$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: qooEIrq9zt1a4RaP/jZkONXC9BnD2AAUFmgYJTdtNV0= Subject key identifier: 05:3C:49:10:BE:5C:D3:C6:DB:4B:FA:E9:F8:2A:49:25:9C:B6:81:94 Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 33CD5C5926B5B52D5C8024EE5EC1E797F861C189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 017B Signing time: Sat 28 Feb 2026 20:11:42 +0000 Manifest this update: Sat 28 Feb 2026 20:06:42 +0000 Manifest next update: Tue 03 Mar 2026 20:18:42 +0000 Files and hashes: 1: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: /jza0gvy1ekLuxlEZ9TZlkHVq0RADgHs7mLz85NlKoQ=) 2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cd:5c:59:26:b5:b5:2d:5c:80:24:ee:5e:c1:e7:97:f8:61:c1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Feb 28 20:06:42 2026 GMT Not After : Mar 3 20:18:42 2026 GMT Subject: CN=053C4910BE5CD3C6DB4BFAE9F82A49259CB68194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:14:c6:77:44:40:3c:7f:a4:3f:f3:a0:10: e1:7c:ed:af:cc:34:dd:ae:6d:47:ab:5d:64:a2:65: 60:89:5d:a3:69:fd:20:ec:32:f9:8a:f2:ed:0b:f3: 30:8b:05:96:48:91:78:a5:60:f6:21:ca:40:1a:1e: 15:5a:20:45:5c:24:b7:f4:f4:96:d3:8c:35:c4:d3: 87:76:ff:36:d5:cb:83:ea:c6:55:02:8c:74:33:88: 7c:9d:a6:1c:83:f2:c5:60:aa:c8:61:c0:62:6f:73: 0d:86:73:40:03:53:7d:04:1c:e0:5d:69:9d:df:1a: 91:2a:3f:e5:84:45:7d:7c:9c:46:1e:56:4e:14:11: bf:11:58:c4:aa:c0:ce:d1:97:20:79:92:ee:66:c5: d0:d6:c6:16:8e:f6:ec:21:a6:e4:11:4b:c0:c4:3e: e9:76:cd:11:82:ed:5e:ee:0d:b5:fa:0a:e5:44:8a: 69:16:83:4c:40:f5:d6:9a:34:a9:73:21:3a:0d:5d: 60:86:2a:af:cf:6e:8c:ae:c8:d9:32:6a:ce:0b:84: 66:de:e0:64:15:40:96:d9:4b:50:3d:b5:38:99:34: 14:65:f3:03:5a:31:35:f9:7b:69:36:59:41:c9:dc: 74:42:a0:1e:e6:13:fd:f5:1d:4a:37:d3:3f:fe:01: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3C:49:10:BE:5C:D3:C6:DB:4B:FA:E9:F8:2A:49:25:9C:B6:81:94 X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d2:b2:fd:c7:95:ac:5f:56:49:93:76:77:bf:66:d8:4a:15: 8b:d9:12:e8:63:e9:38:b0:7c:21:7e:9b:18:ff:69:20:10:22: 88:d7:3d:9c:2c:9d:e9:7a:7f:dd:2f:91:99:8f:a1:98:20:7c: da:c8:ce:00:4b:80:4a:b0:f9:01:f2:91:aa:62:10:e7:0b:4b: 31:fd:b2:cc:4a:1e:a9:8d:e1:0d:72:3d:95:3b:f0:c9:36:51: 1f:46:32:41:b6:79:3e:86:06:8c:85:90:ad:fc:0b:50:46:c6: 3a:e3:d1:93:db:e2:68:a0:f5:a9:7f:68:26:ae:1e:a6:05:b0: 5c:d6:96:e2:89:cb:b3:33:86:cc:33:6a:cc:71:a5:cc:03:e2: 1d:bd:eb:f7:e7:1c:b9:9e:fe:58:97:0a:89:e6:82:57:8b:b3: ac:51:68:db:85:4b:76:74:06:45:6c:fb:9b:ea:f7:2e:9f:51: f9:34:87:c6:54:39:c0:92:a0:c6:bc:2e:28:b0:fd:25:8f:0d: 53:2d:f5:e0:6f:e5:51:7f:89:f5:9b:89:f6:b5:04:72:20:52: 10:8e:3d:30:b0:5a:6f:28:a0:4f:d7:d9:b5:fa:fd:54:0a:fb: ec:6e:dd:61:78:60:e7:f2:89:47:be:ec:52:2b:48:0a:94:8e: a1:cb:d6:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM81cWSa1tS1cgCTuXsHnl/hhwYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNjAyMjgyMDA2NDJaFw0yNjAzMDMyMDE4NDJaMDMxMTAvBgNV BAMTKDA1M0M0OTEwQkU1Q0QzQzZEQjRCRkFFOUY4MkE0OTI1OUNCNjgxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkBTGd0RAPH+kP/OgEOF87a/M NN2ubUerXWSiZWCJXaNp/SDsMvmK8u0L8zCLBZZIkXilYPYhykAaHhVaIEVcJLf0 9JbTjDXE04d2/zbVy4PqxlUCjHQziHydphyD8sVgqshhwGJvcw2Gc0ADU30EHOBd aZ3fGpEqP+WERX18nEYeVk4UEb8RWMSqwM7RlyB5ku5mxdDWxhaO9uwhpuQRS8DE Pul2zRGC7V7uDbX6CuVEimkWg0xA9daaNKlzIToNXWCGKq/PboyuyNkyas4LhGbe 4GQVQJbZS1A9tTiZNBRl8wNaMTX5e2k2WUHJ3HRCoB7mE/31HUo30z/+AWDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTxJEL5c08bbS/rp+CpJJZy2gZQwHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPSsv3HlaxfVkmTdne/ZthKFYvZEuhj6Tiw fCF+mxj/aSAQIojXPZwsnel6f90vkZmPoZggfNrIzgBLgEqw+QHykapiEOcLSzH9 ssxKHqmN4Q1yPZU78Mk2UR9GMkG2eT6GBoyFkK38C1BGxjrj0ZPb4mig9al/aCau HqYFsFzWluKJy7MzhswzasxxpcwD4h296/fnHLme/liXConmgleLs6xRaNuFS3Z0 BkVs+5vq9y6fUfk0h8ZUOcCSoMa8Liiw/SWPDVMt9eBv5VF/ifWbifa1BHIgUhCO PTCwWm8ooE/X2bX6/VQK++xu3WF4YOfyiUe+7FIrSAqUjqHL1nM= -----END CERTIFICATE-----Generated at Mon Mar 2 08:17:44 2026 by rpki-client