$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: buu301BwhXlWWGbq2ciEZ7t+6YYeAqRt/+rz2IsD54U= Subject key identifier: 87:3E:BF:9A:5F:E5:2E:1D:8D:39:FF:97:2E:3A:69:FD:8F:EC:AA:70 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 40EF6E31522355211EA4F72D142B9CC7F53774CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: FE Signing time: Mon 02 Mar 2026 12:51:16 +0000 Manifest this update: Mon 02 Mar 2026 12:46:16 +0000 Manifest next update: Thu 05 Mar 2026 23:49:16 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) 2: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: YM+CZwcDo41NoK8QAemmI1GEk1kp2eJFFwFLOnerEb4=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ef:6e:31:52:23:55:21:1e:a4:f7:2d:14:2b:9c:c7:f5:37:74:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Mar 2 12:46:16 2026 GMT Not After : Mar 5 23:49:16 2026 GMT Subject: CN=873EBF9A5FE52E1D8D39FF972E3A69FD8FECAA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:f4:39:d1:3c:bf:59:d3:9d:61:07:90:54: dc:95:80:2a:56:8c:fb:34:12:45:87:31:ee:98:6b: a3:ef:3a:3d:e5:d4:fa:73:e2:fb:22:e8:9a:4b:8b: 47:8e:6c:43:da:b1:b7:2c:25:2e:0f:01:c7:08:16: 5a:7b:7e:a5:36:3a:d5:bb:c8:8f:4a:67:a6:41:32: 9c:2c:e3:04:58:c7:8b:b5:25:8e:bd:3e:02:72:85: 1c:9c:a7:4f:9d:2c:6b:a5:a1:b5:02:3e:27:ac:f2: 99:9b:e7:24:d0:7f:05:0a:b3:6c:52:5b:b8:49:c8: 8f:09:e0:ac:2e:b3:8a:03:04:4f:f1:00:68:6e:fc: 6e:fe:83:2c:a8:fe:f5:59:fd:a1:3e:4d:5f:97:5b: a1:12:77:97:4a:fc:7f:73:d4:4c:cc:d4:75:c7:69: 09:b1:8a:85:62:fa:3f:d1:42:aa:65:45:16:04:41: 22:eb:92:21:f7:90:fc:33:6a:fa:6d:e4:7d:31:12: 31:4a:3c:dc:e9:b2:a7:23:82:2a:59:e0:d0:91:24: 49:c9:0b:bd:01:f4:26:8e:4f:ca:69:32:3a:ff:34: 47:5a:b3:41:f5:e6:5b:30:0b:14:b6:1c:f0:54:a2: 0e:09:0d:67:b4:3c:51:1d:9d:d1:c6:fe:6a:7f:84: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:BF:9A:5F:E5:2E:1D:8D:39:FF:97:2E:3A:69:FD:8F:EC:AA:70 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e1:5d:f3:75:52:d5:d2:4b:86:af:e4:9f:f6:26:4b:1b:cb: 7f:78:ec:23:f6:ab:2e:22:61:e5:5b:12:04:9c:7e:d1:f8:1f: ba:92:81:c4:5f:b0:62:11:79:91:5f:23:07:5d:4e:da:7d:fd: 22:34:39:6b:92:c0:bf:fd:ab:8d:0b:b6:6b:a6:ca:ac:1b:01: 63:91:41:b5:a5:02:f3:99:af:ff:a2:78:37:d2:c5:55:2d:79: aa:83:06:98:07:71:87:10:34:ee:f9:d8:2b:6c:9b:02:73:c2: d8:e8:df:d7:35:2d:59:06:a0:ca:c3:dc:60:51:ef:6b:9c:db: 88:25:07:29:61:26:0e:6b:49:2a:84:ff:ee:2d:b5:5a:f1:f4: 08:fa:bf:15:15:09:f7:7a:03:38:a5:e2:58:2f:c6:66:8a:86: 7a:10:b3:da:88:bd:d9:55:63:30:a0:43:0c:99:cb:c0:32:b1: cf:ee:13:80:db:0d:22:ec:35:fb:cc:ef:71:f5:cd:61:af:7d: 35:83:b6:b1:9f:d9:f8:10:2c:b8:48:e4:ae:20:71:aa:c0:0a: 68:e0:f3:94:9e:ea:2f:17:89:98:66:0c:12:cb:e0:ec:85:8d: aa:db:ae:75:e3:4d:ec:fb:c2:43:fd:ce:60:8a:22:45:8a:bd: e0:58:34:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQO9uMVIjVSEepPctFCucx/U3dM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNjAzMDIxMjQ2MTZaFw0yNjAzMDUyMzQ5MTZaMDMxMTAvBgNV BAMTKDg3M0VCRjlBNUZFNTJFMUQ4RDM5RkY5NzJFM0E2OUZEOEZFQ0FBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbfQ50Ty/WdOdYQeQVNyVgCpW jPs0EkWHMe6Ya6PvOj3l1Ppz4vsi6JpLi0eObEPasbcsJS4PAccIFlp7fqU2OtW7 yI9KZ6ZBMpws4wRYx4u1JY69PgJyhRycp0+dLGulobUCPies8pmb5yTQfwUKs2xS W7hJyI8J4Kwus4oDBE/xAGhu/G7+gyyo/vVZ/aE+TV+XW6ESd5dK/H9z1EzM1HXH aQmxioVi+j/RQqplRRYEQSLrkiH3kPwzavpt5H0xEjFKPNzpsqcjgipZ4NCRJEnJ C70B9CaOT8ppMjr/NEdas0H15lswCxS2HPBUog4JDWe0PFEdndHG/mp/hL+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhz6/ml/lLh2NOf+XLjpp/Y/sqnAwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrhXfN1UtXSS4av5J/2Jksby3947CP2qy4i YeVbEgScftH4H7qSgcRfsGIReZFfIwddTtp9/SI0OWuSwL/9q40LtmumyqwbAWOR QbWlAvOZr/+ieDfSxVUteaqDBpgHcYcQNO752CtsmwJzwtjo39c1LVkGoMrD3GBR 72uc24glBylhJg5rSSqE/+4ttVrx9Aj6vxUVCfd6Azil4lgvxmaKhnoQs9qIvdlV YzCgQwyZy8Aysc/uE4DbDSLsNfvM73H1zWGvfTWDtrGf2fgQLLhI5K4gcarACmjg 85Se6i8XiZhmDBLL4OyFjarbrnXjTez7wkP9zmCKIkWKveBYNFM= -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:51 2026 by rpki-client