$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json) Hash identifier: n0Dncs6AY66XZnO7zkV3DLrMAwN6lGtcuQ3hSAivUAg= Subject key identifier: 21:7C:89:65:12:EF:9E:8A:6A:9D:99:25:04:7E:60:27:55:37:3D:53 Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 745A5B50FDAB3CDCC28D67F0609024097CE58F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft Manifest number: 012D Signing time: Sun 01 Mar 2026 20:01:11 +0000 Manifest this update: Sun 01 Mar 2026 19:56:11 +0000 Manifest next update: Thu 05 Mar 2026 04:22:11 +0000 Files and hashes: 1: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: HMF3X8mupFtcHFYVwfqSkdssIZa+cCbnBMTJxJEcVME=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=) 3: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: O5uJEpO5oilAXqiR31tNYgCroCKbL1/bMOK5Er+Qs0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5a:5b:50:fd:ab:3c:dc:c2:8d:67:f0:60:90:24:09:7c:e5:8f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Mar 1 19:56:11 2026 GMT Not After : Mar 5 04:22:11 2026 GMT Subject: CN=217C896512EF9E8A6A9D9925047E602755373D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:82:39:8b:b6:c0:e7:e8:0d:de:ba:e7:18: 97:28:2b:0b:b8:50:e2:3d:52:80:9d:23:69:46:bc: 2a:df:dc:ba:0d:0a:bd:14:69:db:47:b9:b8:59:94: bd:fb:d7:ee:68:0f:cd:7d:cc:5c:9f:0b:53:63:7b: 6d:f6:08:6f:50:44:b1:58:2c:77:17:85:7b:71:e7: 50:66:95:72:ee:f3:1e:43:52:50:6f:fc:86:f1:4e: 56:05:90:40:01:66:df:30:b4:ab:2d:75:a8:98:d6: 23:dd:81:09:b6:12:c1:96:c3:7b:2c:86:27:d6:45: 39:ea:80:7d:b0:9a:30:06:ed:40:b8:91:c2:f7:9a: 32:ec:4b:d7:9b:69:61:bb:ec:a8:36:fe:71:e8:7e: 6e:5a:06:27:ca:b4:3d:58:74:de:9a:ec:35:a4:e3: 86:59:fb:cc:7c:2f:1e:9c:5c:23:5f:9f:4f:1b:55: 5a:6b:ca:bf:ba:db:a5:e4:6b:48:f1:66:09:dd:db: 93:dd:65:66:87:ca:8c:4a:02:49:14:66:07:1d:75: 99:b7:09:9f:a6:90:50:cc:89:33:bf:9e:ba:e7:5c: ab:a2:14:30:54:f2:5e:ec:e9:5c:47:bb:97:e8:e4: 6e:09:18:38:60:a9:d9:4e:ca:87:9b:de:3e:85:f1: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7C:89:65:12:EF:9E:8A:6A:9D:99:25:04:7E:60:27:55:37:3D:53 X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:99:86:7f:2f:14:ef:bf:8c:74:a8:d0:a9:d9:5e:5b:35:a0: ff:c7:c8:c7:12:9b:da:1b:65:7a:30:7c:86:fe:12:48:66:a4: 49:ee:43:b4:d9:d3:54:ff:2d:bd:9a:23:13:75:8a:25:78:5d: d2:82:56:1b:92:2e:00:31:1e:2c:09:c1:b8:66:e6:cb:7d:69: 25:63:23:b0:c2:9e:07:da:13:c8:78:60:82:cb:fc:a0:e0:c6: df:2d:0f:67:3d:b4:1b:f3:1b:d5:12:44:c7:6a:3f:39:db:77: d2:11:ef:7d:81:3d:f9:a8:fb:6f:49:d3:64:eb:74:c3:96:43: ff:ed:c4:45:05:76:95:ad:5d:cc:4a:ce:80:1d:5e:01:a3:0e: 59:ee:d9:41:37:34:a8:54:dc:ac:d7:80:1a:44:c1:14:d8:74: c7:53:30:3a:57:64:21:21:73:44:38:21:fd:ee:ba:81:ce:22: 0c:4a:f3:14:e7:57:6d:c7:33:ea:58:fe:08:6d:71:24:1a:d2: 12:42:b6:9d:b1:99:b7:82:35:e1:ea:6c:2b:fd:19:5e:85:df: f6:6e:ce:00:61:dd:0d:15:68:ef:bf:6b:7d:17:d2:d3:f8:f9: d9:a9:57:f2:d5:c6:87:31:6c:9d:27:aa:8a:42:e9:d3:13:28: cd:0f:89:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFpbUP2rPNzCjWfwYJAkCXzljzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNjAzMDExOTU2MTFaFw0yNjAzMDUwNDIyMTFaMDMxMTAvBgNV BAMTKDIxN0M4OTY1MTJFRjlFOEE2QTlEOTkyNTA0N0U2MDI3NTUzNzNENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJII5i7bA5+gN3rrnGJcoKwu4 UOI9UoCdI2lGvCrf3LoNCr0UadtHubhZlL371+5oD819zFyfC1Nje232CG9QRLFY LHcXhXtx51BmlXLu8x5DUlBv/IbxTlYFkEABZt8wtKstdaiY1iPdgQm2EsGWw3ss hifWRTnqgH2wmjAG7UC4kcL3mjLsS9ebaWG77Kg2/nHofm5aBifKtD1YdN6a7DWk 44ZZ+8x8Lx6cXCNfn08bVVpryr+626Xka0jxZgnd25PdZWaHyoxKAkkUZgcddZm3 CZ+mkFDMiTO/nrrnXKuiFDBU8l7s6VxHu5fo5G4JGDhgqdlOyoeb3j6F8cb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIXyJZRLvnopqnZklBH5gJ1U3PVMwHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0 MTY1MDc1Q0EzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeZhn8vFO+/jHSo0KnZXls1oP/HyMcSm9ob ZXowfIb+EkhmpEnuQ7TZ01T/Lb2aIxN1iiV4XdKCVhuSLgAxHiwJwbhm5st9aSVj I7DCngfaE8h4YILL/KDgxt8tD2c9tBvzG9USRMdqPznbd9IR732BPfmo+29J02Tr dMOWQ//txEUFdpWtXcxKzoAdXgGjDlnu2UE3NKhU3KzXgBpEwRTYdMdTMDpXZCEh c0Q4If3uuoHOIgxK8xTnV23HM+pY/ghtcSQa0hJCtp2xmbeCNeHqbCv9GV6F3/Zu zgBh3Q0VaO+/a30X0tP4+dmpV/LVxocxbJ0nqopC6dMTKM0PiaM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:05 2026 by rpki-client