$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: gi+Qq0n2v4R5aAElTG7Xtp7ERGI8UXT1W0x18JalIKk= Subject key identifier: C6:2B:D3:A9:98:C9:47:1A:B1:61:73:11:D2:A1:31:08:6E:BC:4D:01 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 4B3B7A3AA7B8BC0343526F2C73DED8E1EC2F5890 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 055A Signing time: Sun 01 Mar 2026 15:21:28 +0000 Manifest this update: Sun 01 Mar 2026 15:16:28 +0000 Manifest next update: Thu 05 Mar 2026 00:51:28 +0000 Files and hashes: 1: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: 59C8+ueocFB9KHWKOl5lJ1YbW92Avk3FVrbsG3SLq4A=) 2: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 3: 3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (hash: mGAHC8BdMgBmjZL5jFtAJNkqoin6EENRYsub4ulTi+U=) 4: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 5: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 6: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 7: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3b:7a:3a:a7:b8:bc:03:43:52:6f:2c:73:de:d8:e1:ec:2f:58:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Mar 1 15:16:28 2026 GMT Not After : Mar 5 00:51:28 2026 GMT Subject: CN=C62BD3A998C9471AB1617311D2A131086EBC4D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:25:4a:99:c9:dc:37:a4:1f:7e:06:b9:d3: 9b:e8:ec:fd:9b:1c:c7:0c:f6:8e:65:9f:33:ed:f7: 14:5c:24:21:8f:7b:bf:18:e3:75:07:0c:55:4d:54: 51:64:41:f6:f6:32:9b:66:d1:82:dd:d6:12:45:c5: 3f:9d:27:6f:2e:8c:72:c0:52:1a:40:ee:c2:0f:ec: 9f:fd:ab:8d:ee:25:a8:89:d1:87:8f:38:27:30:f7: 7a:73:4f:53:a0:dc:08:ac:b8:c3:cc:fc:9a:b0:3c: 1f:d8:f7:f4:5a:6a:76:8c:3c:f9:0a:31:3e:2e:4a: ec:76:0c:c1:29:26:5e:ba:54:f9:e7:19:b6:24:4a: 2f:81:f2:f7:b0:a6:39:3c:77:fa:91:cf:21:1a:14: b4:d0:65:6f:3f:d6:24:c5:85:6b:20:d7:bb:aa:53: 7d:4f:d9:eb:e0:81:2a:b0:64:a4:57:28:3d:38:9e: 01:7c:8d:59:3b:26:fd:2a:35:a7:77:dc:8c:fd:fe: 5b:14:be:cc:6f:f9:21:89:a3:81:ac:96:2c:c4:69: a4:ab:59:b7:9a:d4:62:23:e8:57:11:b9:eb:a6:cc: d1:ec:ec:37:4d:c4:8a:8a:09:72:44:96:b7:d3:48: 86:9f:d9:f8:e6:31:cb:b7:f2:e7:ca:af:f7:8a:38: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2B:D3:A9:98:C9:47:1A:B1:61:73:11:D2:A1:31:08:6E:BC:4D:01 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e6:c4:44:35:18:58:b4:49:a0:9d:b7:7c:f5:e3:e2:db:5c: f8:09:a0:df:29:eb:44:a8:b5:2c:95:40:23:9a:ad:37:ec:4e: f4:df:b9:0b:f8:cb:b0:fa:76:da:32:40:67:9c:73:43:57:ef: 07:5c:9a:e3:0d:87:f9:51:e2:91:04:0b:cc:36:a2:49:96:02: 66:75:f3:de:1f:29:76:70:a1:6a:da:c4:d6:da:ba:88:9d:db: 70:57:de:89:e3:68:2f:cf:db:fb:c1:5e:06:2e:f1:54:68:3e: a6:5b:66:bf:27:0a:9d:4a:01:b3:26:1c:29:67:29:63:c8:3a: 09:c9:b4:01:42:fd:42:b0:08:40:68:07:30:f8:c8:6b:35:b4: f1:dd:41:57:df:63:3e:9d:90:f0:39:db:eb:7f:2c:03:d8:11: 1c:bd:66:fd:b6:76:aa:cc:87:49:b6:28:e8:c3:64:00:ac:84: 4c:08:57:cc:7f:c5:f9:06:91:ea:fa:df:70:03:b1:32:91:05: 63:b7:11:0e:86:e0:8d:97:2f:e7:a7:e4:f0:4f:8d:a4:4c:c0: e7:84:b6:59:79:86:b5:43:a5:f1:e9:4e:95:03:32:a5:18:3b: ff:80:c4:df:a7:e3:db:1f:29:10:4a:09:1a:46:67:2b:5b:60: d3:62:b4:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzt6Oqe4vANDUm8sc97Y4ewvWJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNjAzMDExNTE2MjhaFw0yNjAzMDUwMDUxMjhaMDMxMTAvBgNV BAMTKEM2MkJEM0E5OThDOTQ3MUFCMTYxNzMxMUQyQTEzMTA4NkVCQzREMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOISVKmcncN6Qffga505vo7P2b HMcM9o5lnzPt9xRcJCGPe78Y43UHDFVNVFFkQfb2Mptm0YLd1hJFxT+dJ28ujHLA UhpA7sIP7J/9q43uJaiJ0YePOCcw93pzT1Og3AisuMPM/JqwPB/Y9/RaanaMPPkK MT4uSux2DMEpJl66VPnnGbYkSi+B8vewpjk8d/qRzyEaFLTQZW8/1iTFhWsg17uq U31P2evggSqwZKRXKD04ngF8jVk7Jv0qNad33Iz9/lsUvsxv+SGJo4GslizEaaSr Wbea1GIj6FcRueumzNHs7DdNxIqKCXJElrfTSIaf2fjmMcu38ufKr/eKOJcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxivTqZjJRxqxYXMR0qExCG68TQEwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHmxEQ1GFi0SaCdt3z14+LbXPgJoN8p60So tSyVQCOarTfsTvTfuQv4y7D6dtoyQGecc0NX7wdcmuMNh/lR4pEEC8w2okmWAmZ1 894fKXZwoWraxNbauoid23BX3onjaC/P2/vBXgYu8VRoPqZbZr8nCp1KAbMmHCln KWPIOgnJtAFC/UKwCEBoBzD4yGs1tPHdQVffYz6dkPA52+t/LAPYERy9Zv22dqrM h0m2KOjDZACshEwIV8x/xfkGker633ADsTKRBWO3EQ6G4I2XL+en5PBPjaRMwOeE tll5hrVDpfHpTpUDMqUYO/+AxN+n49sfKRBKCRpGZytbYNNitKU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:21 2026 by rpki-client