$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: Z0d4Zbn0iexZKm52QxCtkKJStDaY+GtrdDCFB++DjYQ= Subject key identifier: 37:53:31:B1:35:A0:1E:A2:28:43:7E:02:BE:9E:3F:57:BE:4D:57:9C Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 1EC88B6FFF088400EE8154714132DB5DAD96225A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 0560 Signing time: Thu 26 Mar 2026 03:52:25 +0000 Manifest this update: Thu 26 Mar 2026 03:47:25 +0000 Manifest next update: Sun 29 Mar 2026 12:11:25 +0000 Files and hashes: 1: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) 2: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: JM/PU9WLwFDDwdeIUyWs4hO7mZZ8UQO5sNviQn08Bs4=) 3: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c8:8b:6f:ff:08:84:00:ee:81:54:71:41:32:db:5d:ad:96:22:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Mar 26 03:47:25 2026 GMT Not After : Mar 29 12:11:25 2026 GMT Subject: CN=375331B135A01EA228437E02BE9E3F57BE4D579C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:84:cd:3c:5b:42:81:3a:36:3d:61:17:1e: aa:a6:71:08:6e:bc:49:1e:db:15:2e:e3:1d:21:fc: 62:0c:bb:f7:40:b2:e3:f6:3e:eb:8f:ac:ac:73:8d: 74:23:19:81:5c:1d:13:6d:4c:85:7e:3b:92:03:2a: f6:ab:2a:c1:63:e0:af:24:3b:4e:0c:01:0a:81:3d: 68:5e:d0:e7:20:2d:83:2c:8f:23:37:1c:06:67:67: 09:93:8f:d2:c2:75:f2:c8:87:10:54:ae:29:7d:e4: da:1c:85:de:d7:0f:f4:06:99:17:9a:a8:24:4c:66: 54:0c:dc:c7:47:81:f6:5d:7f:74:47:ac:0d:e3:90: 56:f1:2d:67:50:fa:ef:af:0a:e1:6e:81:02:f6:df: 14:44:1e:ac:0f:4c:12:d6:f9:b0:04:e4:ef:39:65: 3c:b7:83:dc:0f:9c:06:82:f4:16:52:93:39:dc:7f: 24:d3:7f:00:0b:ee:99:c6:e7:e2:b8:a2:0e:d3:d9: d3:1a:38:62:65:a0:9f:dd:6a:7d:b2:d6:79:47:39: 92:1b:48:ca:3f:b8:d2:93:27:a5:fc:be:2c:03:66: 04:2b:b4:0f:47:46:ba:6f:b7:34:57:20:6a:34:67: 5b:1a:d7:52:dd:f4:e1:7e:a6:0d:a0:be:17:50:8b: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:53:31:B1:35:A0:1E:A2:28:43:7E:02:BE:9E:3F:57:BE:4D:57:9C X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3b:71:16:8a:e5:4f:df:92:61:58:ac:c2:5e:94:97:55:cd: 20:a2:ba:b9:8f:61:eb:a7:53:f2:5f:35:65:52:2e:f0:65:ae: 6f:6f:91:78:d2:a9:0c:0b:51:cb:9b:9f:af:95:08:61:34:d6: 28:c1:fe:12:d3:76:3f:49:64:e5:80:6a:2d:e6:08:6f:d5:b2: 16:1b:10:db:0a:df:11:c4:8a:86:5f:79:47:c4:8e:c8:27:ce: bb:c6:a8:90:9f:cc:18:57:cd:41:52:30:85:61:9d:5a:65:ae: ab:ca:76:43:ef:bb:f1:26:c0:0a:e7:65:bd:dc:fc:20:bb:2f: 58:71:25:d4:6d:b6:ec:46:da:56:c4:19:bf:62:c8:c2:a6:00: 2b:19:c5:89:ce:91:22:dd:85:a5:02:62:d4:ec:6a:0b:d9:0b: 7f:45:4c:24:1d:b2:3c:12:9b:22:3c:90:a5:2d:8c:95:54:de: a9:c0:1f:d8:29:90:d7:60:79:dc:0b:c0:90:7d:34:e3:f6:74: a2:81:d2:b9:63:a2:23:eb:95:5e:97:00:e9:09:e3:e6:1a:2d: e6:45:1d:af:47:6f:f5:ae:dc:4a:b7:58:24:0b:5f:88:0b:7e: 1c:74:b9:be:f3:4e:d8:ca:59:ee:6e:9c:53:68:ff:f6:26:3f: 53:8b:10:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsiLb/8IhADugVRxQTLbXa2WIlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNjAzMjYwMzQ3MjVaFw0yNjAzMjkxMjExMjVaMDMxMTAvBgNV BAMTKDM3NTMzMUIxMzVBMDFFQTIyODQzN0UwMkJFOUUzRjU3QkU0RDU3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfoTNPFtCgTo2PWEXHqqmcQhu vEke2xUu4x0h/GIMu/dAsuP2PuuPrKxzjXQjGYFcHRNtTIV+O5IDKvarKsFj4K8k O04MAQqBPWhe0OcgLYMsjyM3HAZnZwmTj9LCdfLIhxBUril95Nochd7XD/QGmRea qCRMZlQM3MdHgfZdf3RHrA3jkFbxLWdQ+u+vCuFugQL23xREHqwPTBLW+bAE5O85 ZTy3g9wPnAaC9BZSkzncfyTTfwAL7pnG5+K4og7T2dMaOGJloJ/dan2y1nlHOZIb SMo/uNKTJ6X8viwDZgQrtA9HRrpvtzRXIGo0Z1sa11Ld9OF+pg2gvhdQizOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1MxsTWgHqIoQ34Cvp4/V75NV5wwHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA7cRaK5U/fkmFYrMJelJdVzSCiurmPYeun U/JfNWVSLvBlrm9vkXjSqQwLUcubn6+VCGE01ijB/hLTdj9JZOWAai3mCG/VshYb ENsK3xHEioZfeUfEjsgnzrvGqJCfzBhXzUFSMIVhnVplrqvKdkPvu/EmwArnZb3c /CC7L1hxJdRttuxG2lbEGb9iyMKmACsZxYnOkSLdhaUCYtTsagvZC39FTCQdsjwS myI8kKUtjJVU3qnAH9gpkNdgedwLwJB9NOP2dKKB0rljoiPrlV6XAOkJ4+YaLeZF Ha9Hb/Wu3Eq3WCQLX4gLfhx0ub7zTtjKWe5unFNo//YmP1OLEJs= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:24 2026 by rpki-client