$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: 34HMuo4o5uuIJDbrTL7PGMh2YKHJTBrm1L7+xh4f2qc= Subject key identifier: 97:E9:32:E0:E4:5E:E0:D0:7D:F4:0B:B5:33:BB:CE:6C:99:B9:A3:71 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 5C005AD8474FE34E602BE271FC03C7A281B3C83E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 02CA Signing time: Tue 24 Mar 2026 20:02:16 +0000 Manifest this update: Tue 24 Mar 2026 19:57:16 +0000 Manifest next update: Sat 28 Mar 2026 03:21:16 +0000 Files and hashes: 1: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: LJYW1n40MmH8AEkr/wVZfjooUxIW05X1XoFKNrH5/tI=) 2: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: ew6FBh5cPjMaDtq6eoOfJ8yer7wJ+Y8LRfEbpfeqcdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:00:5a:d8:47:4f:e3:4e:60:2b:e2:71:fc:03:c7:a2:81:b3:c8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Mar 24 19:57:16 2026 GMT Not After : Mar 28 03:21:16 2026 GMT Subject: CN=97E932E0E45EE0D07DF40BB533BBCE6C99B9A371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:f2:ab:ba:60:4e:51:90:8c:ac:2c:bc:a4: a3:94:49:34:e3:58:11:c6:73:b0:9b:ca:e2:21:76: ea:3e:c8:fe:43:5b:48:67:1c:82:43:bf:80:a0:fb: 9b:97:ce:a7:99:61:17:2a:ae:8b:45:21:4c:1e:0d: 44:23:e5:b0:ad:7f:9f:c2:c0:a4:02:f0:a7:cc:c9: 87:0b:df:2f:91:30:08:f7:7c:8e:ff:16:25:90:ab: 7f:00:bf:19:9e:8f:c4:55:1f:21:8b:95:a1:c1:ab: 75:35:89:3b:89:23:72:e3:11:16:6a:6a:af:d8:89: c6:79:9a:d6:7e:ea:66:18:fe:a0:68:0f:3f:1f:f9: e6:06:20:d1:f6:7c:90:cc:d4:41:04:a7:c2:ec:60: 56:82:78:c6:11:cc:3f:85:a7:9d:aa:c0:0b:5d:94: e7:e1:3b:9a:ff:6a:9b:ff:94:4d:bd:e3:64:d3:0d: 61:c1:92:47:a8:61:2f:33:38:d1:c6:af:09:6b:30: 1a:20:e4:82:24:a8:26:00:77:34:c7:b8:01:ee:2f: 2b:3e:13:28:dc:4e:29:e3:56:d9:42:c9:c2:d0:13: df:19:b8:24:84:9f:ad:fd:a8:58:e7:4d:8d:d5:89: 57:6e:35:43:62:9c:1f:d7:eb:88:b6:79:8a:b4:5d: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E9:32:E0:E4:5E:E0:D0:7D:F4:0B:B5:33:BB:CE:6C:99:B9:A3:71 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1a:f1:3e:64:4e:28:c2:ef:af:fd:d4:fc:fd:9b:e2:29:b8: 20:6c:8d:ae:1f:ce:77:b0:89:c8:9d:68:1d:b2:75:17:5a:80: b3:f7:f0:df:b2:a3:72:3e:8d:1e:5e:2a:f2:40:a7:c9:14:e7: 07:a3:6e:3f:59:2d:f3:94:33:8d:e3:46:19:e6:22:84:34:92: 23:19:69:33:d2:15:fb:1d:9c:08:94:e0:4c:84:78:98:87:45: 2e:47:9d:35:23:d6:34:f0:5e:8d:a3:f6:d8:24:59:2e:ec:97: 48:17:02:ac:d9:0f:48:08:d0:cb:f5:62:82:09:ed:a0:b6:85: 4e:13:c9:12:d7:32:95:c8:b4:25:44:96:f7:da:8b:e6:10:3a: 0a:1f:32:f5:87:07:ca:13:91:ec:45:ab:c0:2b:45:59:03:36: a5:fe:a7:02:c6:36:02:e6:5f:94:91:5d:66:1b:48:c9:9a:37: 39:ac:8c:5e:0d:a7:3f:2b:ad:b7:bf:3b:3b:f5:92:b9:0e:9b: a0:0e:58:cf:7a:1d:a3:d8:f8:7a:83:da:7d:71:63:2e:a7:a9: 0b:fb:bb:c5:49:24:63:04:6d:24:ec:92:bd:ce:b4:b7:92:3e: b9:1e:c1:f6:af:8f:c7:f3:59:11:fa:ab:cd:5c:35:c5:40:b5: 54:27:0d:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXABa2EdP405gK+Jx/APHooGzyD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNjAzMjQxOTU3MTZaFw0yNjAzMjgwMzIxMTZaMDMxMTAvBgNV BAMTKDk3RTkzMkUwRTQ1RUUwRDA3REY0MEJCNTMzQkJDRTZDOTlCOUEzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09fKrumBOUZCMrCy8pKOUSTTj WBHGc7CbyuIhduo+yP5DW0hnHIJDv4Cg+5uXzqeZYRcqrotFIUweDUQj5bCtf5/C wKQC8KfMyYcL3y+RMAj3fI7/FiWQq38Avxmej8RVHyGLlaHBq3U1iTuJI3LjERZq aq/YicZ5mtZ+6mYY/qBoDz8f+eYGINH2fJDM1EEEp8LsYFaCeMYRzD+Fp52qwAtd lOfhO5r/apv/lE2942TTDWHBkkeoYS8zONHGrwlrMBog5IIkqCYAdzTHuAHuLys+ EyjcTinjVtlCycLQE98ZuCSEn639qFjnTY3ViVduNUNinB/X64i2eYq0XUATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl+ky4ORe4NB99Au1M7vObJm5o3EwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwa8T5kTijC76/91Pz9m+IpuCBsja4fznew icidaB2ydRdagLP38N+yo3I+jR5eKvJAp8kU5wejbj9ZLfOUM43jRhnmIoQ0kiMZ aTPSFfsdnAiU4EyEeJiHRS5HnTUj1jTwXo2j9tgkWS7sl0gXAqzZD0gI0Mv1YoIJ 7aC2hU4TyRLXMpXItCVElvfai+YQOgofMvWHB8oTkexFq8ArRVkDNqX+pwLGNgLm X5SRXWYbSMmaNzmsjF4Npz8rrbe/Ozv1krkOm6AOWM96HaPY+HqD2n1xYy6nqQv7 u8VJJGMEbSTskr3OtLeSPrkewfavj8fzWRH6q81cNcVAtVQnDcI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:07:27 2026 by rpki-client