$ rpki-client -vvf repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft File: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft (raw, json) Hash identifier: Itr5rLAWGtq8p8myQkZmpWVw1G3F/2a88JTVb92Bml8= Subject key identifier: DE:B5:D4:1D:7A:7C:1B:62:28:4C:BE:C6:A2:1E:1B:2B:59:4A:53:46 Authority key identifier: 0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD Certificate issuer: /CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Certificate serial: 51EF711CA5059A2407BB26F5FE5E979C1B65CAE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft Manifest number: 0D Signing time: Tue 24 Mar 2026 11:51:31 +0000 Manifest this update: Tue 24 Mar 2026 11:46:31 +0000 Manifest next update: Fri 27 Mar 2026 23:11:31 +0000 Files and hashes: 1: 0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl (hash: 0TWkXb0y787DnrNfeWVgGrNlMVtELfHoHqOGSk7Z1rY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ef:71:1c:a5:05:9a:24:07:bb:26:f5:fe:5e:97:9c:1b:65:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DBD94197CD4580957B4F3D09BB658731E5CCD Validity Not Before: Mar 24 11:46:31 2026 GMT Not After : Mar 27 23:11:31 2026 GMT Subject: CN=DEB5D41D7A7C1B62284CBEC6A21E1B2B594A5346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:64:c6:93:b3:01:37:6b:8e:be:be:11:e4: db:61:6f:59:7d:f2:4d:ea:28:a0:f4:4f:fd:0a:3c: 5b:fa:b4:38:b9:4f:eb:e6:99:fc:5d:c0:5a:cf:ac: 32:06:b7:b5:b4:7a:35:8b:3f:b5:c6:7e:d6:dd:25: ef:e0:32:5c:a1:38:66:34:41:28:36:fa:b4:09:fb: be:d6:af:12:02:a7:b7:68:3f:36:8f:33:b1:ac:cd: d6:f7:80:3e:c6:da:68:81:b6:9d:5f:08:61:d6:01: ed:d7:64:3e:2f:13:49:b4:b6:6f:cf:cc:ab:57:2f: 42:0b:f6:be:90:e8:17:b8:71:0d:ba:07:7f:b3:64: 4b:d1:4e:62:aa:b3:77:9c:76:7c:fc:26:65:e4:2f: 5f:bb:03:39:1a:a7:e3:b4:bc:88:c5:6d:3b:9a:23: 0b:39:fc:94:b3:42:b7:b4:12:38:85:ca:fb:d2:37: 00:35:18:60:cb:42:af:c7:f7:34:9b:bf:48:06:8c: 5f:14:dd:7d:66:04:f3:4c:fc:7a:d1:5d:5a:48:eb: 9c:a8:20:5b:f4:ae:37:2d:97:a6:30:03:6c:38:45: 6f:27:ae:ef:b7:ca:99:07:84:92:2e:3b:1e:ee:bf: 35:4e:99:80:3a:f5:87:c1:73:c2:71:c8:31:b3:a2: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B5:D4:1D:7A:7C:1B:62:28:4C:BE:C6:A2:1E:1B:2B:59:4A:53:46 X509v3 Authority Key Identifier: keyid:0F:3D:BD:94:19:7C:D4:58:09:57:B4:F3:D0:9B:B6:58:73:1E:5C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65806d30-ee05-450f-9466-7f908e9cc7e4/0/0F3DBD94197CD4580957B4F3D09BB658731E5CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:66:0c:fb:e7:04:f1:f5:98:88:52:9c:75:8d:84:57:a9:b1: