$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: n/QoPGzdXdwCMfznXcRglW0ijXgDnsIU8nnohuxYhS8= Subject key identifier: F8:42:2C:95:67:F1:8D:09:C5:D8:48:63:8F:9F:37:BB:FD:4A:B4:4E Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 2A6AFC11340E572929EE90BBEC231B4A440C8C03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 03D2 Signing time: Sun 01 Mar 2026 16:12:25 +0000 Manifest this update: Sun 01 Mar 2026 16:07:24 +0000 Manifest next update: Wed 04 Mar 2026 17:39:24 +0000 Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: 5QWMVL87D3Eo9DGg88WSmO4NMY1otRdeA3rfHZRx01o=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6a:fc:11:34:0e:57:29:29:ee:90:bb:ec:23:1b:4a:44:0c:8c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Mar 1 16:07:24 2026 GMT Not After : Mar 4 17:39:24 2026 GMT Subject: CN=F8422C9567F18D09C5D848638F9F37BBFD4AB44E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:cb:23:93:d0:2c:0c:09:05:2e:6a:c9:87: 21:b2:4d:43:cf:a7:2c:43:42:a2:2f:c8:a9:26:6f: df:94:38:87:7d:3c:9a:55:1a:4d:c0:10:c3:8f:05: f5:84:f2:86:7f:f9:68:d1:2c:ea:b4:bf:8d:16:f0: 94:c5:67:5c:c3:6d:b2:3f:e8:5e:9d:a2:9f:89:8f: fd:67:c2:87:91:d8:f8:f4:12:fb:82:fd:d1:4e:a4: 31:4e:38:fb:f0:46:33:27:38:ba:cb:85:71:ef:ba: 47:27:50:69:49:af:04:18:7b:0c:c0:c7:97:e6:1f: 74:46:75:94:38:d5:e9:9e:17:96:92:14:09:f5:02: 39:6f:0e:c7:6b:73:b8:29:bb:a1:1d:b3:e1:68:11: 77:66:de:d0:4f:7a:1b:02:5d:0c:cf:94:4d:d0:d5: 08:74:a4:17:69:3b:f0:f4:5d:62:60:e9:1e:2f:cf: d6:cc:14:b1:c5:23:9f:0c:87:16:82:69:b1:a4:98: be:0e:12:10:61:75:31:60:02:bf:02:fc:1c:6c:57: ba:a0:f1:2c:b2:f3:2c:c6:57:d2:d2:b3:a1:20:8e: 0d:dd:a0:20:e6:b5:ed:50:08:30:b8:b9:9b:01:9a: 17:8f:d4:01:7b:7d:67:f1:7a:26:41:4e:c9:cb:ec: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:42:2C:95:67:F1:8D:09:C5:D8:48:63:8F:9F:37:BB:FD:4A:B4:4E X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9a:09:c6:2d:f4:31:89:64:59:d0:b6:e8:17:b4:9e:0d:b1: bf:31:81:7e:03:9b:8a:d9:9b:f6:f9:98:ef:8a:7f:f3:5a:3a: a2:6a:b7:74:b9:32:90:52:c3:cc:f3:07:7e:cb:22:72:c1:e8: dd:0d:93:cb:c2:d2:82:3f:29:ef:19:a6:51:35:08:83:fd:ed: 60:4d:7f:d6:53:58:3e:8b:5b:f2:e8:e6:b1:ad:b1:41:78:79: 33:68:7c:cb:ac:27:2e:14:6c:a6:ed:29:e7:61:ee:cf:10:f2: 37:a8:71:57:a4:2b:e1:78:ca:a4:98:9d:f0:e7:a1:ff:e1:d5: 48:b3:fb:d6:6b:a6:ef:d7:c7:5d:ff:45:90:65:6b:74:fd:d5: fc:aa:f4:93:54:33:75:c3:48:92:e3:f3:6e:04:80:14:fe:06: dc:36:70:4a:61:49:ea:fd:81:6b:77:b8:b1:1b:80:79:93:8d: 14:9f:65:db:96:e8:97:34:51:0d:45:68:89:b3:c5:ea:58:7d: 51:3e:b2:d9:fa:b9:a8:c2:46:9f:21:dd:04:5e:8f:b7:6e:a0: 8e:95:d8:61:78:25:3d:1d:82:14:7f:b4:82:7f:d8:e7:eb:c9: d2:fc:a0:e4:44:c2:a4:cf:8c:9c:76:79:a1:72:7d:03:0d:58: 6e:6e:4a:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmr8ETQOVykp7pC77CMbSkQMjAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNjAzMDExNjA3MjRaFw0yNjAzMDQxNzM5MjRaMDMxMTAvBgNV BAMTKEY4NDIyQzk1NjdGMThEMDlDNUQ4NDg2MzhGOUYzN0JCRkQ0QUI0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINssjk9AsDAkFLmrJhyGyTUPP pyxDQqIvyKkmb9+UOId9PJpVGk3AEMOPBfWE8oZ/+WjRLOq0v40W8JTFZ1zDbbI/ 6F6dop+Jj/1nwoeR2Pj0EvuC/dFOpDFOOPvwRjMnOLrLhXHvukcnUGlJrwQYewzA x5fmH3RGdZQ41emeF5aSFAn1AjlvDsdrc7gpu6Eds+FoEXdm3tBPehsCXQzPlE3Q 1Qh0pBdpO/D0XWJg6R4vz9bMFLHFI58MhxaCabGkmL4OEhBhdTFgAr8C/BxsV7qg 8Syy8yzGV9LSs6Egjg3doCDmte1QCDC4uZsBmheP1AF7fWfxeiZBTsnL7OgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+EIslWfxjQnF2Ehjj583u/1KtE4wHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGaCcYt9DGJZFnQtugXtJ4Nsb8xgX4Dm4rZ m/b5mO+Kf/NaOqJqt3S5MpBSw8zzB37LInLB6N0Nk8vC0oI/Ke8ZplE1CIP97WBN f9ZTWD6LW/Lo5rGtsUF4eTNofMusJy4UbKbtKedh7s8Q8jeocVekK+F4yqSYnfDn of/h1Uiz+9Zrpu/Xx13/RZBla3T91fyq9JNUM3XDSJLj824EgBT+Btw2cEphSer9 gWt3uLEbgHmTjRSfZduW6Jc0UQ1FaImzxepYfVE+stn6uajCRp8h3QRej7duoI6V 2GF4JT0dghR/tIJ/2OfrydL8oOREwqTPjJx2eaFyfQMNWG5uSqU= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:42 2026 by rpki-client