$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: uHnA8WaGIzA70Coyf10yfyQ/D0FdKFaBP/NoQiKo7Pk= Subject key identifier: 3D:F9:1E:73:4E:BC:3E:4B:F2:E2:35:BE:21:19:44:7F:E2:20:BF:25 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 123CC1A83E28788747AC380B01586DB025EDBCF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 01:50:55 +0000 Manifest this update: Wed 25 Mar 2026 01:45:55 +0000 Manifest next update: Sat 28 Mar 2026 03:06:55 +0000 Files and hashes: 1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) 2: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: LsH42y8/7aTmlqUN2+Y1Urkgh/Bq4dMYdBTGuhstEAE=) 3: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3c:c1:a8:3e:28:78:87:47:ac:38:0b:01:58:6d:b0:25:ed:bc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Mar 25 01:45:55 2026 GMT Not After : Mar 28 03:06:55 2026 GMT Subject: CN=3DF91E734EBC3E4BF2E235BE2119447FE220BF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:68:bb:20:0d:b1:0c:18:0a:b7:7a:c7:99: 14:96:a9:a0:fa:63:df:a0:8b:a1:10:c0:47:65:fb: a3:ed:ca:03:c8:cf:3a:05:78:a8:25:be:80:de:d6: 65:c5:15:1d:45:57:8a:90:37:67:69:dc:29:cb:5f: e2:63:82:85:74:06:4b:25:7f:f2:bc:c7:63:32:7b: 6b:1f:ba:ad:4c:9e:a8:8b:5f:d3:de:e2:10:91:0b: fc:5f:af:97:c9:75:a2:a7:33:b1:77:05:8f:42:84: 03:0c:28:4b:33:ad:f5:7a:10:48:59:85:14:4a:1e: 05:ef:c9:20:9d:26:50:13:93:1a:5a:f4:9c:c3:a0: 08:65:6a:bd:54:c6:0c:b6:a4:8a:5d:99:d5:0d:5c: 10:25:a7:46:39:57:a2:65:49:4b:df:50:ce:c3:a3: 15:2a:20:ef:25:5c:22:d8:9b:4a:99:da:90:9a:38: f5:10:65:57:c8:d1:2b:76:01:7a:32:b0:93:6e:b1: 26:37:8b:f5:47:c0:67:0e:e9:5d:12:c9:de:1c:b0: 94:84:a1:d4:40:8b:5e:6c:ce:9e:59:4a:81:81:53: ac:62:e1:18:f5:70:58:69:a4:d0:81:00:31:44:2e: 1f:ef:b1:d8:83:1d:52:f4:34:8f:b5:8c:5f:17:70: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F9:1E:73:4E:BC:3E:4B:F2:E2:35:BE:21:19:44:7F:E2:20:BF:25 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a6:d0:b7:74:89:4f:1b:10:f7:23:fd:88:f2:f3:f3:f8:e3: 4f:ec:f3:be:00:ef:a0:54:b7:b7:b9:0a:29:2b:3c:be:ec:20: 05:cf:5a:9b:f6:1a:13:8d:b2:a2:8c:0f:5e:be:49:46:8c:d4: 86:5d:75:dc:29:d8:b4:93:60:c3:61:f4:22:b1:d5:57:49:7e: c5:e2:00:d4:ec:28:13:cf:63:bf:74:26:28:1a:5e:a9:62:11: f6:87:90:7f:2f:d9:03:01:08:9c:74:e9:2a:1a:3e:f2:a9:15: e4:22:41:32:23:1a:08:25:4f:05:e8:0d:71:5d:a2:3b:e4:8e: e3:4f:b1:68:e3:fa:ca:e8:c3:6f:bd:16:e3:f5:9a:1d:db:ba: d7:42:f1:82:f2:9d:69:5f:a5:4d:de:3a:5d:dc:dd:18:99:c0: 32:18:02:f9:a5:ef:43:29:b3:91:e0:49:c0:c3:5b:c6:26:ed: 0c:63:e0:21:e3:dd:33:75:21:7c:25:d9:6e:d1:a0:55:b0:c6: ce:16:ee:09:94:b3:00:0f:19:22:31:36:ed:d3:56:dc:c3:d6: 0c:39:f1:c8:7c:f0:ed:c6:02:1a:09:17:04:10:1b:1a:8f:ac: 5a:81:07:f3:b1:ae:da:e7:a2:c3:d3:70:98:04:be:ea:67:a1: a9:a7:0b:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjzBqD4oeIdHrDgLAVhtsCXtvPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNjAzMjUwMTQ1NTVaFw0yNjAzMjgwMzA2NTVaMDMxMTAvBgNV BAMTKDNERjkxRTczNEVCQzNFNEJGMkUyMzVCRTIxMTk0NDdGRTIyMEJGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC32i7IA2xDBgKt3rHmRSWqaD6 Y9+gi6EQwEdl+6PtygPIzzoFeKglvoDe1mXFFR1FV4qQN2dp3CnLX+JjgoV0Bksl f/K8x2Mye2sfuq1MnqiLX9Pe4hCRC/xfr5fJdaKnM7F3BY9ChAMMKEszrfV6EEhZ hRRKHgXvySCdJlATkxpa9JzDoAhlar1Uxgy2pIpdmdUNXBAlp0Y5V6JlSUvfUM7D oxUqIO8lXCLYm0qZ2pCaOPUQZVfI0St2AXoysJNusSY3i/VHwGcO6V0Syd4csJSE odRAi15szp5ZSoGBU6xi4Rj1cFhppNCBADFELh/vsdiDHVL0NI+1jF8XcKARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfkec068Pkvy4jW+IRlEf+IgvyUwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWm0Ld0iU8bEPcj/Yjy8/P440/s874A76BU t7e5CikrPL7sIAXPWpv2GhONsqKMD16+SUaM1IZdddwp2LSTYMNh9CKx1VdJfsXi ANTsKBPPY790JigaXqliEfaHkH8v2QMBCJx06SoaPvKpFeQiQTIjGgglTwXoDXFd ojvkjuNPsWjj+srow2+9FuP1mh3butdC8YLynWlfpU3eOl3c3RiZwDIYAvml70Mp s5HgScDDW8Ym7Qxj4CHj3TN1IXwl2W7RoFWwxs4W7gmUswAPGSIxNu3TVtzD1gw5 8ch88O3GAhoJFwQQGxqPrFqBB/OxrtrnosPTcJgEvupnoamnC98= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:48 2026 by rpki-client