$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: CxXULE6kn7W981M7KYqX/XLB9ToRQ4Wqv9AtRRHeAJ4= Subject key identifier: 7F:45:3A:EC:E0:DF:95:CF:C1:79:C6:2B:B9:B9:97:E0:69:BD:BC:7D Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 0BD37116E3757758A48FC95A73539AE2A11E0057 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01E6 Signing time: Sat 28 Feb 2026 22:41:58 +0000 Manifest this update: Sat 28 Feb 2026 22:36:58 +0000 Manifest next update: Wed 04 Mar 2026 02:23:58 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: GNZzAcmYMO24v0PgoH0PVcbzFxgNvmanVmMwCuln4aA=) 2: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: inkVxR+djmBvGF2sYLlHRR+QLEV75mEl5DpXJxn98pA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d3:71:16:e3:75:77:58:a4:8f:c9:5a:73:53:9a:e2:a1:1e:00:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Feb 28 22:36:58 2026 GMT Not After : Mar 4 02:23:58 2026 GMT Subject: CN=7F453AECE0DF95CFC179C62BB9B997E069BDBC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:70:98:52:17:78:3b:41:78:76:3b:5d:11: e8:d0:d6:0f:f0:27:fc:07:e2:8e:34:e3:7d:2d:6e: d0:33:ec:55:23:62:16:f9:7d:05:72:e2:13:6c:4e: 4e:5e:9b:af:99:c7:2c:f5:2b:ca:e0:3b:98:c0:63: 5f:6f:f0:df:fb:1d:cc:3c:31:5f:97:91:72:dc:66: b7:b7:53:74:06:a8:d8:04:88:fc:5c:9e:ab:07:30: 56:c9:b9:46:32:cf:86:72:e7:89:2c:d3:3a:09:10: 6c:d4:ab:6c:43:11:6d:e5:96:5b:f2:db:f8:98:91: 54:d5:4c:ad:90:af:e7:11:fb:e1:ef:01:1a:4d:f1: 63:72:5e:95:2b:56:a8:0d:28:e7:ae:5a:0d:df:f5: 4c:ba:e2:6a:37:53:5c:f7:31:03:07:35:6d:d2:fd: a6:b8:99:92:09:3c:b1:b3:2f:ec:57:4f:51:a1:96: 33:c1:24:65:0d:a5:87:c4:80:32:e2:e9:9e:10:0f: ba:f2:fa:f0:49:04:00:a4:33:0f:73:d5:97:49:55: c7:ed:26:7d:55:06:cd:d1:79:3b:8f:c6:d6:9a:94: ab:ab:72:6b:24:ab:46:73:8e:8f:d8:f7:ac:69:10: 5d:8e:87:f4:7b:97:e8:f6:50:05:14:71:f2:fa:5f: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:45:3A:EC:E0:DF:95:CF:C1:79:C6:2B:B9:B9:97:E0:69:BD:BC:7D X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ed:39:4d:d4:c0:ae:43:91:a7:6a:d2:02:fb:6f:43:12:24: 8f:cf:12:af:07:3b:10:54:d6:43:27:0a:1f:8a:9d:99:48:f3: 77:08:e3:11:80:e2:fb:3b:86:9c:98:4e:3f:45:76:2c:6c:b5: 53:fe:21:74:63:00:17:90:80:60:99:54:da:2b:f8:e1:53:d2: 48:2c:ae:ee:7c:8c:bb:64:e2:91:17:e1:8c:df:51:df:75:44: e7:fd:1c:7c:09:d9:33:b5:21:12:64:21:a5:7b:d8:61:50:12: 71:29:05:9a:4f:5d:7e:bb:cb:07:91:a2:95:d2:00:67:a2:38: 9b:ca:ea:b1:58:c5:ab:bd:f6:0a:f3:02:6c:bd:b7:20:40:f0: ba:ca:6a:be:b4:df:20:d5:8a:da:0a:38:f3:ba:e8:e3:b4:18: 87:dc:52:b3:07:e1:7f:b2:bd:b2:39:a7:54:86:35:18:8f:d5: 17:25:96:a7:7b:37:60:8c:30:f9:a1:bb:39:53:b6:6b:f8:39: 28:d6:fb:f5:f4:1e:c3:1a:43:00:f1:94:b0:1c:b5:5b:db:66: 96:ba:a6:75:1c:3d:b4:f5:26:37:7f:de:c2:51:b0:b1:0b:c7: f6:82:ea:f8:fd:7d:0b:7c:8e:06:4d:76:6c:49:89:37:27:c4: d5:1d:04:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9NxFuN1d1ikj8lac1Oa4qEeAFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNjAyMjgyMjM2NThaFw0yNjAzMDQwMjIzNThaMDMxMTAvBgNV BAMTKDdGNDUzQUVDRTBERjk1Q0ZDMTc5QzYyQkI5Qjk5N0UwNjlCREJDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiHCYUhd4O0F4djtdEejQ1g/w J/wH4o40430tbtAz7FUjYhb5fQVy4hNsTk5em6+Zxyz1K8rgO5jAY19v8N/7Hcw8 MV+XkXLcZre3U3QGqNgEiPxcnqsHMFbJuUYyz4Zy54ks0zoJEGzUq2xDEW3lllvy 2/iYkVTVTK2Qr+cR++HvARpN8WNyXpUrVqgNKOeuWg3f9Uy64mo3U1z3MQMHNW3S /aa4mZIJPLGzL+xXT1GhljPBJGUNpYfEgDLi6Z4QD7ry+vBJBACkMw9z1ZdJVcft Jn1VBs3ReTuPxtaalKurcmskq0Zzjo/Y96xpEF2Oh/R7l+j2UAUUcfL6Xxk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0U67ODflc/BecYrubmX4Gm9vH0wHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErtOU3UwK5Dkadq0gL7b0MSJI/PEq8HOxBU 1kMnCh+KnZlI83cI4xGA4vs7hpyYTj9FdixstVP+IXRjABeQgGCZVNor+OFT0kgs ru58jLtk4pEX4YzfUd91ROf9HHwJ2TO1IRJkIaV72GFQEnEpBZpPXX67yweRopXS AGeiOJvK6rFYxau99grzAmy9tyBA8LrKar603yDVitoKOPO66OO0GIfcUrMH4X+y vbI5p1SGNRiP1Rcllqd7N2CMMPmhuzlTtmv4OSjW+/X0HsMaQwDxlLActVvbZpa6 pnUcPbT1Jjd/3sJRsLELx/aC6vj9fQt8jgZNdmxJiTcnxNUdBOA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:23:37 2026 by rpki-client