$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: Qp/FIFq+vhtjuEMWBimOltiMdCTKKn3kx4GIYqlxh7I= Subject key identifier: 03:47:44:B1:D6:A0:D6:E4:BC:14:81:DA:26:50:FF:2A:A0:7A:BF:F9 Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 30FF984B7E66BA1293E0989BD0B34A3396DF46A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 0231 Signing time: Sat 07 Mar 2026 19:31:45 +0000 Manifest this update: Sat 07 Mar 2026 19:26:45 +0000 Manifest next update: Wed 11 Mar 2026 04:30:45 +0000 Files and hashes: 1: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) 2: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: haypgV9nerHQDF9DAuKPIDbSRLmMkWKd8JNREu5DZww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ff:98:4b:7e:66:ba:12:93:e0:98:9b:d0:b3:4a:33:96:df:46:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Mar 7 19:26:45 2026 GMT Not After : Mar 11 04:30:45 2026 GMT Subject: CN=034744B1D6A0D6E4BC1481DA2650FF2AA07ABFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:7a:98:2f:1c:87:e4:ef:6c:e9:70:53:fe: 05:f8:4b:c7:b1:fd:9b:3e:53:43:82:b0:63:b9:29: 82:9c:b6:28:44:26:2d:32:56:f2:a2:15:76:b3:87: e6:de:0b:dc:be:24:0f:a7:96:7e:26:a4:16:a6:4c: 9a:0a:d4:cb:81:11:ba:91:8f:13:a2:ec:1c:bc:48: 98:8a:c0:8f:bb:26:64:4a:85:45:69:5e:1b:1d:5c: 0c:5d:cd:11:ae:67:d5:61:17:5a:92:48:ed:ba:a9: 68:b3:3d:83:63:36:32:21:42:b1:3f:e7:10:b1:31: 52:0c:c6:ed:d5:03:f1:3b:49:3f:d9:e7:a2:cb:67: 56:f8:0c:09:20:47:21:aa:27:9f:92:28:fb:f8:e7: 55:fd:e2:c0:2f:cc:df:35:56:a2:f9:cf:fe:2b:53: 85:91:99:19:24:bb:db:28:1f:bc:9b:6e:e9:f0:39: f5:41:aa:4e:c7:75:8b:34:4b:9d:ca:9b:4c:71:87: 9e:51:65:02:a8:88:bf:5d:ca:10:7a:4e:90:e3:96: 3b:8b:a4:ee:f5:7f:8a:fb:84:7f:45:9a:48:fd:76: f8:0d:30:38:e8:4c:ec:b1:06:f1:11:92:12:1d:ab: 90:c9:51:1e:2f:a2:bd:d2:93:1c:c9:67:95:b0:be: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:47:44:B1:D6:A0:D6:E4:BC:14:81:DA:26:50:FF:2A:A0:7A:BF:F9 X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1b:e2:cc:e4:b0:13:01:30:94:e7:34:fe:98:2e:df:ea:22: 81:6a:aa:f5:df:2f:f5:ef:d7:5e:9e:23:00:09:7f:bc:57:5b: c5:4b:63:2c:bc:6a:12:24:71:89:57:bb:07:f3:d1:3d:fc:fa: 2b:a6:a2:5e:35:0b:e8:76:91:a3:6d:1e:47:5f:7c:47:09:90: 8b:9a:3c:c9:9c:b2:8e:76:9f:5a:eb:80:24:6a:ad:14:91:cc: d8:2e:c1:fc:b9:8d:44:ba:b1:7f:01:4f:93:7c:c2:0d:7b:dc: 84:ad:52:3a:04:ea:be:a5:73:16:db:24:82:bd:5e:6a:83:9f: 48:0c:8a:70:94:80:ef:90:e4:74:26:f2:d7:c5:95:93:e9:94: 08:04:25:95:1c:e5:cc:44:9c:07:55:93:77:a8:bd:18:e4:89: 11:29:7c:bd:68:c7:13:14:6b:8c:dd:93:64:0a:87:89:7f:07: a2:b6:c0:1e:96:71:80:9e:82:90:39:7f:d6:3f:e5:fd:97:d8: f8:bc:26:1f:6d:f9:48:30:83:a4:04:92:b0:da:6a:28:82:a7: eb:89:68:b7:bd:1d:ae:21:91:15:3d:02:6e:b7:9e:91:03:1c: e0:94:fc:cd:92:27:e8:d9:96:1b:62:33:61:1e:93:50:8a:b6: df:06:8b:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMP+YS35muhKT4Jib0LNKM5bfRqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNjAzMDcxOTI2NDVaFw0yNjAzMTEwNDMwNDVaMDMxMTAvBgNV BAMTKDAzNDc0NEIxRDZBMEQ2RTRCQzE0ODFEQTI2NTBGRjJBQTA3QUJGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjXqYLxyH5O9s6XBT/gX4S8ex /Zs+U0OCsGO5KYKctihEJi0yVvKiFXazh+beC9y+JA+nln4mpBamTJoK1MuBEbqR jxOi7By8SJiKwI+7JmRKhUVpXhsdXAxdzRGuZ9VhF1qSSO26qWizPYNjNjIhQrE/ 5xCxMVIMxu3VA/E7ST/Z56LLZ1b4DAkgRyGqJ5+SKPv451X94sAvzN81VqL5z/4r U4WRmRkku9soH7ybbunwOfVBqk7HdYs0S53Km0xxh55RZQKoiL9dyhB6TpDjljuL pO71f4r7hH9Fmkj9dvgNMDjoTOyxBvERkhIdq5DJUR4vor3SkxzJZ5WwvqGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0dEsdag1uS8FIHaJlD/KqB6v/kwHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcb4szksBMBMJTnNP6YLt/qIoFqqvXfL/Xv 116eIwAJf7xXW8VLYyy8ahIkcYlXuwfz0T38+iumol41C+h2kaNtHkdffEcJkIua PMmcso52n1rrgCRqrRSRzNguwfy5jUS6sX8BT5N8wg173IStUjoE6r6lcxbbJIK9 XmqDn0gMinCUgO+Q5HQm8tfFlZPplAgEJZUc5cxEnAdVk3eovRjkiREpfL1oxxMU a4zdk2QKh4l/B6K2wB6WcYCegpA5f9Y/5f2X2Pi8Jh9t+Ugwg6QEkrDaaiiCp+uJ aLe9Ha4hkRU9Am63npEDHOCU/M2SJ+jZlhtiM2Eek1CKtt8GizI= -----END CERTIFICATE-----Generated at Sat Mar 7 21:20:55 2026 by rpki-client