$ rpki-client -vvf repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft File: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft (raw, json) Hash identifier: vRD/UwQBN43nCoJhKmgVH0npQD+j71DDF+g8abnk4d4= Subject key identifier: AC:B5:F7:95:DB:EE:CC:D3:01:2D:6C:AE:54:09:8E:2D:76:B5:8C:27 Authority key identifier: 0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 Certificate issuer: /CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Certificate serial: 0ABAC5E0C9DD39A7049E6E878A84CCED9FCC0844 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft Manifest number: FE Signing time: Fri 27 Feb 2026 16:01:05 +0000 Manifest this update: Fri 27 Feb 2026 15:56:05 +0000 Manifest next update: Tue 03 Mar 2026 03:49:05 +0000 Files and hashes: 1: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: 0YTgb847tvQJ6aYcLp7rUu/koq2efZafX5EfBrU5MeY=) 2: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl (hash: K+9W/1c9EoZlHwde0hDMGtu70EhKzDtSyz9dZ0XRv3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ba:c5:e0:c9:dd:39:a7:04:9e:6e:87:8a:84:cc:ed:9f:cc:08:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Validity Not Before: Feb 27 15:56:05 2026 GMT Not After : Mar 3 03:49:05 2026 GMT Subject: CN=ACB5F795DBEECCD3012D6CAE54098E2D76B58C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:06:66:16:3f:3d:97:34:31:ff:0b:b1:d6: db:48:a9:ea:d4:a5:4a:55:db:39:04:23:61:41:2d: 92:34:95:de:f2:8b:96:9f:23:23:a5:2d:21:fb:c9: 97:05:65:ec:76:55:17:9f:62:e6:16:c8:68:3b:85: d0:aa:10:99:74:4a:6f:fd:f1:8c:c0:22:c0:da:4e: f0:26:04:34:1c:1c:92:45:76:8f:ac:88:b4:79:6a: aa:36:bf:70:8a:4f:40:1e:e7:a6:67:ad:99:f2:41: e7:47:e7:a6:6f:fa:0f:9c:b9:7b:3c:93:da:18:ca: 2d:5f:92:55:8e:21:94:ed:0e:8f:b5:c0:ee:74:80: 53:53:79:08:a5:ca:6c:e3:93:a5:2e:a2:fa:95:4f: ae:fe:1b:82:3b:be:0f:ec:cd:f7:e3:eb:1b:6d:d8: b4:24:8c:d4:88:78:f4:20:9f:9f:28:c5:e0:35:55: 5d:79:cc:78:55:5d:66:71:a3:5b:8c:b6:93:39:0e: dd:d0:f9:e1:8f:75:16:8b:77:ea:04:7d:66:26:7d: 00:d2:59:27:95:9a:55:e9:5c:2d:93:8d:43:36:40: 8b:2b:ef:95:a5:fc:7c:14:f5:b8:23:b4:07:29:8c: 69:a2:24:64:14:94:07:4f:5a:18:9b:6b:f9:a9:9a: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B5:F7:95:DB:EE:CC:D3:01:2D:6C:AE:54:09:8E:2D:76:B5:8C:27 X509v3 Authority Key Identifier: keyid:0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c2:e7:f6:2a:8e:62:77:14:27:46:99:f2:63:b9:2a:97:14: 8b:5d:46:89:b2:fe:5b:90:94:93:6e:d1:7d:78:8a:bc:3c:98: f9:53:b7:be:4e:04:35:43:45:8a:79:42:8d:87:38:d1:77:13: 71:71:5f:6f:4e:8a:79:95:7b:11:c9:0d:c5:12:1a:f5:ea:a0: 71:59:75:f3:37:d4:26:d0:56:be:3b:26:ca:f8:0a:f1:f2:c7: 65:48:3d:9d:d0:f3:fb:87:67:a2:3c:c4:1c:44:e1:5d:f4:fe: bd:b4:d1:78:44:a6:81:80:c1:d9:90:51:0b:03:93:4e:64:9b: 5e:e2:d7:22:94:66:ce:e8:b5:75:ec:a3:3a:2a:d4:22:f7:ec: f6:7b:08:f1:1c:f9:ca:99:f2:11:54:e8:03:44:81:ef:54:a1: fe:75:61:89:db:76:8b:4b:e9:7e:a5:3d:90:72:71:1f:16:fb: 9c:d8:15:88:9f:55:c1:19:23:85:d9:15:5d:cb:3f:11:89:44: e5:3f:6b:98:81:30:b0:38:69:04:25:81:26:36:06:9a:8e:b6: b4:42:85:c0:3b:35:22:07:d8:2b:27:0e:e8:e0:59:40:08:52: 2b:6a:d6:7d:63:3d:bd:5c:8e:a6:09:ba:a1:2d:02:35:12:37: b9:8f:14:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrrF4MndOacEnm6HioTM7Z/MCEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0 RjkzQjRCOTAeFw0yNjAyMjcxNTU2MDVaFw0yNjAzMDMwMzQ5MDVaMDMxMTAvBgNV BAMTKEFDQjVGNzk1REJFRUNDRDMwMTJENkNBRTU0MDk4RTJENzZCNThDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbFgZmFj89lzQx/wux1ttIqerU pUpV2zkEI2FBLZI0ld7yi5afIyOlLSH7yZcFZex2VRefYuYWyGg7hdCqEJl0Sm/9 8YzAIsDaTvAmBDQcHJJFdo+siLR5aqo2v3CKT0Ae56ZnrZnyQedH56Zv+g+cuXs8 k9oYyi1fklWOIZTtDo+1wO50gFNTeQilymzjk6UuovqVT67+G4I7vg/szffj6xtt 2LQkjNSIePQgn58oxeA1VV15zHhVXWZxo1uMtpM5Dt3Q+eGPdRaLd+oEfWYmfQDS WSeVmlXpXC2TjUM2QIsr75Wl/HwU9bgjtAcpjGmiJGQUlAdPWhiba/mpmod1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrLX3ldvuzNMBLWyuVAmOLXa1jCcwHwYDVR0j BBgwFoAUDh/voXs2FUD3OySVN98LXE+TtLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDkwZDg2Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC8wRTFGRUZBMTdC MzYxNTQwRjczQjI0OTUzN0RGMEI1QzRGOTNCNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0Rjkz QjRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBC NUM0RjkzQjRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLC5/YqjmJ3FCdGmfJjuSqXFItdRomy/luQ lJNu0X14irw8mPlTt75OBDVDRYp5Qo2HONF3E3FxX29OinmVexHJDcUSGvXqoHFZ dfM31CbQVr47Jsr4CvHyx2VIPZ3Q8/uHZ6I8xBxE4V30/r200XhEpoGAwdmQUQsD k05km17i1yKUZs7otXXsozoq1CL37PZ7CPEc+cqZ8hFU6ANEge9Uof51YYnbdotL 6X6lPZBycR8W+5zYFYifVcEZI4XZFV3LPxGJROU/a5iBMLA4aQQlgSY2BpqOtrRC hcA7NSIH2CsnDujgWUAIUitq1n1jPb1cjqYJuqEtAjUSN7mPFJw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:34:44 2026 by rpki-client