$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft File: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft (raw, json) Hash identifier: E4EOwSNXopWF5DMcHrqiZZE5F8zu61fVqXm/1g4l3rI= Subject key identifier: 1D:69:C3:41:4A:57:56:87:3D:52:27:D9:39:FF:BD:D4:58:DD:D2:5F Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD Certificate issuer: /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Certificate serial: 677C1A27593A03AF3906FD5659983D65DB4AD4D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft Manifest number: 0560 Signing time: Wed 25 Mar 2026 00:11:28 +0000 Manifest this update: Wed 25 Mar 2026 00:06:28 +0000 Manifest next update: Sat 28 Mar 2026 00:33:28 +0000 Files and hashes: 1: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 624g30p2voUe7YOI6fxkypPwiKquVP6kSsxSvqN561I=) 2: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: ceBLgXby2aRGoAlIoNZmevBafi2ZgxeFVTgfIExcxzY=) 3: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: j21itrf8qD4AmUrxncy40ymX8U/GV6CW8szjNUym4g4=) 4: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl (hash: 4wuR8mWbFksNM/VZ/ohHf8fsrjdb2fq9YWel9idilMQ=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: Ts5xtS1oQbReAZqtallUwZhr/nW63EWdb9tsEvZsE08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7c:1a:27:59:3a:03:af:39:06:fd:56:59:98:3d:65:db:4a:d4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Validity Not Before: Mar 25 00:06:28 2026 GMT Not After : Mar 28 00:33:28 2026 GMT Subject: CN=1D69C3414A5756873D5227D939FFBDD458DDD25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:e5:04:3f:ae:f3:27:43:86:ed:7b:82:57: bb:c0:6f:84:b2:93:0f:12:47:28:d9:83:33:21:a3: 55:e9:3d:0c:d4:57:28:75:80:ea:2e:b0:d9:01:e8: 44:1e:b9:37:3d:5a:a7:19:40:23:95:56:d1:35:dd: 9c:63:f9:5c:81:18:e7:5a:8a:27:9a:04:81:79:8a: 4e:d2:54:3c:ab:6e:26:e2:64:11:43:52:4d:29:d9: cc:fd:2c:93:85:51:48:b1:6e:a5:24:4b:96:d7:54: 64:21:25:e7:bb:d6:86:5c:ed:b8:3f:34:94:46:88: 89:e3:10:91:ac:7d:36:2e:5f:25:00:07:be:9a:33: 9a:54:43:f1:4f:10:4b:82:31:b5:60:e5:ef:c4:c2: 44:90:63:25:0c:8a:57:80:8b:28:e0:65:eb:ee:c4: 73:d1:22:74:df:7f:f1:be:51:13:e2:e7:06:4a:af: f9:31:d9:b7:df:c0:da:49:2e:52:9c:bb:28:e4:57: 3d:f9:88:50:57:2a:c0:6a:b7:22:f7:a5:e1:07:f1: 01:b4:88:31:46:d5:09:1b:e4:2e:93:d5:68:0d:88: 1d:6b:e9:84:66:39:29:47:b2:9a:9f:ae:07:9e:e6: 56:98:e9:9f:8f:e2:26:37:ba:3e:07:6d:66:12:36: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:69:C3:41:4A:57:56:87:3D:52:27:D9:39:FF:BD:D4:58:DD:D2:5F X509v3 Authority Key Identifier: keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:86:2d:65:68:ef:81:0d:76:0f:9c:51:5b:c0:69:f2:39:a1: 1a:0e:49:fe:fd:ec:34:66:ce:2d:ec:9f:7e:9c:47:45:33:37: 7c:33:de:ee:3f:8d:df:68:0e:14:df:6f:47:58:90:45:8b:dd: a8:b8:42:89:5f:7c:8a:c4:21:9e:48:92:bd:f0:09:7a:ca:28: bb:87:5a:fc:24:bf:c5:c1:96:b5:eb:2c:80:c4:b0:e2:08:93: 5d:c5:5f:03:6a:bb:4e:14:80:41:2e:ff:c8:b7:dc:00:a4:9e: 67:05:6f:6d:8c:cf:59:22:8c:4c:7b:57:15:25:43:ca:e3:46: e2:0b:0d:52:1f:45:b3:75:23:d8:3a:98:ac:de:8a:41:9a:80: 05:28:27:cc:48:16:d3:f7:6f:01:34:3a:bc:d6:0e:38:54:0e: e5:dc:fd:18:65:ea:f1:79:5d:91:be:4d:d2:5d:3d:be:14:95: aa:87:c7:97:5e:25:fc:75:b9:3d:7d:f9:39:f0:9d:a5:63:ad: d1:58:df:bf:07:e4:38:3b:9a:78:a5:11:05:f6:da:ae:aa:13: 69:6f:1a:a4:88:dc:e5:ee:4e:0f:59:37:82:6a:4f:5c:97:db: da:f4:7e:a9:7d:8c:64:f2:4f:65:8d:5a:77:32:76:6c:dc:4b: 1a:44:8c:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3waJ1k6A685Bv1WWZg9ZdtK1NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy Q0M5QThBRDAeFw0yNjAzMjUwMDA2MjhaFw0yNjAzMjgwMDMzMjhaMDMxMTAvBgNV BAMTKDFENjlDMzQxNEE1NzU2ODczRDUyMjdEOTM5RkZCREQ0NThEREQyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLW+UEP67zJ0OG7XuCV7vAb4Sy kw8SRyjZgzMho1XpPQzUVyh1gOousNkB6EQeuTc9WqcZQCOVVtE13Zxj+VyBGOda iieaBIF5ik7SVDyrbibiZBFDUk0p2cz9LJOFUUixbqUkS5bXVGQhJee71oZc7bg/ NJRGiInjEJGsfTYuXyUAB76aM5pUQ/FPEEuCMbVg5e/EwkSQYyUMileAiyjgZevu xHPRInTff/G+URPi5wZKr/kx2bffwNpJLlKcuyjkVz35iFBXKsBqtyL3peEH8QG0 iDFG1Qkb5C6T1WgNiB1r6YRmOSlHspqfrgee5laY6Z+P4iY3uj4HbWYSNsv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHWnDQUpXVoc9UifZOf+91Fjd0l8wHwYDVR0j BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5 QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5 QThBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0 MzMyQ0M5QThBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWGLWVo74ENdg+cUVvAafI5oRoOSf797DRm zi3sn36cR0UzN3wz3u4/jd9oDhTfb0dYkEWL3ai4QolffIrEIZ5Ikr3wCXrKKLuH Wvwkv8XBlrXrLIDEsOIIk13FXwNqu04UgEEu/8i33ACknmcFb22Mz1kijEx7VxUl Q8rjRuILDVIfRbN1I9g6mKzeikGagAUoJ8xIFtP3bwE0OrzWDjhUDuXc/Rhl6vF5 XZG+TdJdPb4UlaqHx5deJfx1uT19+TnwnaVjrdFY378H5Dg7mnilEQX22q6qE2lv GqSI3OXuTg9ZN4JqT1yX29r0fql9jGTyT2WNWncydmzcSxpEjCY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:46 2026 by rpki-client