$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: WmxwtbCPnvgvEZaNKbJ76pZld6GjCv79F2w9mRiGl0E= Subject key identifier: 6F:D1:85:BF:0E:D6:96:B3:ED:79:6E:12:85:1C:9A:96:47:1A:CF:3C Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 063C5CEC7736354468E5C12BC4327207F695E157 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0264 Signing time: Tue 17 Mar 2026 00:51:23 +0000 Manifest this update: Tue 17 Mar 2026 00:46:23 +0000 Manifest next update: Fri 20 Mar 2026 12:40:23 +0000 Files and hashes: 1: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: eJ1XGH3PQ4o+OhkD3fQ4IKKdCGLyiVJ505C/lW7FPoc=) 2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: yK7nyqbkyDPHD1QbGGLBt44X/fl33LRlABzMx16APXY=) 3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: /++5BPWdt5SOJ17obkYhd48zrsefJG1TRqVQ61r0XdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 12:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3c:5c:ec:77:36:35:44:68:e5:c1:2b:c4:32:72:07:f6:95:e1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Mar 17 00:46:23 2026 GMT Not After : Mar 20 12:40:23 2026 GMT Subject: CN=6FD185BF0ED696B3ED796E12851C9A96471ACF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:fe:29:95:f6:f0:8a:0a:d2:2b:c4:ce:43: f2:ec:b3:ea:06:08:8b:c0:aa:64:ab:3b:74:40:b3: 6f:92:74:92:25:62:ae:f4:b2:f8:dc:1a:05:87:cb: c2:54:c6:f6:04:46:f9:ff:68:a4:40:43:4a:b4:8e: d0:f6:28:6d:fd:2c:36:6e:a4:ea:54:f1:a4:99:60: 03:6c:c9:5f:34:c4:55:61:96:8d:9b:55:64:a8:c0: 8f:2a:e0:c5:75:6f:75:27:b2:0e:0f:07:1e:0d:14: 00:ed:36:dc:53:e4:d9:09:ba:0f:1c:ac:a1:6e:bc: 6b:cd:2c:75:71:55:8e:52:22:84:e2:56:ca:a8:ea: cb:11:eb:8e:8d:bd:66:30:3e:3e:16:10:ab:10:6c: 13:f3:cf:f1:2e:7f:a3:04:ea:50:67:df:5b:e3:e5: e2:cd:2a:79:ac:66:d7:23:e0:d5:13:7b:08:18:ef: 6c:3d:22:71:bb:d0:26:15:ca:89:5a:77:ac:fb:74: 65:cc:a1:13:75:31:1c:9b:e8:49:b3:a9:f3:23:97: 97:3a:55:32:17:c4:de:74:19:97:f5:7b:69:37:90: 8a:8d:3c:37:bf:41:26:be:ed:a9:3a:f3:8b:19:cd: d1:a1:a7:26:0c:49:2a:0e:2e:3c:db:00:70:f4:44: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D1:85:BF:0E:D6:96:B3:ED:79:6E:12:85:1C:9A:96:47:1A:CF:3C X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:37:38:04:0b:d3:d4:28:90:da:4b:f8:91:d1:0b:40:bb:3e: 60:f9:4a:f6:1d:db:93:4c:2b:c1:a8:e6:90:6d:6d:ce:61:34: 9b:76:ab:64:a6:f8:b3:9c:07:05:7f:47:28:b5:c1:b8:42:65: 7b:54:8e:a1:1d:42:86:9b:87:1b:d9:2a:4d:d4:23:f0:28:f4: e3:10:77:30:e1:8f:8b:b0:17:9e:b4:f5:80:e7:fb:e5:02:b6: 21:ad:c6:2e:cc:d1:82:aa:bd:d9:af:d8:60:cf:48:7b:bf:e9: fc:1e:37:b4:1c:bd:3e:f2:ee:05:16:db:30:c7:87:b9:67:92: 9e:8e:19:f2:fd:91:2a:94:7e:1d:d9:53:ac:47:85:da:52:6d: c3:b9:d0:26:c6:1b:18:dc:e9:b9:e9:4e:53:46:8a:10:a7:ad: f6:5d:94:b8:a0:9c:17:bf:7b:57:62:07:5d:3d:22:88:c5:72: e1:05:47:00:43:1b:f1:2a:fd:a4:0f:bc:9b:69:0d:6f:39:02: f2:2a:bc:08:82:9e:be:be:d4:c3:28:b6:82:db:9a:b5:47:d7: 0f:06:0f:35:cb:c9:cb:d1:d0:92:d1:3c:df:22:52:28:a2:6e: 2d:71:7c:ed:8a:d5:13:b0:a3:03:70:2b:37:a4:b7:0c:00:be: ae:8c:fc:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjxc7Hc2NURo5cErxDJyB/aV4VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNjAzMTcwMDQ2MjNaFw0yNjAzMjAxMjQwMjNaMDMxMTAvBgNV BAMTKDZGRDE4NUJGMEVENjk2QjNFRDc5NkUxMjg1MUM5QTk2NDcxQUNGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUb/4plfbwigrSK8TOQ/Lss+oG CIvAqmSrO3RAs2+SdJIlYq70svjcGgWHy8JUxvYERvn/aKRAQ0q0jtD2KG39LDZu pOpU8aSZYANsyV80xFVhlo2bVWSowI8q4MV1b3Unsg4PBx4NFADtNtxT5NkJug8c rKFuvGvNLHVxVY5SIoTiVsqo6ssR646NvWYwPj4WEKsQbBPzz/Euf6ME6lBn31vj 5eLNKnmsZtcj4NUTewgY72w9InG70CYVyolad6z7dGXMoRN1MRyb6EmzqfMjl5c6 VTIXxN50GZf1e2k3kIqNPDe/QSa+7ak684sZzdGhpyYMSSoOLjzbAHD0REE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb9GFvw7WlrPteW4ShRyalkcazzwwHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ3OAQL09QokNpL+JHRC0C7PmD5SvYd25NM K8Go5pBtbc5hNJt2q2Sm+LOcBwV/Ryi1wbhCZXtUjqEdQoabhxvZKk3UI/Ao9OMQ dzDhj4uwF5609YDn++UCtiGtxi7M0YKqvdmv2GDPSHu/6fweN7QcvT7y7gUW2zDH h7lnkp6OGfL9kSqUfh3ZU6xHhdpSbcO50CbGGxjc6bnpTlNGihCnrfZdlLignBe/ e1diB109IojFcuEFRwBDG/Eq/aQPvJtpDW85AvIqvAiCnr6+1MMotoLbmrVH1w8G DzXLycvR0JLRPN8iUiiibi1xfO2K1ROwowNwKzektwwAvq6M/E8= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:57 2026 by rpki-client