$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: 0HLdsadTgBfS73dMidWrxfQ4UMTVfTMcZ/whBEelVNI= Subject key identifier: 39:15:82:7F:2F:10:3A:67:C3:F4:45:78:7B:B2:08:2C:93:DA:A5:E8 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 4AD36D790064ED0C940B886760A8D38A5BB3D48E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 0214 Signing time: Sat 28 Feb 2026 15:51:39 +0000 Manifest this update: Sat 28 Feb 2026 15:46:39 +0000 Manifest next update: Tue 03 Mar 2026 17:34:39 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: rlx0GQE1TWOjCH/mELYFXEfjKfc7MqD2LTnKFvLozl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d3:6d:79:00:64:ed:0c:94:0b:88:67:60:a8:d3:8a:5b:b3:d4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Feb 28 15:46:39 2026 GMT Not After : Mar 3 17:34:39 2026 GMT Subject: CN=3915827F2F103A67C3F445787BB2082C93DAA5E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:03:47:d2:6d:c3:12:11:00:39:93:63:40: ef:de:00:18:63:d0:66:64:fe:c8:90:03:6f:df:e9: dc:05:b1:f0:ef:0f:39:dd:c8:9b:62:49:7c:ef:cc: 5b:05:62:c5:93:bf:1e:21:b3:a4:7a:ab:e3:6b:ea: 0b:11:20:0f:6e:6d:94:1e:c5:90:66:4f:ac:58:f2: 02:da:48:d4:b2:08:9a:62:cb:1b:e6:0e:41:5d:19: 89:8c:cb:b3:db:9d:4c:90:81:77:8a:69:5e:35:3a: d5:83:e8:63:8f:7e:cf:c8:31:4b:c0:1e:ba:9c:9a: 30:a6:a7:24:58:89:30:c8:44:57:4b:ee:d0:b0:2a: d9:f0:93:5e:5f:af:7e:ce:32:ae:36:68:4a:d5:14: a7:3b:9d:d1:ab:35:8b:cf:1f:7d:b9:55:3e:05:e8: 28:3d:61:c7:00:d5:93:f9:06:71:20:4b:e2:e5:9a: 6c:a5:29:b7:d1:14:57:f3:f0:c2:3e:af:e5:7f:fe: 27:e2:9c:24:8d:a9:8e:ab:fa:c9:67:c3:d8:e6:dd: af:b4:03:24:cf:d3:55:a8:4d:c7:d4:a3:a8:d1:92: 3f:b8:1e:0d:14:89:b1:f0:1f:9b:48:1c:12:d1:a8: d5:65:74:5e:2a:e6:18:89:cc:b1:3c:2c:25:a7:c6: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:15:82:7F:2F:10:3A:67:C3:F4:45:78:7B:B2:08:2C:93:DA:A5:E8 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:62:4d:e3:2c:c5:1c:e2:69:f5:1b:24:9f:68:c6:bc:e9:6b: 44:9d:a8:a7:0f:0b:2b:21:45:d9:25:e2:2d:ee:16:dc:78:50: 36:5d:68:fe:5c:e5:23:02:be:81:12:03:35:1a:5b:25:6b:3b: 66:4e:57:0e:3c:2a:83:37:cc:99:59:07:c1:8b:ef:a6:58:cd: bd:68:b1:1f:07:78:d4:a5:fe:d9:6d:a1:2c:b9:0f:67:45:b2: 4d:a4:0b:bc:43:02:4b:1f:e4:94:ad:77:1a:58:81:0e:8f:b5: 80:e0:4b:55:7e:9c:25:8e:55:9a:34:cd:c2:e2:02:55:17:02: d6:87:7b:69:87:2c:eb:a7:6f:9e:52:a8:fd:92:6b:86:d4:5d: ec:22:cc:7c:4d:fe:aa:3b:75:0c:29:25:af:2d:e7:27:70:f0: 38:96:87:8c:a7:ab:b0:58:29:29:73:e9:a1:c9:b4:f5:e9:19: ea:75:41:9f:c3:b7:30:5b:99:02:d6:96:ba:61:32:ab:a5:70: 20:7f:0f:91:fe:e7:cc:8b:c2:02:56:ba:36:4d:a1:c4:0d:a7: dc:da:fd:b1:86:ab:02:65:8e:e0:17:b7:01:31:d4:7e:76:ee: c0:1e:ab:d1:be:1c:ad:3c:31:37:89:18:39:ed:a2:90:50:6e: 5b:6b:20:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStNteQBk7QyUC4hnYKjTiluz1I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNjAyMjgxNTQ2MzlaFw0yNjAzMDMxNzM0MzlaMDMxMTAvBgNV BAMTKDM5MTU4MjdGMkYxMDNBNjdDM0Y0NDU3ODdCQjIwODJDOTNEQUE1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3gNH0m3DEhEAOZNjQO/eABhj 0GZk/siQA2/f6dwFsfDvDzndyJtiSXzvzFsFYsWTvx4hs6R6q+Nr6gsRIA9ubZQe xZBmT6xY8gLaSNSyCJpiyxvmDkFdGYmMy7PbnUyQgXeKaV41OtWD6GOPfs/IMUvA HrqcmjCmpyRYiTDIRFdL7tCwKtnwk15fr37OMq42aErVFKc7ndGrNYvPH325VT4F 6Cg9YccA1ZP5BnEgS+LlmmylKbfRFFfz8MI+r+V//ifinCSNqY6r+slnw9jm3a+0 AyTP01WoTcfUo6jRkj+4Hg0UibHwH5tIHBLRqNVldF4q5hiJzLE8LCWnxtt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORWCfy8QOmfD9EV4e7IILJPapegwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRiTeMsxRziafUbJJ9oxrzpa0SdqKcPCysh Rdkl4i3uFtx4UDZdaP5c5SMCvoESAzUaWyVrO2ZOVw48KoM3zJlZB8GL76ZYzb1o sR8HeNSl/tltoSy5D2dFsk2kC7xDAksf5JStdxpYgQ6PtYDgS1V+nCWOVZo0zcLi AlUXAtaHe2mHLOunb55SqP2Sa4bUXewizHxN/qo7dQwpJa8t5ydw8DiWh4ynq7BY KSlz6aHJtPXpGep1QZ/DtzBbmQLWlrphMqulcCB/D5H+58yLwgJWujZNocQNp9za /bGGqwJljuAXtwEx1H527sAeq9G+HK08MTeJGDntopBQbltrICg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:51 2026 by rpki-client