$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: hru9ooYXUu8i69p2b4jm5MVRV8a+pW82I+1lNc88l6Y= Subject key identifier: 36:44:36:DA:20:20:2B:EE:F3:D9:14:D6:1B:FA:22:CA:94:06:CD:05 Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 7EEFE54777F5BCD18126F20C76BF68C068E70837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: CA Signing time: Mon 02 Mar 2026 12:11:22 +0000 Manifest this update: Mon 02 Mar 2026 12:06:22 +0000 Manifest next update: Thu 05 Mar 2026 17:20:22 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: lmE0FrHby6maxBfWt13iidPqqJb6uPgcVPpR8TbiSrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ef:e5:47:77:f5:bc:d1:81:26:f2:0c:76:bf:68:c0:68:e7:08:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Mar 2 12:06:22 2026 GMT Not After : Mar 5 17:20:22 2026 GMT Subject: CN=364436DA20202BEEF3D914D61BFA22CA9406CD05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:c0:c5:3f:df:26:41:41:12:8e:5b:19:96: be:48:87:8d:87:ac:55:12:00:da:fa:65:67:45:84: 19:b6:bc:8c:ce:a3:99:74:de:03:96:7f:01:5b:42: c4:e3:b9:c7:52:be:06:2a:2c:3f:f0:79:4c:5b:99: 9b:96:4e:96:d6:bd:ca:1f:f6:46:68:8f:33:39:0c: d7:53:a3:08:ba:db:ba:c1:0a:99:61:a5:da:8e:82: 52:f6:1d:61:fd:10:11:12:aa:05:f8:08:47:ca:ba: de:74:ea:ac:83:27:82:f3:f8:7a:f0:1f:b6:c4:0e: a8:a7:d3:8d:04:ab:84:e9:a9:96:fe:d0:06:1b:8c: 89:ca:a3:bc:f2:19:77:d1:c2:b9:b1:bd:78:ea:e6: e4:f2:83:43:ae:e4:8f:5a:34:9d:d7:3b:21:75:cf: bc:1d:f7:65:ea:59:95:a5:07:12:66:da:1f:c5:45: 28:39:49:ff:d1:48:59:f4:ce:43:0b:9e:49:2f:4a: e8:f5:f5:4b:20:0b:e1:ea:44:ea:18:a0:42:4c:93: ab:3e:44:c5:e6:e6:6d:21:43:37:b5:88:72:ff:11: b7:52:7e:40:79:57:c2:8e:6c:49:cc:64:1d:20:8f: ae:c5:7a:83:82:14:d2:74:e3:bd:3a:15:3a:af:88: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:44:36:DA:20:20:2B:EE:F3:D9:14:D6:1B:FA:22:CA:94:06:CD:05 X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6a:c0:e2:22:9a:aa:19:2b:0f:3b:42:ac:08:a7:74:e7:ea: 19:8f:52:60:6d:68:31:87:d5:87:c3:6f:ad:4d:7a:6d:b3:23: ed:0c:de:03:ca:07:b4:d9:7e:89:4d:4f:f3:45:f6:d3:37:45: ae:d9:fa:9b:b5:ca:2f:ef:50:0a:f0:c6:23:34:06:93:3d:d3: a0:25:b2:ca:a5:a0:0f:e2:87:79:f0:7b:fe:9e:e6:90:f5:92: ef:77:55:8d:18:ee:05:42:ad:32:b1:16:a1:fc:bd:43:d1:24: 6c:3b:fd:67:80:9b:d9:99:6f:04:fe:a8:bd:11:a2:03:06:d5: bd:d5:cc:c8:e7:27:bd:51:ce:17:f2:a7:21:d3:b3:45:23:c0: 64:dd:56:70:9a:a6:7f:f5:42:9d:9f:e4:f2:19:f4:41:bd:9d: 51:d2:be:43:fb:e1:22:d0:ec:f8:36:b0:2d:7b:48:e1:c5:be: a1:1c:20:88:fa:22:43:25:94:6f:23:ff:0e:5c:40:a3:dc:3f: e9:9f:7d:f7:eb:f8:48:83:3e:97:4a:72:45:51:63:b8:20:20: 47:47:d4:84:00:6f:58:dd:d6:60:4d:06:62:4a:e3:10:85:f4: 33:62:6e:15:bb:2c:f0:f7:68:26:33:59:57:70:75:d3:c6:bc: 7a:66:25:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfu/lR3f1vNGBJvIMdr9owGjnCDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNjAzMDIxMjA2MjJaFw0yNjAzMDUxNzIwMjJaMDMxMTAvBgNV BAMTKDM2NDQzNkRBMjAyMDJCRUVGM0Q5MTRENjFCRkEyMkNBOTQwNkNEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfScDFP98mQUESjlsZlr5Ih42H rFUSANr6ZWdFhBm2vIzOo5l03gOWfwFbQsTjucdSvgYqLD/weUxbmZuWTpbWvcof 9kZojzM5DNdTowi627rBCplhpdqOglL2HWH9EBESqgX4CEfKut506qyDJ4Lz+Hrw H7bEDqin040Eq4TpqZb+0AYbjInKo7zyGXfRwrmxvXjq5uTyg0Ou5I9aNJ3XOyF1 z7wd92XqWZWlBxJm2h/FRSg5Sf/RSFn0zkMLnkkvSuj19UsgC+HqROoYoEJMk6s+ RMXm5m0hQze1iHL/EbdSfkB5V8KObEnMZB0gj67FeoOCFNJ04706FTqviACzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNkQ22iAgK+7z2RTWG/oiypQGzQUwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRqwOIimqoZKw87QqwIp3Tn6hmPUmBtaDGH 1YfDb61Nem2zI+0M3gPKB7TZfolNT/NF9tM3Ra7Z+pu1yi/vUArwxiM0BpM906Al ssqloA/ih3nwe/6e5pD1ku93VY0Y7gVCrTKxFqH8vUPRJGw7/WeAm9mZbwT+qL0R ogMG1b3VzMjnJ71RzhfypyHTs0UjwGTdVnCapn/1Qp2f5PIZ9EG9nVHSvkP74SLQ 7Pg2sC17SOHFvqEcIIj6IkMllG8j/w5cQKPcP+mffffr+EiDPpdKckVRY7ggIEdH 1IQAb1jd1mBNBmJK4xCF9DNibhW7LPD3aCYzWVdwddPGvHpmJfI= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:19 2026 by rpki-client