64: 51:d9:7e:49:64:c9:f7:cb:e7:47:59:82:4e:af:be:ca:f2:cd: a4:6e:07:19:60:0c:c8:fe:89:32:85:39:dd:51:76:2a:fb:8a: 10:9a:9c:e6:f5:f7:fe:23:b0:4a:17:b1:ff:3f:2c:99:76:27: a9:7d:6a:20:4d:80:eb:d6:db:57:71:14:35:ed:17:6c:99:a3: 90:a2:8b:67:8b:53:f1:4e:5d:17:49:05:9b:a5:64:c6:59:ec: 6b:ec:81:a5:58:8c:d2:ef:a4:5e:74:02:53:26:0d:c2:14:4c: 08:95:36:2a:4e:87:92:92:3e:3f:13:76:2c:4e:f4:f3:59:5e: 1e:b8:a7:a1:20:d8:40:51:ba:79:f0:bd:5f:88:6d:8f:b3:01: 01:12:d7:a6:b8:aa:66:45:8d:77:48:cf:4e:04:7a:8d:44:5b: cc:49:c1:f2:39:40:12:67:1f:53:11:9f:e3:ad:b4:7d:13:99: df:e1:a4:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfid+sySIJ+c0Ady4iG1KCdyEgsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNjAzMjUxMzI1NTdaFw0yNjAzMjgyMDQwNTdaMDMxMTAvBgNV BAMTKEQ4Mzc0MDhGQTRFODc5NkJGNkUzMkI1OUQ2QjYzRDQyQzA1NDQwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ32lA6x1efC7ZxkgSVtc0W+6H o2y10NGzOwBeiVLQSzfMBJS0yrtNFKsnNFn3Qt7UBJpVGE3Zyn9+7RA54XnyoK1b GhHCpucyEGsMPyXl1bAQfub3+1MBU1dzlLt9q7kWeAdiMoNtSyXUUlg0U13L9Akw y2tEoVHTH0YDscFjRc58LPRXX7KcFe7y5GiIWaWXTGXOTKPnUZYdrdUxAAiXvGZz pgy5zRTlKVY0L1B5yJVze80CUfMLMIho1tpokkCTVl2NRsh6Wvn4l+NymRvvVVOc WVLZ99Ulgl1T3G7N+EqRnr2EF7U2rVLG4YuV4HqHOXqGr/m1eBlxkLLCpWKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2DdAj6ToeWv24ytZ1rY9QsBUQBgwHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcC581bk0vG3DYZKu229CQwTVbqoxz378q+ v9YJBKZni6MTUBrHv9KvWBARcHEji4Y/IN67tKQNwcCI0mO1/JH3FV6xF7P4ZFHZ fklkyffL50dZgk6vvsryzaRuBxlgDMj+iTKFOd1Rdir7ihCanOb19/4jsEoXsf8/ LJl2J6l9aiBNgOvW21dxFDXtF2yZo5Cii2eLU/FOXRdJBZulZMZZ7GvsgaVYjNLv pF50AlMmDcIUTAiVNipOh5KSPj8TdixO9PNZXh64p6Eg2EBRunnwvV+IbY+zAQES 16a4qmZFjXdIz04Eeo1EW8xJwfI5QBJnH1MRn+OttH0Tmd/hpK8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:33:08 2026 by rpki-client