$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: DJ/xOr65l6tDJo6RMIw7F54p4ozi0YiWOTV5TGfXI74= Subject key identifier: 81:DF:4C:F6:DD:E6:8C:C2:26:E0:82:D5:CE:12:5F:78:88:CD:0F:6C Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 6B48FB051BC2B6D67B1C6AF55EE10EDBFF840558 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05DE Signing time: Sun 29 Mar 2026 04:00:04 +0000 Manifest this update: Sun 29 Mar 2026 03:55:04 +0000 Manifest next update: Wed 01 Apr 2026 04:47:04 +0000 Files and hashes: 1: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) 2: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 3: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: AaF3rGhGiuq7MGSb2lCZMQgLas/ko677qdswDofDbHU=) 4: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:48:fb:05:1b:c2:b6:d6:7b:1c:6a:f5:5e:e1:0e:db:ff:84:05:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Mar 29 03:55:04 2026 GMT Not After : Apr 1 04:47:04 2026 GMT Subject: CN=81DF4CF6DDE68CC226E082D5CE125F7888CD0F6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:52:00:95:c0:b9:ca:07:ac:e6:9e:db:d5: aa:db:95:bd:aa:6c:f2:dd:cc:c4:ec:18:a8:e4:d6: 5f:78:da:f1:66:f3:e5:95:8b:dc:07:e7:61:ec:51: 6c:51:a4:40:47:e8:0c:69:5f:5d:db:2c:8c:5d:cf: a6:39:4c:c0:ae:bd:d2:e6:d4:79:e1:8c:df:63:47: 04:0b:ac:78:3a:24:98:6b:77:00:ee:91:e9:ff:15: 37:9f:cb:39:fc:a1:6d:d4:e5:56:56:38:fd:9f:61: 73:9b:48:dc:8f:d9:c4:0c:d5:08:b0:bb:de:65:af: 37:1e:58:06:e2:ae:54:47:cf:df:db:d4:90:8c:70: ba:af:17:27:50:96:3e:b8:75:a0:18:66:b3:0a:fc: 87:61:ad:83:9f:65:5b:4f:e6:06:48:62:d2:d2:d8: 40:20:e8:2e:ce:b4:56:5c:6f:78:0b:db:77:23:b7: 8c:0c:21:95:bc:05:04:75:df:92:d3:a3:0b:f9:5d: 89:78:9d:86:2f:67:f1:fb:52:b8:af:ff:08:40:a5: e9:b3:65:8b:9c:da:12:ae:b2:40:c4:36:13:3b:19: 84:71:cf:9c:83:80:97:05:b2:85:42:d5:1a:42:d4: 9d:1a:34:5a:8c:81:7b:d5:7d:77:70:0a:da:d8:ec: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DF:4C:F6:DD:E6:8C:C2:26:E0:82:D5:CE:12:5F:78:88:CD:0F:6C X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:cc:de:20:71:6e:05:57:4e:d0:ac:1c:c3:0a:31:ea:79:98: 87:23:cd:82:d6:7c:60:85:71:3e:56:19:a5:04:69:73:91:d7: f0:ce:a2:1e:34:12:a5:50:80:b2:8f:ed:a2:ab:a6:02:bf:be: ab:c7:f3:ab:e8:a3:91:63:bc:54:fb:3d:bc:d5:6f:d6:3c:a1: da:6a:e2:7b:00:8a:aa:ab:6b:8c:f2:d3:6f:24:ae:21:2a:6e: 53:51:27:4a:ae:bb:81:a7:54:e1:e2:de:2b:d1:13:23:1c:06: a5:9f:f4:cb:8e:6e:de:4b:9a:f3:0e:ea:c4:3d:55:0a:ba:6f: 91:92:d3:36:1c:b5:3c:3f:e7:16:3e:43:99:58:f1:30:47:69: 7c:4e:c1:02:93:e5:a4:ab:43:c2:bd:ac:32:2e:ce:48:69:f5: a6:67:99:18:a1:b6:fe:8d:c3:8d:bf:ba:3d:c5:a7:38:8b:b0: 98:ff:c8:86:43:65:ea:d9:ac:20:24:59:ea:16:8a:af:81:57: e2:59:eb:8d:10:40:aa:a9:d4:56:d7:d2:9a:2d:66:18:10:44: 05:c5:65:50:68:8c:96:d4:e9:05:82:28:9d:f1:11:85:aa:ad: c3:3f:59:05:99:2b:bc:f9:aa:76:ae:39:6c:00:9d:ec:ba:0e: 6c:f3:fd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0j7BRvCttZ7HGr1XuEO2/+EBVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNjAzMjkwMzU1MDRaFw0yNjA0MDEwNDQ3MDRaMDMxMTAvBgNV BAMTKDgxREY0Q0Y2RERFNjhDQzIyNkUwODJENUNFMTI1Rjc4ODhDRDBGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQ1IAlcC5yges5p7b1arblb2q bPLdzMTsGKjk1l942vFm8+WVi9wH52HsUWxRpEBH6AxpX13bLIxdz6Y5TMCuvdLm 1HnhjN9jRwQLrHg6JJhrdwDuken/FTefyzn8oW3U5VZWOP2fYXObSNyP2cQM1Qiw u95lrzceWAbirlRHz9/b1JCMcLqvFydQlj64daAYZrMK/IdhrYOfZVtP5gZIYtLS 2EAg6C7OtFZcb3gL23cjt4wMIZW8BQR135LTowv5XYl4nYYvZ/H7Uriv/whApemz ZYuc2hKuskDENhM7GYRxz5yDgJcFsoVC1RpC1J0aNFqMgXvVfXdwCtrY7FotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgd9M9t3mjMIm4ILVzhJfeIjND2wwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTM3iBxbgVXTtCsHMMKMep5mIcjzYLWfGCF cT5WGaUEaXOR1/DOoh40EqVQgLKP7aKrpgK/vqvH86voo5FjvFT7PbzVb9Y8odpq 4nsAiqqra4zy028kriEqblNRJ0quu4GnVOHi3ivREyMcBqWf9MuObt5LmvMO6sQ9 VQq6b5GS0zYctTw/5xY+Q5lY8TBHaXxOwQKT5aSrQ8K9rDIuzkhp9aZnmRihtv6N w42/uj3FpziLsJj/yIZDZerZrCAkWeoWiq+BV+JZ640QQKqp1FbX0potZhgQRAXF ZVBojJbU6QWCKJ3xEYWqrcM/WQWZK7z5qnauOWwAney6Dmzz/XU= -----END CERTIFICATE-----Generated at Sun Mar 29 12:55:20 2026 by rpki-client