$ rpki-client -vvf repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft (raw, json) Hash identifier: j//IDaR0aK51oEQCJNQ6PoxQ0O6nRRZwZy4g6iCY340= Subject key identifier: 9A:B4:B3:64:6C:7E:CD:92:DD:D7:64:AB:B9:F7:35:1C:77:B6:6D:D3 Authority key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Certificate issuer: /CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Certificate serial: 107B153DFA7E6959E2514F66C1DFEA1BD1BDA454 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft Manifest number: 033F Signing time: Sat 18 Apr 2026 08:41:00 +0000 Manifest this update: Sat 18 Apr 2026 08:36:00 +0000 Manifest next update: Tue 21 Apr 2026 10:39:00 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: JP1YqhEOJY1Cdv/h1dRSKlUNEpZlyXiIJsuj7P3SVio=) 2: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl (hash: COw42i50qFgUGbEER3uU+9pRo+F1mHFlVbdQhi9/NbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 10:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7b:15:3d:fa:7e:69:59:e2:51:4f:66:c1:df:ea:1b:d1:bd:a4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Validity Not Before: Apr 18 08:36:00 2026 GMT Not After : Apr 21 10:39:00 2026 GMT Subject: CN=9AB4B3646C7ECD92DDD764ABB9F7351C77B66DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:2d:a4:be:01:ad:ea:28:9c:4d:71:14:05: 96:4d:c8:e5:c1:02:44:2d:2c:9d:7d:12:06:ac:3b: 55:5a:d8:90:5a:db:16:69:7a:f8:34:d8:d0:2d:e7: a2:7a:6a:cb:7e:f7:99:3d:4a:e9:e2:7e:ee:2d:27: f6:6e:34:63:4d:6f:e1:15:5a:82:17:ed:d8:a8:17: 14:61:d1:28:b5:08:d6:eb:83:2e:6f:b5:46:77:fe: 7e:29:18:66:18:6a:da:28:42:de:fc:51:41:8e:6f: 41:a7:18:df:64:fc:9d:6f:dd:9b:0c:71:de:7d:61: 51:9e:2d:c8:06:84:43:dc:b8:48:06:4e:5a:b1:b5: 5b:7d:13:3f:95:1c:9f:4e:6e:d9:91:09:3c:f8:78: 65:ee:47:68:97:a1:52:6b:8a:be:ae:84:ac:bc:e7: 9b:bb:fb:78:ad:d7:07:df:22:b6:cf:72:2d:7e:ff: 15:8a:20:f1:7a:b3:f6:eb:b1:7d:33:35:2f:c1:37: f5:e8:e0:3c:a7:6c:c8:46:eb:46:f3:63:22:32:b5: c2:95:48:5c:d1:0d:1e:c6:9a:c2:61:7b:01:0c:bb: b9:b0:41:b4:8b:ae:59:b5:73:8a:87:e3:4a:f0:bb: 3e:a6:7a:66:40:d8:ec:6f:24:66:50:c9:21:3b:96: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:B3:64:6C:7E:CD:92:DD:D7:64:AB:B9:F7:35:1C:77:B6:6D:D3 X509v3 Authority Key Identifier: keyid:F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:84:19:fd:72:8a:c4:c9:f1:15:7a:d7:bf:94:1f:2b:fd:04: 6e:86:b9:c7:91:ae:a9:77:b0:ed:08:bb:65:db:0a:aa:a4:5d: 74:1e:72:8f:32:89:c1:90:cd:0f:b2:82:37:d6:9e:1d:a4:72: c6:65:74:c1:54:fd:e9:a6:44:11:3a:09:e7:b5:db:e5:12:9d: f7:cd:f5:01:67:8c:1e:65:d9:56:c2:3f:dc:20:db:b7:92:f9: c9:9d:97:b9:3b:85:67:3d:e5:98:58:06:c3:59:0b:12:e5:87: bd:97:89:2e:03:2a:03:68:8a:65:3d:99:83:ba:da:0e:48:08: 3e:80:69:29:74:9d:42:b7:80:a6:da:02:61:ed:d2:a7:a2:00: 78:d4:aa:4c:52:5f:e3:87:f6:23:76:60:3e:41:c2:a6:e5:16: 23:9b:b5:5b:86:84:cd:0b:af:9e:7d:40:38:1a:dd:59:53:de: 0c:3a:b7:eb:8e:34:dc:eb:aa:7b:74:d3:a0:aa:6e:86:e2:a8: c4:02:5e:9b:ee:13:6a:dc:7e:ed:4c:66:bc:85:86:f9:2d:b5: f6:c7:4f:06:6c:69:48:8f:cd:9a:3b:5e:d6:1d:d9:b9:39:b2: 4f:3c:f8:c0:66:d2:4f:3d:9b:2b:21:d5:83:be:e6:bb:46:a5: 2c:d4:7a:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHsVPfp+aVniUU9mwd/qG9G9pFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgz RTQ0RDZBRjAeFw0yNjA0MTgwODM2MDBaFw0yNjA0MjExMDM5MDBaMDMxMTAvBgNV BAMTKDlBQjRCMzY0NkM3RUNEOTJEREQ3NjRBQkI5RjczNTFDNzdCNjZERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZi2kvgGt6iicTXEUBZZNyOXB AkQtLJ19EgasO1Va2JBa2xZpevg02NAt56J6ast+95k9Sunifu4tJ/ZuNGNNb+EV WoIX7dioFxRh0Si1CNbrgy5vtUZ3/n4pGGYYatooQt78UUGOb0GnGN9k/J1v3ZsM cd59YVGeLcgGhEPcuEgGTlqxtVt9Ez+VHJ9ObtmRCTz4eGXuR2iXoVJrir6uhKy8 55u7+3it1wffIrbPci1+/xWKIPF6s/brsX0zNS/BN/Xo4DynbMhG60bzYyIytcKV SFzRDR7GmsJhewEMu7mwQbSLrlm1c4qH40rwuz6memZA2OxvJGZQySE7luFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmrSzZGx+zZLd12Srufc1HHe2bdMwHwYDVR0j BBgwFoAU8Q3w/T1FW7qV0M6eqifuOD5E1q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMC9GMTBERjBGRDNE NDU1QkJBOTVEMENFOUVBQTI3RUUzODNFNDRENkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VFMzgzRTQ0 RDZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRjEwREYwRkQzRDQ1NUJCQTk1RDBDRTlFQUEyN0VF MzgzRTQ0RDZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuEGf1yisTJ8RV617+UHyv9BG6GuceRrql3 sO0Iu2XbCqqkXXQeco8yicGQzQ+ygjfWnh2kcsZldMFU/emmRBE6Cee12+USnffN 9QFnjB5l2VbCP9wg27eS+cmdl7k7hWc95ZhYBsNZCxLlh72XiS4DKgNoimU9mYO6 2g5ICD6AaSl0nUK3gKbaAmHt0qeiAHjUqkxSX+OH9iN2YD5BwqblFiObtVuGhM0L r559QDga3VlT3gw6t+uONNzrqnt006CqbobiqMQCXpvuE2rcfu1MZryFhvkttfbH TwZsaUiPzZo7XtYd2bk5sk88+MBm0k89mysh1YO+5rtGpSzUekA= -----END CERTIFICATE-----Generated at Mon Apr 20 09:38:12 2026 by rpki-client