$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: svwgU9WyQjS+6XaYkPIp24DyCUZ5VKVOck04Sydzpx0= Subject key identifier: 06:E2:88:87:B4:8A:48:DD:C5:C1:30:35:83:54:E4:CA:77:8A:6F:5F Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 45E3737097B035D40C8C3C69237A2C60F58B1C0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: 011D Signing time: Thu 26 Mar 2026 13:51:12 +0000 Manifest this update: Thu 26 Mar 2026 13:46:12 +0000 Manifest next update: Sun 29 Mar 2026 20:41:12 +0000 Files and hashes: 1: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=) 2: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: FdGIGcVnyFH92k4Ga4DcqKa/uUFYVK5DDLpFvEvEoqc=) 3: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=) 4: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e3:73:70:97:b0:35:d4:0c:8c:3c:69:23:7a:2c:60:f5:8b:1c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Mar 26 13:46:12 2026 GMT Not After : Mar 29 20:41:12 2026 GMT Subject: CN=06E28887B48A48DDC5C130358354E4CA778A6F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:d3:d8:75:44:89:14:ae:67:18:29:67:6d: 2d:c9:bb:d1:5c:a4:d3:d3:9d:c5:6c:eb:3f:66:ca: 48:f8:1b:8a:e2:ab:17:4c:d4:79:c0:f6:69:64:65: 3e:58:02:41:7b:e9:34:eb:4c:63:ae:3e:62:f3:ac: 90:27:a3:89:33:38:45:9d:27:9c:91:e6:d8:12:8a: ef:13:9f:f0:28:2a:63:36:16:6d:ac:4f:1e:7f:6e: 3f:d7:a0:93:22:53:8a:14:91:63:1b:08:cb:f0:81: 3d:36:44:0f:3a:9d:a3:24:31:69:99:f5:9c:1f:32: 47:15:76:7e:5d:4b:0f:8e:70:8c:c6:d3:b5:36:41: c6:fd:19:ef:a0:25:1e:30:06:34:38:f9:74:b2:67: 9f:05:04:5a:7d:cb:3d:a5:0d:e7:20:49:d6:dc:80: 6d:85:6e:ae:e1:06:16:4e:57:1e:5b:3e:ce:a0:b5: cc:ea:00:09:63:ce:1b:d0:69:b5:e5:eb:5f:f6:9c: ee:37:98:48:fd:3b:0c:51:47:3e:d7:a3:3c:6e:1a: 72:e6:29:f3:c1:39:9c:f5:c5:9a:a3:d9:f4:2d:6a: f8:d8:cd:17:31:98:0c:2e:21:8a:a3:85:b5:37:dc: bc:9f:ad:7e:02:d1:c6:b0:d3:ba:b5:23:84:3e:5a: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:88:87:B4:8A:48:DD:C5:C1:30:35:83:54:E4:CA:77:8A:6F:5F X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:53:d6:e7:a7:6e:4b:c0:25:9b:36:77:7c:95:f7:c1:5e:c1: ed:63:82:65:43:33:8e:42:68:ca:78:df:0f:de:7a:12:c3:2b: ea:30:c6:2a:a4:1e:eb:3e:8d:86:57:06:10:40:07:3f:b5:0e: b7:d2:f2:53:9f:ea:81:8e:8e:cf:55:4d:7b:b9:56:13:3c:fe: c5:62:16:ab:41:02:37:a3:01:8e:ee:74:b7:01:84:85:5a:63: 70:91:c4:97:24:93:5e:bd:c3:c0:80:79:22:46:a3:f5:e9:d3: 29:3c:4c:02:23:24:f9:1e:dc:05:12:f3:0c:62:1a:22:4e:5c: bf:1f:1d:0d:fd:ec:74:3d:b8:4a:52:8d:a6:82:39:98:61:46: 9f:fb:af:55:df:31:38:0d:8f:df:e7:99:0c:56:c5:11:b1:03: 29:61:8e:e2:e8:55:60:3b:50:c5:29:04:e9:f6:da:82:6f:a6: bc:8a:86:7f:26:ad:fc:93:ae:25:ae:6e:9c:5f:23:56:b7:46: 3b:af:c2:06:2b:08:ca:aa:9a:b5:9c:8e:24:92:a4:da:84:99: 11:4e:21:5e:c3:31:b9:65:a6:74:31:8a:2f:f5:93:8c:84:04: 0c:7e:9b:35:2c:9f:f8:78:51:eb:ff:ab:fa:bf:6e:0d:9d:7b: 3b:c7:cf:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReNzcJewNdQMjDxpI3osYPWLHA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNjAzMjYxMzQ2MTJaFw0yNjAzMjkyMDQxMTJaMDMxMTAvBgNV BAMTKDA2RTI4ODg3QjQ4QTQ4RERDNUMxMzAzNTgzNTRFNENBNzc4QTZGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZdPYdUSJFK5nGClnbS3Ju9Fc pNPTncVs6z9mykj4G4riqxdM1HnA9mlkZT5YAkF76TTrTGOuPmLzrJAno4kzOEWd J5yR5tgSiu8Tn/AoKmM2Fm2sTx5/bj/XoJMiU4oUkWMbCMvwgT02RA86naMkMWmZ 9ZwfMkcVdn5dSw+OcIzG07U2Qcb9Ge+gJR4wBjQ4+XSyZ58FBFp9yz2lDecgSdbc gG2Fbq7hBhZOVx5bPs6gtczqAAljzhvQabXl61/2nO43mEj9OwxRRz7XozxuGnLm KfPBOZz1xZqj2fQtavjYzRcxmAwuIYqjhbU33LyfrX4C0caw07q1I4Q+WpK/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBuKIh7SKSN3FwTA1g1TkyneKb18wHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhT1uenbkvAJZs2d3yV98Fewe1jgmVDM45C aMp43w/eehLDK+owxiqkHus+jYZXBhBABz+1DrfS8lOf6oGOjs9VTXu5VhM8/sVi FqtBAjejAY7udLcBhIVaY3CRxJckk169w8CAeSJGo/Xp0yk8TAIjJPke3AUS8wxi GiJOXL8fHQ397HQ9uEpSjaaCOZhhRp/7r1XfMTgNj9/nmQxWxRGxAylhjuLoVWA7 UMUpBOn22oJvpryKhn8mrfyTriWubpxfI1a3RjuvwgYrCMqqmrWcjiSSpNqEmRFO IV7DMbllpnQxii/1k4yEBAx+mzUsn/h4Uev/q/q/bg2dezvHz4o= -----END CERTIFICATE-----Generated at Thu Mar 26 19:54:10 2026 by rpki-client