$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: CYmYWYymEGu7a5GPOHDpqAwbyOlaEkNmECGxAzu96Z0= Subject key identifier: 8F:BC:81:A0:1B:23:A7:0B:79:AE:B2:49:E5:2B:93:94:BC:2C:E1:05 Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 2AE67EB31ABD44043B4444852146EF36E3B302CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: D4 Signing time: Wed 25 Mar 2026 03:11:25 +0000 Manifest this update: Wed 25 Mar 2026 03:06:25 +0000 Manifest next update: Sat 28 Mar 2026 05:52:25 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: YxV1cYw/8uU4f67QaH2viU3zJx5a6scYwbv2OQneRMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e6:7e:b3:1a:bd:44:04:3b:44:44:85:21:46:ef:36:e3:b3:02:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Mar 25 03:06:25 2026 GMT Not After : Mar 28 05:52:25 2026 GMT Subject: CN=8FBC81A01B23A70B79AEB249E52B9394BC2CE105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:51:03:04:1c:01:3c:3d:ea:0e:44:83:e6:30: cc:51:34:ac:d3:b8:12:45:03:d7:75:6e:00:d1:31: b6:f7:6b:d1:0d:91:3a:82:0b:63:f7:40:99:9c:4b: 49:af:41:84:be:95:6a:d2:56:98:ba:a0:b5:cd:3d: 0f:3b:6a:e1:2a:a6:e8:1c:25:fd:0f:f1:00:32:cd: f7:86:3c:38:e2:4f:0e:b4:39:17:22:82:57:4f:4b: f1:49:89:07:68:de:65:dd:f8:15:64:9d:4d:93:9c: 8a:ab:5f:22:83:00:a1:36:4e:09:b4:29:cf:7c:e0: 85:2d:da:35:44:79:18:b9:bb:ab:53:f8:3f:7c:7b: e5:27:c7:cb:20:a9:ed:f6:83:2d:94:4c:f2:1c:ef: 62:85:8d:b5:10:da:9a:fa:e4:dc:61:e1:52:a2:ef: b4:db:8b:c9:03:74:b0:f1:13:2c:24:02:79:26:c9: 4e:8a:b8:03:6b:23:5c:74:b6:48:14:9d:af:5e:63: 75:69:2c:2b:45:c8:3a:65:c2:69:6e:9a:b8:65:00: 76:16:7d:be:8b:66:d4:8a:78:9c:95:4d:59:fe:fe: 7a:b5:85:43:62:41:c5:38:54:b5:db:11:71:29:1d: e9:dd:35:3a:d7:0c:d3:e5:1a:f7:da:87:ad:51:21: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BC:81:A0:1B:23:A7:0B:79:AE:B2:49:E5:2B:93:94:BC:2C:E1:05 X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:6b:42:9f:39:06:9e:bb:73:d1:27:2c:27:2d:eb:f8:3a:cf: 54:4c:bb:c1:a8:8b:bb:a0:bb:3c:a5:c3:d7:f5:1b:b2:ae:bb: dc:02:52:52:b4:9f:a5:98:5d:21:76:8f:c7:72:e2:52:97:48: ea:14:75:18:a3:d4:1c:0b:91:db:34:70:7f:63:01:37:dc:5a: 5f:b8:29:e2:bd:4e:8d:11:4a:d7:b5:4e:46:7d:1c:e0:84:8b: 79:10:08:d1:00:28:7a:c2:0d:18:7c:8e:b8:79:45:9c:f9:9c: 37:6b:aa:f1:42:4d:60:c1:88:5d:dc:f8:55:08:12:b6:7b:23: 6c:1a:e1:56:3a:3d:c6:a4:03:18:42:ba:93:8e:77:8d:89:e7: fc:ae:ab:dc:23:35:63:a8:8e:52:5a:e4:62:e8:97:2d:d8:a4: 9a:45:f5:5c:58:06:8e:78:e8:7d:23:66:89:bb:22:b6:b6:05: aa:1b:a8:6c:b1:c6:cc:3b:00:5f:12:6b:34:ea:cd:16:75:60: cd:4d:13:8d:1e:3c:cd:ef:aa:bd:25:f2:db:d7:51:2d:15:b0: 48:aa:f3:60:7c:4f:f8:ec:5e:f5:f1:81:f8:7a:06:dc:0d:d9: d5:44:4a:52:9f:d2:db:b7:6c:04:94:d1:52:1f:7f:57:88:49: fe:4c:71:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuZ+sxq9RAQ7RESFIUbvNuOzAs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNjAzMjUwMzA2MjVaFw0yNjAzMjgwNTUyMjVaMDMxMTAvBgNV BAMTKDhGQkM4MUEwMUIyM0E3MEI3OUFFQjI0OUU1MkI5Mzk0QkMyQ0UxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUQMEHAE8PeoORIPmMMxRNKzT uBJFA9d1bgDRMbb3a9ENkTqCC2P3QJmcS0mvQYS+lWrSVpi6oLXNPQ87auEqpugc Jf0P8QAyzfeGPDjiTw60ORcigldPS/FJiQdo3mXd+BVknU2TnIqrXyKDAKE2Tgm0 Kc984IUt2jVEeRi5u6tT+D98e+Unx8sgqe32gy2UTPIc72KFjbUQ2pr65Nxh4VKi 77Tbi8kDdLDxEywkAnkmyU6KuANrI1x0tkgUna9eY3VpLCtFyDplwmlumrhlAHYW fb6LZtSKeJyVTVn+/nq1hUNiQcU4VLXbEXEpHendNTrXDNPlGvfah61RIbMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7yBoBsjpwt5rrJJ5SuTlLws4QUwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVrQp85Bp67c9EnLCct6/g6z1RMu8Goi7ug uzylw9f1G7Kuu9wCUlK0n6WYXSF2j8dy4lKXSOoUdRij1BwLkds0cH9jATfcWl+4 KeK9To0RSte1TkZ9HOCEi3kQCNEAKHrCDRh8jrh5RZz5nDdrqvFCTWDBiF3c+FUI ErZ7I2wa4VY6PcakAxhCupOOd42J5/yuq9wjNWOojlJa5GLoly3YpJpF9VxYBo54 6H0jZom7Ira2BaobqGyxxsw7AF8SazTqzRZ1YM1NE40ePM3vqr0l8tvXUS0VsEiq 82B8T/jsXvXxgfh6BtwN2dVESlKf0tu3bASU0VIff1eISf5McVc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:31 2026 by rpki-client