$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: xhqOMwXSVaBA3KeCBZ4TLj9tYsaQQCgsmHzHDFZEecE= Subject key identifier: 86:AA:ED:C3:05:9A:A1:77:10:F6:4A:0B:99:1F:26:FF:2C:A2:BD:F4 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 48E3D7C3DA49A44B0F7B63AD94B29480EE664EF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 03DD Signing time: Wed 25 Mar 2026 11:32:27 +0000 Manifest this update: Wed 25 Mar 2026 11:27:27 +0000 Manifest next update: Sat 28 Mar 2026 13:16:27 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) 2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: YvTnq/3XBlprvoh9+wb5BETy5U+9do7oJwCblVVVxFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e3:d7:c3:da:49:a4:4b:0f:7b:63:ad:94:b2:94:80:ee:66:4e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Mar 25 11:27:27 2026 GMT Not After : Mar 28 13:16:27 2026 GMT Subject: CN=86AAEDC3059AA17710F64A0B991F26FF2CA2BDF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:66:28:bd:fb:4f:58:c9:59:2a:29:15:b1: 69:b6:2a:e2:aa:48:0f:c0:2b:ea:3d:e0:1b:35:d1: 26:21:f5:04:b2:d3:bb:5f:60:e3:d4:76:a8:90:20: 0f:33:fe:ba:1b:b1:d4:9e:0d:9b:06:09:fa:45:26: 95:af:87:4c:74:57:d9:20:08:de:b0:10:7f:5f:43: b2:80:92:23:f7:6e:49:f9:21:d7:ef:94:55:2a:f5: 56:ad:93:93:55:7f:d4:05:89:6c:99:8a:ef:b4:92: 13:29:fb:a7:81:cf:1b:5d:5d:35:4f:fe:40:a2:d8: 16:61:ba:10:5d:46:da:20:81:2e:74:af:bd:7a:0a: dc:ba:de:17:4b:92:34:94:bf:44:3b:c1:3d:0e:dc: 51:00:da:be:e5:2c:8b:91:c1:66:4b:96:63:4e:fe: 2a:08:d2:7a:88:d4:4c:ef:fd:3f:5c:c0:99:bf:bd: 9f:bd:47:fa:36:53:c5:9f:9f:93:28:42:4f:15:81: ef:51:de:10:fd:a9:53:1c:0a:36:32:e7:4d:9a:78: 38:c3:33:c9:3a:0b:80:2a:19:4b:cc:13:e5:a5:0e: af:f9:e0:e1:a0:9c:3e:b9:dc:18:67:62:53:35:78: ba:7f:a5:e7:7b:a9:57:01:f5:e6:df:ee:96:bc:ea: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:ED:C3:05:9A:A1:77:10:F6:4A:0B:99:1F:26:FF:2C:A2:BD:F4 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ec:e3:61:34:d3:4d:5c:13:57:dd:7b:55:21:aa:5f:0d:af: 57:d5:5e:4b:eb:24:06:5f:5f:f2:8e:66:9e:3e:4c:06:7d:5d: 61:00:84:84:47:d7:86:d1:9f:25:73:ac:cc:c7:00:8a:e3:8c: 08:30:6d:5d:e4:8c:80:00:cd:38:04:16:69:0e:c2:d1:1e:79: d7:f0:eb:80:88:19:bb:ec:8f:8c:3d:e9:c2:9f:f0:ed:5c:5a: c1:ce:05:af:54:4b:3a:aa:38:d0:a7:11:fe:12:b4:41:12:b7: 83:17:20:cc:c2:29:1c:74:13:cf:2f:f9:66:b9:f2:21:5e:8a: 7a:40:65:50:96:06:b6:fe:75:5e:94:c4:57:60:ae:57:a9:8b: 74:ce:50:b2:c5:19:dc:ba:01:50:42:c4:f6:4c:bf:61:ea:15: 76:cc:a3:54:df:c4:c3:93:d6:b5:1e:2a:59:2f:5d:76:7a:1a: f2:e8:40:fa:11:42:5b:2c:54:d2:14:7b:9c:bb:71:b9:31:43: 29:05:17:38:dd:8e:59:c2:1e:76:cd:08:7a:23:87:45:f8:fc: 85:0f:0e:8a:a8:21:b5:89:91:b0:51:9e:2b:cb:b9:25:29:3e: 24:1e:b8:ac:de:a4:83:d7:32:b4:09:aa:91:c3:5a:29:c2:40: d2:3b:ba:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOPXw9pJpEsPe2OtlLKUgO5mTvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNjAzMjUxMTI3MjdaFw0yNjAzMjgxMzE2MjdaMDMxMTAvBgNV BAMTKDg2QUFFREMzMDU5QUExNzcxMEY2NEEwQjk5MUYyNkZGMkNBMkJERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXGYovftPWMlZKikVsWm2KuKq SA/AK+o94Bs10SYh9QSy07tfYOPUdqiQIA8z/robsdSeDZsGCfpFJpWvh0x0V9kg CN6wEH9fQ7KAkiP3bkn5IdfvlFUq9Vatk5NVf9QFiWyZiu+0khMp+6eBzxtdXTVP /kCi2BZhuhBdRtoggS50r716Cty63hdLkjSUv0Q7wT0O3FEA2r7lLIuRwWZLlmNO /ioI0nqI1Ezv/T9cwJm/vZ+9R/o2U8Wfn5MoQk8Vge9R3hD9qVMcCjYy502aeDjD M8k6C4AqGUvME+WlDq/54OGgnD653BhnYlM1eLp/ped7qVcB9ebf7pa86sUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqrtwwWaoXcQ9koLmR8m/yyivfQwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbs42E0001cE1fde1Uhql8Nr1fVXkvrJAZf X/KOZp4+TAZ9XWEAhIRH14bRnyVzrMzHAIrjjAgwbV3kjIAAzTgEFmkOwtEeedfw 64CIGbvsj4w96cKf8O1cWsHOBa9USzqqONCnEf4StEESt4MXIMzCKRx0E88v+Wa5 8iFeinpAZVCWBrb+dV6UxFdgrlepi3TOULLFGdy6AVBCxPZMv2HqFXbMo1TfxMOT 1rUeKlkvXXZ6GvLoQPoRQlssVNIUe5y7cbkxQykFFzjdjlnCHnbNCHojh0X4/IUP DoqoIbWJkbBRnivLuSUpPiQeuKzepIPXMrQJqpHDWinCQNI7uno= -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:21 2026 by rpki-client