$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: Ie2TKjqrc7JDdpb6ufiCVY22Yn1zuNSgjuxWD7q6nfM= Subject key identifier: 1B:96:9C:AD:D6:5D:91:21:B4:16:79:03:C1:3E:E0:75:74:6B:D1:28 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 1FE70CF2B0B60F45F071F40B47A97EBB8BD35184 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 03DC Signing time: Mon 23 Mar 2026 08:12:28 +0000 Manifest this update: Mon 23 Mar 2026 08:07:28 +0000 Manifest next update: Thu 26 Mar 2026 11:30:28 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) 2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: wjOiv0M5VcETO0i3XdkKid3Etkxh34YMNCDXPYxNVpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e7:0c:f2:b0:b6:0f:45:f0:71:f4:0b:47:a9:7e:bb:8b:d3:51:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Mar 23 08:07:28 2026 GMT Not After : Mar 26 11:30:28 2026 GMT Subject: CN=1B969CADD65D9121B4167903C13EE075746BD128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:a7:c1:09:cd:cd:7d:1c:7e:e4:74:33:72: a8:3b:e4:ae:e5:16:63:d4:42:52:53:9f:cd:72:77: 37:6d:29:0d:f5:8e:2c:a8:90:b8:f9:d6:ab:ba:fe: 40:7b:c9:d3:c0:7e:71:bb:19:66:2d:0b:8a:5f:2a: 7a:fb:46:b8:2e:a0:86:47:37:c9:94:97:45:22:4c: ab:69:00:43:a6:02:e3:8f:f2:00:0f:a0:ce:47:e1: b2:02:94:19:93:c4:18:2b:01:87:29:f1:9d:e9:2c: 7f:b7:b1:db:09:cc:d4:d8:99:e7:d9:8f:ea:10:56: 52:12:b6:b0:71:44:72:44:4b:2c:9a:08:b2:f2:17: 5d:2f:12:67:a6:69:fc:53:94:ae:d8:6f:52:f5:3c: 5d:4f:45:a0:43:3b:15:d2:65:9a:da:31:2a:71:af: 9a:8b:c3:0f:2b:45:c1:a7:72:85:f3:91:6f:0a:33: 3c:14:5c:54:5f:35:d8:ff:16:f6:7c:dc:09:df:c9: 72:06:c3:5e:12:7e:a1:7c:69:b4:89:9b:6e:2c:c8: 5a:c7:2c:e0:53:c7:6c:d0:16:80:6f:73:5e:06:00: c7:d6:f7:5f:10:e8:fd:5c:4c:2b:56:57:c3:13:36: 40:2b:49:f7:0c:35:88:b0:6e:dc:35:bd:f9:f3:fb: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:96:9C:AD:D6:5D:91:21:B4:16:79:03:C1:3E:E0:75:74:6B:D1:28 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4d:25:dd:a2:de:73:11:cf:4e:ac:52:b5:88:87:48:5a:0d: 17:eb:fe:e4:7d:7f:b3:7a:a1:49:27:eb:7e:b0:85:8f:39:28: 4f:f4:77:7a:18:6e:85:eb:cf:cf:1c:64:c0:43:81:68:86:74: c2:84:28:82:19:db:ea:f3:1a:20:bb:e4:62:23:bd:b2:f8:d5: 34:39:dd:2e:15:12:c6:2f:c5:99:a5:55:ac:7f:62:f6:06:82: 6b:2b:84:34:8e:7b:11:4e:3f:a9:77:4b:3e:9d:28:1d:4c:e4: af:2a:f4:f3:c9:e5:39:c6:99:a7:53:71:1f:1f:6c:0b:32:b3: d1:fe:10:55:db:8f:5a:bb:e3:5c:50:a2:51:1c:e3:8e:e2:f8: 59:a6:0a:a0:9a:0f:35:bb:1f:0b:89:a2:3e:3d:bd:6b:8a:cc: 99:3d:54:55:75:a3:dc:14:47:38:5e:91:08:d2:b7:43:47:b8: ad:2d:f8:10:d9:fa:e9:0f:4e:1f:8a:63:c6:25:ea:a2:f7:1a: 06:ea:0b:21:c8:9f:19:b6:30:50:8d:31:2e:aa:22:84:bf:15: f0:f8:98:7a:46:a4:a4:1c:69:57:18:86:22:ec:5a:2d:73:07: 61:6a:58:ca:93:8b:5e:96:68:03:ce:c7:54:2d:40:57:ba:54: 37:3c:fd:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+cM8rC2D0XwcfQLR6l+u4vTUYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNjAzMjMwODA3MjhaFw0yNjAzMjYxMTMwMjhaMDMxMTAvBgNV BAMTKDFCOTY5Q0FERDY1RDkxMjFCNDE2NzkwM0MxM0VFMDc1NzQ2QkQxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLKfBCc3NfRx+5HQzcqg75K7l FmPUQlJTn81ydzdtKQ31jiyokLj51qu6/kB7ydPAfnG7GWYtC4pfKnr7RrguoIZH N8mUl0UiTKtpAEOmAuOP8gAPoM5H4bIClBmTxBgrAYcp8Z3pLH+3sdsJzNTYmefZ j+oQVlIStrBxRHJESyyaCLLyF10vEmemafxTlK7Yb1L1PF1PRaBDOxXSZZraMSpx r5qLww8rRcGncoXzkW8KMzwUXFRfNdj/FvZ83AnfyXIGw14SfqF8abSJm24syFrH LOBTx2zQFoBvc14GAMfW918Q6P1cTCtWV8MTNkArSfcMNYiwbtw1vfnz+0IZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG5acrdZdkSG0FnkDwT7gdXRr0SgwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtNJd2i3nMRz06sUrWIh0haDRfr/uR9f7N6 oUkn636whY85KE/0d3oYboXrz88cZMBDgWiGdMKEKIIZ2+rzGiC75GIjvbL41TQ5 3S4VEsYvxZmlVax/YvYGgmsrhDSOexFOP6l3Sz6dKB1M5K8q9PPJ5TnGmadTcR8f bAsys9H+EFXbj1q741xQolEc447i+FmmCqCaDzW7HwuJoj49vWuKzJk9VFV1o9wU RzhekQjSt0NHuK0t+BDZ+ukPTh+KY8Yl6qL3GgbqCyHInxm2MFCNMS6qIoS/FfD4 mHpGpKQcaVcYhiLsWi1zB2FqWMqTi16WaAPOx1QtQFe6VDc8/aY= -----END CERTIFICATE-----Generated at Tue Mar 24 01:49:30 2026 by rpki-client