$ rpki-client -vvf repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft File: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft (raw, json) Hash identifier: n72sCZN9c2UhU7vSx3Uq8NHqHuwRJwA7XscUFNQqUhM= Subject key identifier: BF:E7:D3:84:35:0C:BC:82:A3:97:41:50:87:2A:C6:F6:2A:6A:2A:B2 Authority key identifier: 0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD Certificate issuer: /CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Certificate serial: 2E17E0D333CC43DB0B24B08D4323C2A679125A87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft Manifest number: 02 Signing time: Fri 27 Feb 2026 13:01:27 +0000 Manifest this update: Fri 27 Feb 2026 12:56:27 +0000 Manifest next update: Tue 03 Mar 2026 00:12:27 +0000 Files and hashes: 1: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl (hash: If8n9/6wEjNWktTk0lkxpfNAgO8lQb+y4qFIq8A/eSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 00:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:17:e0:d3:33:cc:43:db:0b:24:b0:8d:43:23:c2:a6:79:12:5a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Validity Not Before: Feb 27 12:56:27 2026 GMT Not After : Mar 3 00:12:27 2026 GMT Subject: CN=BFE7D384350CBC82A3974150872AC6F62A6A2AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:48:13:b5:d9:d9:5a:43:35:8c:1f:27:70: df:03:e9:81:95:a5:53:4d:dd:ce:4c:79:49:83:b8: 37:32:42:33:65:7d:6c:43:0c:5b:bd:39:f4:0a:e8: 02:7d:83:88:c2:9a:97:b6:7c:5e:b2:ab:03:33:9e: 9e:9f:5a:4a:92:50:1c:01:22:48:33:37:1e:90:ec: f3:9f:4c:cb:ac:e2:53:55:54:18:ff:13:f1:eb:94: 3d:4e:de:01:44:c4:4a:0a:bc:ce:c3:40:2c:47:b1: 53:b4:3e:19:b4:2e:4c:30:06:0b:f3:e5:0d:3e:b9: 94:6c:a1:46:9d:08:22:80:72:fc:6f:1f:ab:fb:93: d5:39:90:0e:0e:a0:5c:50:e9:48:e2:fb:05:a4:8c: 40:32:cf:5d:ea:7b:53:2b:19:91:02:e5:3f:de:49: b2:22:76:c5:7b:bb:f6:26:0c:4f:cf:a6:db:47:61: f1:d2:cf:de:02:ff:f0:ef:2f:27:03:f9:7b:34:e4: 2d:eb:f1:84:26:51:3e:1a:9a:19:23:1d:03:6d:1f: b4:d8:61:c0:72:fa:8b:b8:35:b9:f8:07:5a:39:19: 87:cc:b1:37:42:e9:dd:0a:36:af:30:f8:f7:42:ff: ac:46:1d:ee:70:d4:9b:b0:e0:24:e6:7f:57:d7:96: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E7:D3:84:35:0C:BC:82:A3:97:41:50:87:2A:C6:F6:2A:6A:2A:B2 X509v3 Authority Key Identifier: keyid:0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:86:e7:2d:79:5d:c8:0e:d1:11:4e:f6:8b:bc:01:cf:e3:41: e0:58:b7:5d:74:b7:9a:c5:56:49:82:d0:0a:38:32:63:c9:75: df:b4:4c:a9:3d:e4:f3:92:22:92:2a:ea:5e:99:0e:25:10:b9: 37:86:b6:eb:9b:08:cc:ea:48:62:98:e5:c3:e6:c1:f2:53:d1: fe:a3:4c:fd:31:f3:25:ae:03:65:35:1b:4c:c5:5e:00:d7:60: 16:5a:8c:64:e9:c4:a7:06:32:91:63:e7:eb:73:f9:d6:e5:c3: 54:41:fe:9a:12:7e:ea:c7:30:c1:60:c9:37:0b:63:04:cd:da: 01:df:ee:01:48:c6:66:6e:33:95:31:5f:f5:44:6a:db:6d:78: 96:b9:a2:ba:8e:71:0c:8d:ae:ef:2e:92:55:07:26:d3:86:1d: 7b:2b:0a:44:3d:a9:f0:68:af:f4:44:3b:ac:1e:4e:d2:6e:9e: fa:8a:59:f2:1b:5e:2d:6c:64:32:3c:19:4e:69:45:fa:89:7d: ec:c6:d2:52:ab:f2:95:34:c2:b8:22:75:e2:05:02:f3:d9:d5: 52:60:2e:55:80:79:f2:14:3e:1d:51:08:9a:6d:d7:49:06:1d: 55:fe:8e:24:a6:37:b5:f9:c3:56:46:39:40:3c:61:c7:ba:70: 29:61:61:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhfg0zPMQ9sLJLCNQyPCpnkSWocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3 MzFFNUNDRDAeFw0yNjAyMjcxMjU2MjdaFw0yNjAzMDMwMDEyMjdaMDMxMTAvBgNV BAMTKEJGRTdEMzg0MzUwQ0JDODJBMzk3NDE1MDg3MkFDNkY2MkE2QTJBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSUgTtdnZWkM1jB8ncN8D6YGV pVNN3c5MeUmDuDcyQjNlfWxDDFu9OfQK6AJ9g4jCmpe2fF6yqwMznp6fWkqSUBwB IkgzNx6Q7POfTMus4lNVVBj/E/HrlD1O3gFExEoKvM7DQCxHsVO0Phm0LkwwBgvz 5Q0+uZRsoUadCCKAcvxvH6v7k9U5kA4OoFxQ6Uji+wWkjEAyz13qe1MrGZEC5T/e SbIidsV7u/YmDE/PpttHYfHSz94C//DvLycD+Xs05C3r8YQmUT4amhkjHQNtH7TY YcBy+ou4Nbn4B1o5GYfMsTdC6d0KNq8w+PdC/6xGHe5w1Juw4CTmf1fXlqt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+fThDUMvIKjl0FQhyrG9ipqKrIwHwYDVR0j BBgwFoAUDz29lBl81FgJV7Tz0Ju2WHMeXM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTgwNmQzMC1lZTA1LTQ1MGYtOTQ2Ni03ZjkwOGU5Y2M3ZTQvMC8wRjNEQkQ5NDE5 N0NENDU4MDk1N0I0RjNEMDlCQjY1ODczMUU1Q0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3MzFF NUNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU4MDZkMzAtZWUwNS00NTBmLTk0 NjYtN2Y5MDhlOWNjN2U0LzAvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2 NTg3MzFFNUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyG5y15XcgO0RFO9ou8Ac/jQeBYt110t5rF VkmC0Ao4MmPJdd+0TKk95POSIpIq6l6ZDiUQuTeGtuubCMzqSGKY5cPmwfJT0f6j TP0x8yWuA2U1G0zFXgDXYBZajGTpxKcGMpFj5+tz+dblw1RB/poSfurHMMFgyTcL YwTN2gHf7gFIxmZuM5UxX/VEattteJa5orqOcQyNru8uklUHJtOGHXsrCkQ9qfBo r/REO6weTtJunvqKWfIbXi1sZDI8GU5pRfqJfezG0lKr8pU0wrgideIFAvPZ1VJg LlWAefIUPh1RCJpt10kGHVX+jiSmN7X5w1ZGOUA8Yce6cClhYSM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:16:51 2026 by rpki-client