$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: 6Ed3ilOKBEcmRCqYF0GCjulon/yAIsmLrdjPw8u5LkQ= Subject key identifier: 0B:BB:13:70:69:A7:79:BE:CF:C6:D8:40:54:68:4D:2A:12:2A:9B:05 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 5CE506E338D21D0FD1D68828420F23A2E9C83E42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 52 Signing time: Sat 07 Mar 2026 02:11:12 +0000 Manifest this update: Sat 07 Mar 2026 02:06:12 +0000 Manifest next update: Tue 10 Mar 2026 08:35:12 +0000 Files and hashes: 1: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: k8oGpcyTcNX+IRnfAz96oTxllZ3jnD8J+ucK4ok5mIM=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e5:06:e3:38:d2:1d:0f:d1:d6:88:28:42:0f:23:a2:e9:c8:3e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Mar 7 02:06:12 2026 GMT Not After : Mar 10 08:35:12 2026 GMT Subject: CN=0BBB137069A779BECFC6D84054684D2A122A9B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:52:2d:5a:aa:25:b1:a9:f5:85:5c:b9:e7: 22:15:85:70:7f:87:6c:55:aa:a2:5b:43:35:45:65: d8:25:45:ab:ec:78:33:db:bc:55:e4:2e:2b:01:3a: 38:92:e6:37:24:7f:2c:5e:cc:8f:da:3f:93:4e:b3: d6:3d:34:be:39:75:81:e9:b0:78:4d:dd:40:ea:31: 2c:b6:ba:91:ac:56:65:2e:a7:f1:06:60:f0:de:28: 8f:46:c7:d9:c5:f9:63:a3:f0:71:01:31:99:bd:f2: e1:6d:91:7a:cd:e7:fb:9b:39:e6:ce:ed:df:6b:0e: e2:2e:27:52:26:9a:91:5c:14:c2:5d:d2:04:e6:8f: 5c:cf:f0:2a:c0:88:ee:09:9e:5c:0e:fe:3f:48:34: b6:a8:be:29:0f:a9:35:de:c4:f0:40:0f:24:bd:80: 45:1a:48:5c:2e:a8:29:ad:9e:cd:43:9f:ef:1e:5f: 14:4f:fe:fb:24:60:d8:f5:de:18:db:69:4a:88:44: 7a:5b:35:d2:d6:dc:70:d0:0b:a5:7f:5d:e9:95:06: 43:58:8c:2a:53:7a:63:34:a6:30:6c:79:ca:f3:b5: c7:a1:08:f4:84:11:b0:9a:37:93:10:b7:55:0f:74: de:55:9c:20:8f:1b:3f:80:63:f9:79:3d:88:9a:18: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:13:70:69:A7:79:BE:CF:C6:D8:40:54:68:4D:2A:12:2A:9B:05 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:e6:85:eb:1f:6d:1b:1c:cf:ea:c0:8b:b0:87:03:dc:6b: 98:26:69:eb:7f:1f:72:b3:df:3b:c0:8e:61:3e:b6:12:c7:b5: 7e:f3:54:ba:5a:75:bb:c7:4a:84:7c:b9:38:0f:53:1b:a0:a2: a0:c9:85:53:09:f0:34:0a:3a:46:ca:31:c2:98:7a:36:e1:51: 95:b4:ac:7f:e8:57:7e:56:1d:bb:9c:f4:ac:78:3d:60:9b:b9: fd:94:9e:a8:31:0f:98:54:31:1a:3c:18:22:53:d8:95:55:ce: 68:3e:d8:15:39:c6:16:fb:8c:db:b1:fd:8f:c4:8d:1c:1e:9e: 89:11:03:6f:15:21:1a:76:4b:a9:35:72:41:0f:44:b9:9a:5a: 87:9e:c1:c2:5f:b9:74:79:af:10:74:e2:b0:19:f1:90:4c:d4: d2:28:2c:4a:e9:b3:ec:80:17:36:d7:63:41:60:99:be:f3:26: ce:e3:3f:64:e2:46:7d:4f:6c:85:81:d9:54:5e:84:5f:22:a4: 10:99:29:bd:33:85:40:e2:b7:4e:57:97:74:57:ba:af:0a:a7: ba:64:3e:97:55:5a:20:dc:91:94:eb:f9:a1:80:19:17:3b:18: c6:4d:77:de:6e:56:6b:18:fb:9b:11:92:c6:f5:b3:59:cb:bb: af:ab:a2:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOUG4zjSHQ/R1ogoQg8jounIPkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNjAzMDcwMjA2MTJaFw0yNjAzMTAwODM1MTJaMDMxMTAvBgNV BAMTKDBCQkIxMzcwNjlBNzc5QkVDRkM2RDg0MDU0Njg0RDJBMTIyQTlCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDFItWqolsan1hVy55yIVhXB/ h2xVqqJbQzVFZdglRavseDPbvFXkLisBOjiS5jckfyxezI/aP5NOs9Y9NL45dYHp sHhN3UDqMSy2upGsVmUup/EGYPDeKI9Gx9nF+WOj8HEBMZm98uFtkXrN5/ubOebO 7d9rDuIuJ1ImmpFcFMJd0gTmj1zP8CrAiO4JnlwO/j9INLaovikPqTXexPBADyS9 gEUaSFwuqCmtns1Dn+8eXxRP/vskYNj13hjbaUqIRHpbNdLW3HDQC6V/XemVBkNY jCpTemM0pjBsecrztcehCPSEEbCaN5MQt1UPdN5VnCCPGz+AY/l5PYiaGBPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7sTcGmneb7PxthAVGhNKhIqmwUwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwI5oXrH20bHM/qwIuwhwPca5gmaet/H3Kz 3zvAjmE+thLHtX7zVLpadbvHSoR8uTgPUxugoqDJhVMJ8DQKOkbKMcKYejbhUZW0 rH/oV35WHbuc9Kx4PWCbuf2UnqgxD5hUMRo8GCJT2JVVzmg+2BU5xhb7jNux/Y/E jRwenokRA28VIRp2S6k1ckEPRLmaWoeewcJfuXR5rxB04rAZ8ZBM1NIoLErps+yA FzbXY0Fgmb7zJs7jP2TiRn1PbIWB2VRehF8ipBCZKb0zhUDit05Xl3RXuq8Kp7pk PpdVWiDckZTr+aGAGRc7GMZNd95uVmsY+5sRksb1s1nLu6+rovY= -----END CERTIFICATE-----Generated at Sat Mar 7 17:51:57 2026 by rpki-client