$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: u4hVk31qTKdYo+aIU8rY4PXuuCcNEibGx21a6UZSt9E= Subject key identifier: 0E:D4:84:8C:34:F6:FD:81:E2:F5:F3:FC:E3:2D:C5:D4:05:07:B9:02 Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 51D0AF3C7E12CF8513332357A4CD279B478F9D5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 0341 Signing time: Fri 20 Mar 2026 02:20:02 +0000 Manifest this update: Fri 20 Mar 2026 02:15:02 +0000 Manifest next update: Mon 23 Mar 2026 10:55:02 +0000 Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=) 2: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: whMYbgRcRzgK5ndkMs4NmuV7U8wpOrjxJ18iyMieKJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 10:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d0:af:3c:7e:12:cf:85:13:33:23:57:a4:cd:27:9b:47:8f:9d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Mar 20 02:15:02 2026 GMT Not After : Mar 23 10:55:02 2026 GMT Subject: CN=0ED4848C34F6FD81E2F5F3FCE32DC5D40507B902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a6:f8:f7:26:99:07:52:b0:7f:39:3f:86:f8: fa:37:de:bd:6b:91:ca:95:c6:cd:5f:6f:4b:dc:63: 07:e5:17:cf:64:51:34:77:3c:dd:d5:8e:0e:a3:3c: 7f:19:4e:54:03:e4:22:cd:67:da:07:68:60:ab:4c: 4e:bc:cb:72:11:1e:5d:ed:65:3c:be:99:c1:02:6a: 31:bf:05:3f:70:4e:aa:2c:45:2b:53:7a:73:20:4e: 08:9c:36:f1:0e:eb:e6:55:aa:4b:fd:bd:d2:74:21: 92:bb:0b:ad:44:5d:7c:d0:99:56:0c:98:36:84:39: 63:29:b7:44:ce:58:c0:26:ce:aa:4d:f2:83:e4:e6: b8:38:27:9a:95:34:0a:8b:56:20:be:2b:a7:da:ce: 97:d1:6c:63:92:c4:2f:4b:79:cd:a3:ca:3c:56:c5: 45:ec:3b:c0:e8:cf:4f:6a:3e:23:1e:98:71:67:d2: e2:a4:1d:b4:1d:a7:71:23:af:49:27:e7:31:46:a6: 77:ec:80:31:d5:85:91:f9:84:37:12:78:12:a2:4e: 71:f9:3a:37:27:32:d9:fb:73:88:8e:66:8f:af:55: b1:ae:67:e0:af:12:3c:72:ec:30:93:19:9c:98:1d: 98:79:71:f9:36:0f:05:d5:17:30:13:1f:fb:c8:87: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D4:84:8C:34:F6:FD:81:E2:F5:F3:FC:E3:2D:C5:D4:05:07:B9:02 X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ac:67:3f:a0:3a:d7:08:5d:0b:29:b8:e2:00:65:ff:cb:a6: 91:3c:94:fd:bf:65:9c:85:57:8f:db:cf:de:a1:db:e6:f2:d0: b5:4b:e7:a2:3e:40:6d:37:25:f8:55:86:5f:35:0d:74:7d:41: de:c8:16:e4:8c:46:16:d8:25:2e:99:3c:7c:74:13:9e:53:ca: 7f:eb:a4:1a:5f:f8:46:75:e1:d2:d8:a1:db:65:a8:83:68:7a: 71:50:d5:39:6a:2a:6c:b4:41:8c:3d:ae:7d:75:d5:33:62:44: dd:f5:c7:19:01:db:38:f8:40:a4:f2:a4:ca:a5:76:d8:d0:4e: 16:e1:e0:a7:52:08:32:9f:7c:97:24:ad:e6:36:8b:0b:6b:36: 00:7f:75:79:95:f7:e0:4b:2c:42:a3:74:26:13:49:c8:ff:fa: 67:b5:d1:e1:18:fc:ee:f9:51:10:b4:37:71:c9:8c:1d:07:8f: 8e:de:00:ae:18:d0:5c:d5:48:66:1b:39:c3:3a:65:38:2e:9b: b6:ba:dc:db:73:b0:9e:f9:72:ed:4c:2d:6d:d4:1f:ad:5b:42: cc:30:1e:9a:01:e0:91:ce:80:f2:39:e1:6d:4a:a2:c3:66:01: 5c:70:a3:32:10:4e:56:f6:50:60:99:36:a5:89:84:49:6a:48: 85:d1:29:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdCvPH4Sz4UTMyNXpM0nm0ePnV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNjAzMjAwMjE1MDJaFw0yNjAzMjMxMDU1MDJaMDMxMTAvBgNV BAMTKDBFRDQ4NDhDMzRGNkZEODFFMkY1RjNGQ0UzMkRDNUQ0MDUwN0I5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpvj3JpkHUrB/OT+G+Po33r1r kcqVxs1fb0vcYwflF89kUTR3PN3Vjg6jPH8ZTlQD5CLNZ9oHaGCrTE68y3IRHl3t ZTy+mcECajG/BT9wTqosRStTenMgTgicNvEO6+ZVqkv9vdJ0IZK7C61EXXzQmVYM mDaEOWMpt0TOWMAmzqpN8oPk5rg4J5qVNAqLViC+K6fazpfRbGOSxC9Lec2jyjxW xUXsO8Doz09qPiMemHFn0uKkHbQdp3Ejr0kn5zFGpnfsgDHVhZH5hDcSeBKiTnH5 OjcnMtn7c4iOZo+vVbGuZ+CvEjxy7DCTGZyYHZh5cfk2DwXVFzATH/vIh6xnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtSEjDT2/YHi9fP84y3F1AUHuQIwHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJesZz+gOtcIXQspuOIAZf/LppE8lP2/ZZyF V4/bz96h2+by0LVL56I+QG03JfhVhl81DXR9Qd7IFuSMRhbYJS6ZPHx0E55Tyn/r pBpf+EZ14dLYodtlqINoenFQ1TlqKmy0QYw9rn111TNiRN31xxkB2zj4QKTypMql dtjQThbh4KdSCDKffJckreY2iwtrNgB/dXmV9+BLLEKjdCYTScj/+me10eEY/O75 URC0N3HJjB0Hj47eAK4Y0FzVSGYbOcM6ZTgum7a63NtzsJ75cu1MLW3UH61bQsww HpoB4JHOgPI54W1KosNmAVxwozIQTlb2UGCZNqWJhElqSIXRKeU= -----END CERTIFICATE-----Generated at Fri Mar 20 21:58:37 2026 by rpki-client