$ rpki-client -vvf repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft File: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft (raw, json) Hash identifier: eBiOz89/VSot/HD09cM7uRx6EovmQxEqVD43nKaPdeY= Subject key identifier: B4:9A:C7:0D:60:1B:C9:C5:40:75:4F:7D:08:C9:2A:68:53:B5:98:B5 Authority key identifier: 0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD Certificate issuer: /CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Certificate serial: 574ADDAFD99C52BD2B35FBF496BCAA4B38B11181 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft Manifest number: 0A Signing time: Tue 17 Mar 2026 19:41:31 +0000 Manifest this update: Tue 17 Mar 2026 19:36:31 +0000 Manifest next update: Sat 21 Mar 2026 07:14:31 +0000 Files and hashes: 1: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl (hash: jdfzv74xyFxCqElztAALWwiOyf+oXn8g88k9LTT35zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 07:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4a:dd:af:d9:9c:52:bd:2b:35:fb:f4:96:bc:aa:4b:38:b1:11:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Validity Not Before: Mar 17 19:36:31 2026 GMT Not After : Mar 21 07:14:31 2026 GMT Subject: CN=B49AC70D601BC9C540754F7D08C92A6853B598B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e3:cc:2f:ae:44:b5:db:db:51:c1:7b:ab:56: 3d:95:00:be:63:24:d9:68:5a:29:4b:d8:c9:09:37: 12:05:89:4f:e5:be:25:d9:91:77:33:98:08:b3:33: a5:b0:46:c4:58:bf:b6:dd:e4:3d:0f:5c:a8:b0:a6: e0:f2:02:00:52:9c:b9:74:0a:fc:12:e1:e3:3d:7f: e4:db:00:57:50:f7:29:85:15:c6:4e:44:b2:e1:e2: 13:75:77:4d:ca:4a:c8:b1:9a:1b:20:7e:ba:03:6c: 6a:1d:e0:d2:4d:53:fb:7f:80:1a:fb:d4:f4:10:23: bf:6a:4e:bc:9b:59:92:e0:01:57:0b:4e:0d:47:42: c4:dd:e2:3c:62:45:ed:40:cb:98:8a:d1:4b:6f:4f: 75:a9:60:35:7c:79:6d:d1:02:f7:da:89:a3:a2:ab: d9:04:31:27:73:96:f3:22:64:b7:80:51:4e:80:ae: a2:ca:4c:e4:ca:94:c1:86:8d:25:85:ca:6e:76:72: a5:12:6f:5e:c8:08:b9:ae:5f:ce:08:6f:e5:07:f5: 75:df:6d:69:0c:8e:03:bc:fd:3f:24:01:17:70:d3: 89:e2:95:1d:77:c3:b3:f4:10:a7:84:5e:cb:7c:02: df:bb:21:23:05:43:20:e6:03:b0:81:53:c6:6e:af: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9A:C7:0D:60:1B:C9:C5:40:75:4F:7D:08:C9:2A:68:53:B5:98:B5 X509v3 Authority Key Identifier: keyid:0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:34:ff:39:2e:48:20:91:77:1d:9d:a0:a6:bb:ed:bb:be:fc: 0a:61:e6:02:c4:0a:37:68:f2:ca:42:86:8c:98:cc:24:d3:8a: 87:43:5a:d8:14:d7:a7:50:9e:fd:8a:fd:7b:93:5a:9e:a0:6d: 37:c9:6c:2c:d2:10:24:fc:29:a9:7f:a7:7b:98:1d:61:4a:91: b0:7d:50:ae:54:80:fa:23:36:e1:c9:fa:8d:b7:b2:65:d4:50: a9:8b:9b:8e:5e:51:64:04:44:aa:1e:f9:f5:30:68:69:9e:4e: bc:93:42:11:44:d8:90:eb:91:2d:ff:b2:69:3e:a3:e5:ab:68: 6b:a7:1a:34:51:21:04:c4:2a:37:81:a2:ab:14:27:a1:04:9a: b6:2e:03:f9:ab:13:0f:5f:b9:27:b4:3b:92:da:f4:e5:04:aa: f7:54:98:a6:1b:87:53:8e:31:fb:c2:c6:e7:d2:e5:c8:93:2c: 02:6a:bd:44:fa:2b:40:b7:23:10:76:21:c3:85:58:4a:a7:38: 0d:b9:1f:49:8e:62:f9:d6:8a:a1:d1:8b:51:e3:f3:3d:aa:28: ae:3f:c7:4b:ed:1a:c2:df:12:49:2a:bc:52:56:e2:fb:6a:1e: 03:3b:8b:04:db:66:fe:84:51:b7:82:0f:4a:48:99:ca:6c:64: 12:da:04:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0rdr9mcUr0rNfv0lryqSzixEYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3 MzFFNUNDRDAeFw0yNjAzMTcxOTM2MzFaFw0yNjAzMjEwNzE0MzFaMDMxMTAvBgNV BAMTKEI0OUFDNzBENjAxQkM5QzU0MDc1NEY3RDA4QzkyQTY4NTNCNTk4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ48wvrkS129tRwXurVj2VAL5j JNloWilL2MkJNxIFiU/lviXZkXczmAizM6WwRsRYv7bd5D0PXKiwpuDyAgBSnLl0 CvwS4eM9f+TbAFdQ9ymFFcZORLLh4hN1d03KSsixmhsgfroDbGod4NJNU/t/gBr7 1PQQI79qTrybWZLgAVcLTg1HQsTd4jxiRe1Ay5iK0UtvT3WpYDV8eW3RAvfaiaOi q9kEMSdzlvMiZLeAUU6ArqLKTOTKlMGGjSWFym52cqUSb17ICLmuX84Ib+UH9XXf bWkMjgO8/T8kARdw04nilR13w7P0EKeEXst8At+7ISMFQyDmA7CBU8Zur7Y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJrHDWAbycVAdU99CMkqaFO1mLUwHwYDVR0j BBgwFoAUDz29lBl81FgJV7Tz0Ju2WHMeXM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTgwNmQzMC1lZTA1LTQ1MGYtOTQ2Ni03ZjkwOGU5Y2M3ZTQvMC8wRjNEQkQ5NDE5 N0NENDU4MDk1N0I0RjNEMDlCQjY1ODczMUU1Q0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3MzFF NUNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU4MDZkMzAtZWUwNS00NTBmLTk0 NjYtN2Y5MDhlOWNjN2U0LzAvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2 NTg3MzFFNUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg0/zkuSCCRdx2doKa77bu+/Aph5gLECjdo 8spChoyYzCTTiodDWtgU16dQnv2K/XuTWp6gbTfJbCzSECT8Kal/p3uYHWFKkbB9 UK5UgPojNuHJ+o23smXUUKmLm45eUWQERKoe+fUwaGmeTryTQhFE2JDrkS3/smk+ o+WraGunGjRRIQTEKjeBoqsUJ6EEmrYuA/mrEw9fuSe0O5La9OUEqvdUmKYbh1OO MfvCxufS5ciTLAJqvUT6K0C3IxB2IcOFWEqnOA25H0mOYvnWiqHRi1Hj8z2qKK4/ x0vtGsLfEkkqvFJW4vtqHgM7iwTbZv6EUbeCD0pImcpsZBLaBEw= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:53 2026 by rpki-client