$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: 95hxO3myBgFpPiAX9T2NUU7DkxGVvTxDSnlfTe4zI3Q= Subject key identifier: 30:3F:55:88:E7:CB:E7:ED:9D:C9:B2:C4:52:C7:C6:30:0E:4F:C7:8D Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 03DACB74DAEEA052346A200386CB6BD0318409D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0553 Signing time: Sun 01 Mar 2026 06:50:04 +0000 Manifest this update: Sun 01 Mar 2026 06:45:04 +0000 Manifest next update: Wed 04 Mar 2026 15:39:04 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: yZXQq1AsbvVqsIpt8X61N4yo3oIwRlVFOr0RHwfGuds=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 3: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 4: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: PZe4urUThLg+x2SUpRRUuUDW64wE9pai097k3GPzm54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:da:cb:74:da:ee:a0:52:34:6a:20:03:86:cb:6b:d0:31:84:09:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Mar 1 06:45:04 2026 GMT Not After : Mar 4 15:39:04 2026 GMT Subject: CN=303F5588E7CBE7ED9DC9B2C452C7C6300E4FC78D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:0d:d0:b1:4c:2a:60:e3:e8:3f:b4:ea:0c: b8:26:59:c1:8e:34:e4:42:ab:8d:3c:15:4f:ac:76: cc:23:62:a3:4f:1d:8e:cf:5b:b1:1b:c4:81:ea:b4: 82:f3:9e:6f:c9:9e:e4:58:39:7a:c4:61:91:78:6c: 9d:22:4f:93:21:b7:4f:88:3b:af:89:6b:a7:cc:77: 4d:0c:49:28:17:5a:18:62:33:33:1e:ac:4a:f9:78: 6c:25:27:35:98:81:82:e5:3c:51:50:58:a3:91:4d: f3:99:7d:64:8c:f0:eb:5d:7f:db:8b:49:16:13:25: d0:34:03:96:c4:80:62:00:fa:bc:37:fe:df:05:a9: ee:8a:57:55:15:28:dd:67:98:a3:15:10:04:25:b4: 5c:4d:f5:24:a3:50:8a:de:84:51:f1:1d:65:f7:75: 99:e4:84:23:01:4c:ac:26:d0:57:2a:cc:2b:60:09: 1a:ca:4f:87:cd:e6:54:b9:24:42:7f:96:e7:94:37: 36:df:5e:78:de:63:69:db:8d:1d:59:9b:ea:2a:5a: e1:71:45:9e:aa:3a:a1:1e:02:2a:44:f4:4b:5d:5d: 35:ae:f2:25:ac:7c:48:f2:89:f1:74:08:b3:bc:62: 7f:b9:81:45:9d:54:d9:24:1a:e9:76:a3:7e:b5:fd: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:55:88:E7:CB:E7:ED:9D:C9:B2:C4:52:C7:C6:30:0E:4F:C7:8D X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6b:6d:6e:e9:f7:01:01:94:a7:bc:ed:c8:c3:5b:60:00:fb: 4a:78:5c:f3:ce:45:5a:be:78:0c:a1:30:fb:7e:54:d4:f3:ca: a8:df:2a:37:01:cc:13:22:5b:3e:23:3b:dc:c8:9a:62:3d:50: 62:ff:f3:b6:87:3f:42:ac:1a:22:1c:83:6d:ef:1f:ba:05:8e: f3:3a:8f:ed:39:0a:d8:df:00:5d:82:c0:47:b7:80:71:05:32: b3:d9:10:ee:69:fd:af:d3:27:fb:4f:3c:4d:f3:7e:66:04:4a: 81:c8:c8:d2:cb:b0:92:10:4a:ba:87:f4:03:21:61:d1:c4:02: eb:d5:75:36:9f:c1:d2:cf:cf:a6:51:91:12:b3:df:7a:15:41: a4:50:54:59:38:59:fa:ec:85:c4:63:b0:f4:94:4f:a9:0f:61: 9d:c6:04:4c:c8:a6:2d:cf:08:c6:e3:d9:12:d5:4b:93:6e:f2: bf:a0:e2:55:d6:4b:b7:91:9a:7a:10:e1:cf:8a:3a:13:8e:4f: a1:4a:4e:25:4f:f4:cf:f2:2d:ed:af:55:c0:2e:03:3c:b9:42: 74:9e:8a:0c:e9:90:01:b6:5f:f4:da:4e:0d:2b:0c:cf:e5:c6: 5c:4c:c7:ff:93:7a:c1:71:be:e6:6e:7d:f0:ef:50:31:86:23: 4f:e1:62:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9rLdNruoFI0aiADhstr0DGECdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNjAzMDEwNjQ1MDRaFw0yNjAzMDQxNTM5MDRaMDMxMTAvBgNV BAMTKDMwM0Y1NTg4RTdDQkU3RUQ5REM5QjJDNDUyQzdDNjMwMEU0RkM3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNTw3QsUwqYOPoP7TqDLgmWcGO NORCq408FU+sdswjYqNPHY7PW7EbxIHqtILznm/JnuRYOXrEYZF4bJ0iT5Mht0+I O6+Ja6fMd00MSSgXWhhiMzMerEr5eGwlJzWYgYLlPFFQWKORTfOZfWSM8Otdf9uL SRYTJdA0A5bEgGIA+rw3/t8Fqe6KV1UVKN1nmKMVEAQltFxN9SSjUIrehFHxHWX3 dZnkhCMBTKwm0FcqzCtgCRrKT4fN5lS5JEJ/lueUNzbfXnjeY2nbjR1Zm+oqWuFx RZ6qOqEeAipE9EtdXTWu8iWsfEjyifF0CLO8Yn+5gUWdVNkkGul2o361/YZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMD9ViOfL5+2dybLEUsfGMA5Px40wHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxrbW7p9wEBlKe87cjDW2AA+0p4XPPORVq+ eAyhMPt+VNTzyqjfKjcBzBMiWz4jO9zImmI9UGL/87aHP0KsGiIcg23vH7oFjvM6 j+05CtjfAF2CwEe3gHEFMrPZEO5p/a/TJ/tPPE3zfmYESoHIyNLLsJIQSrqH9AMh YdHEAuvVdTafwdLPz6ZRkRKz33oVQaRQVFk4WfrshcRjsPSUT6kPYZ3GBEzIpi3P CMbj2RLVS5Nu8r+g4lXWS7eRmnoQ4c+KOhOOT6FKTiVP9M/yLe2vVcAuAzy5QnSe igzpkAG2X/TaTg0rDM/lxlxMx/+TesFxvuZuffDvUDGGI0/hYms= -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:29 2026 by rpki-client