$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: xh+nJuqcDhHxpX5MXnBrrRPToi7GtSrdUuw3dKOaPz8= Subject key identifier: 45:D4:7D:91:87:2B:87:6F:76:D5:9C:F7:53:1A:30:54:75:DE:DD:54 Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 15D841B5469BBA5F8F287EEDCEF2AEA88DC1BBEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 022E Signing time: Sat 28 Feb 2026 07:42:22 +0000 Manifest this update: Sat 28 Feb 2026 07:37:22 +0000 Manifest next update: Tue 03 Mar 2026 15:27:22 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: kMV6o6ajoSPqLY6+3W0Vx+JV2lyYfErcVCzeKtAdgLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d8:41:b5:46:9b:ba:5f:8f:28:7e:ed:ce:f2:ae:a8:8d:c1:bb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Feb 28 07:37:22 2026 GMT Not After : Mar 3 15:27:22 2026 GMT Subject: CN=45D47D91872B876F76D59CF7531A305475DEDD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:3d:58:36:d0:c0:4b:90:69:ad:89:77:4b: 8d:24:ce:10:b2:a7:a5:6b:d5:95:8e:77:bd:bc:aa: 69:25:84:af:2d:20:29:d2:b6:81:54:48:40:31:58: ac:fe:89:b9:8a:3d:9b:67:3e:2f:68:f9:02:e0:90: 7a:ca:e3:63:68:a5:a3:7f:9b:87:1b:42:cc:e1:32: bb:47:2c:2d:f4:66:3e:69:05:dd:50:9b:03:b3:44: 4c:ca:47:59:f4:ca:58:d0:cc:2f:16:d9:cb:a7:5b: a2:ae:33:16:53:9b:04:58:16:27:1a:bf:cb:e9:3d: 43:c3:10:4b:43:cd:59:be:42:fa:86:24:fc:40:d3: 6d:56:6f:ce:0e:94:bc:72:7b:97:a0:c9:c2:b2:a1: 3f:4a:9b:16:85:cf:db:53:22:a7:ce:1a:4a:eb:c6: 99:3f:d4:99:b8:49:6e:4b:0b:53:a0:90:36:76:07: 8e:2f:96:eb:4f:de:de:db:e2:d3:11:f8:79:46:ba: 24:e5:ec:e2:49:59:42:27:c7:36:6f:f7:1a:5e:e4: 1b:3f:e1:83:35:d5:1c:66:09:e8:1d:42:b3:d9:fb: 76:79:b5:de:b5:19:52:19:13:8f:4f:31:e8:96:b3: a1:13:cf:c0:16:00:ee:a5:89:52:40:dd:cc:ae:18: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D4:7D:91:87:2B:87:6F:76:D5:9C:F7:53:1A:30:54:75:DE:DD:54 X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2d:a6:14:88:13:b4:a1:26:95:3c:5d:6a:80:ad:13:ae:02: 69:fc:a0:4b:2c:9e:64:fc:6f:aa:79:86:f4:e6:3a:87:0b:5d: 40:76:0c:f1:59:aa:f4:e4:71:45:5f:21:5d:13:0f:78:e9:5f: da:5e:b3:45:30:91:db:87:eb:1e:30:43:3c:88:2e:1e:c7:97: 95:1a:97:f8:fc:4a:93:f8:ef:71:7e:22:3a:c6:32:cc:07:de: ab:03:83:13:55:f8:c2:d1:60:fa:0a:5c:5d:f3:1e:86:5b:40: aa:30:32:88:71:56:26:d0:7d:28:75:f8:60:da:a5:28:a7:aa: 00:35:93:36:a5:00:9f:04:22:4f:e5:15:a5:8e:14:0f:2f:b6: 3c:8e:09:38:87:20:5f:07:fe:d5:3a:39:47:a2:4d:5c:35:fc: 47:a0:f6:7d:c7:9f:1a:ae:42:53:95:03:d3:bc:ec:59:6c:36: e1:0e:ad:17:73:b9:81:87:c0:87:d2:a4:2b:1d:9e:19:44:11: 0f:9c:fc:6e:96:2e:da:a8:ee:09:4a:e5:9b:3c:f9:c6:e5:c4: 37:84:43:54:06:7e:b9:e0:47:e6:d1:0a:66:f0:f0:f0:e2:03: 26:3a:bd:d0:2b:9d:40:66:cf:ca:33:c3:ea:4b:fa:d7:c6:f9: f1:a3:f3:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdhBtUabul+PKH7tzvKuqI3Bu+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNjAyMjgwNzM3MjJaFw0yNjAzMDMxNTI3MjJaMDMxMTAvBgNV BAMTKDQ1RDQ3RDkxODcyQjg3NkY3NkQ1OUNGNzUzMUEzMDU0NzVERURENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVz1YNtDAS5BprYl3S40kzhCy p6Vr1ZWOd728qmklhK8tICnStoFUSEAxWKz+ibmKPZtnPi9o+QLgkHrK42NopaN/ m4cbQszhMrtHLC30Zj5pBd1QmwOzREzKR1n0yljQzC8W2cunW6KuMxZTmwRYFica v8vpPUPDEEtDzVm+QvqGJPxA021Wb84OlLxye5egycKyoT9KmxaFz9tTIqfOGkrr xpk/1Jm4SW5LC1OgkDZ2B44vlutP3t7b4tMR+HlGuiTl7OJJWUInxzZv9xpe5Bs/ 4YM11RxmCegdQrPZ+3Z5td61GVIZE49PMeiWs6ETz8AWAO6liVJA3cyuGFm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURdR9kYcrh2921Zz3UxowVHXe3VQwHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4tphSIE7ShJpU8XWqArROuAmn8oEssnmT8 b6p5hvTmOocLXUB2DPFZqvTkcUVfIV0TD3jpX9pes0UwkduH6x4wQzyILh7Hl5Ua l/j8SpP473F+IjrGMswH3qsDgxNV+MLRYPoKXF3zHoZbQKowMohxVibQfSh1+GDa pSinqgA1kzalAJ8EIk/lFaWOFA8vtjyOCTiHIF8H/tU6OUeiTVw1/Eeg9n3Hnxqu QlOVA9O87FlsNuEOrRdzuYGHwIfSpCsdnhlEEQ+c/G6WLtqo7glK5Zs8+cblxDeE Q1QGfrngR+bRCmbw8PDiAyY6vdArnUBmz8ozw+pL+tfG+fGj84s= -----END CERTIFICATE-----Generated at Mon Mar 2 15:41:54 2026 by rpki-client