$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: FcXVmJJDTE5LP9GuIAQL/v0VSpc9GXy4hYTYPnaOzHk= Subject key identifier: FC:B7:64:BC:80:AD:95:6D:D5:67:54:76:15:B0:1B:5C:F7:A4:E0:E9 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 25AEEBCC7F3E813A8C7E53563B771F4CD87C6A9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 5A Signing time: Wed 25 Mar 2026 08:31:12 +0000 Manifest this update: Wed 25 Mar 2026 08:26:12 +0000 Manifest next update: Sat 28 Mar 2026 10:55:12 +0000 Files and hashes: 1: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: VFhACcQzYf5RKJjDUSHE5108oOBB77ePM7a4dXUGmac=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ae:eb:cc:7f:3e:81:3a:8c:7e:53:56:3b:77:1f:4c:d8:7c:6a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Mar 25 08:26:12 2026 GMT Not After : Mar 28 10:55:12 2026 GMT Subject: CN=FCB764BC80AD956DD567547615B01B5CF7A4E0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:f4:a7:0a:f8:b4:0b:92:6e:43:4a:55:15: 2d:09:13:07:2a:31:3b:b2:98:58:a1:fc:0e:6e:62: 9e:3c:4c:64:f1:c8:ea:9b:68:06:93:f0:de:03:ac: f3:71:a5:66:58:27:bb:96:05:9d:ff:ac:09:89:54: ea:43:3c:ab:d7:a7:2d:51:47:d1:f4:e9:9f:5c:f9: 98:d9:d3:f5:82:55:9c:c2:fa:1a:10:69:86:b4:15: 79:a5:0d:f9:9d:40:27:00:3e:7b:7d:a2:93:14:a4: 27:7c:27:f3:79:42:aa:6b:9b:78:b5:c9:75:46:ee: a6:16:91:46:04:27:d9:36:72:23:f0:16:e7:7f:40: 33:0a:f1:eb:4c:4f:50:9d:a1:74:cb:72:fe:d7:6e: 10:56:f1:5d:42:d3:de:be:56:fb:fa:df:b4:53:01: 3a:6b:55:75:bb:01:63:7d:75:1e:21:d3:cd:6c:4f: 14:1a:d1:47:00:14:7f:fc:fd:96:7e:03:86:62:8e: f8:6b:c3:2e:47:84:bd:5e:a1:78:9d:a8:f5:81:98: f6:e9:1a:7e:44:fc:ad:83:9d:45:69:d0:c5:94:0a: 52:c5:c8:08:65:a3:db:c8:f1:18:27:29:71:4a:e6: 80:ad:d0:03:e1:77:c1:9c:78:2a:c0:55:cb:67:ac: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B7:64:BC:80:AD:95:6D:D5:67:54:76:15:B0:1B:5C:F7:A4:E0:E9 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:49:87:6e:bb:a4:8f:8f:68:79:2a:05:3f:d8:64:e9:dc:70: 97:bd:50:8d:79:7c:34:e3:7f:a9:ce:d4:79:4d:fb:6f:79:0a: 00:44:82:4d:fc:60:12:f6:3b:da:f9:21:86:c0:fa:de:f9:03: 7c:b7:25:d7:05:11:6a:d7:62:ad:99:e3:4d:bb:b6:02:8a:07: 4b:df:8e:7b:98:d3:7d:a5:fd:af:25:df:e5:8c:c0:aa:c8:ab: 26:d9:96:62:8f:eb:ab:63:db:5e:2c:f5:db:5b:2d:7d:b2:63: a0:72:b2:c0:8d:44:32:77:38:dd:2a:e9:f5:88:80:ec:e6:87: 57:99:a0:7a:53:35:ff:68:b8:7e:46:26:f6:5d:da:2d:9a:a2: 88:15:d7:8b:47:f1:89:26:59:44:57:44:f3:c0:ae:c0:14:de: 1f:2d:89:42:cd:67:84:85:fd:f2:f0:30:f1:9d:db:50:af:9b: 28:0b:b2:9b:b4:e7:f6:c6:29:c7:c7:49:22:c7:f8:d6:48:a5: b6:6d:b0:27:86:4e:7e:a0:ff:60:b4:04:5c:58:2b:4d:05:86: 7f:3c:58:5c:4a:eb:17:5f:5e:cf:ac:55:d2:3d:3a:ba:9d:f3: 99:8b:ab:4d:a8:84:71:11:c4:ba:84:93:e6:85:a3:f5:61:e9: 9c:bf:ef:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJa7rzH8+gTqMflNWO3cfTNh8apwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNjAzMjUwODI2MTJaFw0yNjAzMjgxMDU1MTJaMDMxMTAvBgNV BAMTKEZDQjc2NEJDODBBRDk1NkRENTY3NTQ3NjE1QjAxQjVDRjdBNEUwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiI/SnCvi0C5JuQ0pVFS0JEwcq MTuymFih/A5uYp48TGTxyOqbaAaT8N4DrPNxpWZYJ7uWBZ3/rAmJVOpDPKvXpy1R R9H06Z9c+ZjZ0/WCVZzC+hoQaYa0FXmlDfmdQCcAPnt9opMUpCd8J/N5Qqprm3i1 yXVG7qYWkUYEJ9k2ciPwFud/QDMK8etMT1CdoXTLcv7XbhBW8V1C096+Vvv637RT ATprVXW7AWN9dR4h081sTxQa0UcAFH/8/ZZ+A4Zijvhrwy5HhL1eoXidqPWBmPbp Gn5E/K2DnUVp0MWUClLFyAhlo9vI8RgnKXFK5oCt0APhd8GceCrAVctnrHVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/LdkvICtlW3VZ1R2FbAbXPek4OkwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBJh267pI+PaHkqBT/YZOnccJe9UI15fDTj f6nO1HlN+295CgBEgk38YBL2O9r5IYbA+t75A3y3JdcFEWrXYq2Z4027tgKKB0vf jnuY032l/a8l3+WMwKrIqybZlmKP66tj214s9dtbLX2yY6ByssCNRDJ3ON0q6fWI gOzmh1eZoHpTNf9ouH5GJvZd2i2aoogV14tH8YkmWURXRPPArsAU3h8tiULNZ4SF /fLwMPGd21CvmygLspu05/bGKcfHSSLH+NZIpbZtsCeGTn6g/2C0BFxYK00Fhn88 WFxK6xdfXs+sVdI9Orqd85mLq02ohHERxLqEk+aFo/Vh6Zy/7+4= -----END CERTIFICATE-----Generated at Thu Mar 26 21:15:43 2026 by rpki-client