$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: 2BdByZujq1qJN3xj3eexQMTTBJrJpAp4zFbGu5h053Y= Subject key identifier: 89:0E:F8:0B:BA:D7:F3:5A:BB:4A:10:F0:6C:7A:90:D2:0E:8A:4E:7F Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 05EE21FB29FD70BF570CBAF65DAA00FE96CF2872 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 025D Signing time: Sun 01 Mar 2026 16:31:24 +0000 Manifest this update: Sun 01 Mar 2026 16:26:24 +0000 Manifest next update: Wed 04 Mar 2026 16:32:24 +0000 Files and hashes: 1: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: YeyxtRAL/2VT70wL2NxnPWkByqsgcRVFmG5cySAQCts=) 2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: yK7nyqbkyDPHD1QbGGLBt44X/fl33LRlABzMx16APXY=) 3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: eJ1XGH3PQ4o+OhkD3fQ4IKKdCGLyiVJ505C/lW7FPoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ee:21:fb:29:fd:70:bf:57:0c:ba:f6:5d:aa:00:fe:96:cf:28:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Mar 1 16:26:24 2026 GMT Not After : Mar 4 16:32:24 2026 GMT Subject: CN=890EF80BBAD7F35ABB4A10F06C7A90D20E8A4E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:39:59:d6:2c:80:46:61:45:44:48:1d:ef: c9:ca:0e:e9:27:69:d9:b8:f4:3f:ea:09:48:e0:9c: 0a:b1:97:d7:90:04:45:76:b3:5c:67:ad:6c:b7:6f: a0:61:7b:83:ba:4d:cf:6c:cc:a5:8b:d8:83:9e:1a: 3a:67:04:ac:fd:8b:3f:ab:77:34:2f:62:bc:08:93: 5c:7b:94:37:52:b6:f5:76:3e:0f:09:d4:e8:82:0d: c5:74:54:ff:65:1c:9d:38:23:b0:b9:52:7b:3c:0a: f8:9e:65:2e:ad:f8:a0:15:d0:40:7e:ea:16:c8:fb: 67:7a:5f:a9:a3:6a:0e:d4:be:b0:67:cb:f6:74:e8: 3f:ba:9e:32:95:2b:4b:35:86:fc:be:27:d0:54:87: ec:a9:fa:ac:03:37:5c:4b:02:87:ab:e5:0a:df:69: ce:b4:75:43:b5:fd:8b:3a:19:71:71:95:5a:bb:24: 7a:4d:4c:d8:7d:46:6f:4b:54:e1:08:e2:56:58:1d: a9:ce:ab:63:58:32:bc:04:0a:29:42:3d:d5:a3:f6: 29:e7:c8:46:cc:ee:cf:a3:a0:82:a3:44:51:81:c1: d5:a6:28:9c:50:7d:de:97:f3:c9:cf:dc:6e:4a:22: 83:b5:ae:0f:23:a5:f2:20:32:5e:3f:a6:f2:71:cd: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0E:F8:0B:BA:D7:F3:5A:BB:4A:10:F0:6C:7A:90:D2:0E:8A:4E:7F X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5b:a3:72:2c:f1:49:be:2e:a3:10:82:73:30:4c:3d:ef:c0: 1c:b0:c5:ed:f5:d4:a6:d2:c1:c7:06:e0:31:e9:da:83:aa:7f: 6e:8a:c0:94:f9:b9:44:ca:04:50:3d:af:6a:e1:e0:10:3c:e6: 5b:56:b9:e1:bc:b0:09:aa:cb:18:69:80:f6:8a:b2:4b:39:aa: 33:14:98:fc:df:ae:bb:fd:31:ac:25:2c:f1:0d:97:bf:31:12: ca:d9:27:85:82:d1:29:36:6e:f4:65:18:f3:4f:24:ed:c1:e5: d4:f6:41:30:35:58:25:3f:ec:98:0d:39:88:1c:59:29:fb:1f: cd:24:63:7f:28:ec:6e:b8:4b:8a:d5:b5:f4:06:67:f2:d1:1b: b3:34:17:4a:96:5a:6c:f4:7b:62:7e:d1:be:0a:86:22:5f:4c: 01:4f:6c:e2:d7:53:6f:80:9c:5d:dd:bb:d0:f6:95:9f:e7:90: 85:92:84:1b:27:ea:f6:d0:3b:0b:db:5a:fc:54:85:c7:c8:47: fc:dc:e0:89:a7:93:fb:33:9d:97:fb:c4:2c:7d:1f:75:41:17: 3b:af:5e:b0:4e:75:83:94:a4:fd:7c:05:db:38:e0:b1:87:a1: f6:05:7a:c1:66:a6:ea:18:77:18:d9:8e:65:06:00:a6:54:7f: ea:5f:5f:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBe4h+yn9cL9XDLr2XaoA/pbPKHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNjAzMDExNjI2MjRaFw0yNjAzMDQxNjMyMjRaMDMxMTAvBgNV BAMTKDg5MEVGODBCQkFEN0YzNUFCQjRBMTBGMDZDN0E5MEQyMEU4QTRFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnDlZ1iyARmFFREgd78nKDukn adm49D/qCUjgnAqxl9eQBEV2s1xnrWy3b6Bhe4O6Tc9szKWL2IOeGjpnBKz9iz+r dzQvYrwIk1x7lDdStvV2Pg8J1OiCDcV0VP9lHJ04I7C5Uns8CvieZS6t+KAV0EB+ 6hbI+2d6X6mjag7UvrBny/Z06D+6njKVK0s1hvy+J9BUh+yp+qwDN1xLAoer5Qrf ac60dUO1/Ys6GXFxlVq7JHpNTNh9Rm9LVOEI4lZYHanOq2NYMrwECilCPdWj9inn yEbM7s+joIKjRFGBwdWmKJxQfd6X88nP3G5KIoO1rg8jpfIgMl4/pvJxzVgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQ74C7rX81q7ShDwbHqQ0g6KTn8wHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5bo3Is8Um+LqMQgnMwTD3vwBywxe311KbS wccG4DHp2oOqf26KwJT5uUTKBFA9r2rh4BA85ltWueG8sAmqyxhpgPaKsks5qjMU mPzfrrv9MawlLPENl78xEsrZJ4WC0Sk2bvRlGPNPJO3B5dT2QTA1WCU/7JgNOYgc WSn7H80kY38o7G64S4rVtfQGZ/LRG7M0F0qWWmz0e2J+0b4KhiJfTAFPbOLXU2+A nF3du9D2lZ/nkIWShBsn6vbQOwvbWvxUhcfIR/zc4Imnk/sznZf7xCx9H3VBFzuv XrBOdYOUpP18Bds44LGHofYFesFmpuoYdxjZjmUGAKZUf+pfX1Y= -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:43 2026 by rpki-client