$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: oluywBB2sjhczHV6HJWbrxRJ9nV2iBKBcruJUMdGALw= Subject key identifier: 76:97:1D:E3:3B:13:8A:BC:7D:98:55:1D:9F:BD:92:6D:E3:0F:3A:93 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 120684141D0D52DF0EF3D2D63E365D01245E16AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 056D Signing time: Mon 23 Mar 2026 08:41:16 +0000 Manifest this update: Mon 23 Mar 2026 08:36:16 +0000 Manifest next update: Thu 26 Mar 2026 15:09:16 +0000 Files and hashes: 1: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: 1h7fo52sVm4cJACJ1QTb5QR43dKEDAqoDnfictr7I+U=) 2: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: tHhLDdHHbsCkG+UHT3p88TUY2+W5e4f+3agioxt0A6g=) 3: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: liy776X47GKQvaFI9Qnr93CqdopLhIWm+u/tkz3QCK4=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: ArGX3GK83LFApxV4uLSs4kfPXNu12xplyTp4FBzO9Nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 15:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:06:84:14:1d:0d:52:df:0e:f3:d2:d6:3e:36:5d:01:24:5e:16:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Mar 23 08:36:16 2026 GMT Not After : Mar 26 15:09:16 2026 GMT Subject: CN=76971DE33B138ABC7D98551D9FBD926DE30F3A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:2c:11:73:7a:69:9b:aa:14:5b:2c:b1:06: 38:83:1e:f4:60:e2:99:c6:cb:a3:ba:50:81:49:99: eb:b2:51:e4:6a:67:ff:4e:4c:21:38:e8:3c:5f:a9: 73:a3:d9:7d:52:41:13:e9:6b:86:bb:2f:f8:f4:6e: fe:7d:92:6e:80:1b:e7:06:58:19:a0:5c:9a:c1:11: 01:bf:68:d1:7f:6c:60:d9:25:2b:7d:a5:48:9b:35: df:21:c6:9f:b5:2a:15:78:33:42:2e:7b:52:24:be: fe:67:fa:b3:3a:ae:f5:08:f8:3a:a5:9a:19:cd:2e: ed:db:90:91:f5:4c:ae:c1:4e:96:28:ba:14:51:cd: cd:b4:ce:c8:9a:70:05:d7:a1:68:d8:74:e1:d6:4a: a5:8c:b1:f9:54:ed:40:a8:57:f7:99:7b:bd:79:25: 57:a5:5a:f6:ff:35:f0:b2:be:f7:61:e6:2f:d8:15: 91:ce:1d:c8:7c:c2:e1:16:10:01:1f:cb:8e:85:8c: fe:a6:33:73:16:49:ac:63:d1:9c:57:41:9d:4a:04: 2b:68:8d:e5:10:10:18:dc:66:8b:e9:46:37:60:bf: c0:af:9e:39:c0:57:a7:6b:85:5e:62:0c:47:8d:5c: 8e:8a:55:60:5e:c3:28:99:48:73:18:24:48:8b:7e: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:97:1D:E3:3B:13:8A:BC:7D:98:55:1D:9F:BD:92:6D:E3:0F:3A:93 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:db:63:f6:a5:e1:6c:3e:85:31:f0:91:9a:b9:2e:3e:26:e9: 5c:35:dc:a9:8c:12:5e:5c:19:64:ba:6f:67:14:94:27:eb:59: 72:0f:d8:5d:be:d5:0b:31:95:b9:0a:ed:0f:a0:16:38:24:6b: aa:fb:5b:7a:85:59:b9:0e:89:88:aa:04:50:c5:a2:ec:59:d6: 85:d2:6d:e3:bc:75:8e:45:ab:49:79:16:12:a6:2f:cb:de:4d: e7:db:8d:8b:1f:57:97:56:93:7e:5a:de:b4:7d:c8:8a:1a:8a: 06:ca:9c:43:4f:7d:f3:f7:c5:38:0f:ea:b4:dd:27:ed:8e:85: 13:f0:1c:3e:c7:83:6d:7c:92:87:e1:24:63:fe:fe:7a:e1:63: ba:3b:10:72:cc:ab:f1:7d:82:43:c8:82:67:51:01:6f:17:71: 5e:7d:b1:55:5f:76:f8:ae:13:d0:5b:c7:25:ff:c0:dc:18:43: ef:11:9e:e4:e3:a2:b8:24:12:2f:48:33:7e:85:27:24:bf:94: 4c:90:f7:f8:1b:1f:e6:ff:76:52:75:f2:c0:78:48:24:ea:6c: 51:98:2c:9c:ca:91:8a:b9:3a:b6:b9:01:7e:15:81:0e:92:94: 45:4f:b7:29:df:ba:e2:d8:9d:d9:25:30:5c:9e:fd:b9:58:6e: 5a:b9:b3:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgaEFB0NUt8O89LWPjZdASReFq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNjAzMjMwODM2MTZaFw0yNjAzMjYxNTA5MTZaMDMxMTAvBgNV BAMTKDc2OTcxREUzM0IxMzhBQkM3RDk4NTUxRDlGQkQ5MjZERTMwRjNBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeiwRc3ppm6oUWyyxBjiDHvRg 4pnGy6O6UIFJmeuyUeRqZ/9OTCE46DxfqXOj2X1SQRPpa4a7L/j0bv59km6AG+cG WBmgXJrBEQG/aNF/bGDZJSt9pUibNd8hxp+1KhV4M0Iue1Ikvv5n+rM6rvUI+Dql mhnNLu3bkJH1TK7BTpYouhRRzc20zsiacAXXoWjYdOHWSqWMsflU7UCoV/eZe715 JVelWvb/NfCyvvdh5i/YFZHOHch8wuEWEAEfy46FjP6mM3MWSaxj0ZxXQZ1KBCto jeUQEBjcZovpRjdgv8CvnjnAV6drhV5iDEeNXI6KVWBewyiZSHMYJEiLfvwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdpcd4zsTirx9mFUdn72SbeMPOpMwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/bY/al4Ww+hTHwkZq5Lj4m6Vw13KmMEl5c GWS6b2cUlCfrWXIP2F2+1QsxlbkK7Q+gFjgka6r7W3qFWbkOiYiqBFDFouxZ1oXS beO8dY5Fq0l5FhKmL8veTefbjYsfV5dWk35a3rR9yIoaigbKnENPffP3xTgP6rTd J+2OhRPwHD7Hg218kofhJGP+/nrhY7o7EHLMq/F9gkPIgmdRAW8XcV59sVVfdviu E9BbxyX/wNwYQ+8RnuTjorgkEi9IM36FJyS/lEyQ9/gbH+b/dlJ18sB4SCTqbFGY LJzKkYq5Ora5AX4VgQ6SlEVPtynfuuLYndklMFye/blYblq5s24= -----END CERTIFICATE-----Generated at Wed Mar 25 04:33:31 2026 by rpki-client