$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: Ok94bkWtREDJaESY6dMQtLr0GKa6LlUtwDNtodADJJc= Subject key identifier: 79:CB:E0:25:B9:18:19:7E:01:7F:FD:4A:A1:A0:17:15:4D:4E:53:A9 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 5BEC1A053860AE89FF7869FB7A6AA7AEE212C973 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01F1 Signing time: Wed 25 Mar 2026 21:22:02 +0000 Manifest this update: Wed 25 Mar 2026 21:17:02 +0000 Manifest next update: Sun 29 Mar 2026 09:09:02 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: GNZzAcmYMO24v0PgoH0PVcbzFxgNvmanVmMwCuln4aA=) 2: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: XGIYxiCZFCNMqYjIQOC/dFfciT2bhcvrAMu2G6CZnZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ec:1a:05:38:60:ae:89:ff:78:69:fb:7a:6a:a7:ae:e2:12:c9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Mar 25 21:17:02 2026 GMT Not After : Mar 29 09:09:02 2026 GMT Subject: CN=79CBE025B918197E017FFD4AA1A017154D4E53A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:1d:af:8f:b3:ed:39:39:93:5b:9f:14:4e: 45:4e:99:d8:ac:d1:ae:4a:94:21:a0:9a:8e:71:81: c7:7b:69:15:a9:73:8e:8a:c6:bf:85:97:a3:47:97: 70:60:7e:7a:5e:a0:a2:71:fe:8e:82:70:8d:82:d0: f4:1d:66:ff:9e:6a:da:e2:2f:0a:57:41:7b:b1:bc: cd:28:b2:3d:c5:f5:14:03:30:77:3b:e0:f6:17:f1: 68:2a:96:79:c2:0e:99:f4:af:ae:9e:e7:5c:bf:1f: c1:91:f1:52:14:07:b8:dc:88:96:08:b0:6e:54:3d: b2:56:7c:3c:a1:1c:33:8c:33:d9:de:ea:48:08:7a: 13:c1:1f:86:ed:67:1c:5d:d8:f2:12:6f:14:4a:61: 83:12:30:96:0c:59:7b:e3:6a:2b:46:be:43:a5:eb: 26:3e:37:cf:1e:6f:d4:ee:c1:a3:7f:15:dc:67:b1: 84:ce:36:bf:16:bd:1f:cc:b2:87:98:29:8d:be:a0: d3:42:dc:72:ee:fe:f2:95:ec:56:dc:ba:22:53:e5: ee:ec:8f:01:fe:f2:8d:c8:21:b8:47:61:98:81:02: 49:ae:e7:b4:47:04:f5:fc:4b:09:87:b8:e5:18:ab: 2d:d4:8d:47:c8:e8:2d:52:c9:fe:8f:c5:14:76:12: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CB:E0:25:B9:18:19:7E:01:7F:FD:4A:A1:A0:17:15:4D:4E:53:A9 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a8:2d:f5:ad:27:4a:18:09:d0:9b:43:ee:85:21:e9:1d:91: 03:95:50:f1:80:24:a1:30:84:67:7c:12:41:ab:80:28:1e:f3: 36:dc:64:c3:5e:a7:04:b2:88:4b:f3:51:d8:15:41:f1:a2:a1: 7a:87:7b:fa:16:4f:7e:1d:d0:d7:e9:3a:fa:98:2d:e4:3f:1c: c0:13:7b:ac:73:5a:9a:c2:6c:f6:8c:f1:08:b8:5f:88:77:cf: 73:6d:fc:b9:9e:01:e1:8e:b8:dd:3b:0d:f3:fd:55:5a:34:5a: fb:e7:c7:2a:1c:6a:df:ab:ba:e5:07:b5:4c:52:f0:55:7b:ed: 2d:6b:2c:0b:1c:26:09:d5:05:da:48:64:80:39:a9:5a:c2:31: 4c:cc:e5:b3:a2:53:a9:a4:a6:05:e9:ab:7d:ac:15:60:52:68: 09:57:e9:4c:f6:7f:6d:a3:b5:c8:c5:d2:4f:24:04:d1:28:ba: 24:a5:46:ed:59:1e:da:a8:7a:a7:75:ba:16:f1:77:b7:23:2a: 4a:05:ad:a4:a1:c6:9b:2e:f1:77:76:94:f3:e6:fd:30:ba:87: 66:f6:41:8b:1b:21:a3:9a:01:11:fa:4a:f2:29:07:61:f6:d3: 7e:37:52:83:ad:14:53:3e:85:2b:35:7d:13:78:a7:dd:3c:33: a9:da:96:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+waBThgron/eGn7emqnruISyXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNjAzMjUyMTE3MDJaFw0yNjAzMjkwOTA5MDJaMDMxMTAvBgNV BAMTKDc5Q0JFMDI1QjkxODE5N0UwMTdGRkQ0QUExQTAxNzE1NEQ0RTUzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsx2vj7PtOTmTW58UTkVOmdis 0a5KlCGgmo5xgcd7aRWpc46Kxr+Fl6NHl3BgfnpeoKJx/o6CcI2C0PQdZv+eatri LwpXQXuxvM0osj3F9RQDMHc74PYX8WgqlnnCDpn0r66e51y/H8GR8VIUB7jciJYI sG5UPbJWfDyhHDOMM9ne6kgIehPBH4btZxxd2PISbxRKYYMSMJYMWXvjaitGvkOl 6yY+N88eb9TuwaN/FdxnsYTONr8WvR/MsoeYKY2+oNNC3HLu/vKV7FbcuiJT5e7s jwH+8o3IIbhHYZiBAkmu57RHBPX8SwmHuOUYqy3UjUfI6C1Syf6PxRR2EnR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUecvgJbkYGX4Bf/1KoaAXFU1OU6kwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABioLfWtJ0oYCdCbQ+6FIekdkQOVUPGAJKEw hGd8EkGrgCge8zbcZMNepwSyiEvzUdgVQfGioXqHe/oWT34d0NfpOvqYLeQ/HMAT e6xzWprCbPaM8Qi4X4h3z3Nt/LmeAeGOuN07DfP9VVo0Wvvnxyocat+ruuUHtUxS 8FV77S1rLAscJgnVBdpIZIA5qVrCMUzM5bOiU6mkpgXpq32sFWBSaAlX6Uz2f22j tcjF0k8kBNEouiSlRu1ZHtqoeqd1uhbxd7cjKkoFraShxpsu8Xd2lPPm/TC6h2b2 QYsbIaOaARH6SvIpB2H20343UoOtFFM+hSs1fRN4p908M6naloI= -----END CERTIFICATE-----Generated at Thu Mar 26 06:28:28 2026 by rpki-client