$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: FfMuTFMA0CWKfp0Xujx4Gt+68n+iXx4LaPR06erMvf4= Subject key identifier: 84:F2:84:AC:37:E7:89:E4:D4:A7:7C:B3:D3:5D:CA:EB:E1:DF:D2:1A Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 3E3A53A96BB34D5920602E210A28961B77BDD1F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: 0162 Signing time: Wed 25 Mar 2026 18:20:02 +0000 Manifest this update: Wed 25 Mar 2026 18:15:02 +0000 Manifest next update: Sat 28 Mar 2026 23:10:02 +0000 Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: cHoppOX39X2vtxuGu46ml92MWjePu2xpG3nlOIb+Y/4=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:3a:53:a9:6b:b3:4d:59:20:60:2e:21:0a:28:96:1b:77:bd:d1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Mar 25 18:15:02 2026 GMT Not After : Mar 28 23:10:02 2026 GMT Subject: CN=84F284AC37E789E4D4A77CB3D35DCAEBE1DFD21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:6f:86:0f:cf:b8:63:67:ef:a9:69:55:29: ed:1d:f4:0b:ac:81:51:11:4a:9a:cd:6d:0f:c0:87: 4e:84:14:66:75:e8:88:31:c1:58:c3:46:b2:ea:e8: d4:11:03:0d:3b:a5:d7:0f:cf:9c:c0:a1:e4:62:17: 98:90:c3:08:34:27:77:2d:b1:9f:a0:a4:7f:26:32: 92:3a:a3:b5:b8:85:43:e9:5f:f7:18:08:9c:4c:a3: 68:74:d1:43:2b:7f:52:a5:92:72:39:62:07:74:67: 71:f4:f2:ed:a0:67:da:c8:35:3f:68:e6:12:87:e1: ed:b2:a7:a5:e1:15:8b:1d:e6:8a:dc:55:3c:f3:d5: 32:ca:42:84:2b:fa:a0:6d:c2:fc:7a:33:22:02:11: 0f:62:48:c6:02:74:4b:7c:0f:6b:fb:67:72:c1:40: 86:c4:54:64:32:fa:55:38:9c:82:3b:a5:a8:bb:f2: df:04:1e:b9:5b:6f:07:52:d1:4d:50:c7:92:f9:1f: 20:24:54:dd:6a:d8:5a:04:40:38:90:15:f0:52:b1: b3:ba:20:f7:dd:d6:bf:ce:5f:3e:13:ea:0a:58:69: 3b:01:40:fb:a4:bf:72:1f:79:d9:db:c9:18:0d:80: fa:1d:90:87:21:96:3f:e9:a6:02:8e:8f:8e:18:21: e9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F2:84:AC:37:E7:89:E4:D4:A7:7C:B3:D3:5D:CA:EB:E1:DF:D2:1A X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:df:eb:6c:f2:9e:b0:26:8c:6f:6d:04:6d:89:28:49:f2:1f: 6e:9e:72:f8:27:d6:9f:8f:65:77:9b:e3:d0:9a:2f:2f:21:5f: 25:ee:4f:e2:96:84:4e:43:79:3a:a9:19:63:35:05:1c:be:d1: dc:c2:4a:3d:94:83:48:b1:cc:eb:cc:b2:8e:b1:62:4e:7e:a1: 54:ab:32:27:be:d2:9b:ac:ee:91:fe:85:45:74:10:d4:93:3a: f3:c7:03:2d:bc:a0:63:45:74:3c:68:57:43:f0:22:5e:da:56: 4a:fc:95:0c:03:ea:cc:ed:20:71:50:d3:1b:67:cb:e8:a6:92: 18:e8:49:2b:4b:d3:64:1d:52:dd:b2:6d:42:0e:5b:58:79:53: 3b:95:e4:1b:0e:ef:a6:5c:00:cc:20:fb:e7:d3:2a:10:11:9c: 55:38:a8:fe:6e:0b:39:51:ef:c9:ac:5a:3e:27:0f:61:b2:57: 25:c5:e3:fc:2f:e4:b8:66:d7:18:b5:39:70:a5:7a:f6:3a:c5: eb:ab:bf:4d:22:54:4a:b7:80:10:e7:69:57:14:99:9a:3f:06: 1b:08:a0:b2:35:38:d1:e6:58:2e:1d:9b:be:c6:b6:e9:a5:d2: 61:51:bd:bc:75:0f:ef:14:90:c4:27:8c:4e:4d:fd:28:47:21: 98:4f:7b:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjpTqWuzTVkgYC4hCiiWG3e90fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNjAzMjUxODE1MDJaFw0yNjAzMjgyMzEwMDJaMDMxMTAvBgNV BAMTKDg0RjI4NEFDMzdFNzg5RTRENEE3N0NCM0QzNURDQUVCRTFERkQyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Xm+GD8+4Y2fvqWlVKe0d9Aus gVERSprNbQ/Ah06EFGZ16IgxwVjDRrLq6NQRAw07pdcPz5zAoeRiF5iQwwg0J3ct sZ+gpH8mMpI6o7W4hUPpX/cYCJxMo2h00UMrf1KlknI5Ygd0Z3H08u2gZ9rINT9o 5hKH4e2yp6XhFYsd5orcVTzz1TLKQoQr+qBtwvx6MyICEQ9iSMYCdEt8D2v7Z3LB QIbEVGQy+lU4nII7pai78t8EHrlbbwdS0U1Qx5L5HyAkVN1q2FoEQDiQFfBSsbO6 IPfd1r/OXz4T6gpYaTsBQPukv3IfednbyRgNgPodkIchlj/ppgKOj44YIelNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhPKErDfnieTUp3yz013K6+Hf0howHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHff62zynrAmjG9tBG2JKEnyH26ecvgn1p+P ZXeb49CaLy8hXyXuT+KWhE5DeTqpGWM1BRy+0dzCSj2Ug0ixzOvMso6xYk5+oVSr Mie+0pus7pH+hUV0ENSTOvPHAy28oGNFdDxoV0PwIl7aVkr8lQwD6sztIHFQ0xtn y+imkhjoSStL02QdUt2ybUIOW1h5UzuV5BsO76ZcAMwg++fTKhARnFU4qP5uCzlR 78msWj4nD2GyVyXF4/wv5Lhm1xi1OXClevY6xeurv00iVEq3gBDnaVcUmZo/BhsI oLI1ONHmWC4dm77Gtuml0mFRvbx1D+8UkMQnjE5N/ShHIZhPe7I= -----END CERTIFICATE-----Generated at Thu Mar 26 05:39:06 2026 by rpki-client