$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: sWPclnMXZv7/rywcW89rXJllDsbRTLKAHF5FQBD/L5M= Subject key identifier: 35:79:D0:9A:EA:1A:D7:A2:E3:14:A8:20:69:61:40:8F:A8:D6:BD:1D Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 4F57E686E13F02DA2FE531F08E5769C0D450CDD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 056A Signing time: Sat 21 Mar 2026 09:22:16 +0000 Manifest this update: Sat 21 Mar 2026 09:17:16 +0000 Manifest next update: Tue 24 Mar 2026 11:15:16 +0000 Files and hashes: 1: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: gk0DAohKcThSmOdSR79/Sy/pGHi/Vt14EBPhvmmrnN8=) 2: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 3: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 4: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 5: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=) 6: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: Fv3PzH/PpXCb1xS63tcNe76mWTrdMYYDd+HvPixKLKI=) 7: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 8: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 9: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 10: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 11: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=) 12: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 13: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 14: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=) 15: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 16: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 17: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 18: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=) 19: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: AM+aiplYUdhH8KU+dJBKvmqgp4vQ5YGIVFo2krKpct4=) 20: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 21: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 22: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 23: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 24: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 11:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:57:e6:86:e1:3f:02:da:2f:e5:31:f0:8e:57:69:c0:d4:50:cd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Mar 21 09:17:16 2026 GMT Not After : Mar 24 11:15:16 2026 GMT Subject: CN=3579D09AEA1AD7A2E314A8206961408FA8D6BD1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:07:85:63:55:41:91:2f:3b:36:f2:84:55: 82:f8:c7:28:b0:67:61:a8:a9:01:62:54:0b:32:84: 02:20:57:fe:1f:24:5d:f8:56:e7:d5:18:3f:48:b8: 52:98:d6:59:9a:62:2c:82:ad:3a:1a:bc:6b:03:1d: dd:bb:b4:3a:8f:89:f6:ab:ca:17:3d:e5:62:d9:cb: d8:16:2c:e7:7e:58:63:9e:a0:e8:51:38:57:20:df: 08:a6:3a:b8:44:85:17:5c:bc:d0:da:34:b3:da:8f: 23:4b:37:1e:7b:98:50:d7:f0:dc:9d:8f:69:b1:da: 87:d5:27:4c:0c:21:76:e0:0c:04:75:b4:a6:4f:20: 25:5b:ca:e4:4c:5f:83:b4:63:87:07:bc:a7:df:82: 33:3f:bf:4c:f4:5f:61:66:d3:e5:80:41:79:b6:f4: 5e:6b:4c:a8:f2:db:b4:6b:5b:c2:76:f0:16:6e:31: 9e:d5:29:1b:ee:77:30:42:b4:71:02:3f:fa:d3:07: 50:b3:2d:54:14:15:59:88:a0:ab:ec:4d:6a:c4:96: 71:55:8f:87:70:84:b2:54:3d:05:34:05:ec:72:11: 94:0f:40:05:18:8d:7e:c7:8f:73:14:d1:b6:54:96: 57:a0:2f:88:9f:1f:36:a8:96:ce:2f:21:5b:fc:a9: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:D0:9A:EA:1A:D7:A2:E3:14:A8:20:69:61:40:8F:A8:D6:BD:1D X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:4a:dd:51:24:7f:33:b0:d9:0f:4d:09:38:0f:44:71:81: fc:f7:1f:6c:55:99:e1:8e:b3:fc:ca:4b:d6:36:5d:19:56:8b: d8:72:e6:c0:50:4d:3b:a6:dd:43:34:f7:cb:91:1f:5d:cf:7c: 25:41:d7:1e:04:3f:1f:1b:90:ef:75:d6:7c:8e:a5:fb:c4:09: 0c:81:7a:1b:5c:1d:4c:3e:b4:47:23:bb:05:32:e8:1e:6e:f9: 94:92:6a:36:1c:4f:fd:44:f9:3d:04:40:22:52:d1:a0:bb:10: da:a3:23:cf:81:90:fe:ba:1e:73:ad:8c:93:27:62:e1:25:d1: b0:a6:24:af:e1:ca:68:2e:ef:94:e7:5c:91:96:23:3f:16:e6: 3e:5d:0f:8c:5d:39:c1:f5:2d:5d:a5:47:b3:02:00:be:6e:a6: 37:6a:c9:97:35:e1:b4:b0:d3:63:8a:59:9d:18:b5:35:a2:c3: 73:58:0d:3a:66:84:51:ca:c4:6c:17:32:14:fc:02:f0:39:3d: 32:56:ff:f4:34:dd:87:64:c4:57:53:6f:66:a7:ed:89:89:83: 37:1f:9a:62:ce:dd:c0:f7:03:a2:0c:21:ca:d9:ba:84:8c:99: fe:ea:93:ac:a5:f6:ff:92:9f:fd:15:49:25:9f:a9:32:61:68: 01:36:6e:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1fmhuE/Atov5THwjldpwNRQzdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNjAzMjEwOTE3MTZaFw0yNjAzMjQxMTE1MTZaMDMxMTAvBgNV BAMTKDM1NzlEMDlBRUExQUQ3QTJFMzE0QTgyMDY5NjE0MDhGQThENkJEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyweFY1VBkS87NvKEVYL4xyiw Z2GoqQFiVAsyhAIgV/4fJF34VufVGD9IuFKY1lmaYiyCrToavGsDHd27tDqPifar yhc95WLZy9gWLOd+WGOeoOhROFcg3wimOrhEhRdcvNDaNLPajyNLNx57mFDX8Nyd j2mx2ofVJ0wMIXbgDAR1tKZPICVbyuRMX4O0Y4cHvKffgjM/v0z0X2Fm0+WAQXm2 9F5rTKjy27RrW8J28BZuMZ7VKRvudzBCtHECP/rTB1CzLVQUFVmIoKvsTWrElnFV j4dwhLJUPQU0BexyEZQPQAUYjX7Hj3MU0bZUllegL4ifHzaols4vIVv8qRiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXnQmuoa16LjFKggaWFAj6jWvR0wHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3+St1RJH8zsNkPTQk4D0Rxgfz3H2xVmeGO s/zKS9Y2XRlWi9hy5sBQTTum3UM098uRH13PfCVB1x4EPx8bkO911nyOpfvECQyB ehtcHUw+tEcjuwUy6B5u+ZSSajYcT/1E+T0EQCJS0aC7ENqjI8+BkP66HnOtjJMn YuEl0bCmJK/hymgu75TnXJGWIz8W5j5dD4xdOcH1LV2lR7MCAL5upjdqyZc14bSw 02OKWZ0YtTWiw3NYDTpmhFHKxGwXMhT8AvA5PTJW//Q03YdkxFdTb2an7YmJgzcf mmLO3cD3A6IMIcrZuoSMmf7qk6yl9v+Sn/0VSSWfqTJhaAE2bkw= -----END CERTIFICATE-----Generated at Sat Mar 21 18:18:46 2026 by rpki-client