$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: UAyrdmDZTsmROA8HQPD/40H1DynHj+drfkkfrT0lw8c= Subject key identifier: 82:C0:D9:C3:B5:66:31:D7:9B:04:29:4C:E5:92:C9:88:D8:2A:16:7E Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 5A9BF646850AEE92E4C3B9C701A7BC912AE70C53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 0231 Signing time: Fri 06 Mar 2026 22:12:21 +0000 Manifest this update: Fri 06 Mar 2026 22:07:21 +0000 Manifest next update: Mon 09 Mar 2026 22:23:21 +0000 Files and hashes: 1: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: GPBrTqFAQmyzfLn2DzcadpF4nFjE5qFYOmYPLYBikAo=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9b:f6:46:85:0a:ee:92:e4:c3:b9:c7:01:a7:bc:91:2a:e7:0c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Mar 6 22:07:21 2026 GMT Not After : Mar 9 22:23:21 2026 GMT Subject: CN=82C0D9C3B56631D79B04294CE592C988D82A167E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:dc:65:b3:35:f3:2b:b4:ce:55:ab:99:f2: cd:d7:66:c3:02:51:ba:c7:57:01:2e:e0:ed:94:d2: cf:87:6f:ad:62:fc:04:d6:98:44:03:67:59:7e:be: fc:2a:64:dc:52:50:96:21:d0:cc:7e:7b:7f:7d:3b: ca:0c:95:aa:17:ea:49:f8:2a:5e:3b:3f:ad:9f:8a: 33:b0:42:b7:59:2d:1b:c7:c5:ef:4b:4d:df:5c:b1: 58:94:b6:15:d2:e2:62:c7:2d:8f:f2:a6:ea:04:3b: 08:ba:ca:d9:51:5b:4f:45:11:cb:1e:cc:7b:fa:f6: 30:87:7c:07:06:ae:81:5a:4b:a7:d6:cd:d4:0e:70: be:3f:50:e5:6b:62:47:de:e6:6e:29:b6:2f:8f:8a: 22:bb:49:0e:9b:e3:02:ed:12:ec:38:90:ee:b5:c3: b7:f9:8f:94:b0:f5:79:18:5f:90:a3:3d:52:9f:ec: 16:b6:fd:6d:2c:d7:db:56:a9:dd:be:e7:7e:cc:d6: 62:fc:17:21:06:2f:63:a7:c6:02:81:e6:2b:0c:89: 3a:d2:f9:2b:2b:12:ed:c2:c7:51:1b:d9:79:1b:5a: c3:b2:87:66:1e:9d:b7:dd:58:80:57:79:1a:91:ec: 68:cc:a2:21:f8:38:18:5c:5c:5d:c7:ab:57:a3:53: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C0:D9:C3:B5:66:31:D7:9B:04:29:4C:E5:92:C9:88:D8:2A:16:7E X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:00:80:f7:8d:0c:06:03:10:8c:f1:07:0b:c8:3b:4e:e1:e7: 0e:27:e5:7b:cb:0d:be:aa:72:27:57:52:49:fb:e9:74:ee:ba: 6a:e1:48:65:cd:05:3b:09:be:a3:65:4e:74:4d:0d:e6:6b:3d: bb:ac:37:85:62:c3:cf:e1:03:28:3c:3d:68:43:db:18:2b:20: 11:4e:13:ac:bf:b4:2e:8a:14:98:75:22:81:a1:c2:96:ef:45: 26:9e:dd:c2:90:34:66:bd:0a:9f:a6:f4:14:f5:57:4c:90:ed: 1a:11:19:13:63:6f:39:75:92:4d:27:b1:ea:3f:7e:95:f4:7f: ac:51:4d:08:44:12:15:2a:6c:66:93:8e:ee:3e:3c:b7:7d:11: e6:15:b6:dc:cd:d5:26:74:2c:09:06:e5:2b:d6:b8:70:aa:b5: ea:f3:a9:09:3a:02:15:f4:02:74:f8:a4:8f:b3:e9:d9:a1:26: 44:30:2c:7f:34:ba:20:61:2b:72:60:1f:cc:b2:ab:9a:2a:05: 47:20:5b:a3:7d:eb:f5:6c:e3:ba:43:2f:1c:45:da:63:5f:84: 60:82:29:28:3f:47:f6:35:d1:74:76:bf:37:b7:f4:59:9d:c8: 45:87:e8:a0:ff:1a:79:0e:a5:68:88:d9:6e:41:dd:ab:33:90: 21:60:eb:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpv2RoUK7pLkw7nHAae8kSrnDFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNjAzMDYyMjA3MjFaFw0yNjAzMDkyMjIzMjFaMDMxMTAvBgNV BAMTKDgyQzBEOUMzQjU2NjMxRDc5QjA0Mjk0Q0U1OTJDOTg4RDgyQTE2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTktxlszXzK7TOVauZ8s3XZsMC UbrHVwEu4O2U0s+Hb61i/ATWmEQDZ1l+vvwqZNxSUJYh0Mx+e399O8oMlaoX6kn4 Kl47P62fijOwQrdZLRvHxe9LTd9csViUthXS4mLHLY/ypuoEOwi6ytlRW09FEcse zHv69jCHfAcGroFaS6fWzdQOcL4/UOVrYkfe5m4pti+PiiK7SQ6b4wLtEuw4kO61 w7f5j5Sw9XkYX5CjPVKf7Ba2/W0s19tWqd2+537M1mL8FyEGL2OnxgKB5isMiTrS +SsrEu3Cx1Eb2XkbWsOyh2YenbfdWIBXeRqR7GjMoiH4OBhcXF3Hq1ejU4iRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsDZw7VmMdebBClM5ZLJiNgqFn4wHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwAgPeNDAYDEIzxBwvIO07h5w4n5XvLDb6q cidXUkn76XTuumrhSGXNBTsJvqNlTnRNDeZrPbusN4Viw8/hAyg8PWhD2xgrIBFO E6y/tC6KFJh1IoGhwpbvRSae3cKQNGa9Cp+m9BT1V0yQ7RoRGRNjbzl1kk0nseo/ fpX0f6xRTQhEEhUqbGaTju4+PLd9EeYVttzN1SZ0LAkG5SvWuHCqterzqQk6AhX0 AnT4pI+z6dmhJkQwLH80uiBhK3JgH8yyq5oqBUcgW6N96/Vs47pDLxxF2mNfhGCC KSg/R/Y10XR2vze39FmdyEWH6KD/GnkOpWiI2W5B3aszkCFg6/8= -----END CERTIFICATE-----Generated at Sat Mar 7 22:55:26 2026 by rpki-client