$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: yQtVZZEXZerxcm8k7vCD1jrJYBv9gZtpDF6htuPWtiE= Subject key identifier: 2B:83:61:8C:36:F3:8B:26:13:CA:D1:9B:DA:E8:C3:5F:83:8A:E3:97 Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 23A588F4E42B3637FB8AEEE8DF1A0694CB35CF5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 02FE Signing time: Wed 25 Mar 2026 19:26:16 +0000 Manifest this update: Wed 25 Mar 2026 19:21:16 +0000 Manifest next update: Sun 29 Mar 2026 03:02:16 +0000 Files and hashes: 1: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: 9OAoWczmJPqSai15ZAPOgSohr4eVEGJzypq/J/xc2bI=) 2: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: +FiEMQn+bof+/ZdEFGp6Dq9/UIExpSElpnCjlOgif5Q=) 3: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: H3TBzA5MSZV43r4fbf4u0Az6YaAc4fh3LsNIn5So1nM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a5:88:f4:e4:2b:36:37:fb:8a:ee:e8:df:1a:06:94:cb:35:cf:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Mar 25 19:21:16 2026 GMT Not After : Mar 29 03:02:16 2026 GMT Subject: CN=2B83618C36F38B2613CAD19BDAE8C35F838AE397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:5a:8b:6d:3d:0f:2e:53:17:e8:df:c2:01: ad:c6:dd:be:57:4c:80:90:f1:d1:b8:02:64:b3:75: ca:27:bc:2f:c7:86:25:ca:1d:ce:12:0c:18:d1:03: 76:7b:10:75:46:bf:72:dd:0b:20:07:66:95:d7:51: 01:b4:a9:3f:b6:f6:c7:af:47:e5:b4:a8:7e:fa:56: 5c:49:86:ed:e9:9f:92:2b:7c:8a:64:91:62:6f:ef: 3a:c7:39:2a:53:05:f8:66:e6:7b:c9:1f:65:9e:59: 62:6f:91:9b:4d:92:c6:3a:90:d2:9c:e6:ac:a4:10: c5:eb:3c:ce:dd:0a:c7:3c:96:3a:79:e8:d5:b0:5a: 9c:53:93:1a:9d:0e:a3:f1:5e:e2:9e:34:bc:0f:c5: 43:25:b5:db:1f:09:cc:f9:68:14:7d:28:9f:44:2d: 5e:86:e7:86:d9:8a:11:fd:eb:1a:17:44:f1:1b:4c: 0a:b5:53:42:4b:2b:eb:8b:d3:80:c8:d3:b3:a5:44: 21:c6:3f:5d:f8:99:78:44:02:2b:4a:c1:40:81:bd: 2d:ad:96:84:1c:06:8f:fb:53:67:de:27:50:38:b5: f5:5b:85:63:3f:44:41:d5:7a:95:fb:59:54:35:4e: 6b:83:a2:53:51:0b:4a:18:8b:7e:1e:22:a8:0a:a1: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:61:8C:36:F3:8B:26:13:CA:D1:9B:DA:E8:C3:5F:83:8A:E3:97 X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:37:dc:44:3f:5c:e9:8d:a4:95:68:8e:b1:f4:de:71:b2:70: ae:f6:12:2e:0c:3a:df:03:3c:23:58:a8:9a:c1:15:72:0c:1a: 48:06:60:2f:ba:da:3c:71:e9:57:9b:cd:be:28:6b:7f:b5:91: 27:46:f7:5a:86:c7:d5:fc:ba:79:97:5a:83:39:f9:86:1c:03: e9:17:c2:51:31:cb:22:f0:1a:7f:dc:60:66:98:ef:75:77:49: a0:0c:17:8f:24:4f:b2:a3:07:88:52:15:71:81:49:51:85:9a: 26:e9:7d:b3:70:1f:9a:a6:e3:4d:79:1d:29:d0:34:e5:c7:e8: 47:5f:c1:a6:10:be:a1:73:1a:4f:f8:f9:5f:47:df:e9:65:e4: b3:28:83:05:cb:b9:98:88:b2:c7:45:74:96:05:24:d8:c6:b0: a5:b0:02:92:35:4a:cc:db:cf:9f:37:56:4f:8f:c8:37:6a:a9: 7c:4b:c8:7d:bd:cf:d7:08:48:3d:e8:f7:e7:b5:f4:24:83:a9: 97:5a:86:a6:4c:2f:25:96:55:06:e4:11:3c:ab:7a:c3:6c:63: 1e:4f:d6:53:ec:79:ca:ec:e0:aa:7d:e2:ea:1a:c9:80:c8:0d: e7:9e:9a:05:5a:f1:23:af:72:87:e7:80:a1:0f:5e:0d:11:e5: 55:7d:37:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6WI9OQrNjf7iu7o3xoGlMs1z1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNjAzMjUxOTIxMTZaFw0yNjAzMjkwMzAyMTZaMDMxMTAvBgNV BAMTKDJCODM2MThDMzZGMzhCMjYxM0NBRDE5QkRBRThDMzVGODM4QUUzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hFqLbT0PLlMX6N/CAa3G3b5X TICQ8dG4AmSzdconvC/HhiXKHc4SDBjRA3Z7EHVGv3LdCyAHZpXXUQG0qT+29sev R+W0qH76VlxJhu3pn5IrfIpkkWJv7zrHOSpTBfhm5nvJH2WeWWJvkZtNksY6kNKc 5qykEMXrPM7dCsc8ljp56NWwWpxTkxqdDqPxXuKeNLwPxUMltdsfCcz5aBR9KJ9E LV6G54bZihH96xoXRPEbTAq1U0JLK+uL04DI07OlRCHGP134mXhEAitKwUCBvS2t loQcBo/7U2feJ1A4tfVbhWM/REHVepX7WVQ1TmuDolNRC0oYi34eIqgKoa8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4NhjDbziyYTytGb2ujDX4OK45cwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI33EQ/XOmNpJVojrH03nGycK72Ei4MOt8D PCNYqJrBFXIMGkgGYC+62jxx6Vebzb4oa3+1kSdG91qGx9X8unmXWoM5+YYcA+kX wlExyyLwGn/cYGaY73V3SaAMF48kT7KjB4hSFXGBSVGFmibpfbNwH5qm4015HSnQ NOXH6EdfwaYQvqFzGk/4+V9H3+ll5LMogwXLuZiIssdFdJYFJNjGsKWwApI1Sszb z583Vk+PyDdqqXxLyH29z9cISD3o9+e19CSDqZdahqZMLyWWVQbkETyresNsYx5P 1lPsecrs4Kp94uoayYDIDeeemgVa8SOvcofngKEPXg0R5VV9NyM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:27:18 2026 by rpki-client