$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: QyAUiVTI01tnOY9bgWtn1F88QoVMwxKrPHAz/m0o8us= Subject key identifier: 95:62:82:15:EE:59:06:31:DC:8C:2F:D4:23:45:88:34:B7:52:1A:81 Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 2277E9FA3AB9F4586349BED1B9836A6C0D19624B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 022E Signing time: Sun 01 Mar 2026 12:11:42 +0000 Manifest this update: Sun 01 Mar 2026 12:06:42 +0000 Manifest next update: Wed 04 Mar 2026 16:52:42 +0000 Files and hashes: 1: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) 2: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: JL4gADsdZZWA3sb2/MaVb8NdZ6aYillxqKB3+bSFe5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:77:e9:fa:3a:b9:f4:58:63:49:be:d1:b9:83:6a:6c:0d:19:62:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Mar 1 12:06:42 2026 GMT Not After : Mar 4 16:52:42 2026 GMT Subject: CN=95628215EE590631DC8C2FD423458834B7521A81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:58:ba:ce:22:db:7b:49:a2:8f:60:33:ed:3d: 83:95:be:74:a3:ab:f7:69:c0:57:ae:16:d3:53:f5: ad:4a:3d:d7:4f:61:4e:29:6c:3f:d3:d8:1f:be:94: 5d:2f:ed:e2:65:4a:5a:cd:63:08:7d:32:d2:a0:1a: f5:7e:9f:68:e0:04:8b:ce:45:d2:17:15:a5:6c:ca: 46:1e:3a:e5:50:f5:93:79:35:3f:42:a8:d0:f1:bc: 70:1e:39:94:00:d0:37:60:f8:00:b4:4e:ae:d1:2a: bd:bd:e2:8f:36:3c:56:56:56:b8:63:80:57:4b:99: cf:dd:f0:74:9a:ae:d0:07:36:70:10:73:71:eb:69: 6b:12:5c:c0:91:2b:b0:8f:cd:f5:f6:78:33:41:8d: 38:a2:d8:8a:20:95:dd:46:ae:d0:cb:d6:3c:f8:a6: 7d:99:1f:ac:59:cf:32:0c:6c:0c:48:b6:47:f5:b0: 5b:d9:3c:09:d2:3c:de:24:c3:2a:c7:b5:61:d9:e2: 0a:73:69:41:00:cb:c2:e8:df:ab:53:80:5d:53:55: c5:39:c9:70:d8:71:a6:5a:32:85:df:a1:e8:ff:d6: de:96:49:fa:1b:3d:35:02:e7:44:5c:ad:cc:0b:45: 35:c5:7e:ba:d1:ca:18:f4:21:6d:c9:51:44:9d:14: a9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:82:15:EE:59:06:31:DC:8C:2F:D4:23:45:88:34:B7:52:1A:81 X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:13:b5:07:80:61:52:4c:c1:94:da:20:b4:68:89:a0:3e:db: 57:57:63:2e:47:36:6a:98:d7:20:1f:91:dd:d7:ce:75:84:47: 43:08:06:78:51:a9:0f:f9:cd:d2:d6:7b:21:18:05:63:85:2a: d2:4c:2a:49:fb:83:7d:9d:27:a2:b4:f9:63:12:e6:13:6b:9f: 2b:86:49:55:a8:d8:b5:4a:39:7f:4a:ec:a3:2a:40:b7:5b:a5: 3f:2e:ab:62:81:dd:05:5a:0d:40:11:b7:f8:48:e0:78:c7:c1: 1e:4c:bb:23:25:ef:6a:c5:9e:fa:61:4c:3b:80:05:11:65:53: eb:b7:40:77:8a:93:2c:ff:67:6d:ad:20:56:bc:f3:5b:5f:c3: 64:03:49:4b:70:b1:f6:7b:88:ae:4a:9a:ca:8b:08:6e:4d:67: 27:c0:a4:50:8d:11:b9:7b:7b:58:ff:40:6a:8f:ad:be:9e:88: 32:72:e5:0f:08:78:a7:38:7e:c9:be:62:dd:00:3c:fa:7b:06: fe:8b:b6:91:57:f0:85:ba:4e:f2:2d:b1:9d:ae:43:2d:a8:6a: 20:03:53:b0:31:d1:17:8f:11:ce:c3:05:8a:ee:e9:85:c3:7f: 0e:7d:dd:bf:a1:2b:53:9c:2d:97:5e:f7:5b:bc:64:fd:7c:2b: e8:73:52:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInfp+jq59FhjSb7RuYNqbA0ZYkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNjAzMDExMjA2NDJaFw0yNjAzMDQxNjUyNDJaMDMxMTAvBgNV BAMTKDk1NjI4MjE1RUU1OTA2MzFEQzhDMkZENDIzNDU4ODM0Qjc1MjFBODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4WLrOItt7SaKPYDPtPYOVvnSj q/dpwFeuFtNT9a1KPddPYU4pbD/T2B++lF0v7eJlSlrNYwh9MtKgGvV+n2jgBIvO RdIXFaVsykYeOuVQ9ZN5NT9CqNDxvHAeOZQA0Ddg+AC0Tq7RKr294o82PFZWVrhj gFdLmc/d8HSartAHNnAQc3HraWsSXMCRK7CPzfX2eDNBjTii2Iogld1GrtDL1jz4 pn2ZH6xZzzIMbAxItkf1sFvZPAnSPN4kwyrHtWHZ4gpzaUEAy8Lo36tTgF1TVcU5 yXDYcaZaMoXfoej/1t6WSfobPTUC50RcrcwLRTXFfrrRyhj0IW3JUUSdFKnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWKCFe5ZBjHcjC/UI0WINLdSGoEwHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJATtQeAYVJMwZTaILRoiaA+21dXYy5HNmqY 1yAfkd3XznWER0MIBnhRqQ/5zdLWeyEYBWOFKtJMKkn7g32dJ6K0+WMS5hNrnyuG SVWo2LVKOX9K7KMqQLdbpT8uq2KB3QVaDUARt/hI4HjHwR5MuyMl72rFnvphTDuA BRFlU+u3QHeKkyz/Z22tIFa881tfw2QDSUtwsfZ7iK5KmsqLCG5NZyfApFCNEbl7 e1j/QGqPrb6eiDJy5Q8IeKc4fsm+Yt0APPp7Bv6LtpFX8IW6TvItsZ2uQy2oaiAD U7Ax0RePEc7DBYru6YXDfw593b+hK1OcLZde91u8ZP18K+hzUjo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:56 2026 by rpki-client