$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: +bKgmwMv1sN2EZUEDlUNIej+Ol8V6eHkP07H4txyOig= Subject key identifier: 6D:7D:E9:5C:D9:9C:D6:60:B3:90:60:A9:AC:0A:87:C4:8A:50:27:5A Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 2524A7C41FD098A16C33E063F9E7A976B2953D1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 017D Signing time: Sun 01 Mar 2026 10:11:22 +0000 Manifest this update: Sun 01 Mar 2026 10:06:22 +0000 Manifest next update: Wed 04 Mar 2026 21:15:22 +0000 Files and hashes: 1: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: MEhGPscx6amoC7Mn8dW/gvKnqLk8DzF4TrmhnXKZhHA=) 2: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: MFTTO7rRxKP4i/rKOXQ5Ep7nUUu0gcbPxrZliz6otXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:24:a7:c4:1f:d0:98:a1:6c:33:e0:63:f9:e7:a9:76:b2:95:3d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Mar 1 10:06:22 2026 GMT Not After : Mar 4 21:15:22 2026 GMT Subject: CN=6D7DE95CD99CD660B39060A9AC0A87C48A50275A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:0a:50:83:10:2e:0f:46:4b:81:ce:a1:ed: 1c:6b:43:8e:3e:a0:db:6a:b1:eb:c1:63:36:44:72: cb:7c:52:c1:17:0b:2d:5e:0f:90:a2:46:22:6b:2e: 0e:6e:49:7a:5a:3a:44:08:80:e8:ac:90:0c:6e:58: 15:8e:1b:f6:18:b0:b3:13:91:33:e7:b5:b4:7a:5e: 2b:cc:8a:fa:92:95:b0:a0:0f:5c:74:5d:9e:e7:00: 65:00:b6:24:55:df:27:bd:9a:70:db:8a:3a:cd:43: 4a:6c:a7:f3:ab:d2:58:5f:f7:d6:b6:de:68:c2:c4: ea:80:ca:68:2e:41:e9:82:16:3d:22:59:0e:d5:66: 56:26:bf:0e:8e:aa:2d:3d:ae:9d:34:e5:0a:6e:70: 55:7f:b6:fb:4d:32:ed:15:ae:d5:12:08:f1:90:a0: db:46:7f:0e:63:ea:55:60:dc:92:c6:82:28:07:5d: 27:a5:c3:76:a6:03:fe:07:c0:fe:ad:35:28:99:7e: 55:0a:8a:23:67:05:e8:de:61:bd:bf:1d:7c:5b:bd: c7:bc:2f:19:ef:67:c9:a7:42:5c:cb:e5:42:42:08: b4:3a:b5:e3:85:c8:c2:a2:48:5c:0a:da:c0:3e:b6: 4d:f8:4e:b4:c5:4a:7f:44:44:2b:ea:74:94:38:a5: e9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7D:E9:5C:D9:9C:D6:60:B3:90:60:A9:AC:0A:87:C4:8A:50:27:5A X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d3:9d:72:8a:87:3f:90:e5:21:d3:49:61:cb:08:8b:83:32: ad:f8:b2:0e:97:22:75:6c:ac:a4:5a:54:d4:40:59:75:f7:73: 7a:42:f2:84:cf:1a:fc:35:1e:f4:8c:b2:06:59:1f:af:02:fe: 25:62:dd:f6:c5:6c:6f:3a:8a:70:ae:70:ee:7b:5c:f2:a7:1e: f1:60:da:36:55:e2:6f:b6:8f:77:75:57:8f:a3:bf:46:ff:28: 4a:27:bb:f4:55:4d:7f:8a:f5:e9:0f:12:ee:9b:f4:9b:f3:93: 26:a4:5d:70:bb:d7:3a:b2:6e:37:d9:6f:98:44:50:ba:75:0b: c9:e5:21:97:5b:0e:a6:d0:45:0f:09:42:b4:2e:72:d8:5a:be: 3b:88:0e:dd:95:b1:31:93:54:e8:d4:16:87:66:79:97:ed:00: 56:77:fc:6a:66:a7:72:5b:9f:0d:68:71:e6:a2:36:d6:35:ea: e9:f0:d7:2b:7a:bc:83:c4:02:a8:f1:5c:f4:28:86:4d:96:2c: 90:92:f5:20:30:e9:43:5b:db:d8:fa:75:f2:e0:97:3c:b0:73: 76:e0:39:60:36:3f:1b:2d:ab:1b:2f:6b:08:ce:c9:06:72:a3: 4f:7c:c5:ee:a2:a7:54:97:50:ab:27:d5:fc:40:34:89:49:6c: d8:ab:57:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSSnxB/QmKFsM+Bj+eepdrKVPR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNjAzMDExMDA2MjJaFw0yNjAzMDQyMTE1MjJaMDMxMTAvBgNV BAMTKDZEN0RFOTVDRDk5Q0Q2NjBCMzkwNjBBOUFDMEE4N0M0OEE1MDI3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4ApQgxAuD0ZLgc6h7RxrQ44+ oNtqsevBYzZEcst8UsEXCy1eD5CiRiJrLg5uSXpaOkQIgOiskAxuWBWOG/YYsLMT kTPntbR6XivMivqSlbCgD1x0XZ7nAGUAtiRV3ye9mnDbijrNQ0psp/Or0lhf99a2 3mjCxOqAymguQemCFj0iWQ7VZlYmvw6Oqi09rp005QpucFV/tvtNMu0VrtUSCPGQ oNtGfw5j6lVg3JLGgigHXSelw3amA/4HwP6tNSiZflUKiiNnBejeYb2/HXxbvce8 LxnvZ8mnQlzL5UJCCLQ6teOFyMKiSFwK2sA+tk34TrTFSn9ERCvqdJQ4pekRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbX3pXNmc1mCzkGCprAqHxIpQJ1owHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnTnXKKhz+Q5SHTSWHLCIuDMq34sg6XInVs rKRaVNRAWXX3c3pC8oTPGvw1HvSMsgZZH68C/iVi3fbFbG86inCucO57XPKnHvFg 2jZV4m+2j3d1V4+jv0b/KEonu/RVTX+K9ekPEu6b9JvzkyakXXC71zqybjfZb5hE ULp1C8nlIZdbDqbQRQ8JQrQucthavjuIDt2VsTGTVOjUFodmeZftAFZ3/Gpmp3Jb nw1oceaiNtY16unw1yt6vIPEAqjxXPQohk2WLJCS9SAw6UNb29j6dfLglzywc3bg OWA2PxstqxsvawjOyQZyo098xe6ip1SXUKsn1fxANIlJbNirV1U= -----END CERTIFICATE-----Generated at Tue Mar 3 07:15:45 2026 by rpki-client