$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: mWQa3QAj4wfdHEEE4nW+MEYvfBaTVzkSIB6BySw1Gok= Subject key identifier: A1:69:50:B6:26:66:85:88:CA:EB:3F:14:C9:0E:1A:BD:D0:B9:BF:F2 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 6054D5145D6FC325243F0885BFF45CD66E06075F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 0164 Signing time: Tue 24 Mar 2026 06:01:12 +0000 Manifest this update: Tue 24 Mar 2026 05:56:12 +0000 Manifest next update: Fri 27 Mar 2026 14:10:12 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: 3tYXz3Q1J+RiItjWRL7fTmwrgZe5exzG1Ggl7TU8gtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:54:d5:14:5d:6f:c3:25:24:3f:08:85:bf:f4:5c:d6:6e:06:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Mar 24 05:56:12 2026 GMT Not After : Mar 27 14:10:12 2026 GMT Subject: CN=A16950B626668588CAEB3F14C90E1ABDD0B9BFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:6e:36:07:83:b7:74:f5:60:84:f2:a6:c1: f0:2f:6d:82:a6:7a:30:89:a6:84:17:4b:b4:bd:c0: 0f:eb:87:e8:17:f9:38:92:62:66:36:e8:53:9f:54: 07:96:54:77:67:7d:01:6c:32:bc:98:88:e9:b2:87: 37:dc:1b:e0:13:90:ad:ac:f6:0a:44:4e:07:08:13: 38:63:b8:52:b7:ed:0c:27:83:99:65:bf:07:a1:fd: 40:66:bf:13:d5:2c:6f:65:f0:96:ab:62:d2:60:b1: 89:72:59:4a:67:15:01:be:57:9b:9f:e5:fd:7b:74: 13:be:bb:10:ce:cd:dd:ae:cc:e0:95:95:dc:db:e9: f5:62:76:9c:16:99:05:dc:2f:d4:01:db:30:47:26: 3b:f6:1e:20:29:54:b0:7f:c6:9d:95:5e:3d:d9:3a: 7e:00:33:eb:32:d9:88:32:12:ab:05:25:7b:15:33: 2e:15:9a:53:f5:cf:5c:fa:d0:a0:2c:5f:4a:11:54: 42:85:03:68:bd:44:9f:42:78:f8:1e:eb:22:31:71: ab:cb:cd:07:7d:a9:09:d2:44:5b:80:cb:90:2b:30: 16:d1:e2:1b:d7:dd:f7:3b:61:b5:05:0e:7f:8c:b3: 26:56:59:c7:33:3e:f2:d6:a9:db:c9:cb:21:7b:6a: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:69:50:B6:26:66:85:88:CA:EB:3F:14:C9:0E:1A:BD:D0:B9:BF:F2 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:90:5d:00:8d:8f:06:c0:19:a3:5d:d3:c0:5b:63:a9:c7:72: 06:c4:5f:94:b7:eb:1f:da:f8:e9:e9:27:fd:c1:90:0a:e8:26: d6:bd:fa:5b:99:3f:8b:83:71:e9:58:5c:b5:84:d5:91:49:ce: 3b:c7:e9:b9:e2:b6:1f:61:cb:79:54:c3:8b:d7:c0:44:89:bb: 93:fa:a7:83:4a:53:02:84:c1:cd:1c:60:4d:33:58:c5:c9:0f: d6:0c:95:2f:6f:d4:cc:7e:d2:7e:d1:8d:40:42:98:e2:c5:df: 89:60:e0:1e:ce:76:d6:06:c6:e4:2c:23:d0:be:12:9c:fc:d8: d9:17:ed:03:48:1a:f2:10:fd:91:af:0c:3c:27:45:1f:74:8a: c8:12:05:b2:7f:1f:4a:3a:ed:49:30:19:54:79:15:3d:70:99: e5:3e:4d:5c:9c:e1:84:71:39:b3:1d:c5:e6:cd:fa:fb:0a:07: 20:1f:a4:0f:a0:a4:d7:f8:6a:dc:a3:83:77:4c:0e:d1:63:0b: b1:12:e6:8e:00:d5:0d:07:d0:45:f9:30:fc:d9:e1:d0:ef:9a: ef:11:d2:6e:3f:76:8f:20:a0:74:4e:fa:9b:17:ef:ce:ed:f7: 93:57:8b:bb:6a:3e:60:f8:0f:00:07:5c:f3:2b:12:72:a5:d7: 4b:ed:f4:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFTVFF1vwyUkPwiFv/Rc1m4GB18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNjAzMjQwNTU2MTJaFw0yNjAzMjcxNDEwMTJaMDMxMTAvBgNV BAMTKEExNjk1MEI2MjY2Njg1ODhDQUVCM0YxNEM5MEUxQUJERDBCOUJGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGG42B4O3dPVghPKmwfAvbYKm ejCJpoQXS7S9wA/rh+gX+TiSYmY26FOfVAeWVHdnfQFsMryYiOmyhzfcG+ATkK2s 9gpETgcIEzhjuFK37Qwng5llvweh/UBmvxPVLG9l8JarYtJgsYlyWUpnFQG+V5uf 5f17dBO+uxDOzd2uzOCVldzb6fVidpwWmQXcL9QB2zBHJjv2HiApVLB/xp2VXj3Z On4AM+sy2YgyEqsFJXsVMy4VmlP1z1z60KAsX0oRVEKFA2i9RJ9CePge6yIxcavL zQd9qQnSRFuAy5ArMBbR4hvX3fc7YbUFDn+MsyZWWcczPvLWqdvJyyF7agZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoWlQtiZmhYjK6z8UyQ4avdC5v/IwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiQXQCNjwbAGaNd08BbY6nHcgbEX5S36x/a +OnpJ/3BkAroJta9+luZP4uDcelYXLWE1ZFJzjvH6bnith9hy3lUw4vXwESJu5P6 p4NKUwKEwc0cYE0zWMXJD9YMlS9v1Mx+0n7RjUBCmOLF34lg4B7OdtYGxuQsI9C+ Epz82NkX7QNIGvIQ/ZGvDDwnRR90isgSBbJ/H0o67UkwGVR5FT1wmeU+TVyc4YRx ObMdxebN+vsKByAfpA+gpNf4atyjg3dMDtFjC7ES5o4A1Q0H0EX5MPzZ4dDvmu8R 0m4/do8goHRO+psX787t95NXi7tqPmD4DwAHXPMrEnKl10vt9Fc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:01 2026 by rpki-client