$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft File: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft (raw, json) Hash identifier: sXD8ruH59BRoIEuvV9cTJHU0UGBvA2BlyzYYCHMp4B8= Subject key identifier: B9:4B:A9:10:22:CF:0B:3B:EA:01:38:E2:6D:A1:94:36:89:B3:90:50 Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD Certificate issuer: /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Certificate serial: 2338CCB8620092F8EA23CF5DB977C50875A57A2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft Manifest number: 055F Signing time: Sun 22 Mar 2026 20:41:30 +0000 Manifest this update: Sun 22 Mar 2026 20:36:30 +0000 Manifest next update: Thu 26 Mar 2026 00:08:30 +0000 Files and hashes: 1: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 624g30p2voUe7YOI6fxkypPwiKquVP6kSsxSvqN561I=) 2: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: Ts5xtS1oQbReAZqtallUwZhr/nW63EWdb9tsEvZsE08=) 3: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: ceBLgXby2aRGoAlIoNZmevBafi2ZgxeFVTgfIExcxzY=) 4: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: j21itrf8qD4AmUrxncy40ymX8U/GV6CW8szjNUym4g4=) 5: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl (hash: 9sUmhOaEILmjxIIYQAtH55W0EwsLeBHzvPip0NhNYFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 00:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:38:cc:b8:62:00:92:f8:ea:23:cf:5d:b9:77:c5:08:75:a5:7a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Validity Not Before: Mar 22 20:36:30 2026 GMT Not After : Mar 26 00:08:30 2026 GMT Subject: CN=B94BA91022CF0B3BEA0138E26DA1943689B39050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:63:f9:9d:5e:f7:5b:41:fb:74:bd:97:b3: 29:dc:23:57:f4:6e:0d:e9:58:6c:f3:48:91:d8:40: f1:38:6a:a9:8a:ad:64:e3:e0:a8:64:0e:da:58:66: 17:bb:df:ea:e9:d8:51:fa:4b:34:98:1a:ca:79:26: ab:c9:af:9d:20:85:ad:e2:cc:6f:f8:23:be:28:f8: 5e:b0:dc:ea:e6:7c:a3:83:79:b6:54:25:5a:c4:91: bf:ca:d4:10:02:11:f3:3a:d4:7d:a4:97:18:28:bc: a6:66:b3:42:37:f1:de:03:3b:c7:e7:34:50:84:1e: e9:56:5c:7c:f4:de:9c:3c:46:ba:94:c0:86:3a:a0: 4e:ed:46:2a:7a:a0:e6:83:0f:28:e5:23:b9:df:40: dc:bd:50:88:c5:b3:3d:47:c9:7d:da:b1:74:74:99: ff:03:ef:99:e9:c2:1d:42:47:4e:72:fd:e2:6b:62: 60:d5:dc:cd:92:e0:9f:19:2a:1f:95:eb:8a:e3:bd: e4:22:4d:97:25:78:0b:66:57:87:7d:17:ad:30:e5: e2:63:65:e9:9c:27:9c:34:a9:97:40:02:10:18:3b: f2:16:1e:53:15:64:8c:98:d1:f2:b3:f0:f9:43:fe: ab:89:0c:37:2a:fe:bb:d7:15:37:06:ba:99:48:bf: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4B:A9:10:22:CF:0B:3B:EA:01:38:E2:6D:A1:94:36:89:B3:90:50 X509v3 Authority Key Identifier: keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:84:2a:f9:fb:34:cb:28:b9:2e:c7:68:52:27:d6:fa:af:74: 61:d4:14:c9:61:19:28:69:33:19:40:18:b3:1c:0b:ac:31:6e: 99:55:c2:b2:be:8e:d7:3e:eb:90:8f:84:44:7f:1d:5a:64:4b: 4e:0e:18:69:2c:d9:0f:f6:33:d5:b8:19:7e:18:d3:b5:ef:f0: 63:08:3b:20:f1:d5:8e:1f:3a:e1:f1:1b:c4:ee:d4:a7:63:d3: 33:51:b1:33:60:61:2c:f1:2c:60:b6:a7:29:8d:ae:b1:07:78: ed:0c:b3:c5:44:82:8b:5b:12:04:b3:0d:10:75:2b:3c:3f:d9: 26:7c:fa:87:a5:b2:e3:a1:d8:f4:40:e6:57:62:24:77:f6:f0: 5e:84:26:c4:0a:70:30:7a:5c:6f:7e:62:92:01:86:ed:0b:56: dd:2d:6d:57:08:46:50:73:d1:dd:8a:b9:d6:4a:4a:b6:7d:b6: a2:de:f0:1c:2d:54:e3:91:16:b9:ee:c6:2f:dc:8f:d5:c9:7f: 36:9a:c4:1a:6e:a5:ff:e7:3c:18:ba:b7:56:59:44:b8:58:5d: 2f:22:f4:38:3e:ad:98:89:5e:08:c4:a7:fe:5f:46:50:99:af: 52:db:74:63:58:ed:a3:dc:4b:48:ea:52:b8:66:a8:11:a3:40: b9:83:25:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzjMuGIAkvjqI89duXfFCHWlei0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy Q0M5QThBRDAeFw0yNjAzMjIyMDM2MzBaFw0yNjAzMjYwMDA4MzBaMDMxMTAvBgNV BAMTKEI5NEJBOTEwMjJDRjBCM0JFQTAxMzhFMjZEQTE5NDM2ODlCMzkwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqE2P5nV73W0H7dL2XsyncI1f0 bg3pWGzzSJHYQPE4aqmKrWTj4KhkDtpYZhe73+rp2FH6SzSYGsp5JqvJr50gha3i zG/4I74o+F6w3OrmfKODebZUJVrEkb/K1BACEfM61H2klxgovKZms0I38d4DO8fn NFCEHulWXHz03pw8RrqUwIY6oE7tRip6oOaDDyjlI7nfQNy9UIjFsz1HyX3asXR0 mf8D75npwh1CR05y/eJrYmDV3M2S4J8ZKh+V64rjveQiTZcleAtmV4d9F60w5eJj ZemcJ5w0qZdAAhAYO/IWHlMVZIyY0fKz8PlD/quJDDcq/rvXFTcGuplIv0cvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUupECLPCzvqATjibaGUNomzkFAwHwYDVR0j BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5 QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5 QThBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0 MzMyQ0M5QThBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCEKvn7NMsouS7HaFIn1vqvdGHUFMlhGShp MxlAGLMcC6wxbplVwrK+jtc+65CPhER/HVpkS04OGGks2Q/2M9W4GX4Y07Xv8GMI OyDx1Y4fOuHxG8Tu1Kdj0zNRsTNgYSzxLGC2pymNrrEHeO0Ms8VEgotbEgSzDRB1 Kzw/2SZ8+oelsuOh2PRA5ldiJHf28F6EJsQKcDB6XG9+YpIBhu0LVt0tbVcIRlBz 0d2KudZKSrZ9tqLe8BwtVOORFrnuxi/cj9XJfzaaxBpupf/nPBi6t1ZZRLhYXS8i 9Dg+rZiJXgjEp/5fRlCZr1LbdGNY7aPcS0jqUrhmqBGjQLmDJaE= -----END CERTIFICATE-----Generated at Tue Mar 24 22:59:24 2026 by rpki-client