$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: gHXpkOx36+UTIeIX6Gyq8Ky/R8dRAhPUjZBrRl7C4Uw= Subject key identifier: 55:FD:38:2D:93:5C:7C:A4:AE:60:FB:D6:CE:D2:06:A4:DF:65:6E:83 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 70A067220FF9973A0EE9E6E0A8CAA0AAD1098B87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 055C Signing time: Wed 25 Mar 2026 16:51:43 +0000 Manifest this update: Wed 25 Mar 2026 16:46:43 +0000 Manifest next update: Sun 29 Mar 2026 00:57:43 +0000 Files and hashes: 1: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 2: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: g5upRgSp5Ur+cU67FT/QbQlYellzJtLHptpJpPO6pgg=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a0:67:22:0f:f9:97:3a:0e:e9:e6:e0:a8:ca:a0:aa:d1:09:8b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Mar 25 16:46:43 2026 GMT Not After : Mar 29 00:57:43 2026 GMT Subject: CN=55FD382D935C7CA4AE60FBD6CED206A4DF656E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:dc:39:f4:bc:d8:15:d2:77:3d:b2:35:65: ff:07:31:72:fd:f5:f7:3a:31:fa:85:9f:ed:82:f8: 6d:9d:a3:a4:94:8f:97:70:7d:5c:a7:4a:17:bb:cb: e4:c8:6b:3c:5b:21:58:a2:08:27:d0:59:52:05:b3: 6f:db:4a:33:e0:4b:1c:07:38:54:24:13:4b:5f:33: 59:4d:19:83:39:97:cd:a1:25:fe:a3:54:57:4e:9c: 78:9b:7d:99:5c:7c:50:d0:15:74:62:67:6a:63:7a: e2:81:c7:52:20:01:78:14:f9:bd:d9:17:9c:96:c4: 71:a7:e3:80:9b:91:6e:d4:16:d0:95:36:ff:4b:fd: fc:d8:36:df:18:8d:6e:75:03:cb:51:a0:1b:3f:7f: 5f:8b:20:b4:44:be:8e:29:63:1d:d6:25:0b:ba:78: 9b:66:d4:f7:f6:a3:74:9f:e0:a9:29:5e:96:a3:39: 24:2d:51:78:79:4c:cd:dd:e1:af:53:7a:c9:6b:6a: d8:f4:98:65:a9:57:6a:d7:8f:5e:f1:13:0e:d7:3a: c5:e1:c0:fe:31:90:dc:fd:86:d3:88:b3:f2:4a:c3: 1b:ed:2d:4b:da:ff:93:00:ec:55:e6:9a:76:d8:4d: 82:53:8a:74:79:cd:d9:ce:01:c1:51:68:0c:f9:2f: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FD:38:2D:93:5C:7C:A4:AE:60:FB:D6:CE:D2:06:A4:DF:65:6E:83 X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ca:11:ae:b6:f7:20:46:b5:b5:7b:65:c7:7e:65:14:3a:b9: 4c:a8:ee:6a:3e:73:13:d9:6a:1d:c4:10:9f:2e:85:0b:ef:d6: 99:4d:fe:a3:ff:68:3d:e2:d2:cc:2c:42:be:71:82:0a:1e:79: b5:d6:d1:41:d9:a6:68:b7:a4:97:01:66:84:89:0f:a5:60:22: 82:f8:83:aa:7a:d4:c3:75:77:50:51:8f:cc:69:2f:ad:3d:17: d6:e5:52:bd:fb:e2:03:49:86:65:c2:5a:52:54:c6:0d:63:8c: 01:12:7d:fc:5f:1e:3e:15:aa:aa:f7:7d:4e:1d:a5:b2:66:7a: 11:0e:de:15:f9:6b:0e:b8:48:56:7b:83:b7:65:21:a3:c0:eb: b8:2f:61:ca:61:5d:23:0b:50:2f:75:ae:28:40:b8:a1:85:bd: 9f:8e:ec:78:be:97:10:78:51:e4:03:81:54:cd:29:7c:39:bc: 08:73:b0:49:d7:ee:89:83:2b:58:09:0f:9f:1b:3b:6f:69:d1: c0:cd:60:e8:8c:81:e3:db:33:df:57:47:83:89:2e:e9:20:93: 94:23:0c:ed:03:59:3a:a0:2c:9d:9d:db:2d:37:5e:98:47:52: e3:00:8b:7e:4a:e6:a7:a6:91:bd:f1:3f:3a:1f:a9:ca:01:ae: 40:28:c9:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKBnIg/5lzoO6ebgqMqgqtEJi4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNjAzMjUxNjQ2NDNaFw0yNjAzMjkwMDU3NDNaMDMxMTAvBgNV BAMTKDU1RkQzODJEOTM1QzdDQTRBRTYwRkJENkNFRDIwNkE0REY2NTZFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkNw59LzYFdJ3PbI1Zf8HMXL9 9fc6MfqFn+2C+G2do6SUj5dwfVynShe7y+TIazxbIViiCCfQWVIFs2/bSjPgSxwH OFQkE0tfM1lNGYM5l82hJf6jVFdOnHibfZlcfFDQFXRiZ2pjeuKBx1IgAXgU+b3Z F5yWxHGn44CbkW7UFtCVNv9L/fzYNt8YjW51A8tRoBs/f1+LILREvo4pYx3WJQu6 eJtm1Pf2o3Sf4KkpXpajOSQtUXh5TM3d4a9Teslratj0mGWpV2rXj17xEw7XOsXh wP4xkNz9htOIs/JKwxvtLUva/5MA7FXmmnbYTYJTinR5zdnOAcFRaAz5L13FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVf04LZNcfKSuYPvWztIGpN9lboMwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnKEa629yBGtbV7Zcd+ZRQ6uUyo7mo+cxPZ ah3EEJ8uhQvv1plN/qP/aD3i0swsQr5xggoeebXW0UHZpmi3pJcBZoSJD6VgIoL4 g6p61MN1d1BRj8xpL609F9blUr374gNJhmXCWlJUxg1jjAESffxfHj4Vqqr3fU4d pbJmehEO3hX5aw64SFZ7g7dlIaPA67gvYcphXSMLUC91rihAuKGFvZ+O7Hi+lxB4 UeQDgVTNKXw5vAhzsEnX7omDK1gJD58bO29p0cDNYOiMgePbM99XR4OJLukgk5Qj DO0DWTqgLJ2d2y03XphHUuMAi35K5qemkb3xPzofqcoBrkAoyUA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:50:12 2026 by rpki-client