$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: OIiKV+hWipormKSgdjeXxFaVLYy0Gx1NRG8X9NCW7gM= Subject key identifier: EE:C1:35:EE:D3:7E:71:97:52:A7:47:93:2A:DC:AD:B2:0C:F6:AD:E4 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 5F16393D58214FACB2FD8B26B2C81566C346CC4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: EC Signing time: Tue 24 Mar 2026 16:11:13 +0000 Manifest this update: Tue 24 Mar 2026 16:06:13 +0000 Manifest next update: Fri 27 Mar 2026 19:03:13 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: wT7L/Qxpooa+NRB0y0tGBXcgpnHhzrjPk/OaJnC/i3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:16:39:3d:58:21:4f:ac:b2:fd:8b:26:b2:c8:15:66:c3:46:cc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Mar 24 16:06:13 2026 GMT Not After : Mar 27 19:03:13 2026 GMT Subject: CN=EEC135EED37E719752A747932ADCADB20CF6ADE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:8e:2f:b9:61:4f:b9:ac:7d:02:fa:8e:68: 3e:28:40:66:86:0f:9d:89:50:f5:d5:56:14:90:42: b3:31:ab:83:e1:71:67:8d:59:16:85:05:c0:b6:b5: 67:75:7f:9e:85:b8:ec:e7:b5:55:68:83:9d:d4:98: b8:10:b3:83:68:a3:c0:bb:1c:c2:c5:27:2b:8a:85: d7:85:b5:f0:b7:f7:4a:61:ef:5b:ad:bb:c0:b5:44: c6:01:6d:97:30:5e:33:3b:7e:7b:70:3e:ee:40:cd: 9b:35:5f:3c:b1:1a:ff:f0:84:1f:0c:fa:a8:82:7c: e5:1d:5c:9b:bb:f2:3f:09:7d:1a:d3:04:39:67:4b: c0:73:e8:69:d0:61:84:34:a0:5c:f0:fa:99:13:78: 93:51:f1:c9:40:ba:c1:41:6c:3f:69:38:c6:85:fd: e5:b1:50:64:6d:12:ff:24:8c:f8:bc:f8:69:cf:a8: 7a:21:2b:d6:60:e6:6c:50:b4:64:42:df:fe:91:7d: 22:75:f0:f4:24:9f:fc:f2:aa:de:30:4c:2a:0b:34: bb:62:d3:04:98:ea:f8:ac:20:6e:16:56:46:26:b6: 19:a2:f5:72:f9:1e:fb:78:81:81:11:3b:11:5b:88: 70:6d:a5:ad:bc:de:f5:a8:ae:f5:36:e2:70:67:7a: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:35:EE:D3:7E:71:97:52:A7:47:93:2A:DC:AD:B2:0C:F6:AD:E4 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8e:96:1b:6a:95:c4:3e:61:e8:f2:be:36:bf:ab:5f:56:f1: 11:07:72:3e:82:da:68:70:c8:56:fc:f2:c9:b0:17:24:bd:e9: 93:fb:94:15:a2:91:f1:64:be:ea:ea:36:6d:98:88:c0:85:19: f5:a0:5f:b8:cd:33:aa:20:09:45:bb:dc:36:1f:7a:2a:89:8f: 94:8b:0b:4c:9a:8f:84:02:76:d6:18:e0:55:3c:21:f2:ff:87: b9:48:dc:d4:74:70:ae:70:46:6f:05:74:7f:a6:3b:6a:40:27: 4b:5a:b5:44:1a:19:bd:f8:97:45:ba:60:b3:46:f2:54:8b:eb: bd:e1:03:5e:16:8a:92:13:fa:b9:75:6b:2f:1e:54:a4:4f:42: d8:0b:31:67:aa:1d:aa:45:6b:c8:1b:4e:55:bc:0d:94:7a:41: b0:09:e0:b2:17:97:95:77:c3:38:5f:86:ba:78:b5:3b:67:17: 71:a6:23:a2:1d:61:ed:6e:be:ec:92:28:45:86:6a:35:b2:5e: 45:a9:2e:0c:8c:e9:2d:92:f3:68:84:0a:85:e8:6b:bd:dd:17: 73:96:b3:77:b6:4d:bb:90:fa:f8:c3:28:d4:8b:df:a6:87:d8: 69:4c:6e:7c:35:4d:99:0e:d4:88:17:71:af:a0:86:78:7e:be: fe:a8:0c:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxY5PVghT6yy/YsmssgVZsNGzE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNjAzMjQxNjA2MTNaFw0yNjAzMjcxOTAzMTNaMDMxMTAvBgNV BAMTKEVFQzEzNUVFRDM3RTcxOTc1MkE3NDc5MzJBRENBREIyMENGNkFERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+I4vuWFPuax9AvqOaD4oQGaG D52JUPXVVhSQQrMxq4PhcWeNWRaFBcC2tWd1f56FuOzntVVog53UmLgQs4Noo8C7 HMLFJyuKhdeFtfC390ph71utu8C1RMYBbZcwXjM7fntwPu5AzZs1XzyxGv/whB8M +qiCfOUdXJu78j8JfRrTBDlnS8Bz6GnQYYQ0oFzw+pkTeJNR8clAusFBbD9pOMaF /eWxUGRtEv8kjPi8+GnPqHohK9Zg5mxQtGRC3/6RfSJ18PQkn/zyqt4wTCoLNLti 0wSY6visIG4WVkYmthmi9XL5Hvt4gYEROxFbiHBtpa283vWorvU24nBnekgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7sE17tN+cZdSp0eTKtytsgz2reQwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiOlhtqlcQ+Yejyvja/q19W8REHcj6C2mhw yFb88smwFyS96ZP7lBWikfFkvurqNm2YiMCFGfWgX7jNM6ogCUW73DYfeiqJj5SL C0yaj4QCdtYY4FU8IfL/h7lI3NR0cK5wRm8FdH+mO2pAJ0tatUQaGb34l0W6YLNG 8lSL673hA14WipIT+rl1ay8eVKRPQtgLMWeqHapFa8gbTlW8DZR6QbAJ4LIXl5V3 wzhfhrp4tTtnF3GmI6IdYe1uvuySKEWGajWyXkWpLgyM6S2S82iECoXoa73dF3OW s3e2TbuQ+vjDKNSL36aH2GlMbnw1TZkO1IgXca+ghnh+vv6oDLo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:44 2026 by rpki-client