$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json) Hash identifier: y2EQn+r6juOC6WiBaQjRtzVJC5gaqha72sm7+ySwT64= Subject key identifier: 73:D4:78:1F:FD:A5:19:BF:B9:97:B6:78:9F:E6:22:12:8C:31:5B:BC Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Certificate serial: 7198F4A97940532B00422BD5FCC38416F445CA5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft Manifest number: 0111 Signing time: Thu 26 Mar 2026 18:21:04 +0000 Manifest this update: Thu 26 Mar 2026 18:16:04 +0000 Manifest next update: Mon 30 Mar 2026 04:32:04 +0000 Files and hashes: 1: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=) 2: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: FrzXGeFhIIQ1fExCR8xRi8X9ppg5Q6RGqjSmC5h0ZHI=) 3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:98:f4:a9:79:40:53:2b:00:42:2b:d5:fc:c3:84:16:f4:45:ca:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Validity Not Before: Mar 26 18:16:04 2026 GMT Not After : Mar 30 04:32:04 2026 GMT Subject: CN=73D4781FFDA519BFB997B6789FE622128C315BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ba:0f:f4:db:b5:8e:b3:7b:86:2b:35:49:59: 29:a6:ef:97:c9:d5:ef:01:49:ac:a5:9f:50:d0:3a: 55:01:40:93:eb:80:3a:86:35:be:8a:d1:58:0b:39: 40:98:6d:f6:16:ac:1f:1f:b2:b8:a8:67:bb:87:10: f3:ab:83:c2:eb:8f:d9:7a:af:b7:f1:e5:a2:a5:ca: 3e:7d:24:16:79:87:e3:d2:ee:4f:de:36:d1:57:8b: d8:d5:14:3d:67:5d:30:15:77:b5:33:48:99:69:83: 8c:11:28:8d:de:e3:85:b3:2a:b8:1f:3e:ec:dc:b3: e0:c6:e2:b5:38:57:4e:71:a9:50:c8:8f:30:32:89: df:01:97:da:63:cd:25:e3:36:fc:85:e2:e0:11:e2: 2e:88:01:c9:b3:2a:96:b4:fb:ea:00:c5:df:ba:42: 50:cd:59:dc:74:e5:da:4e:68:d4:7d:c4:4b:91:15: 18:fe:4d:8b:b9:20:70:5f:5e:2a:e1:5e:ff:d8:d6: b9:d4:35:67:c5:b2:be:b4:b5:f9:37:e3:64:88:04: 11:99:39:43:86:be:16:99:cf:94:da:e3:cc:4a:9c: d3:4e:fc:38:53:72:2d:03:40:cf:20:98:1d:93:0f: e4:f2:98:11:d7:97:b8:1b:68:f9:0a:02:c1:a5:22: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D4:78:1F:FD:A5:19:BF:B9:97:B6:78:9F:E6:22:12:8C:31:5B:BC X509v3 Authority Key Identifier: keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:79:37:24:c2:a2:f0:5b:b9:5e:d0:64:91:f0:f4:b2:58:dc: 70:28:9a:3c:8d:da:ca:f0:1e:2c:59:5c:25:fc:49:0e:bf:bf: 0e:47:87:25:d3:dc:1c:ad:7d:9e:0e:2a:31:1f:65:f6:18:80: de:71:da:39:93:cf:f7:f9:96:a8:29:a4:ca:6c:de:e2:6e:e6: c5:4a:9d:d7:66:74:ac:59:4d:96:76:9b:a8:04:8e:93:2b:6a: 78:18:d3:9f:6f:cc:04:df:20:f3:14:55:c7:98:99:e8:08:a6: ca:ea:ba:9a:26:30:9f:c1:24:57:4d:9d:62:ad:a9:5d:79:ad: ce:76:5f:e0:40:6c:1c:bf:40:a9:ea:d5:ed:94:c4:2b:b3:22: 99:7e:6f:46:83:2d:d6:68:06:eb:f6:a8:ea:a5:90:f8:49:e8: 3e:ce:7e:6a:5e:9a:41:82:4b:09:03:a7:23:1d:e1:29:14:7c: 39:e6:10:76:a5:4b:f7:79:fd:86:d3:2a:e8:f6:a1:91:2b:84: f5:8d:89:e5:e6:de:d1:06:da:48:03:af:03:15:b7:a1:5f:27: 35:4c:f2:b5:ca:c8:fa:aa:3a:2d:fd:5d:a6:f6:72:9b:5e:bc: 3e:0c:ba:19:47:a7:60:4f:31:0f:61:f6:3e:4d:7a:86:c4:86: 8a:27:ee:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZj0qXlAUysAQivV/MOEFvRFyl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3 NzRGQ0M2NjAeFw0yNjAzMjYxODE2MDRaFw0yNjAzMzAwNDMyMDRaMDMxMTAvBgNV BAMTKDczRDQ3ODFGRkRBNTE5QkZCOTk3QjY3ODlGRTYyMjEyOEMzMTVCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzug/027WOs3uGKzVJWSmm75fJ 1e8BSayln1DQOlUBQJPrgDqGNb6K0VgLOUCYbfYWrB8fsrioZ7uHEPOrg8Lrj9l6 r7fx5aKlyj59JBZ5h+PS7k/eNtFXi9jVFD1nXTAVd7UzSJlpg4wRKI3e44WzKrgf Puzcs+DG4rU4V05xqVDIjzAyid8Bl9pjzSXjNvyF4uAR4i6IAcmzKpa0++oAxd+6 QlDNWdx05dpOaNR9xEuRFRj+TYu5IHBfXirhXv/Y1rnUNWfFsr60tfk342SIBBGZ OUOGvhaZz5Ta48xKnNNO/DhTci0DQM8gmB2TD+TymBHXl7gbaPkKAsGlIpM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc9R4H/2lGb+5l7Z4n+YiEowxW7wwHwYDVR0j BBgwFoAUa6CHqMG/RrvUdI0j+eNLkndPzGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzUwMDc2Ny05MjI3LTQzZWMtYTUyNS0yZTk3ZDVhMDNmMDkvMC82QkEwODdBOEMx QkY0NkJCRDQ3NDhEMjNGOUUzNEI5Mjc3NEZDQzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3NzRG Q0M2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRC OTI3NzRGQ0M2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKd5NyTCovBbuV7QZJHw9LJY3HAomjyN2srw HixZXCX8SQ6/vw5HhyXT3BytfZ4OKjEfZfYYgN5x2jmTz/f5lqgppMps3uJu5sVK nddmdKxZTZZ2m6gEjpMrangY059vzATfIPMUVceYmegIpsrqupomMJ/BJFdNnWKt qV15rc52X+BAbBy/QKnq1e2UxCuzIpl+b0aDLdZoBuv2qOqlkPhJ6D7OfmpemkGC SwkDpyMd4SkUfDnmEHalS/d5/YbTKuj2oZErhPWNieXm3tEG2kgDrwMVt6FfJzVM 8rXKyPqqOi39Xab2cptevD4MuhlHp2BPMQ9h9j5NeobEhoon7u8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:14 2026 by rpki-client