$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: owCc8jj49vc7FXh6Ko/7XEhvXS4pTApthXc6hsI+l5Q= Subject key identifier: 73:3A:8F:93:1D:AC:CC:BD:F0:BA:9B:0B:E6:D2:37:9D:AF:5A:AC:BC Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 2CA7CFF384720D3B839241C628CB757E0F54BBFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 055F Signing time: Thu 26 Mar 2026 04:43:03 +0000 Manifest this update: Thu 26 Mar 2026 04:38:03 +0000 Manifest next update: Sun 29 Mar 2026 05:37:03 +0000 Files and hashes: 1: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: riGgrD8EJiqzyuCIj7JqJ+SnM23QL09NkZPcDOVBbWc=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a7:cf:f3:84:72:0d:3b:83:92:41:c6:28:cb:75:7e:0f:54:bb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Mar 26 04:38:03 2026 GMT Not After : Mar 29 05:37:03 2026 GMT Subject: CN=733A8F931DACCCBDF0BA9B0BE6D2379DAF5AACBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:8f:a6:44:bc:66:6e:1a:a3:44:0c:83:ba: f1:7e:67:30:1d:36:0e:45:28:d3:94:2d:63:c0:7b: 98:75:a8:dd:51:76:31:4a:cf:a4:e1:69:01:b3:4e: d0:70:d6:22:9c:07:19:cf:6c:b9:2f:b4:3c:b9:68: 29:2c:54:f8:c0:a3:8b:41:1d:35:0f:d5:c4:65:ea: c8:1b:d1:a4:fb:80:93:a0:06:e1:87:66:bf:1e:4c: 79:6c:f9:ba:3d:a3:aa:3d:70:51:b9:f7:d5:75:c9: 24:14:48:42:19:d3:87:49:6a:38:d0:ba:7a:4a:8d: e2:0e:ea:04:98:b4:6e:1b:d7:96:32:b2:75:90:b3: 3d:9b:35:0a:b2:6f:fc:bb:58:be:0d:03:cc:84:57: 02:9b:ed:c7:ed:15:c2:73:a4:47:71:06:e2:b2:7b: 3b:4f:1c:83:31:29:a6:b3:29:6d:a7:21:5d:63:d8: 32:af:45:d3:02:0f:63:ac:e2:28:a8:47:be:fa:23: 40:53:32:bb:56:c0:db:98:cc:2b:96:30:2b:1b:73: 1a:3c:84:47:a2:d9:2a:ba:8e:ce:a5:c8:ce:0b:f6: 22:9b:b6:fa:1b:3d:ed:75:a2:b5:01:25:5b:43:40: a4:9b:ba:e8:c3:16:44:48:c9:fe:85:1e:1a:72:1c: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3A:8F:93:1D:AC:CC:BD:F0:BA:9B:0B:E6:D2:37:9D:AF:5A:AC:BC X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:09:1f:aa:01:b5:d8:e9:c6:c8:50:76:90:19:1f:df:df:49: 9c:5a:2f:fb:9a:f1:98:33:3a:30:6c:a2:16:b7:fd:eb:80:81: 47:5b:b4:fb:9f:d0:44:a8:bc:65:20:c2:c6:2d:70:a4:ef:1b: 74:61:01:5b:11:d6:6e:67:2a:a0:f4:0f:62:08:d3:1e:98:cc: 67:a9:c8:c2:48:c2:0e:a7:ad:66:de:57:4d:af:89:01:e4:18: bb:e1:96:40:ab:2a:1b:3f:f8:32:ff:5f:3e:bd:c4:30:2c:d6: 18:dd:db:bf:aa:b0:80:fe:46:44:fa:f9:7c:2c:f8:c9:9e:0a: 40:cf:58:5c:75:0b:55:cf:57:db:4e:b3:76:2b:35:76:ef:8d: 26:2f:a7:0b:7a:5b:97:ad:04:fa:a8:12:86:16:4f:00:70:4e: bb:c1:1b:ab:a8:46:22:ee:16:a3:b8:18:b0:f0:08:ac:e8:0b: fb:13:c9:d0:1d:82:65:ed:67:fc:83:99:8c:f8:8b:b9:04:6b: 8b:9c:45:9a:42:30:77:62:b5:d3:df:9c:8c:32:99:54:cc:f5: c3:c9:b6:50:93:7b:75:0a:a5:10:96:14:42:4b:58:2a:72:8c: 1a:b4:6e:02:63:fb:73:9a:cb:1a:bd:0f:b2:31:6a:56:28:71: 38:cf:0e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKfP84RyDTuDkkHGKMt1fg9Uu/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNjAzMjYwNDM4MDNaFw0yNjAzMjkwNTM3MDNaMDMxMTAvBgNV BAMTKDczM0E4RjkzMURBQ0NDQkRGMEJBOUIwQkU2RDIzNzlEQUY1QUFDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bI+mRLxmbhqjRAyDuvF+ZzAd Ng5FKNOULWPAe5h1qN1RdjFKz6ThaQGzTtBw1iKcBxnPbLkvtDy5aCksVPjAo4tB HTUP1cRl6sgb0aT7gJOgBuGHZr8eTHls+bo9o6o9cFG599V1ySQUSEIZ04dJajjQ unpKjeIO6gSYtG4b15YysnWQsz2bNQqyb/y7WL4NA8yEVwKb7cftFcJzpEdxBuKy eztPHIMxKaazKW2nIV1j2DKvRdMCD2Os4iioR776I0BTMrtWwNuYzCuWMCsbcxo8 hEei2Sq6js6lyM4L9iKbtvobPe11orUBJVtDQKSbuujDFkRIyf6FHhpyHHQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUczqPkx2szL3wupsL5tI3na9arLwwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAJH6oBtdjpxshQdpAZH9/fSZxaL/ua8Zgz OjBsoha3/euAgUdbtPuf0ESovGUgwsYtcKTvG3RhAVsR1m5nKqD0D2II0x6YzGep yMJIwg6nrWbeV02viQHkGLvhlkCrKhs/+DL/Xz69xDAs1hjd27+qsID+RkT6+Xws +MmeCkDPWFx1C1XPV9tOs3YrNXbvjSYvpwt6W5etBPqoEoYWTwBwTrvBG6uoRiLu FqO4GLDwCKzoC/sTydAdgmXtZ/yDmYz4i7kEa4ucRZpCMHditdPfnIwymVTM9cPJ tlCTe3UKpRCWFEJLWCpyjBq0bgJj+3Oayxq9D7IxalYocTjPDlw= -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:53 2026 by rpki-client