$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: yWhlr34GAQOWxCp0wjRy6IAdMFBowEhvPvCLWR1htVw= Subject key identifier: 52:9C:45:DA:18:93:08:37:38:0C:C7:2E:10:23:A5:9D:C5:56:58:51 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 216F1D1E201A8BE74698BC996714BEFB59771962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 056E Signing time: Wed 25 Mar 2026 15:11:15 +0000 Manifest this update: Wed 25 Mar 2026 15:06:15 +0000 Manifest next update: Sat 28 Mar 2026 18:45:15 +0000 Files and hashes: 1: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: 1h7fo52sVm4cJACJ1QTb5QR43dKEDAqoDnfictr7I+U=) 2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: ArGX3GK83LFApxV4uLSs4kfPXNu12xplyTp4FBzO9Nw=) 3: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: EL3LTCD3Z+CxUoIQoWIXkjX45cQQCr8Pkt1Ros2esEI=) 4: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: tHhLDdHHbsCkG+UHT3p88TUY2+W5e4f+3agioxt0A6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:1d:1e:20:1a:8b:e7:46:98:bc:99:67:14:be:fb:59:77:19:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Mar 25 15:06:15 2026 GMT Not After : Mar 28 18:45:15 2026 GMT Subject: CN=529C45DA18930837380CC72E1023A59DC5565851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bf:93:2e:1b:54:8f:dd:d7:c8:37:d5:75:f5: 09:84:9d:a3:43:cb:1d:54:2c:de:2e:cd:fc:d2:05: 1e:7d:98:13:26:8b:84:21:1a:1f:78:cc:fe:8a:69: ca:5d:c9:34:d6:69:f0:36:dc:89:97:d3:d8:6b:bd: d5:64:c2:4c:f4:bc:a3:7c:0a:e8:39:84:b3:57:c0: 7f:e1:42:c7:c6:4c:65:82:fe:92:5a:cb:7a:c8:89: c5:6e:df:c9:e3:0e:5e:7b:ee:49:15:62:0c:88:5d: 4a:c5:61:b8:3a:05:0a:bb:d8:af:76:c1:81:7f:e1: 5f:73:ae:3a:5d:b7:76:3b:1b:f3:27:0d:53:81:2c: 3f:b3:a7:0b:58:20:35:4e:3e:c0:63:29:e9:6a:ea: 6b:62:55:fb:83:5e:f2:5a:3b:82:ee:25:ce:af:cb: 2a:76:eb:69:de:c3:40:6a:71:bf:d6:47:74:f7:b5: 1a:ca:9e:12:ab:d7:d2:f9:b3:82:ae:25:14:21:f9: 4d:e7:ec:48:b4:b3:55:e8:f2:36:17:76:0f:d3:31: 23:0a:c6:30:9c:c8:f3:07:73:e4:a8:00:b3:81:94: 0c:ec:77:14:c6:7e:16:8b:6f:6c:be:5c:9c:c1:06: b2:9e:ca:88:86:14:10:18:b0:93:8f:df:35:f9:de: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9C:45:DA:18:93:08:37:38:0C:C7:2E:10:23:A5:9D:C5:56:58:51 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2d:99:d6:b6:98:1f:38:8a:0b:92:96:73:65:f0:77:53:b7: 00:30:1b:3b:b0:73:fc:af:a1:70:cd:ce:0a:65:76:16:da:46: 42:53:a5:00:ca:66:21:67:23:d4:57:34:b6:27:62:f0:91:5b: f7:6a:0a:08:2c:9c:09:3b:3e:67:b6:89:69:ed:c2:35:8d:b7: a8:fd:60:68:a5:f0:e6:9c:d5:ae:de:0f:02:20:56:b4:59:f3: 5a:71:33:ab:64:0e:ab:52:46:ad:85:b7:ef:e9:67:99:97:96: 2c:09:6a:5d:16:ab:01:39:83:31:10:29:3c:1d:f5:fe:0b:0d: c5:4c:8c:8e:d7:2c:74:ff:c3:6d:6d:56:8f:50:3a:60:39:d3: 68:f1:ad:8f:4a:96:58:b2:e5:a8:79:24:41:40:02:9f:89:f5: 24:6e:ab:ab:1f:bf:ef:f4:56:60:7d:49:78:21:a4:7d:80:a2: 39:a4:0b:47:c8:57:05:fe:2a:b4:35:e6:4a:ae:8f:3b:cc:5c: 8f:ca:01:f9:90:3d:5d:e3:76:ae:b9:b0:04:70:74:03:f5:12: 89:9c:1c:23:fb:3f:8b:20:c9:c4:0f:63:6f:2b:6e:03:f3:d7: d9:20:73:fc:41:ab:6a:ea:ae:fc:34:24:12:fe:3d:1e:b0:e5: 7b:a0:f6:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIW8dHiAai+dGmLyZZxS++1l3GWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNjAzMjUxNTA2MTVaFw0yNjAzMjgxODQ1MTVaMDMxMTAvBgNV BAMTKDUyOUM0NURBMTg5MzA4MzczODBDQzcyRTEwMjNBNTlEQzU1NjU4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzv5MuG1SP3dfIN9V19QmEnaND yx1ULN4uzfzSBR59mBMmi4QhGh94zP6KacpdyTTWafA23ImX09hrvdVkwkz0vKN8 Cug5hLNXwH/hQsfGTGWC/pJay3rIicVu38njDl577kkVYgyIXUrFYbg6BQq72K92 wYF/4V9zrjpdt3Y7G/MnDVOBLD+zpwtYIDVOPsBjKelq6mtiVfuDXvJaO4LuJc6v yyp262new0Bqcb/WR3T3tRrKnhKr19L5s4KuJRQh+U3n7Ei0s1Xo8jYXdg/TMSMK xjCcyPMHc+SoALOBlAzsdxTGfhaLb2y+XJzBBrKeyoiGFBAYsJOP3zX53mYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpxF2hiTCDc4DMcuECOlncVWWFEwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwtmda2mB84iguSlnNl8HdTtwAwGzuwc/yv oXDNzgpldhbaRkJTpQDKZiFnI9RXNLYnYvCRW/dqCggsnAk7Pme2iWntwjWNt6j9 YGil8Oac1a7eDwIgVrRZ81pxM6tkDqtSRq2Ft+/pZ5mXliwJal0WqwE5gzEQKTwd 9f4LDcVMjI7XLHT/w21tVo9QOmA502jxrY9Klliy5ah5JEFAAp+J9SRuq6sfv+/0 VmB9SXghpH2AojmkC0fIVwX+KrQ15kqujzvMXI/KAfmQPV3jdq65sARwdAP1Eomc HCP7P4sgycQPY28rbgPz19kgc/xBq2rqrvw0JBL+PR6w5Xug9uY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:11 2026 by rpki-client