$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: 2zy8YtYAsEAY4uf+7nMDMP/eYoTI1DT3fvHrLB6zuYo= Subject key identifier: 87:16:23:C4:22:85:1D:99:19:0D:DF:9C:AF:A6:93:55:40:11:BA:36 Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 47A02AF975C94B1E3D9A4E4CF336F03FE80E5212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 0592 Signing time: Wed 25 Mar 2026 11:40:59 +0000 Manifest this update: Wed 25 Mar 2026 11:35:59 +0000 Manifest next update: Sat 28 Mar 2026 16:54:59 +0000 Files and hashes: 1: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=) 2: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=) 3: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=) 4: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 75E5/wNg1gW13NP4pidyseZpfPgC9bQlFJMQWGidUN4=) 5: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: +XLAGZaO1CUhgIfOrcy+sNRJJiCj6bewjgriX63Ik2M=) 6: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=) 7: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: yc5NmKqgc087/1Q1aK0xzmJOjZX9anqvOxLY60HOjzI=) 8: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: 78N/7/lN6fFcNxTsBAhwu2aVo0YPMpRgQPsTAmxhqAM=) 9: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=) 10: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=) 11: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: H4mNsor+S21Z9iDAo9JGBB2O9MNUOvLZprfG29RDww8=) 12: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a0:2a:f9:75:c9:4b:1e:3d:9a:4e:4c:f3:36:f0:3f:e8:0e:52:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Mar 25 11:35:59 2026 GMT Not After : Mar 28 16:54:59 2026 GMT Subject: CN=871623C422851D99190DDF9CAFA693554011BA36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:4a:0c:e7:18:18:f7:e4:35:a9:19:06:6b: d1:95:84:46:c2:97:76:05:b4:8c:91:af:37:3a:b1: fb:e4:ba:6a:2b:dc:f8:ce:63:e2:3c:e7:48:d1:55: bf:a4:23:c0:97:3e:3a:80:11:82:1d:95:4a:3b:d5: f1:50:bb:97:82:2d:2c:0f:71:9f:ba:95:9d:da:c5: 7d:8f:c3:07:9b:2b:0e:53:8f:3c:fb:62:5e:f8:3d: 7a:ea:c0:52:16:fb:11:58:b2:85:53:e1:6b:98:2a: aa:df:dc:4b:13:3b:e2:ff:79:da:d3:c9:fe:25:eb: ab:dd:be:d4:63:5b:ec:6a:13:12:57:dc:6e:41:9a: 7f:fb:3c:26:de:b8:b0:4c:03:7f:3d:75:9a:66:1e: f3:ce:f9:7e:ae:04:ce:99:73:54:ce:9a:64:74:2e: 55:4f:32:32:ea:86:e2:ba:48:fa:2f:af:a2:02:30: de:66:83:7b:b4:6f:1a:b5:ed:b9:67:80:36:d0:47: 6b:78:1b:41:6b:57:56:53:91:52:c9:b7:1c:43:0c: 17:da:0e:43:4b:d1:59:83:5c:6c:49:c7:09:54:bf: 0d:ff:f2:ab:bf:16:1c:0b:16:e0:54:8f:1d:69:7c: 65:a4:f1:70:74:75:e5:ea:07:3c:03:8a:ca:97:4e: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:23:C4:22:85:1D:99:19:0D:DF:9C:AF:A6:93:55:40:11:BA:36 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:27:c0:8a:8c:15:6a:99:ae:4e:33:5a:6d:94:7b:9a:76:bf: cd:24:5b:f2:c4:ee:14:1b:98:70:a2:68:b8:53:7e:60:d3:46: 6e:93:bf:72:ff:d4:42:9e:9a:76:8a:66:02:20:4b:7b:3f:dc: 8f:3c:3e:6b:31:c6:37:af:33:6b:16:90:19:49:26:a4:13:8d: a4:24:14:ab:cd:c5:2d:1c:3e:bc:a8:2b:7e:b6:ca:45:cc:c5: b6:97:e3:0a:7c:fb:a8:16:cd:66:a1:29:f9:59:26:81:be:e8: c8:03:ab:1d:8f:24:e5:12:2e:5c:8f:c8:b2:9d:ee:d0:02:33: 05:1c:d3:97:5c:d7:af:f8:23:61:b2:56:1d:77:a6:ce:d2:bc: 34:bc:2d:e3:0c:b5:bb:6a:55:72:47:d2:87:33:ee:b5:32:c9: 3b:de:ef:0a:2d:a9:de:34:76:7b:62:59:e7:56:61:9a:c5:13: a9:77:b6:34:5e:16:1d:61:96:8c:dd:80:b3:62:f6:27:fa:44: 17:dc:9f:2c:c8:04:e0:03:bd:64:10:34:26:96:7e:5f:4a:59: d1:19:fc:a9:54:a8:ba:fc:2c:01:58:a9:8f:68:0e:3d:0c:d2: 0a:ab:fd:4c:19:e8:f8:c8:04:a0:92:cb:12:a8:d1:91:ff:9a: 34:09:bf:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6Aq+XXJSx49mk5M8zbwP+gOUhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNjAzMjUxMTM1NTlaFw0yNjAzMjgxNjU0NTlaMDMxMTAvBgNV BAMTKDg3MTYyM0M0MjI4NTFEOTkxOTBEREY5Q0FGQTY5MzU1NDAxMUJBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12UoM5xgY9+Q1qRkGa9GVhEbC l3YFtIyRrzc6sfvkumor3PjOY+I850jRVb+kI8CXPjqAEYIdlUo71fFQu5eCLSwP cZ+6lZ3axX2PwwebKw5Tjzz7Yl74PXrqwFIW+xFYsoVT4WuYKqrf3EsTO+L/edrT yf4l66vdvtRjW+xqExJX3G5Bmn/7PCbeuLBMA389dZpmHvPO+X6uBM6Zc1TOmmR0 LlVPMjLqhuK6SPovr6ICMN5mg3u0bxq17blngDbQR2t4G0FrV1ZTkVLJtxxDDBfa DkNL0VmDXGxJxwlUvw3/8qu/FhwLFuBUjx1pfGWk8XB0deXqBzwDisqXTiH9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxYjxCKFHZkZDd+cr6aTVUARujYwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEnwIqMFWqZrk4zWm2Ue5p2v80kW/LE7hQb mHCiaLhTfmDTRm6Tv3L/1EKemnaKZgIgS3s/3I88PmsxxjevM2sWkBlJJqQTjaQk FKvNxS0cPryoK362ykXMxbaX4wp8+6gWzWahKflZJoG+6MgDqx2PJOUSLlyPyLKd 7tACMwUc05dc16/4I2GyVh13ps7SvDS8LeMMtbtqVXJH0ocz7rUyyTve7wotqd40 dntiWedWYZrFE6l3tjReFh1hlozdgLNi9if6RBfcnyzIBOADvWQQNCaWfl9KWdEZ /KlUqLr8LAFYqY9oDj0M0gqr/UwZ6PjIBKCSyxKo0ZH/mjQJv6Q= -----END CERTIFICATE-----Generated at Thu Mar 26 12:53:22 2026 by rpki-client