$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: T8bf5szkC9fXKDbI/UF05oxafSCTKfiQ/DyiRvNlK4k= Subject key identifier: F9:41:84:2E:F8:8E:CF:46:30:7C:6C:E7:AA:F7:A8:98:DD:AB:7B:02 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 23E6A4EC186174F816467CB04F13571CBCB22754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 015A Signing time: Sun 01 Mar 2026 15:41:09 +0000 Manifest this update: Sun 01 Mar 2026 15:36:09 +0000 Manifest next update: Wed 04 Mar 2026 22:52:09 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: Q5CI+ZM613+R0MhYjPTh8Layb8po/WXC82rA2GLH0Ag=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e6:a4:ec:18:61:74:f8:16:46:7c:b0:4f:13:57:1c:bc:b2:27:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Mar 1 15:36:09 2026 GMT Not After : Mar 4 22:52:09 2026 GMT Subject: CN=F941842EF88ECF46307C6CE7AAF7A898DDAB7B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:94:00:5a:36:04:45:67:68:af:cb:de:02: ba:7b:51:ed:ba:f1:fd:3b:83:f3:e5:66:00:93:3d: 23:b5:cc:24:28:0e:48:00:92:0a:c9:fc:ae:54:36: 34:c2:55:de:be:98:75:cf:9a:9f:9a:45:32:83:c6: 83:61:71:b0:74:a3:d7:e1:d2:12:50:0b:5c:c6:2e: a8:d7:47:33:6d:96:30:1a:84:1a:22:68:ac:02:60: fd:f6:57:05:32:70:74:73:a0:ac:81:f4:87:1e:24: 2c:25:3c:d0:94:44:84:cd:6c:5a:17:e9:37:de:f1: b6:a7:46:d9:42:e5:a3:fa:13:75:3f:3c:25:32:7b: 62:75:be:21:e2:b8:1a:b5:29:52:e4:d3:2f:8a:41: 5f:5f:c5:2c:79:8a:ca:2c:d8:ca:e1:93:1d:10:fd: 99:e4:15:34:bd:30:80:67:c5:7b:a3:a8:29:14:7e: 98:2f:b0:a7:c5:35:e7:f3:28:c0:30:14:ca:c0:c9: 53:d2:34:d9:1c:fa:c2:79:94:31:20:b2:58:4a:bc: 64:9e:dc:3b:5c:7e:96:c2:a9:c2:a7:a2:f9:87:8d: 30:25:b2:03:b1:ff:75:89:17:d2:fb:73:bb:18:b1: 7a:5b:d6:46:b3:fd:9f:c2:2b:7c:3a:05:5e:5e:4b: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:41:84:2E:F8:8E:CF:46:30:7C:6C:E7:AA:F7:A8:98:DD:AB:7B:02 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:15:39:bd:f6:2b:b5:b8:4e:11:23:c8:e0:fa:04:dd:78:d7: 37:25:ed:b2:38:66:67:c6:f0:2d:e0:f0:65:df:ba:1d:e7:d5: 34:27:ea:22:33:4b:21:5a:34:98:5c:82:41:4b:d9:2a:ec:e9: 4a:87:b0:54:18:cd:65:b7:c6:4d:7a:10:3d:63:cc:68:98:01: f6:fd:ed:d1:c7:c6:c8:03:c7:63:59:6d:35:f3:d5:97:89:c5: 21:f5:dc:f1:7b:c1:f1:5c:9b:84:77:b3:b7:bd:3d:3e:fe:46: 8d:bb:00:54:e5:78:ea:47:6c:75:90:da:fd:b3:97:43:b3:06: 47:4c:00:64:6d:70:1e:3b:02:b4:5f:cb:9d:bc:48:95:fc:5a: 45:58:7a:6c:4b:6d:46:f9:e5:18:b0:09:0b:0a:d2:45:a4:fc: d7:be:1b:90:9c:ca:08:3d:c4:c2:c6:92:c4:6c:7d:f0:6d:cf: 9c:b3:f7:3f:27:9f:45:b7:88:d5:b6:58:22:bc:3a:be:75:a3: dd:13:ef:75:22:59:dd:47:ff:d6:b7:ac:61:58:7c:9f:64:7e: dc:be:fa:52:73:e9:6b:91:cf:32:eb:7c:2e:41:be:74:aa:e1: a8:db:6f:0e:da:15:81:25:61:10:63:94:4a:c4:a1:d0:05:d8: dc:90:7c:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+ak7BhhdPgWRnywTxNXHLyyJ1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNjAzMDExNTM2MDlaFw0yNjAzMDQyMjUyMDlaMDMxMTAvBgNV BAMTKEY5NDE4NDJFRjg4RUNGNDYzMDdDNkNFN0FBRjdBODk4RERBQjdCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrpQAWjYERWdor8veArp7Ue26 8f07g/PlZgCTPSO1zCQoDkgAkgrJ/K5UNjTCVd6+mHXPmp+aRTKDxoNhcbB0o9fh 0hJQC1zGLqjXRzNtljAahBoiaKwCYP32VwUycHRzoKyB9IceJCwlPNCURITNbFoX 6Tfe8banRtlC5aP6E3U/PCUye2J1viHiuBq1KVLk0y+KQV9fxSx5isos2Mrhkx0Q /ZnkFTS9MIBnxXujqCkUfpgvsKfFNefzKMAwFMrAyVPSNNkc+sJ5lDEgslhKvGSe 3DtcfpbCqcKnovmHjTAlsgOx/3WJF9L7c7sYsXpb1kaz/Z/CK3w6BV5eS6alAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+UGELviOz0YwfGznqveomN2rewIwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4VOb32K7W4ThEjyOD6BN141zcl7bI4ZmfG 8C3g8GXfuh3n1TQn6iIzSyFaNJhcgkFL2Srs6UqHsFQYzWW3xk16ED1jzGiYAfb9 7dHHxsgDx2NZbTXz1ZeJxSH13PF7wfFcm4R3s7e9PT7+Ro27AFTleOpHbHWQ2v2z l0OzBkdMAGRtcB47ArRfy528SJX8WkVYemxLbUb55RiwCQsK0kWk/Ne+G5Ccygg9 xMLGksRsffBtz5yz9z8nn0W3iNW2WCK8Or51o90T73UiWd1H/9a3rGFYfJ9kfty+ +lJz6WuRzzLrfC5BvnSq4ajbbw7aFYElYRBjlErEodAF2NyQfGY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:04:38 2026 by rpki-client