$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: tAfySi7AHeuq07Onm5bgPrJnDuB2VZqffkJ+qeSV1nI= Subject key identifier: 0C:2C:6A:8C:65:A9:3E:C1:86:62:05:AD:59:67:32:0B:9D:80:7E:68 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 315EFB6C445BD96E0B8C78E9B2586E5F61BF7E1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 0219 Signing time: Thu 12 Mar 2026 00:01:43 +0000 Manifest this update: Wed 11 Mar 2026 23:56:43 +0000 Manifest next update: Sun 15 Mar 2026 04:48:43 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: an07ySIq2PmKu4KFryZuZgvSduyxZKdjYFueBjaNedE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 04:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5e:fb:6c:44:5b:d9:6e:0b:8c:78:e9:b2:58:6e:5f:61:bf:7e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Mar 11 23:56:43 2026 GMT Not After : Mar 15 04:48:43 2026 GMT Subject: CN=0C2C6A8C65A93EC1866205AD5967320B9D807E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:72:84:b4:74:e1:e9:06:78:3b:f0:fb:df: b3:a0:c0:e2:87:9b:87:01:f3:00:98:2f:66:1b:a4: ce:7e:5e:ec:26:5d:e9:b3:61:7e:29:75:d1:62:19: 15:5f:97:ac:d5:b4:ef:8a:bd:b8:3f:15:10:4b:66: b4:70:c7:e8:d5:82:f3:08:fe:28:3c:25:9c:9b:98: 75:d0:17:bb:5e:ab:e2:c5:75:a5:ab:1f:ed:be:e8: 58:56:64:0e:4a:8c:7f:1a:d8:00:c0:86:3f:80:fb: 00:49:09:c2:5c:9f:b5:fa:e2:70:c2:cf:f8:2a:68: ef:8f:d4:64:fa:98:6c:9c:f7:e8:0f:25:95:0e:ff: 24:65:8c:79:29:53:38:84:ee:0a:d0:36:f4:12:58: a5:f6:e7:2a:2d:b3:03:89:09:f6:7c:75:59:ce:69: ed:98:3a:ff:7b:ee:c8:0a:d4:90:de:5f:bf:35:51: d2:1c:fb:b7:3c:63:f9:02:30:d3:91:0b:a7:a0:10: 72:08:a9:f4:e9:8f:d3:33:85:e6:7f:64:6b:92:22: 7a:03:05:9a:bf:72:1d:2c:26:96:f7:52:a1:39:2c: 58:be:7a:08:36:84:c9:73:37:e3:5f:2d:f6:53:93: 74:bc:cf:6d:37:70:a6:0c:5d:9b:ce:13:21:a6:32: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:6A:8C:65:A9:3E:C1:86:62:05:AD:59:67:32:0B:9D:80:7E:68 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:47:fc:b0:e9:77:d2:e2:d6:e3:f9:35:1f:58:7c:74:35:a9: 0a:94:6d:c9:19:ce:d3:c6:f7:78:45:69:21:5f:4e:0e:88:e0: 2f:0d:f1:c8:1b:97:d6:e5:99:c3:a7:c9:f6:53:43:5a:60:69: 80:0c:5f:08:1a:4a:57:46:c7:83:44:02:f2:1e:63:d1:85:04: 36:cc:b5:41:ba:46:ed:17:00:68:bb:2c:76:83:2f:ca:fa:8f: cd:41:ab:52:5e:1e:b4:c0:fc:3b:a4:cd:3b:9e:f9:d5:95:b8: bf:e8:d0:7a:f4:7a:b8:ae:d4:90:7a:50:be:85:d5:9e:93:90: 9a:54:f4:58:9c:a8:ae:1a:71:cf:dc:e1:6f:b4:0c:07:62:52: c1:a6:73:5a:06:bb:31:4e:13:6a:2b:21:fd:77:5a:05:5d:5a: cc:bf:6a:23:79:83:89:80:d8:80:0c:0b:16:10:cb:bb:15:fe: db:a4:e1:5d:2f:6c:48:9f:e3:af:8a:ae:d4:69:fd:6d:06:d9: 90:12:14:ec:2d:ad:11:e6:90:9a:89:59:29:59:8c:90:9f:09: e9:35:e8:a9:0e:ff:48:09:3f:87:af:65:b0:d9:3d:e1:0c:a2: ea:33:26:76:1b:a3:bf:53:26:82:ca:cf:ec:01:ff:6a:73:c5: cd:ad:10:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMV77bERb2W4LjHjpslhuX2G/fhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNjAzMTEyMzU2NDNaFw0yNjAzMTUwNDQ4NDNaMDMxMTAvBgNV BAMTKDBDMkM2QThDNjVBOTNFQzE4NjYyMDVBRDU5NjczMjBCOUQ4MDdFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2U3KEtHTh6QZ4O/D737OgwOKH m4cB8wCYL2YbpM5+XuwmXemzYX4pddFiGRVfl6zVtO+Kvbg/FRBLZrRwx+jVgvMI /ig8JZybmHXQF7teq+LFdaWrH+2+6FhWZA5KjH8a2ADAhj+A+wBJCcJcn7X64nDC z/gqaO+P1GT6mGyc9+gPJZUO/yRljHkpUziE7grQNvQSWKX25yotswOJCfZ8dVnO ae2YOv977sgK1JDeX781UdIc+7c8Y/kCMNORC6egEHIIqfTpj9MzheZ/ZGuSInoD BZq/ch0sJpb3UqE5LFi+egg2hMlzN+NfLfZTk3S8z203cKYMXZvOEyGmMiJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDCxqjGWpPsGGYgWtWWcyC52AfmgwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5H/LDpd9Li1uP5NR9YfHQ1qQqUbckZztPG 93hFaSFfTg6I4C8N8cgbl9blmcOnyfZTQ1pgaYAMXwgaSldGx4NEAvIeY9GFBDbM tUG6Ru0XAGi7LHaDL8r6j81Bq1JeHrTA/DukzTue+dWVuL/o0Hr0eriu1JB6UL6F 1Z6TkJpU9FicqK4acc/c4W+0DAdiUsGmc1oGuzFOE2orIf13WgVdWsy/aiN5g4mA 2IAMCxYQy7sV/tuk4V0vbEif46+KrtRp/W0G2ZASFOwtrRHmkJqJWSlZjJCfCek1 6KkO/0gJP4evZbDZPeEMouozJnYbo79TJoLKz+wB/2pzxc2tEA0= -----END CERTIFICATE-----Generated at Sat Mar 14 00:40:26 2026 by rpki-client