c7:a0:9b:df:05:b1:08:1b:e7:77:cb:3d:c7:da:31:b8:db:d8: ae:de:62:83:ef:1e:d5:a8:f8:7b:ed:b6:54:eb:04:ca:1c:16: 49:19:d5:88:02:37:76:ee:b9:c8:ab:44:84:47:cf:2f:1f:6f: c0:6e:a1:c5:ad:c3:ae:0e:ff:57:ba:65:c5:39:f2:89:97:57: de:f4:00:b3:ec:61:6d:28:9e:3a:34:a1:9e:11:26:24:6a:43: 39:43:24:7c:97:81:ba:af:0c:eb:54:d5:a7:3a:df:3a:3f:ec: 86:28:9a:8b:c6:6d:21:85:88:76:d8:06:a4:65:75:ac:c6:18: 2f:cc:f8:58:24:d0:e8:d7:4a:cc:41:6a:6a:3d:d4:15:c5:a3: 5a:9e:fd:92:c7:0f:39:ef:4a:b5:01:82:f8:3f:b7:2e:64:d7: 6f:30:ed:cd:16:f7:af:e6:ac:7e:79:8d:b5:11:08:09:7a:bc: 52:68:c7:f4:09:ed:a7:00:1a:0f:42:81:f3:d9:74:90:b5:59: cb:1f:9b:7b:d4:39:80:cc:bf:6e:cd:6d:ac:89:88:5f:d6:73: 1c:b5:56:8d:7f:c7:25:c4:03:d5:2e:46:b0:b9:6c:fb:ee:61: 84:ad:23:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUe9xHKUFmiQHuyb1/l6XnBtlyuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3 MzFFNUNDRDAeFw0yNjAzMjQxMTQ2MzFaFw0yNjAzMjcyMzExMzFaMDMxMTAvBgNV BAMTKERFQjVENDFEN0E3QzFCNjIyODRDQkVDNkEyMUUxQjJCNTk0QTUzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgj2TGk7MBN2uOvr4R5Nthb1l9 8k3qKKD0T/0KPFv6tDi5T+vmmfxdwFrPrDIGt7W0ejWLP7XGftbdJe/gMlyhOGY0 QSg2+rQJ+77WrxICp7doPzaPM7Gszdb3gD7G2miBtp1fCGHWAe3XZD4vE0m0tm/P zKtXL0IL9r6Q6Be4cQ26B3+zZEvRTmKqs3ecdnz8JmXkL1+7Azkap+O0vIjFbTua Iws5/JSzQre0EjiFyvvSNwA1GGDLQq/H9zSbv0gGjF8U3X1mBPNM/HrRXVpI65yo IFv0rjctl6YwA2w4RW8nru+3ypkHhJIuOx7uvzVOmYA69YfBc8JxyDGzou8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rXUHXp8G2IoTL7Goh4bK1lKU0YwHwYDVR0j BBgwFoAUDz29lBl81FgJV7Tz0Ju2WHMeXM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTgwNmQzMC1lZTA1LTQ1MGYtOTQ2Ni03ZjkwOGU5Y2M3ZTQvMC8wRjNEQkQ5NDE5 N0NENDU4MDk1N0I0RjNEMDlCQjY1ODczMUU1Q0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2NTg3MzFF NUNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU4MDZkMzAtZWUwNS00NTBmLTk0 NjYtN2Y5MDhlOWNjN2U0LzAvMEYzREJEOTQxOTdDRDQ1ODA5NTdCNEYzRDA5QkI2 NTg3MzFFNUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxmDPvnBPH1mIhSnHWNhFepscegm98FsQgb 53fLPcfaMbjb2K7eYoPvHtWo+HvttlTrBMocFkkZ1YgCN3buucirRIRHzy8fb8Bu ocWtw64O/1e6ZcU58omXV970ALPsYW0onjo0oZ4RJiRqQzlDJHyXgbqvDOtU1ac6 3zo/7IYomovGbSGFiHbYBqRldazGGC/M+Fgk0OjXSsxBamo91BXFo1qe/ZLHDznv SrUBgvg/ty5k128w7c0W96/mrH55jbURCAl6vFJox/QJ7acAGg9CgfPZdJC1Wcsf m3vUOYDMv27NbayJiF/Wcxy1Vo1/xyXEA9UuRrC5bPvuYYStI04= -----END CERTIFICATE-----Generated at Thu Mar 26 17:13:00 2026 by rpki-client