$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: EC2K/v0ynZvCb81G957UhI2PJmDu897z4kLE5sYJMyE= Subject key identifier: 9D:1E:F7:77:7D:A9:21:2C:1D:EB:9E:98:75:1D:A6:8A:30:8F:2F:C8 Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 0B158D9C6F11F9796C8287B3FD5696BF27C07FD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 0185 Signing time: Sat 28 Feb 2026 19:31:58 +0000 Manifest this update: Sat 28 Feb 2026 19:26:58 +0000 Manifest next update: Wed 04 Mar 2026 03:05:58 +0000 Files and hashes: 1: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: bpLMDrl9Lj5S0N8iO22Kvd3ttwdywRP4Qqxdc610iYk=) 2: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: dQqh/UiHoQw/70mJd+ZId7SvE382IQVHD0RnWmbxwtI=) 3: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: RiJQOn+iteWsGaHDQ7CJgxTOw5x3cmMgsW4Cbj99H/E=) 4: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 3qwvc0M9032XGDH7vraV4T7cy4QhAdHQHEpVds7HICk=) 5: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: ki0hIXEeGo8cU77Xr7lKfx7zoFMhB4mSH2tdcqcaUcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:15:8d:9c:6f:11:f9:79:6c:82:87:b3:fd:56:96:bf:27:c0:7f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Feb 28 19:26:58 2026 GMT Not After : Mar 4 03:05:58 2026 GMT Subject: CN=9D1EF7777DA9212C1DEB9E98751DA68A308F2FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:18:b7:4d:06:34:b4:d5:6b:93:be:93:6e: 09:c2:3f:ce:4f:20:01:94:29:c5:a6:0d:47:df:d8: 3f:c5:83:b7:7e:22:2e:72:1e:bc:b3:9b:76:18:92: 12:04:bc:32:bf:cc:d2:12:e4:fb:f4:e7:af:69:46: a9:ff:78:4e:5a:30:48:34:73:10:f4:cf:5b:2f:8e: 71:93:69:39:b0:09:de:d4:21:8d:70:70:fe:51:6f: a3:e8:a2:41:cb:4b:7f:04:a0:ab:06:34:6d:1f:42: 11:54:e9:98:7c:a8:a8:39:6a:c2:72:1f:f3:5b:ee: 75:38:21:43:93:ea:6a:f9:9d:b0:38:c0:ba:21:b6: e7:81:dc:99:a7:19:ef:50:41:4e:a7:e3:94:64:37: 26:41:97:06:e1:44:23:cb:2c:b3:97:d4:f3:5a:86: f3:33:29:04:33:f3:69:7d:59:5e:39:8a:df:91:c9: 8e:0d:d1:8f:71:42:97:0d:96:4d:59:06:ed:c4:8a: 43:b0:d4:e1:5f:22:93:25:ed:0d:56:95:73:d9:95: 11:24:22:e4:a8:62:fd:d3:8b:bb:43:c1:99:34:45: be:aa:57:05:6f:5d:bc:55:b4:ae:99:b6:b5:5c:91: fc:f6:5a:eb:09:ab:d3:60:3b:75:ea:19:49:9b:b9: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1E:F7:77:7D:A9:21:2C:1D:EB:9E:98:75:1D:A6:8A:30:8F:2F:C8 X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:ed:69:21:86:0d:82:bb:3d:6d:1c:c5:3b:3d:af:32:2e:22: c0:de:28:36:82:97:53:48:56:42:5e:a7:26:92:7d:09:20:99: 95:2b:0f:ce:57:bb:0f:4e:11:02:bc:9b:77:51:2c:1c:f5:bb: 44:9e:1a:ba:08:ce:93:1f:91:71:65:5f:72:23:34:41:dc:4e: 69:2d:13:5c:f5:58:38:25:eb:a6:19:53:01:3c:5b:a4:2a:02: cf:c5:4a:7b:51:ea:ce:51:fc:4c:d3:9f:36:8e:c8:e7:83:6d: d2:36:01:d2:cf:5a:64:37:3c:d1:f6:97:15:a9:0b:01:0e:12: 95:39:12:e5:2c:2d:1c:72:0d:9a:12:28:80:97:4b:9e:c0:b1: 3c:86:47:dc:42:37:a9:d7:93:5c:a5:b2:c8:57:3c:68:39:f5: f8:dd:4d:71:55:f1:c6:b3:02:69:76:d2:65:13:9d:52:15:cf: c4:2d:c7:99:c3:11:9c:0b:0f:c6:78:ed:37:a8:68:17:5a:d6: 31:bf:90:b5:82:75:b6:1f:1c:c2:13:9a:21:ce:79:18:54:e5: 8b:c6:31:3b:66:c8:7e:81:aa:fc:00:18:39:1b:b7:da:1d:a4: ae:a3:1f:c0:7d:9d:7e:a3:f8:a1:6c:d5:41:c1:6d:6e:f2:56: b1:a4:ec:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxWNnG8R+Xlsgoez/VaWvyfAf9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNjAyMjgxOTI2NThaFw0yNjAzMDQwMzA1NThaMDMxMTAvBgNV BAMTKDlEMUVGNzc3N0RBOTIxMkMxREVCOUU5ODc1MURBNjhBMzA4RjJGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFRi3TQY0tNVrk76TbgnCP85P IAGUKcWmDUff2D/Fg7d+Ii5yHryzm3YYkhIEvDK/zNIS5Pv0569pRqn/eE5aMEg0 cxD0z1svjnGTaTmwCd7UIY1wcP5Rb6PookHLS38EoKsGNG0fQhFU6Zh8qKg5asJy H/Nb7nU4IUOT6mr5nbA4wLohtueB3JmnGe9QQU6n45RkNyZBlwbhRCPLLLOX1PNa hvMzKQQz82l9WV45it+RyY4N0Y9xQpcNlk1ZBu3EikOw1OFfIpMl7Q1WlXPZlREk IuSoYv3Ti7tDwZk0Rb6qVwVvXbxVtK6ZtrVckfz2WusJq9NgO3XqGUmbudK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnR73d32pISwd656YdR2mijCPL8gwHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOLtaSGGDYK7PW0cxTs9rzIuIsDeKDaCl1NI VkJepyaSfQkgmZUrD85Xuw9OEQK8m3dRLBz1u0SeGroIzpMfkXFlX3IjNEHcTmkt E1z1WDgl66YZUwE8W6QqAs/FSntR6s5R/EzTnzaOyOeDbdI2AdLPWmQ3PNH2lxWp CwEOEpU5EuUsLRxyDZoSKICXS57AsTyGR9xCN6nXk1ylsshXPGg59fjdTXFV8caz Aml20mUTnVIVz8Qtx5nDEZwLD8Z47TeoaBda1jG/kLWCdbYfHMITmiHOeRhU5YvG MTtmyH6BqvwAGDkbt9odpK6jH8B9nX6j+KFs1UHBbW7yVrGk7Iw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:35 2026 by rpki-client