$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: vWMXXuZn/7QjW4vGzeboxvNzpE9eVgvjJg5NREqnuuQ= Subject key identifier: 9B:38:71:01:38:43:6E:C8:71:DB:DA:C4:F7:EF:8A:B0:92:FF:F8:F1 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 0496BC746DB9EFB21FA34133D55A074A3F41D960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 0108 Signing time: Tue 24 Mar 2026 23:11:18 +0000 Manifest this update: Tue 24 Mar 2026 23:06:18 +0000 Manifest next update: Sat 28 Mar 2026 07:22:18 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: S5x0EIGPobcowjM6WWTmj1IMrmOt2pjuV6kxr3eaVu0=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:96:bc:74:6d:b9:ef:b2:1f:a3:41:33:d5:5a:07:4a:3f:41:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Mar 24 23:06:18 2026 GMT Not After : Mar 28 07:22:18 2026 GMT Subject: CN=9B38710138436EC871DBDAC4F7EF8AB092FFF8F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:2e:db:d3:b3:65:56:77:33:30:ff:51:57: 17:3f:91:ed:32:37:21:0a:3c:f6:50:ae:4c:d8:c7: e0:40:7f:42:b8:f3:2a:c3:f8:7b:48:b1:87:98:85: 1e:d4:5a:93:ee:3c:e0:b9:a2:35:1f:5b:ee:5d:0b: 65:fa:ad:3f:66:9e:4a:c5:7f:06:d4:e2:da:be:3b: b9:98:4d:16:d7:54:09:15:56:7c:3a:54:66:79:38: ea:99:e5:45:5b:ba:93:bd:18:19:88:b1:f7:60:c0: b8:2c:20:3e:9b:93:ca:a8:83:c9:48:b4:01:2d:69: ee:8a:dc:ee:34:55:b3:ea:ce:74:34:e0:a2:bf:0d: 61:10:1c:0a:a4:32:9c:b6:2d:51:cd:24:6d:1c:80: 2e:dd:9e:5c:94:73:9d:75:e3:46:aa:e1:94:fa:6a: c2:f6:e1:d7:55:94:0f:f6:4b:2b:3c:6e:d6:67:98: cf:0a:f7:ab:76:c1:b0:e4:08:13:5f:e5:51:ae:f5: c7:26:fb:27:45:78:68:e0:c2:ea:78:24:61:07:d2: 0e:0f:f5:fb:36:23:89:fa:81:de:8a:60:2a:07:b1: 34:96:d3:3e:36:54:51:97:fe:12:65:7c:9c:3b:ee: 4f:37:8c:bb:72:a5:87:e3:4b:3c:bc:99:30:de:2b: 1c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:38:71:01:38:43:6E:C8:71:DB:DA:C4:F7:EF:8A:B0:92:FF:F8:F1 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9f:a6:a2:dd:1b:82:81:86:8a:d4:c5:e3:00:cc:3b:82:f5: 53:7c:7f:1c:f8:14:41:72:1b:17:35:17:c3:22:1a:de:fa:82: 34:40:1a:c6:0c:4a:e5:03:55:bc:4a:88:9d:21:79:44:8e:23: 61:77:21:25:c8:37:c6:44:f1:87:11:f8:2a:fa:5f:6f:dd:8e: c5:96:d5:2e:2c:6d:08:a7:36:d7:4a:21:cd:1a:da:61:5e:aa: f0:50:28:f9:d0:10:ba:b0:13:2b:58:04:2f:2a:af:d4:00:40: 19:f5:d8:c4:31:b6:9a:42:66:3d:29:47:1e:17:de:3f:eb:b7: ca:7a:09:2b:a4:81:7a:9e:3d:ac:7d:59:02:e6:e5:42:86:7a: 11:77:ca:48:16:07:44:6e:6c:b3:66:9b:0e:34:c9:a7:a2:65: 19:08:86:39:09:4e:ef:67:18:b4:39:9d:01:70:58:0e:a1:be: ee:4b:d6:63:aa:73:b2:01:97:c2:d7:21:ff:96:51:fe:25:92: 22:77:86:f2:ff:dc:5c:63:0e:53:34:0f:2a:d7:b1:de:9c:7a: 4d:27:24:98:54:7c:e1:6f:5e:9f:35:06:19:d3:f4:29:4e:f3: 88:ac:21:f4:4a:fd:26:a6:39:07:9b:d3:5f:85:93:9f:7e:2c: cc:b2:eb:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJa8dG2577Ifo0Ez1VoHSj9B2WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNjAzMjQyMzA2MThaFw0yNjAzMjgwNzIyMThaMDMxMTAvBgNV BAMTKDlCMzg3MTAxMzg0MzZFQzg3MURCREFDNEY3RUY4QUIwOTJGRkY4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRC7b07NlVnczMP9RVxc/ke0y NyEKPPZQrkzYx+BAf0K48yrD+HtIsYeYhR7UWpPuPOC5ojUfW+5dC2X6rT9mnkrF fwbU4tq+O7mYTRbXVAkVVnw6VGZ5OOqZ5UVbupO9GBmIsfdgwLgsID6bk8qog8lI tAEtae6K3O40VbPqznQ04KK/DWEQHAqkMpy2LVHNJG0cgC7dnlyUc51140aq4ZT6 asL24ddVlA/2Sys8btZnmM8K96t2wbDkCBNf5VGu9ccm+ydFeGjgwup4JGEH0g4P 9fs2I4n6gd6KYCoHsTSW0z42VFGX/hJlfJw77k83jLtypYfjSzy8mTDeKxzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmzhxAThDbshx29rE9++KsJL/+PEwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGfpqLdG4KBhorUxeMAzDuC9VN8fxz4FEFy Gxc1F8MiGt76gjRAGsYMSuUDVbxKiJ0heUSOI2F3ISXIN8ZE8YcR+Cr6X2/djsWW 1S4sbQinNtdKIc0a2mFeqvBQKPnQELqwEytYBC8qr9QAQBn12MQxtppCZj0pRx4X 3j/rt8p6CSukgXqePax9WQLm5UKGehF3ykgWB0RubLNmmw40yaeiZRkIhjkJTu9n GLQ5nQFwWA6hvu5L1mOqc7IBl8LXIf+WUf4lkiJ3hvL/3FxjDlM0DyrXsd6cek0n JJhUfOFvXp81BhnT9ClO84isIfRK/SamOQeb01+Fk59+LMyy6zc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:58:22 2026 by rpki-client