$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: /DEh42YZ3A/3Ph4MAmyrmHwkWbWtn3G+wSJFGMoYUxs= Subject key identifier: D5:55:F2:BF:61:EB:A7:7A:6A:78:DA:AE:A2:0C:4B:FD:2B:40:C3:1B Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 2BB8F9F3E328022DCFA1D867A5C06E69172361E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0268 Signing time: Thu 26 Mar 2026 02:11:24 +0000 Manifest this update: Thu 26 Mar 2026 02:06:24 +0000 Manifest next update: Sun 29 Mar 2026 12:57:24 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: yK7nyqbkyDPHD1QbGGLBt44X/fl33LRlABzMx16APXY=) 2: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: nliIG57Qdq7AxmOUt8j2H6qzt39oRNtI9SXBM63zcGE=) 3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: eJ1XGH3PQ4o+OhkD3fQ4IKKdCGLyiVJ505C/lW7FPoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b8:f9:f3:e3:28:02:2d:cf:a1:d8:67:a5:c0:6e:69:17:23:61:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Mar 26 02:06:24 2026 GMT Not After : Mar 29 12:57:24 2026 GMT Subject: CN=D555F2BF61EBA77A6A78DAAEA20C4BFD2B40C31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0c:0e:b8:4d:9c:0a:29:61:28:ac:b7:cf:4a: 64:72:77:b6:94:e5:30:12:25:26:66:5c:71:90:b3: 96:4a:eb:ed:03:04:2f:3f:f7:76:bc:f5:eb:7d:13: 1f:7e:e0:67:c0:00:3f:13:a7:ee:0f:2c:9f:b6:f9: 80:4d:fb:bf:00:c8:1a:80:d7:d0:ae:15:3c:7a:a4: 2f:03:d2:01:6c:50:b8:72:05:b0:95:68:1d:f3:82: 7a:84:a4:2a:9c:23:2a:3e:68:87:b8:5d:8f:90:c5: d8:c9:68:ce:62:40:18:b2:60:b9:4f:09:5a:c4:20: 85:ac:45:6a:9c:8f:c3:58:87:b0:24:83:63:4e:0c: f4:50:72:6f:27:c9:5b:8e:ae:4a:85:5d:25:a2:87: e9:60:29:eb:50:0f:8d:06:99:4a:cb:f9:a9:77:3d: c7:f7:1a:80:21:2e:77:e1:c9:51:7a:7e:14:04:d0: c9:cf:ed:28:c2:38:5f:85:f5:7b:f4:97:c1:b4:69: e2:2d:82:7e:c3:00:8d:21:ba:16:bb:43:ad:f4:da: 2c:a5:46:3a:02:c8:52:87:9f:9a:e7:cf:fe:a4:24: 60:86:f5:b0:1c:ce:d9:9a:6f:b0:e1:ab:64:e6:77: 2c:4c:10:e7:04:9f:d6:3f:be:99:0d:be:a7:78:f1: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:55:F2:BF:61:EB:A7:7A:6A:78:DA:AE:A2:0C:4B:FD:2B:40:C3:1B X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ce:aa:e1:dd:9a:2d:93:e4:c9:04:18:f8:f0:84:12:ac:18: 05:05:53:a6:cb:3b:95:41:19:e8:1d:24:a9:0c:98:3d:78:55: 13:44:cc:d3:4c:f0:70:e7:e0:6a:bf:d5:42:ef:37:ed:50:15: 3a:c7:76:5f:d6:70:31:67:2a:df:1c:b7:e1:4d:6d:20:63:7e: c4:83:d9:d6:3f:0f:29:f9:47:ff:f0:bc:0d:d8:df:f1:b5:a1: b3:d5:bc:6d:31:65:f6:bd:a7:f5:a2:0a:50:b0:0c:eb:c3:03: 85:e6:70:39:0c:a0:17:39:56:9b:e8:7f:22:c5:65:94:e6:d5: 81:08:36:07:05:df:d8:d1:d8:95:87:c7:a5:0d:7a:6b:25:9c: e2:5e:dc:61:a7:de:8d:ea:73:17:e1:02:c2:4d:b5:7e:b4:d0: ca:33:6a:be:81:b9:9f:55:8a:b1:09:78:a3:2b:51:bb:6f:ca: 1d:4c:d2:35:43:ed:2e:90:5a:a9:06:a5:fe:0b:2d:d6:ec:c5: 01:6a:9a:26:15:b3:66:36:1d:23:fc:b1:79:b3:76:0c:dc:73: 28:89:ff:57:62:93:61:14:b8:9b:02:9a:52:10:08:b1:cd:d8: ad:5b:b3:c3:34:05:b1:3a:aa:be:58:01:7e:54:03:0a:a4:2c: 3d:2b:6b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7j58+MoAi3PodhnpcBuaRcjYeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNjAzMjYwMjA2MjRaFw0yNjAzMjkxMjU3MjRaMDMxMTAvBgNV BAMTKEQ1NTVGMkJGNjFFQkE3N0E2QTc4REFBRUEyMEM0QkZEMkI0MEMzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDA64TZwKKWEorLfPSmRyd7aU 5TASJSZmXHGQs5ZK6+0DBC8/93a89et9Ex9+4GfAAD8Tp+4PLJ+2+YBN+78AyBqA 19CuFTx6pC8D0gFsULhyBbCVaB3zgnqEpCqcIyo+aIe4XY+QxdjJaM5iQBiyYLlP CVrEIIWsRWqcj8NYh7Akg2NODPRQcm8nyVuOrkqFXSWih+lgKetQD40GmUrL+al3 Pcf3GoAhLnfhyVF6fhQE0MnP7SjCOF+F9Xv0l8G0aeItgn7DAI0huha7Q6302iyl RjoCyFKHn5rnz/6kJGCG9bAcztmab7Dhq2TmdyxMEOcEn9Y/vpkNvqd48c17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VXyv2Hrp3pqeNquogxL/StAwxswHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrOquHdmi2T5MkEGPjwhBKsGAUFU6bLO5VB GegdJKkMmD14VRNEzNNM8HDn4Gq/1ULvN+1QFTrHdl/WcDFnKt8ct+FNbSBjfsSD 2dY/Dyn5R//wvA3Y3/G1obPVvG0xZfa9p/WiClCwDOvDA4XmcDkMoBc5VpvofyLF ZZTm1YEINgcF39jR2JWHx6UNemslnOJe3GGn3o3qcxfhAsJNtX600Mozar6BuZ9V irEJeKMrUbtvyh1M0jVD7S6QWqkGpf4LLdbsxQFqmiYVs2Y2HSP8sXmzdgzccyiJ /1dik2EUuJsCmlIQCLHN2K1bs8M0BbE6qr5YAX5UAwqkLD0ra50= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:05 2026 by rpki-client