$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: nIicFix2HGFnxMkUbBK2ZEqVIWZ7FIoeSix0/97SURs= Subject key identifier: 01:6C:DB:8A:35:54:81:1C:E7:EA:11:72:07:04:1C:DC:DD:51:12:B2 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 18C1F14A8D5AD7421AEF556085FD52F0BA94C4F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: 0157 Signing time: Sun 01 Mar 2026 00:20:03 +0000 Manifest this update: Sun 01 Mar 2026 00:15:03 +0000 Manifest next update: Wed 04 Mar 2026 01:05:03 +0000 Files and hashes: 1: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=) 2: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: BUbc9uo9G8p6dFVLHTQCrEed3QMXX2XfHINFEhTrsAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c1:f1:4a:8d:5a:d7:42:1a:ef:55:60:85:fd:52:f0:ba:94:c4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Mar 1 00:15:03 2026 GMT Not After : Mar 4 01:05:03 2026 GMT Subject: CN=016CDB8A3554811CE7EA117207041CDCDD5112B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:e4:44:fe:9b:c1:af:f1:d9:db:74:fa:91: 08:bb:d6:dc:49:cf:57:a3:b4:42:a1:fb:0e:05:d5: f3:14:1c:1c:18:a8:25:3a:2b:08:03:b7:05:84:2e: a4:33:cd:8b:3f:ec:ef:e1:5a:c6:5e:22:70:d0:c9: 00:c0:8a:5d:f6:92:3a:09:71:47:7f:28:73:f8:be: 52:59:12:26:d6:96:67:fa:ee:a1:8f:b9:d9:2e:13: 98:b0:74:a8:d8:55:50:b2:a6:f0:17:e3:ef:f9:df: e7:ec:d9:11:18:ed:36:0f:29:65:49:1c:b3:35:15: 37:32:be:c0:f9:35:ae:84:b0:de:d7:0c:c2:2c:75: f2:e3:b2:94:a9:d0:30:e1:b7:4d:b4:69:f6:c7:2e: cc:a9:62:d2:70:3e:68:fa:4c:06:f6:e2:b3:17:64: db:29:cf:db:05:ef:6f:64:11:39:81:48:6a:a7:36: 27:e5:08:06:51:bb:a6:2d:05:cd:d1:5a:c3:de:56: e6:ca:89:ef:68:49:cf:15:64:b7:fa:df:4d:b0:61: 22:d2:74:7b:4b:81:7c:31:48:68:4d:da:45:5a:03: 70:72:02:43:de:15:94:70:2b:3b:56:b3:b7:4b:f8: 35:c8:ad:a0:3e:d8:e0:9f:a5:b3:50:9b:c0:18:2c: 74:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:DB:8A:35:54:81:1C:E7:EA:11:72:07:04:1C:DC:DD:51:12:B2 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:04:c4:5d:6c:86:b4:6f:23:48:17:cb:05:44:86:9d:57:cf: 78:e8:38:23:6d:82:12:c5:19:ba:5d:1d:75:93:16:53:6b:a2: 8a:ff:ed:97:fb:bb:7e:50:fe:38:2e:c9:8a:35:96:91:97:08: e8:b0:63:05:7e:63:dc:e8:56:00:88:19:2f:4a:f4:4f:cf:17: 71:83:4a:74:e8:39:c2:eb:36:c0:84:1f:58:e7:72:9c:4d:f5: 42:9e:ee:6d:cd:b1:6b:6f:a8:07:6d:0a:b3:d2:cb:64:49:56: 27:0b:40:53:1b:31:d5:df:c7:8c:31:6b:6b:bf:ab:e2:b3:8b: d7:c4:b4:db:84:a8:e9:69:0f:f9:23:b0:a8:04:d8:5e:0f:d1: 04:d2:81:74:88:79:b7:4e:77:f1:c3:7d:5a:f8:75:1b:8f:f5: ed:d0:b4:77:08:81:de:a1:da:0b:10:16:f1:ee:7e:76:8b:b2: 63:e3:4b:03:b5:28:f1:4a:ca:ae:22:e4:88:9c:3f:78:47:cf: 0f:bb:eb:ea:5e:a1:0e:2e:65:96:2a:11:b5:e4:08:fa:ca:9e: b5:05:1b:fd:60:87:7e:58:af:68:9a:f3:c9:21:d4:78:29:80: d7:d8:8d:b9:4e:6c:33:49:59:dc:ea:f2:93:4b:e1:9e:05:0f: 5b:cf:c9:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMHxSo1a10Ia71Vghf1S8LqUxPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNjAzMDEwMDE1MDNaFw0yNjAzMDQwMTA1MDNaMDMxMTAvBgNV BAMTKDAxNkNEQjhBMzU1NDgxMUNFN0VBMTE3MjA3MDQxQ0RDREQ1MTEyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0+RE/pvBr/HZ23T6kQi71txJ z1ejtEKh+w4F1fMUHBwYqCU6KwgDtwWELqQzzYs/7O/hWsZeInDQyQDAil32kjoJ cUd/KHP4vlJZEibWlmf67qGPudkuE5iwdKjYVVCypvAX4+/53+fs2REY7TYPKWVJ HLM1FTcyvsD5Na6EsN7XDMIsdfLjspSp0DDht020afbHLsypYtJwPmj6TAb24rMX ZNspz9sF729kETmBSGqnNiflCAZRu6YtBc3RWsPeVubKie9oSc8VZLf6302wYSLS dHtLgXwxSGhN2kVaA3ByAkPeFZRwKztWs7dL+DXIraA+2OCfpbNQm8AYLHQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAWzbijVUgRzn6hFyBwQc3N1RErIwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0ExF1shrRvI0gXywVEhp1Xz3joOCNtghLF GbpdHXWTFlNroor/7Zf7u35Q/jguyYo1lpGXCOiwYwV+Y9zoVgCIGS9K9E/PF3GD SnToOcLrNsCEH1jncpxN9UKe7m3NsWtvqAdtCrPSy2RJVicLQFMbMdXfx4wxa2u/ q+Kzi9fEtNuEqOlpD/kjsKgE2F4P0QTSgXSIebdOd/HDfVr4dRuP9e3QtHcIgd6h 2gsQFvHufnaLsmPjSwO1KPFKyq4i5IicP3hHzw+76+peoQ4uZZYqEbXkCPrKnrUF G/1gh35Yr2ia88kh1HgpgNfYjblObDNJWdzq8pNL4Z4FD1vPyfs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:27:18 2026 by rpki-client