$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: 5Bx5/+etSD0YlqteXLPTaDsLclsv5chlEhvr4N4Twf4= Subject key identifier: EC:01:F8:D3:FB:93:63:7E:23:06:68:62:38:2F:C3:80:8C:87:A1:3E Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 2DBDE644C0DD26D398BDA6C06EC82BB4F3304369 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 0187 Signing time: Tue 24 Mar 2026 18:41:26 +0000 Manifest this update: Tue 24 Mar 2026 18:36:25 +0000 Manifest next update: Sat 28 Mar 2026 05:17:25 +0000 Files and hashes: 1: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: AfOsChqDF2/hcYsESrnVPAgl3m2F6DsdG27lcrei8GM=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: MEhGPscx6amoC7Mn8dW/gvKnqLk8DzF4TrmhnXKZhHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bd:e6:44:c0:dd:26:d3:98:bd:a6:c0:6e:c8:2b:b4:f3:30:43:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Mar 24 18:36:25 2026 GMT Not After : Mar 28 05:17:25 2026 GMT Subject: CN=EC01F8D3FB93637E23066862382FC3808C87A13E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:9c:fc:5a:80:9e:be:2c:9d:ea:4c:7d:93: 13:7e:65:ea:bf:79:a2:2a:ed:91:12:92:91:2c:e7: 75:5a:e6:eb:f9:18:af:36:d6:e1:7e:f6:e5:a5:43: f0:eb:eb:8f:96:56:fd:2b:ed:e5:5e:56:eb:67:4d: ce:3c:e9:31:2d:37:91:dd:08:39:8e:f4:15:a9:b0: 24:44:8f:91:7d:9c:e8:bc:20:e3:cc:6b:9e:13:5d: 2e:92:e9:0c:2c:f3:b4:ee:ca:39:30:2b:3a:89:c9: 6f:6a:8f:17:c8:a2:1f:9d:32:a5:a5:b8:05:fd:b8: f3:fb:5e:ea:e1:ee:2c:f4:8a:be:32:4c:1a:2f:18: c7:26:f6:96:ef:17:c8:07:2b:a6:97:25:f7:48:22: 73:f2:05:27:9a:e1:02:2c:0c:36:03:d6:c7:2d:c6: 1e:32:72:f1:34:e2:fc:4d:50:58:19:b0:30:96:6a: 35:1e:bc:3f:29:cc:98:18:e4:51:ee:18:db:b6:8e: 6a:31:c1:f3:23:46:f2:1b:00:6b:dc:3e:43:1e:53: 17:bf:10:7e:98:c2:45:d7:8c:22:8e:91:eb:f5:c8: 4d:a7:fb:7f:29:82:56:cb:a1:2e:8a:a4:62:85:dc: 28:2d:85:f7:0b:b7:37:28:7b:05:d4:39:ea:a4:77: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:01:F8:D3:FB:93:63:7E:23:06:68:62:38:2F:C3:80:8C:87:A1:3E X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9c:7f:1c:40:fe:99:dd:54:be:d7:c2:2a:05:87:d1:75:df: 34:7b:e4:1b:d2:51:bc:c0:ac:17:59:a9:ab:5e:a8:be:c8:a6: 30:2f:56:f5:51:ac:48:1e:2d:71:48:12:25:95:f6:41:d0:0c: 33:f2:12:81:f2:c6:8d:e2:df:ee:a6:61:77:06:c3:0b:d4:4f: a5:5a:73:05:95:c2:96:f3:25:18:7f:58:91:ea:42:09:68:3a: b6:8f:c6:78:2b:cf:1d:ef:76:08:fd:d2:d5:16:5d:52:6b:a2: ab:06:c0:a4:16:91:91:fe:fe:06:76:5d:4e:89:4e:0b:f0:48: db:22:1e:1a:71:ae:59:8d:71:10:8e:62:2e:14:81:4d:ee:5e: 86:d6:af:52:fd:9e:dd:d4:ed:cd:2b:26:3d:1b:e9:d4:2a:58: 99:1a:3d:f4:47:cd:83:6a:54:03:98:bf:4b:f0:02:aa:af:75: d7:d5:a3:ed:a2:9f:a4:27:10:8f:30:13:75:fa:bc:a7:8f:fc: 88:51:37:fe:3f:03:25:e3:b5:bf:ad:ca:74:8d:5c:6e:75:23: f6:a3:db:fa:01:2b:87:53:30:48:e5:79:99:d4:41:aa:13:d0: f8:05:6a:f3:a8:d2:d4:8c:f4:79:de:0a:dc:39:ea:23:db:3a: d7:61:70:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULb3mRMDdJtOYvabAbsgrtPMwQ2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNjAzMjQxODM2MjVaFw0yNjAzMjgwNTE3MjVaMDMxMTAvBgNV BAMTKEVDMDFGOEQzRkI5MzYzN0UyMzA2Njg2MjM4MkZDMzgwOEM4N0ExM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesJz8WoCeviyd6kx9kxN+Zeq/ eaIq7ZESkpEs53Va5uv5GK821uF+9uWlQ/Dr64+WVv0r7eVeVutnTc486TEtN5Hd CDmO9BWpsCREj5F9nOi8IOPMa54TXS6S6Qws87TuyjkwKzqJyW9qjxfIoh+dMqWl uAX9uPP7Xurh7iz0ir4yTBovGMcm9pbvF8gHK6aXJfdIInPyBSea4QIsDDYD1sct xh4ycvE04vxNUFgZsDCWajUevD8pzJgY5FHuGNu2jmoxwfMjRvIbAGvcPkMeUxe/ EH6YwkXXjCKOkev1yE2n+38pglbLoS6KpGKF3CgthfcLtzcoewXUOeqkd+X5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7AH40/uTY34jBmhiOC/DgIyHoT4wHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+cfxxA/pndVL7XwioFh9F13zR75BvSUbzA rBdZqateqL7IpjAvVvVRrEgeLXFIEiWV9kHQDDPyEoHyxo3i3+6mYXcGwwvUT6Va cwWVwpbzJRh/WJHqQgloOraPxngrzx3vdgj90tUWXVJroqsGwKQWkZH+/gZ2XU6J TgvwSNsiHhpxrlmNcRCOYi4UgU3uXobWr1L9nt3U7c0rJj0b6dQqWJkaPfRHzYNq VAOYv0vwAqqvddfVo+2in6QnEI8wE3X6vKeP/IhRN/4/AyXjtb+tynSNXG51I/aj 2/oBK4dTMEjleZnUQaoT0PgFavOo0tSM9HneCtw56iPbOtdhcAs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:09 2026 by rpki-client