$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: dgPp3zU5/bAzcKr7Fhdvng4fh+cR2c3OGK2KYuddWOk= Subject key identifier: 3C:6D:0A:01:3A:C9:71:9B:14:21:55:DF:EF:04:8E:CF:A2:38:4A:1F Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 235F6B55A504DF67FBB9BC678AA6CF20C65CE938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 028D Signing time: Mon 02 Mar 2026 00:00:05 +0000 Manifest this update: Sun 01 Mar 2026 23:55:05 +0000 Manifest next update: Thu 05 Mar 2026 06:48:05 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: PyzKp2bSncCX0JDf0hss0tUQUq/LNqUwXiww2lKkN14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5f:6b:55:a5:04:df:67:fb:b9:bc:67:8a:a6:cf:20:c6:5c:e9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Mar 1 23:55:05 2026 GMT Not After : Mar 5 06:48:05 2026 GMT Subject: CN=3C6D0A013AC9719B142155DFEF048ECFA2384A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:9d:c9:2a:12:40:66:af:d6:8e:d2:3f:dc: 77:23:e0:19:e2:fb:2a:2b:e1:78:88:65:82:06:94: ad:70:34:ed:5e:ed:a0:77:d7:12:0a:01:56:ce:20: 3a:6e:a3:f1:15:cb:a9:9d:b8:2f:8b:b2:60:2c:76: 3c:5e:6e:78:6d:eb:04:01:7f:27:18:0a:9f:31:a2: bc:da:97:1f:fe:2a:62:58:9e:37:d7:a9:80:01:20: bd:01:8d:9e:50:26:ec:a8:29:40:e6:3d:02:d8:78: e4:69:64:a8:cf:02:74:10:ed:33:40:18:09:af:9b: 44:3e:0b:ea:bf:07:b9:4d:6e:64:91:7d:8d:93:3f: a8:75:3f:4e:1b:fb:a4:2a:18:5d:3a:c6:71:9f:f8: 97:ff:6c:a1:c0:ee:d0:35:0e:9a:4c:3a:6d:77:37: 82:32:9f:a6:c2:03:c7:f4:32:ee:d9:54:e1:6f:6d: 2b:98:01:15:61:cc:46:b0:7f:d8:f0:cc:79:f8:56: 51:25:94:53:a2:25:6d:e9:ef:76:d7:36:37:50:bf: ad:f9:07:5a:fe:a1:24:06:56:c5:0d:b5:48:76:88: d5:0f:bc:94:35:17:91:5d:77:d5:ba:fb:5e:5b:38: a4:df:90:53:2c:d4:66:2e:08:4d:a8:cc:11:09:23: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6D:0A:01:3A:C9:71:9B:14:21:55:DF:EF:04:8E:CF:A2:38:4A:1F X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:40:50:cc:df:20:cd:26:60:8a:08:5d:51:16:9b:61:65:9f: 1c:cf:3b:ee:1d:15:f8:83:0f:00:65:a0:3b:fe:6b:40:d9:22: 39:8a:4e:84:d0:cf:ef:35:c7:54:6d:28:47:86:47:44:24:cd: f3:d4:22:07:f9:4c:e2:bb:6f:50:7b:c5:21:41:0a:ed:75:84: ef:d5:c9:53:72:5e:e0:7a:98:27:71:7a:17:ef:ce:b8:da:51: 40:9c:66:54:2c:5b:8e:61:f5:ce:7f:79:29:45:7c:9a:b0:7c: 8b:74:1b:b8:b2:0a:c7:11:18:8d:66:31:d6:f8:c2:1d:a1:3b: 19:ad:79:37:5e:30:13:22:4f:77:fb:f9:9a:dc:6e:b8:fe:b8: 47:c1:f9:b4:f2:50:b6:52:eb:f1:0b:7c:29:9e:87:60:63:ed: 96:40:dc:60:75:1c:ee:8c:8a:89:d5:94:b9:63:3e:76:2c:c8: 6c:79:11:b2:42:df:48:31:74:09:67:0c:b0:56:0f:df:1b:a1: e6:3b:e7:3e:ac:69:f0:89:95:05:09:6b:33:c7:7a:ae:0e:b2: 9f:91:33:8e:40:29:eb:87:e0:8d:7c:8d:77:7a:4b:d7:75:06: 6d:ce:5d:34:78:5a:a3:e0:ee:86:49:ba:04:ac:20:a9:2a:dc: 5c:66:cd:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI19rVaUE32f7ubxniqbPIMZc6TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNjAzMDEyMzU1MDVaFw0yNjAzMDUwNjQ4MDVaMDMxMTAvBgNV BAMTKDNDNkQwQTAxM0FDOTcxOUIxNDIxNTVERkVGMDQ4RUNGQTIzODRBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPa53JKhJAZq/WjtI/3Hcj4Bni +yor4XiIZYIGlK1wNO1e7aB31xIKAVbOIDpuo/EVy6mduC+LsmAsdjxebnht6wQB fycYCp8xorzalx/+KmJYnjfXqYABIL0BjZ5QJuyoKUDmPQLYeORpZKjPAnQQ7TNA GAmvm0Q+C+q/B7lNbmSRfY2TP6h1P04b+6QqGF06xnGf+Jf/bKHA7tA1DppMOm13 N4Iyn6bCA8f0Mu7ZVOFvbSuYARVhzEawf9jwzHn4VlEllFOiJW3p73bXNjdQv635 B1r+oSQGVsUNtUh2iNUPvJQ1F5Fdd9W6+15bOKTfkFMs1GYuCE2ozBEJIziXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPG0KATrJcZsUIVXf7wSOz6I4Sh8wHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpAUMzfIM0mYIoIXVEWm2FlnxzPO+4dFfiD DwBloDv+a0DZIjmKToTQz+81x1RtKEeGR0QkzfPUIgf5TOK7b1B7xSFBCu11hO/V yVNyXuB6mCdxehfvzrjaUUCcZlQsW45h9c5/eSlFfJqwfIt0G7iyCscRGI1mMdb4 wh2hOxmteTdeMBMiT3f7+Zrcbrj+uEfB+bTyULZS6/ELfCmeh2Bj7ZZA3GB1HO6M ionVlLljPnYsyGx5EbJC30gxdAlnDLBWD98boeY75z6safCJlQUJazPHeq4Osp+R M45AKeuH4I18jXd6S9d1Bm3OXTR4WqPg7oZJugSsIKkq3FxmzUA= -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:09 2026 by rpki-client