$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: p9/kp7Hb9w4cPl6g9xwIZMjLuBOS4hwmckStx2GCW2I= Subject key identifier: D6:CA:A3:76:A0:E6:D8:43:6C:B5:64:0D:6A:B0:EB:30:29:9F:F6:88 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 45D771ED94085D4B5103ED8B021AEC97FFA1E044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 02FA Signing time: Wed 25 Mar 2026 22:00:53 +0000 Manifest this update: Wed 25 Mar 2026 21:55:53 +0000 Manifest next update: Sun 29 Mar 2026 08:54:53 +0000 Files and hashes: 1: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: T+LxrVwwNKzJSOF5lHGAsP446A31BNGrPBlYYjdrOLQ=) 2: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: V9t2AhMDktTJmua0ZTyYzyfIFstQSSihJRU2zK7Z0Fo=) 3: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: TX3fUeZklwpUw9yIwRSZ7p2jM8uL0KvPpSOCdlPRBMk=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: bmzsNhYujGH2LmgXskz/0GWC9scVu/AXTjmp6dOWN3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d7:71:ed:94:08:5d:4b:51:03:ed:8b:02:1a:ec:97:ff:a1:e0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Mar 25 21:55:53 2026 GMT Not After : Mar 29 08:54:53 2026 GMT Subject: CN=D6CAA376A0E6D8436CB5640D6AB0EB30299FF688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ac:ea:cf:47:74:c7:d2:4d:88:e5:26:b4:ec: 43:67:cc:81:8a:e0:b5:f2:3a:e3:fc:a9:97:97:3c: c6:36:9f:5d:48:3d:ad:cc:51:58:53:81:d5:12:be: 9a:71:8f:15:4b:64:ff:fe:12:52:66:ca:2e:44:1c: 3d:0c:9a:ae:43:da:a9:0b:25:65:44:d8:94:f1:e0: 0f:3f:5c:d8:3e:a4:6c:7a:6e:67:c8:c7:69:62:23: 53:ea:28:a2:ac:93:c7:b5:59:56:bf:56:9d:79:50: ba:62:83:9d:48:72:ca:ac:3e:1b:a3:ce:2e:92:8c: 02:39:0e:10:66:05:1c:f5:2c:ac:08:c2:8c:f2:c9: 33:b9:6f:06:93:91:d8:d3:98:aa:f3:d7:70:fe:ab: c2:c1:a6:65:fd:2b:dd:18:90:e3:b5:6e:5e:2c:19: aa:36:8d:ce:dd:9f:67:c7:3a:10:c0:37:d8:f2:4c: 91:68:e2:05:8a:7c:34:72:47:ac:04:d8:4a:c6:32: 61:9a:ac:d0:dd:6b:35:88:70:02:5c:9c:42:7e:3b: f5:fa:11:a4:44:2e:53:24:08:4f:59:b2:f5:03:89: 59:85:db:aa:48:38:03:49:e0:bc:37:da:96:78:b3: c3:16:74:9b:48:5a:34:70:72:31:1d:89:c1:8a:80: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CA:A3:76:A0:E6:D8:43:6C:B5:64:0D:6A:B0:EB:30:29:9F:F6:88 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f3:9d:c8:90:fd:09:dd:11:f1:0a:0d:97:cf:3e:a8:eb:70: 91:b4:6c:38:b8:bd:fe:de:19:ae:22:91:b7:49:84:e9:dc:d2: 12:de:32:b6:d4:67:9a:dd:87:20:24:98:e1:6a:34:4f:e5:9c: 1d:40:ef:fc:69:56:01:b0:b8:7f:4e:ea:b9:bc:23:24:fe:ac: c2:a5:7f:33:83:69:50:e2:93:8c:93:52:d9:5f:14:b4:03:79: c4:15:4f:23:66:be:4c:96:ff:22:b8:58:51:28:b0:e7:93:45: 03:9c:84:0c:17:fa:d6:8e:a5:37:a1:42:23:a8:a7:77:c3:59: 8a:d3:1a:0a:9b:24:51:f4:ec:8b:43:b6:e5:0a:ae:47:93:93: 56:09:c3:9d:bf:c0:93:dc:30:67:33:32:7f:fc:da:7d:28:cc: 35:7a:a6:75:c1:0a:8a:dd:90:a3:1e:19:ec:92:7b:ea:4e:24: 45:44:74:9c:d6:d5:f0:a6:e6:7a:1d:41:a6:00:9a:ea:84:56: 62:97:d1:96:f2:04:6b:e9:18:d3:35:8a:2e:ec:1d:78:72:1d: 44:df:13:c1:e3:a2:75:1c:5a:ae:f1:e3:94:ea:85:90:32:80: 23:61:de:f5:27:d7:d4:83:4d:f7:69:b2:02:56:7c:3c:8b:c5: a0:28:e0:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURddx7ZQIXUtRA+2LAhrsl/+h4EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNjAzMjUyMTU1NTNaFw0yNjAzMjkwODU0NTNaMDMxMTAvBgNV BAMTKEQ2Q0FBMzc2QTBFNkQ4NDM2Q0I1NjQwRDZBQjBFQjMwMjk5RkY2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprOrPR3TH0k2I5Sa07ENnzIGK 4LXyOuP8qZeXPMY2n11IPa3MUVhTgdUSvppxjxVLZP/+ElJmyi5EHD0Mmq5D2qkL JWVE2JTx4A8/XNg+pGx6bmfIx2liI1PqKKKsk8e1WVa/Vp15ULpig51IcsqsPhuj zi6SjAI5DhBmBRz1LKwIwozyyTO5bwaTkdjTmKrz13D+q8LBpmX9K90YkOO1bl4s Gao2jc7dn2fHOhDAN9jyTJFo4gWKfDRyR6wE2ErGMmGarNDdazWIcAJcnEJ+O/X6 EaRELlMkCE9ZsvUDiVmF26pIOANJ4Lw32pZ4s8MWdJtIWjRwcjEdicGKgLqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sqjdqDm2ENstWQNarDrMCmf9ogwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbznciQ/QndEfEKDZfPPqjrcJG0bDi4vf7e Ga4ikbdJhOnc0hLeMrbUZ5rdhyAkmOFqNE/lnB1A7/xpVgGwuH9O6rm8IyT+rMKl fzODaVDik4yTUtlfFLQDecQVTyNmvkyW/yK4WFEosOeTRQOchAwX+taOpTehQiOo p3fDWYrTGgqbJFH07ItDtuUKrkeTk1YJw52/wJPcMGczMn/82n0ozDV6pnXBCord kKMeGeySe+pOJEVEdJzW1fCm5nodQaYAmuqEVmKX0ZbyBGvpGNM1ii7sHXhyHUTf E8HjonUcWq7x45TqhZAygCNh3vUn19SDTfdpsgJWfDyLxaAo4K0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:57 2026 by rpki-client