$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: U7dqoBpJt75eGVS6U/jWQ8WXm4uzEdS+OIe31hvpqGg= Subject key identifier: 5A:3D:89:4B:D6:D2:8A:E0:94:F6:CF:FB:20:D0:90:28:97:64:27:D7 Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 70590E30AE2B1E86A5C56D38D542B64951CA9950 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: CC Signing time: Fri 06 Mar 2026 22:01:23 +0000 Manifest this update: Fri 06 Mar 2026 21:56:23 +0000 Manifest next update: Tue 10 Mar 2026 08:49:23 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: 7xWhJ1lxDGMyCEIuT0dBoDai0+Z+Ie5mOVxXL/6yKH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:59:0e:30:ae:2b:1e:86:a5:c5:6d:38:d5:42:b6:49:51:ca:99:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Mar 6 21:56:23 2026 GMT Not After : Mar 10 08:49:23 2026 GMT Subject: CN=5A3D894BD6D28AE094F6CFFB20D09028976427D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:09:99:22:ed:74:9f:fd:42:46:dd:c0:07: 37:dc:b2:19:8d:1d:b4:1d:8b:07:69:1c:d0:78:e0: fd:3a:d5:09:d8:25:f4:6f:9d:40:4d:91:48:e0:af: f5:32:18:c8:e9:d1:bc:54:51:50:a6:ca:ed:3f:18: d7:e9:38:32:c0:f9:49:da:52:08:b0:54:bc:f8:52: 98:27:49:90:bf:9f:e8:b8:74:07:35:a6:d4:69:1b: a9:01:41:23:bd:f1:54:60:37:73:40:18:74:14:4c: d0:5b:18:27:2b:e3:c4:31:5d:84:e8:c5:ea:f9:a1: ad:2e:55:09:59:de:a3:64:d3:e2:55:ea:ea:40:46: b7:d6:6e:eb:08:40:75:43:99:15:01:ce:37:c5:83: f1:d0:ec:e9:ff:04:f9:e1:9e:3e:fd:a8:23:20:94: 37:18:ad:7e:58:44:f6:fb:b7:e6:40:18:5b:a0:05: 9c:8c:d0:e1:1c:bf:de:be:21:ed:99:16:ca:33:ed: bc:51:b6:36:ec:7a:20:04:a7:88:81:ab:a8:fe:34: 65:00:38:2b:b0:cc:bf:cd:65:49:a1:c5:c2:4d:80: 6b:96:b8:e1:6d:11:4f:1a:f2:70:b4:94:2a:11:77: bc:80:b2:1d:18:00:28:82:31:be:3e:9d:ad:ad:70: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:89:4B:D6:D2:8A:E0:94:F6:CF:FB:20:D0:90:28:97:64:27:D7 X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:02:d8:1d:23:37:9d:c3:58:16:47:7a:85:7d:38:58:6e:7b: 7a:60:45:c2:b1:49:08:8a:9d:92:6a:46:0c:ce:98:38:35:5c: 7a:95:11:5d:51:a2:f0:99:d2:86:a9:ce:47:fe:47:33:e1:ed: 5f:83:85:17:65:42:c0:be:58:00:7a:34:64:ff:30:f2:87:cd: b9:8a:66:1f:26:db:92:46:28:e4:f4:12:7f:a2:65:a4:f3:f1: 6d:62:fc:4d:29:ea:c9:45:3d:5e:3a:bd:df:4f:53:48:3e:81: 8f:ec:db:dc:cc:38:3f:8f:6e:cb:cd:41:85:8b:07:1f:75:94: 98:89:82:60:90:ad:06:6c:7c:da:1b:1f:c1:fd:02:65:f4:c3: 5a:c8:26:fd:4b:7f:f4:10:b2:3f:1b:f2:51:5b:bf:64:37:04: 58:47:59:7a:e1:21:82:00:8a:95:26:59:77:1c:fb:24:70:6e: 85:07:e4:5b:d4:82:57:7e:34:5f:f4:09:14:32:4d:d6:fa:ae: 03:c7:52:dd:3f:25:4b:05:4b:51:ad:ae:12:b9:ce:27:d9:d5: a4:84:7e:89:ac:62:0e:7e:7b:46:25:34:1d:2a:03:16:91:a9: c6:87:0e:c5:e7:91:ec:49:ae:e3:7b:79:3b:15:28:e3:43:a0: ce:cd:b6:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFkOMK4rHoalxW041UK2SVHKmVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNjAzMDYyMTU2MjNaFw0yNjAzMTAwODQ5MjNaMDMxMTAvBgNV BAMTKDVBM0Q4OTRCRDZEMjhBRTA5NEY2Q0ZGQjIwRDA5MDI4OTc2NDI3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe1AmZIu10n/1CRt3ABzfcshmN HbQdiwdpHNB44P061QnYJfRvnUBNkUjgr/UyGMjp0bxUUVCmyu0/GNfpODLA+Una UgiwVLz4UpgnSZC/n+i4dAc1ptRpG6kBQSO98VRgN3NAGHQUTNBbGCcr48QxXYTo xer5oa0uVQlZ3qNk0+JV6upARrfWbusIQHVDmRUBzjfFg/HQ7On/BPnhnj79qCMg lDcYrX5YRPb7t+ZAGFugBZyM0OEcv96+Ie2ZFsoz7bxRtjbseiAEp4iBq6j+NGUA OCuwzL/NZUmhxcJNgGuWuOFtEU8a8nC0lCoRd7yAsh0YACiCMb4+na2tcK9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWj2JS9bSiuCU9s/7INCQKJdkJ9cwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoC2B0jN53DWBZHeoV9OFhue3pgRcKxSQiK nZJqRgzOmDg1XHqVEV1RovCZ0oapzkf+RzPh7V+DhRdlQsC+WAB6NGT/MPKHzbmK Zh8m25JGKOT0En+iZaTz8W1i/E0p6slFPV46vd9PU0g+gY/s29zMOD+PbsvNQYWL Bx91lJiJgmCQrQZsfNobH8H9AmX0w1rIJv1Lf/QQsj8b8lFbv2Q3BFhHWXrhIYIA ipUmWXcc+yRwboUH5FvUgld+NF/0CRQyTdb6rgPHUt0/JUsFS1GtrhK5zifZ1aSE fomsYg5+e0YlNB0qAxaRqcaHDsXnkexJruN7eTsVKONDoM7Ntps= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:16 2026 by rpki-client