$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft (raw, json) Hash identifier: KukUKRXmAWeekbDsJk3rv3xB2iINDUrMloRCp6OqdMA= Subject key identifier: 4A:17:21:98:F5:1D:0F:1D:F2:03:55:41:9B:EC:EA:99:6D:CA:42:2A Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Certificate serial: 5DFF73ABED3D7D69394AB6F3C5449F5C05FCAA6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft Manifest number: 040A Signing time: Wed 25 Mar 2026 13:12:06 +0000 Manifest this update: Wed 25 Mar 2026 13:07:06 +0000 Manifest next update: Sat 28 Mar 2026 17:43:06 +0000 Files and hashes: 1: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: CyUa8cUnppeeXFA8fzhGE48owkMTBLn/7bLT/UPIoOA=) 2: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: pGG2Bi36SLJ3ZRv3lx6++uoX962j1RY60TxoCjCPGXI=) 3: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: IgSDzMHI3dSppPCf14soQgaWSO7iUukjBimhBkSaH7U=) 4: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl (hash: 2tFgxyIZ9BUORgfzVjJxFdgjzrobFKUroilMbrCJRUA=) 5: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: c7K/kJi/sdHC40eB5yKboQSZpT9ath8KafCzibQS9r0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ff:73:ab:ed:3d:7d:69:39:4a:b6:f3:c5:44:9f:5c:05:fc:aa:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Validity Not Before: Mar 25 13:07:06 2026 GMT Not After : Mar 28 17:43:06 2026 GMT Subject: CN=4A172198F51D0F1DF20355419BECEA996DCA422A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:80:38:7b:1d:24:26:90:3f:37:58:48:bc: dd:5f:e9:12:40:0e:a5:19:99:40:ec:6c:00:85:e8: 1d:fe:78:67:93:7a:e5:2c:2b:7e:c1:4f:6e:d1:37: d0:3d:7b:88:72:d2:d2:bc:da:68:f4:7a:02:7d:a7: d1:31:26:1e:e7:75:25:e4:36:d3:f5:56:ca:f9:2a: cd:0d:16:27:93:a6:70:7c:81:d5:b3:af:28:ea:92: e0:8c:91:81:14:72:2a:a4:38:47:9f:33:0d:7a:7d: b6:6b:a1:4e:21:65:e6:31:97:a0:47:42:e1:87:55: fb:52:83:07:a0:37:16:8d:4b:85:92:61:3b:2a:dd: 3b:ec:5a:19:1e:5a:6d:dc:f9:a8:42:2d:d0:cf:fc: 3d:e6:3a:5b:49:ba:31:a8:59:35:13:bd:b4:a1:2b: 10:f4:8d:3f:0e:63:9b:dc:e3:dc:18:01:12:e5:e8: a6:95:2e:97:4c:c0:f3:52:8c:51:86:e1:d0:f5:82: b1:08:78:34:96:68:4b:b5:cb:62:57:aa:22:45:07: cc:99:cf:58:89:d1:9c:28:7c:86:95:73:11:64:6b: c5:40:a2:31:49:30:c7:e0:92:67:52:1c:da:27:0b: a2:7b:88:b1:1f:e1:a1:dd:5f:6a:03:b1:c6:7f:1e: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:21:98:F5:1D:0F:1D:F2:03:55:41:9B:EC:EA:99:6D:CA:42:2A X509v3 Authority Key Identifier: keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4d:e6:fa:d0:cf:3c:62:04:0f:49:2f:e1:58:58:14:ea:78: 99:b5:0d:99:e6:53:f7:9d:e5:c6:f7:5c:30:21:7e:25:be:6e: 75:a9:7d:fd:59:a2:7c:92:33:e3:ac:63:69:2f:ee:ea:26:66: 39:a9:a5:cc:a8:28:ac:29:75:d8:82:e4:77:f0:7d:30:ab:ea: f8:98:f4:c8:bf:13:23:63:45:ce:76:ff:f5:9f:30:71:08:7f: 20:0f:6e:5b:c8:d9:b1:cd:ea:5a:93:3b:fb:58:77:5f:14:79: f1:d7:a1:35:6c:41:2e:b7:a6:bf:96:a4:96:7f:b6:11:c1:e7: 54:8f:0b:46:7e:84:9f:68:ae:24:bc:6f:72:bb:dc:3e:13:da: 5b:5e:ea:85:ac:30:8e:cb:b4:9a:40:d9:2e:99:69:42:f5:00: 2c:50:59:39:77:33:45:9d:06:eb:9d:76:7a:2d:9e:6b:b2:a6: b6:31:76:63:7b:c2:f1:fc:3d:a8:70:7d:48:ed:89:e9:8a:99: ce:5b:1f:90:f7:21:95:3c:d7:a0:4b:b5:ec:b2:02:7d:2a:8a: e5:fd:83:87:03:91:ef:77:f7:14:08:d1:86:aa:f3:02:b7:e7: a6:68:e8:d1:3d:5f:d7:4f:67:ac:42:83:0e:5d:9d:aa:e7:75: bf:62:7e:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXf9zq+09fWk5SrbzxUSfXAX8qm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFF QjhGNDg1MzAeFw0yNjAzMjUxMzA3MDZaFw0yNjAzMjgxNzQzMDZaMDMxMTAvBgNV BAMTKDRBMTcyMTk4RjUxRDBGMURGMjAzNTU0MTlCRUNFQTk5NkRDQTQyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+44A4ex0kJpA/N1hIvN1f6RJA DqUZmUDsbACF6B3+eGeTeuUsK37BT27RN9A9e4hy0tK82mj0egJ9p9ExJh7ndSXk NtP1Vsr5Ks0NFieTpnB8gdWzryjqkuCMkYEUciqkOEefMw16fbZroU4hZeYxl6BH QuGHVftSgwegNxaNS4WSYTsq3TvsWhkeWm3c+ahCLdDP/D3mOltJujGoWTUTvbSh KxD0jT8OY5vc49wYARLl6KaVLpdMwPNSjFGG4dD1grEIeDSWaEu1y2JXqiJFB8yZ z1iJ0ZwofIaVcxFka8VAojFJMMfgkmdSHNonC6J7iLEf4aHdX2oDscZ/Hk8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUShchmPUdDx3yA1VBm+zqmW3KQiowHwYDVR0j BBgwFoAUDQgA8VFtpXvZuVYf+iokKuuPSFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMC8wRDA4MDBGMTUx NkRBNTdCRDlCOTU2MUZGQTJBMjQyQUVCOEY0ODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFFQjhG NDg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0 MkFFQjhGNDg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1N5vrQzzxiBA9JL+FYWBTqeJm1DZnmU/ed 5cb3XDAhfiW+bnWpff1ZonySM+OsY2kv7uomZjmppcyoKKwpddiC5HfwfTCr6viY 9Mi/EyNjRc52//WfMHEIfyAPblvI2bHN6lqTO/tYd18UefHXoTVsQS63pr+WpJZ/ thHB51SPC0Z+hJ9oriS8b3K73D4T2lte6oWsMI7LtJpA2S6ZaUL1ACxQWTl3M0Wd BuuddnotnmuyprYxdmN7wvH8PahwfUjtiemKmc5bH5D3IZU816BLteyyAn0qiuX9 g4cDke939xQI0Yaq8wK356Zo6NE9X9dPZ6xCgw5dnarndb9iflI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:44 2026 by rpki-client