$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: eKOx7fmswRUGsTe3s7UZfyLC8LfMNcUkVzYHDQjYO1A= Subject key identifier: 43:71:90:4A:40:C0:24:98:25:C8:97:C4:31:AF:BE:FF:A9:A6:2F:DF Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 59739245E152D1683C47CA44C367739E352DEF67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: FB Signing time: Wed 25 Mar 2026 08:41:16 +0000 Manifest this update: Wed 25 Mar 2026 08:36:16 +0000 Manifest next update: Sat 28 Mar 2026 19:42:16 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) 2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: XhB03ENwd2p8+RE25OwRatRFvX70jjj6rYnM1EyO7r4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:73:92:45:e1:52:d1:68:3c:47:ca:44:c3:67:73:9e:35:2d:ef:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Mar 25 08:36:16 2026 GMT Not After : Mar 28 19:42:16 2026 GMT Subject: CN=4371904A40C0249825C897C431AFBEFFA9A62FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:9e:53:5b:58:9d:03:c1:65:7e:f8:3e:76: 2a:70:1d:5a:ad:a9:c7:0d:f0:23:c3:26:15:b1:eb: 13:30:20:d8:3e:54:1a:ab:82:39:2f:7e:67:be:50: b3:54:cc:67:67:d3:97:5c:c3:9e:39:63:90:22:ec: d7:b8:94:12:34:4b:68:70:3c:36:6a:f2:84:6b:e2: 84:9f:d1:3a:86:7e:37:35:89:23:1f:9d:58:3a:b3: 4d:6c:32:cc:80:57:70:41:f6:fe:a0:7b:08:50:9d: 39:f1:0b:6d:34:fa:ae:c0:5b:99:b2:f3:10:b3:8a: b6:41:20:6f:98:9e:ba:1f:bf:2e:6e:89:1e:4c:6d: f5:fe:96:40:6f:c9:21:6d:10:0b:cd:f2:5d:e5:8e: 3a:ab:30:d8:78:6b:54:46:bd:2e:b8:97:7a:3a:5a: 15:7d:0a:3b:68:da:6a:2b:83:9d:e1:0c:58:76:07: 10:f2:41:a9:7c:51:92:ce:77:b7:12:ef:9a:dd:aa: 3e:a5:19:1d:16:ce:3e:95:b1:37:2b:9a:fa:33:2a: cd:4d:40:e0:5d:8d:c4:c2:f1:01:26:a4:92:78:c1: 7f:a2:54:48:b5:50:bb:7c:bc:53:12:ee:bf:71:5f: af:30:be:be:fe:4f:93:00:b2:a5:fb:e6:51:fc:28: b9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:71:90:4A:40:C0:24:98:25:C8:97:C4:31:AF:BE:FF:A9:A6:2F:DF X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e1:f5:b2:e3:f2:a6:2b:e4:ed:bf:9f:0a:fb:f2:2f:a6:3c: 6e:71:c1:c4:e9:36:34:ff:fc:a8:b4:b3:f6:57:1a:fb:d8:6a: ce:d8:c1:c8:61:72:f0:3e:dc:07:d7:65:c2:eb:5d:55:b9:01: 65:c2:c9:49:59:f0:f0:91:61:b2:aa:c5:c7:5e:d3:4a:2d:fe: 8a:6c:16:3d:19:80:00:03:03:55:0d:dd:5d:7f:63:b6:ce:f3: 6c:90:28:0e:29:46:16:50:46:7f:93:fb:bc:29:09:aa:76:32: ef:7d:91:8e:42:ff:7b:c0:f4:29:e9:85:c4:58:b2:5e:28:e2: 4f:0a:2d:ce:0b:c3:f6:1f:70:af:ba:f0:e5:13:c8:3a:72:e3: 1b:35:c1:f2:32:39:65:4a:e2:ca:dc:75:f9:53:cf:0b:a9:f3: 62:89:45:b2:85:7b:a3:ec:8d:e0:37:09:3d:25:e1:d0:85:47: cf:62:f6:0c:67:26:08:f1:9a:e0:55:e7:7e:e3:b7:83:ed:14: 6d:45:c3:59:9a:ea:58:d9:84:10:33:50:43:26:bd:6b:f4:ad: 3c:bc:c4:ef:6a:48:fd:a9:bf:f0:80:b8:88:ac:4f:ee:ea:6f: b0:7f:bf:ff:5d:76:70:c1:39:2c:53:e9:35:5b:3e:18:e5:b9: fd:94:23:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXOSReFS0Wg8R8pEw2dznjUt72cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNjAzMjUwODM2MTZaFw0yNjAzMjgxOTQyMTZaMDMxMTAvBgNV BAMTKDQzNzE5MDRBNDBDMDI0OTgyNUM4OTdDNDMxQUZCRUZGQTlBNjJGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZZ5TW1idA8Flfvg+dipwHVqt qccN8CPDJhWx6xMwINg+VBqrgjkvfme+ULNUzGdn05dcw545Y5Ai7Ne4lBI0S2hw PDZq8oRr4oSf0TqGfjc1iSMfnVg6s01sMsyAV3BB9v6gewhQnTnxC200+q7AW5my 8xCzirZBIG+Ynrofvy5uiR5MbfX+lkBvySFtEAvN8l3ljjqrMNh4a1RGvS64l3o6 WhV9Cjto2morg53hDFh2BxDyQal8UZLOd7cS75rdqj6lGR0Wzj6VsTcrmvozKs1N QOBdjcTC8QEmpJJ4wX+iVEi1ULt8vFMS7r9xX68wvr7+T5MAsqX75lH8KLm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3GQSkDAJJglyJfEMa++/6mmL98wHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPh9bLj8qYr5O2/nwr78i+mPG5xwcTpNjT/ /Ki0s/ZXGvvYas7YwchhcvA+3AfXZcLrXVW5AWXCyUlZ8PCRYbKqxcde00ot/ops Fj0ZgAADA1UN3V1/Y7bO82yQKA4pRhZQRn+T+7wpCap2Mu99kY5C/3vA9CnphcRY sl4o4k8KLc4Lw/YfcK+68OUTyDpy4xs1wfIyOWVK4srcdflTzwup82KJRbKFe6Ps jeA3CT0l4dCFR89i9gxnJgjxmuBV537jt4PtFG1Fw1ma6ljZhBAzUEMmvWv0rTy8 xO9qSP2pv/CAuIisT+7qb7B/v/9ddnDBOSxT6TVbPhjluf2UI1g= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:07 2026 by rpki-client