$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: PStJ/XyQHYgGHPkZyt8bdPY/XOLKuI8ypMrjqRvCMgk= Subject key identifier: 7A:97:4A:21:0F:86:0D:02:73:07:09:5E:6F:97:80:E9:05:D8:CC:70 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 23E181B957BA220DDA65F81B07EF98010999A108 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 03B6 Signing time: Thu 26 Mar 2026 05:02:48 +0000 Manifest this update: Thu 26 Mar 2026 04:57:48 +0000 Manifest next update: Sun 29 Mar 2026 14:15:48 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: 5lFW18qFNnfQY6ocmWqfaAsIw6kobVZuqjGN1oNWW+o=) 2: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: flhp44mDT98283GnB3gBm9+0vIu2F8ss1thl+VPsfZA=) 3: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: rUOvI4+wCQk+cZsxILU6myE9U874ZkvxT8DP55n/Wdc=) 4: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: gOpiT2ygwdALFaKQD2WqC6dJrmqmX6yVbJIHGQfj3E4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e1:81:b9:57:ba:22:0d:da:65:f8:1b:07:ef:98:01:09:99:a1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Mar 26 04:57:48 2026 GMT Not After : Mar 29 14:15:48 2026 GMT Subject: CN=7A974A210F860D027307095E6F9780E905D8CC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:b9:10:5a:22:ec:ca:dd:dd:70:e9:c0:8f: 77:8a:fe:bd:a8:2e:36:a9:48:94:88:08:ea:97:0d: 87:e0:ca:ab:ed:a1:27:11:c4:31:53:d6:6c:c5:22: 0d:00:12:28:32:30:55:d8:a2:fb:c2:ee:d3:cc:72: 64:e5:97:33:5e:a4:fa:4e:20:51:a3:47:e3:57:4e: fc:94:c2:33:14:64:6d:08:cd:4e:7d:95:cb:c7:6f: 27:71:ab:1c:12:5d:00:2d:70:2f:84:d1:5d:68:5b: 05:db:31:36:20:00:28:cd:28:2c:80:db:60:65:4b: ee:a6:39:c3:b1:ac:bf:42:cf:50:32:ad:f1:99:6a: 74:b0:c9:d2:a8:15:fb:fd:87:5d:3a:68:f2:e3:6c: 5f:37:84:5d:a1:9d:2b:88:ea:17:44:10:df:6f:a4: 15:b9:5b:bb:de:05:48:1c:e5:25:69:25:a0:af:ec: 6b:cf:53:0e:67:c8:06:d6:c8:ab:23:07:92:cb:dc: 72:8d:e8:2f:b4:63:31:4c:50:85:5c:df:72:e2:cc: 95:b4:ba:13:e4:ad:62:bc:c4:37:0f:be:79:33:2c: 4e:10:fa:8c:36:23:e6:bd:ec:fa:37:e9:6f:71:c8: 1b:f9:58:fa:dd:da:fc:27:4c:d4:5e:aa:b5:7c:f8: ba:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:97:4A:21:0F:86:0D:02:73:07:09:5E:6F:97:80:E9:05:D8:CC:70 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a4:54:22:cf:29:26:4a:f6:58:53:ce:07:3f:9d:e5:ef:c8: 9b:fb:3b:c4:1c:5b:69:bf:91:09:dc:15:24:3d:42:51:de:3e: 96:2d:c6:03:99:42:a5:06:c6:30:f0:ce:c5:af:72:b6:11:dc: 7e:ed:9d:f5:bb:65:1c:a6:02:f4:2b:c3:5f:c0:e2:e3:eb:7c: 7e:ea:88:1e:1e:42:14:58:2a:74:26:eb:b6:9d:ca:b5:14:bc: ad:ca:e8:93:4c:d1:6e:c4:1e:78:52:7c:58:6e:bc:ea:16:fd: 3e:f0:46:1d:be:d7:e8:6d:90:00:24:2c:b1:3d:4f:5b:46:4c: 31:7b:1c:2e:43:b9:f3:e8:24:83:c3:25:eb:89:f0:3c:43:e4: aa:31:bd:94:75:8e:d5:b9:0c:ad:11:a3:35:b3:e4:73:4a:02: f5:98:50:ae:d1:0c:9f:c6:df:68:79:c8:9d:56:ea:d3:a8:f3: a7:50:56:36:73:d9:6e:d0:f0:a5:d7:eb:c8:60:e6:07:b8:f4: f5:4a:c5:79:4e:3c:53:86:f5:92:fe:90:26:2a:36:62:5b:46: dc:34:c5:57:21:93:c5:0d:52:bc:05:78:99:d8:35:53:32:4d: 79:91:0f:85:39:ca:1c:cf:ce:80:3e:4c:3e:87:7f:77:87:6c: c6:1d:b8:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+GBuVe6Ig3aZfgbB++YAQmZoQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNjAzMjYwNDU3NDhaFw0yNjAzMjkxNDE1NDhaMDMxMTAvBgNV BAMTKDdBOTc0QTIxMEY4NjBEMDI3MzA3MDk1RTZGOTc4MEU5MDVEOENDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDReLkQWiLsyt3dcOnAj3eK/r2o LjapSJSICOqXDYfgyqvtoScRxDFT1mzFIg0AEigyMFXYovvC7tPMcmTllzNepPpO IFGjR+NXTvyUwjMUZG0IzU59lcvHbydxqxwSXQAtcC+E0V1oWwXbMTYgACjNKCyA 22BlS+6mOcOxrL9Cz1AyrfGZanSwydKoFfv9h106aPLjbF83hF2hnSuI6hdEEN9v pBW5W7veBUgc5SVpJaCv7GvPUw5nyAbWyKsjB5LL3HKN6C+0YzFMUIVc33LizJW0 uhPkrWK8xDcPvnkzLE4Q+ow2I+a97Po36W9xyBv5WPrd2vwnTNReqrV8+LqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUepdKIQ+GDQJzBwleb5eA6QXYzHAwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+kVCLPKSZK9lhTzgc/neXvyJv7O8QcW2m/ kQncFSQ9QlHePpYtxgOZQqUGxjDwzsWvcrYR3H7tnfW7ZRymAvQrw1/A4uPrfH7q iB4eQhRYKnQm67adyrUUvK3K6JNM0W7EHnhSfFhuvOoW/T7wRh2+1+htkAAkLLE9 T1tGTDF7HC5DufPoJIPDJeuJ8DxD5KoxvZR1jtW5DK0RozWz5HNKAvWYUK7RDJ/G 32h5yJ1W6tOo86dQVjZz2W7Q8KXX68hg5ge49PVKxXlOPFOG9ZL+kCYqNmJbRtw0 xVchk8UNUrwFeJnYNVMyTXmRD4U5yhzPzoA+TD6Hf3eHbMYduC0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:30 2026 by rpki-client