$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: q5zN2Vu0L/2LGmyaQOWTlAQ7NBYjuU87mjgzaedJNhg= Subject key identifier: 02:83:33:A3:A5:4B:43:4C:C1:82:0A:4D:F3:13:5C:41:15:A8:77:B7 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 54CB85244425F02941622FEC7AD2073A0D6A055D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 50 Signing time: Mon 02 Mar 2026 19:31:13 +0000 Manifest this update: Mon 02 Mar 2026 19:26:13 +0000 Manifest next update: Thu 05 Mar 2026 21:13:13 +0000 Files and hashes: 1: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) 2: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: qRRnCa3XMs0fUa+AH/4UUPtWLlt4Aeu9ysIIZe+urNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 21:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cb:85:24:44:25:f0:29:41:62:2f:ec:7a:d2:07:3a:0d:6a:05:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Mar 2 19:26:13 2026 GMT Not After : Mar 5 21:13:13 2026 GMT Subject: CN=028333A3A54B434CC1820A4DF3135C4115A877B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:f2:30:fa:4e:75:08:b2:56:39:2c:85:f7: ea:07:85:ad:0a:21:73:a1:cf:fc:7d:8c:ff:f2:88: 8d:32:f1:0a:48:1c:9b:8b:e3:d1:f9:99:c4:3e:a3: 4d:f5:01:77:3f:35:ea:4c:b1:90:f9:04:e9:b5:2e: 4a:20:f3:b2:68:a9:7e:14:9c:b1:f9:0e:d2:69:9e: a7:d6:f8:58:16:1c:91:66:48:eb:1d:2c:c1:bd:ea: 81:8f:e9:8b:3e:9f:8f:0b:f5:82:4d:06:82:15:00: be:58:4e:8f:e9:45:15:18:4c:32:cd:98:55:76:1b: 16:a5:7d:64:7a:f8:be:ec:a5:66:af:50:2c:f3:a4: 4b:51:a0:be:d5:35:11:e8:0f:72:e6:56:d7:2e:95: 44:0c:7c:0c:2f:5b:7b:52:47:37:17:86:20:44:88: 28:b5:f5:47:06:74:a2:f8:33:b1:b1:61:a6:26:fd: 28:f3:95:1c:77:85:d2:61:cf:82:0e:84:bf:54:37: 87:2b:7a:6d:81:67:97:94:24:be:ca:06:46:90:99: 73:be:8d:d7:4b:fb:ce:c5:33:fd:f8:5c:9a:4b:9f: 5a:5e:4d:28:70:47:e3:f4:1d:81:f0:e4:8d:ca:ad: da:82:c8:80:d7:a1:84:ce:7e:55:ef:18:ae:50:4e: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:33:A3:A5:4B:43:4C:C1:82:0A:4D:F3:13:5C:41:15:A8:77:B7 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2f:0e:41:c5:b7:b6:1e:7a:37:4e:d5:a4:01:5c:cf:0c:33: 5b:ec:ca:71:fa:59:3b:cb:0e:45:a1:15:f0:12:c0:04:13:43: 93:0d:10:7d:07:3f:79:c0:11:88:47:25:5d:a1:fc:c7:79:07: cc:25:e8:56:20:0d:98:8e:fd:2f:27:ef:ac:70:27:30:83:ab: d9:7f:f3:a5:37:63:1c:7e:bd:8e:70:74:85:6b:77:15:85:ec: 2b:0e:72:90:bd:bc:9b:39:ee:aa:0a:30:30:1e:b8:c8:bf:a0: bb:a8:06:9e:31:e3:8d:a7:d6:a0:c5:5a:d3:b0:91:96:fd:e4: 97:90:1d:4d:15:eb:f7:e6:71:06:09:23:3e:b3:5f:5b:e1:0c: 9e:d0:34:ad:c3:82:ca:ed:6c:52:05:6d:6f:57:fc:c1:13:71: 8e:e1:3d:aa:2f:15:ad:37:3f:d0:63:30:9c:9a:46:5f:38:f1: a4:24:3d:ae:8b:8e:60:d0:04:5b:c5:4c:6f:e7:c7:ba:37:4d: 01:05:99:fb:aa:69:36:84:ac:ca:06:f4:61:97:5c:74:77:db: bd:7e:d7:84:fc:48:fe:25:39:35:4b:df:95:ae:55:40:80:6d: db:3e:84:8b:3d:c7:ec:bf:4d:14:62:e7:31:72:e9:95:68:d2: 10:33:fb:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVMuFJEQl8ClBYi/setIHOg1qBV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNjAzMDIxOTI2MTNaFw0yNjAzMDUyMTEzMTNaMDMxMTAvBgNV BAMTKDAyODMzM0EzQTU0QjQzNENDMTgyMEE0REYzMTM1QzQxMTVBODc3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+d/Iw+k51CLJWOSyF9+oHha0K IXOhz/x9jP/yiI0y8QpIHJuL49H5mcQ+o031AXc/NepMsZD5BOm1Lkog87JoqX4U nLH5DtJpnqfW+FgWHJFmSOsdLMG96oGP6Ys+n48L9YJNBoIVAL5YTo/pRRUYTDLN mFV2GxalfWR6+L7spWavUCzzpEtRoL7VNRHoD3LmVtculUQMfAwvW3tSRzcXhiBE iCi19UcGdKL4M7GxYaYm/SjzlRx3hdJhz4IOhL9UN4crem2BZ5eUJL7KBkaQmXO+ jddL+87FM/34XJpLn1peTShwR+P0HYHw5I3KrdqCyIDXoYTOflXvGK5QToTnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAoMzo6VLQ0zBggpN8xNcQRWod7cwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIvDkHFt7YeejdO1aQBXM8MM1vsynH6WTvL DkWhFfASwAQTQ5MNEH0HP3nAEYhHJV2h/Md5B8wl6FYgDZiO/S8n76xwJzCDq9l/ 86U3Yxx+vY5wdIVrdxWF7CsOcpC9vJs57qoKMDAeuMi/oLuoBp4x442n1qDFWtOw kZb95JeQHU0V6/fmcQYJIz6zX1vhDJ7QNK3DgsrtbFIFbW9X/METcY7hPaovFa03 P9BjMJyaRl848aQkPa6LjmDQBFvFTG/nx7o3TQEFmfuqaTaErMoG9GGXXHR3271+ 14T8SP4lOTVL35WuVUCAbds+hIs9x+y/TRRi5zFy6ZVo0hAz+7E= -----END CERTIFICATE-----Generated at Tue Mar 3 00:58:25 2026 by rpki-client