$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: UsXnJNe/R/bmNSRfzBzWcM/K6znc4hfGg2+4s/SIYso= Subject key identifier: 2C:5E:70:CC:0D:10:81:BB:B7:60:0B:83:BC:AB:1F:C2:72:5E:01:51 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 78F16B30A59B66D6E9B04165A2B8CB62E98EB3EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: E1 Signing time: Sat 28 Feb 2026 00:31:09 +0000 Manifest this update: Sat 28 Feb 2026 00:26:09 +0000 Manifest next update: Tue 03 Mar 2026 08:35:09 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: V7z3StEJy//NPRjpW2Ub/g6xzHNOe7vaXf0U02DTFKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 08:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f1:6b:30:a5:9b:66:d6:e9:b0:41:65:a2:b8:cb:62:e9:8e:b3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Feb 28 00:26:09 2026 GMT Not After : Mar 3 08:35:09 2026 GMT Subject: CN=2C5E70CC0D1081BBB7600B83BCAB1FC2725E0151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:d2:40:f2:12:51:0e:59:0d:6a:2e:5b:5b: ae:8b:06:fe:2e:f5:02:25:41:e0:f0:d8:a4:26:fe: 90:8d:05:42:1b:9e:0b:a4:1a:f1:9e:be:87:fc:43: 73:90:6e:5f:2c:cf:b3:e3:31:6b:a9:b6:88:04:11: 9f:21:f0:33:cc:d1:5c:f2:e7:be:88:58:b9:1f:0a: 9c:2a:e5:79:19:c5:e8:38:e9:0a:d4:d1:70:53:be: 8a:ea:98:41:23:91:12:76:dd:01:d8:ab:b5:5e:f9: 51:b2:c3:28:30:ac:10:a0:19:d2:25:93:04:35:d7: ef:6c:0a:c0:72:6d:9f:62:63:52:6a:d4:d8:89:9d: e4:21:ae:c0:b2:f7:c1:ee:d0:41:b6:1e:cd:2b:f5: 79:d5:08:85:07:3d:a4:22:09:47:49:d0:e3:a6:76: 5d:b1:f1:80:e9:8a:36:65:b1:d6:35:63:d7:cc:05: da:d2:76:d4:54:13:51:c5:dd:97:f2:56:8d:00:39: f2:d0:d3:37:d6:04:eb:49:e6:4d:b5:61:05:ff:db: 33:86:82:e4:6c:7f:97:7b:d7:24:e5:ec:e8:9a:64: 89:c9:f0:dc:bd:ef:b2:a5:ee:c7:3e:b1:97:9b:43: 8f:8f:67:64:c8:43:f7:94:3a:b7:57:f2:8c:fb:08: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5E:70:CC:0D:10:81:BB:B7:60:0B:83:BC:AB:1F:C2:72:5E:01:51 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f7:c2:a4:2c:40:dc:8d:e0:c8:e8:bd:91:56:00:1f:b3:de: 61:cf:ca:0b:75:b3:c1:53:5e:3b:00:db:63:f5:e7:2a:e7:ea: 51:ef:2b:7a:1e:bc:08:2a:cb:e4:6b:bc:f9:33:dd:0a:40:55: 43:fa:3e:9d:05:2e:21:e2:2e:35:11:0a:90:2f:a6:b9:3f:96: 10:90:13:0b:e1:50:91:b9:eb:da:c3:46:87:ec:a9:86:20:7a: 56:08:82:67:2c:3b:6a:77:b1:59:f2:0e:25:d2:21:0f:cb:a3: b4:fb:95:4a:4e:b1:26:2d:f7:85:fe:6d:88:2f:41:a8:c4:53: 1c:8a:30:b4:c1:20:de:a2:e5:8f:ea:18:9a:12:25:6a:fb:11: 8c:ef:d9:f4:28:19:86:4a:e4:9c:6c:e3:82:6b:95:b4:f7:e6: 58:cb:1c:fb:51:27:6c:0d:51:cf:5c:ff:c6:63:10:97:13:eb: cf:17:42:ff:c7:61:b2:49:ed:d8:a3:c7:01:b5:76:ac:a2:38: bf:bd:78:dd:53:14:1d:8f:55:c3:31:99:7f:76:3e:98:70:5b: 53:b7:87:9f:69:f3:84:27:7a:a4:b4:38:0b:e0:5e:79:e2:95: 3d:a1:ea:aa:17:c4:87:98:b1:8e:55:8b:a3:6f:1d:4f:61:34: a5:37:fe:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePFrMKWbZtbpsEFlorjLYumOs+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNjAyMjgwMDI2MDlaFw0yNjAzMDMwODM1MDlaMDMxMTAvBgNV BAMTKDJDNUU3MENDMEQxMDgxQkJCNzYwMEI4M0JDQUIxRkMyNzI1RTAxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKNJA8hJRDlkNai5bW66LBv4u 9QIlQeDw2KQm/pCNBUIbngukGvGevof8Q3OQbl8sz7PjMWuptogEEZ8h8DPM0Vzy 576IWLkfCpwq5XkZxeg46QrU0XBTvorqmEEjkRJ23QHYq7Ve+VGywygwrBCgGdIl kwQ11+9sCsBybZ9iY1Jq1NiJneQhrsCy98Hu0EG2Hs0r9XnVCIUHPaQiCUdJ0OOm dl2x8YDpijZlsdY1Y9fMBdrSdtRUE1HF3ZfyVo0AOfLQ0zfWBOtJ5k21YQX/2zOG guRsf5d71yTl7OiaZInJ8Ny977Kl7sc+sZebQ4+PZ2TIQ/eUOrdX8oz7CBPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULF5wzA0Qgbu3YAuDvKsfwnJeAVEwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX3wqQsQNyN4MjovZFWAB+z3mHPygt1s8FT XjsA22P15yrn6lHvK3oevAgqy+RrvPkz3QpAVUP6Pp0FLiHiLjURCpAvprk/lhCQ EwvhUJG569rDRofsqYYgelYIgmcsO2p3sVnyDiXSIQ/Lo7T7lUpOsSYt94X+bYgv QajEUxyKMLTBIN6i5Y/qGJoSJWr7EYzv2fQoGYZK5Jxs44JrlbT35ljLHPtRJ2wN Uc9c/8ZjEJcT688XQv/HYbJJ7dijxwG1dqyiOL+9eN1TFB2PVcMxmX92PphwW1O3 h59p84QneqS0OAvgXnnilT2h6qoXxIeYsY5Vi6NvHU9hNKU3/ls= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:50 2026 by rpki-client