$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json) Hash identifier: gh+HRbOoQ+13gLnzT4arL11DtZYdibpBVLWhuq0b7cY= Subject key identifier: 3A:64:29:37:E8:F3:5E:0F:07:77:21:3E:F1:33:9B:DA:E1:B5:D6:E3 Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 0B088E7E5C5DE0B2F2F06E9200B0E9CE2F883190 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft Manifest number: 0400 Signing time: Wed 25 Mar 2026 01:11:36 +0000 Manifest this update: Wed 25 Mar 2026 01:06:36 +0000 Manifest next update: Sat 28 Mar 2026 06:06:36 +0000 Files and hashes: 1: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: Y6+vZBez/i96eARFh7xYTRVry9EpC0Oe75C8ykkMi9Y=) 2: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: FTaMUAMOYiAyM4toX95w1wSNKuDUIK7Os5wz1HYyIRk=) 3: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: L07oO7f3vw0DUvy59vVd0Qr/06ehYbsWyVpjAPoMAUI=) 4: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: 2B7/KaxMXnrlHGwKMPYiSx+6lqj99dQWvKkkoEdP6aU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:08:8e:7e:5c:5d:e0:b2:f2:f0:6e:92:00:b0:e9:ce:2f:88:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Mar 25 01:06:36 2026 GMT Not After : Mar 28 06:06:36 2026 GMT Subject: CN=3A642937E8F35E0F0777213EF1339BDAE1B5D6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:d4:a1:82:12:b6:82:a3:58:c7:2c:45:5b: 12:40:a2:87:dd:44:2a:2e:66:60:7d:a2:ca:8e:c0: 97:04:c6:44:fe:b5:07:61:d3:9d:8b:40:36:95:e6: 2d:a3:c0:70:d5:00:9b:86:a8:56:bc:5e:10:a2:45: 0a:dc:ff:62:72:db:c5:44:fd:c3:8f:4b:0d:a4:e8: 23:6b:08:c8:99:de:f6:75:d1:7b:67:96:36:a8:10: df:02:4c:0b:43:f7:14:b4:51:40:16:ab:ef:8a:a5: 68:09:07:1a:96:03:1b:94:be:08:27:26:33:6b:24: a4:43:8e:f7:75:92:5f:20:91:45:e3:0a:92:e3:06: 2f:d7:aa:80:ed:2a:1e:b3:be:bf:e5:e5:15:4d:6c: 29:7c:36:6e:8e:a5:57:a7:8f:21:c6:0c:57:5b:9c: 8f:33:d8:0d:6e:e7:64:63:dc:c3:90:f8:48:7e:f8: 37:40:f8:b8:38:a0:39:b6:ce:81:e7:98:e3:76:30: f2:b9:fe:8e:17:6a:ec:2f:a4:4c:e0:d8:c4:ca:2d: 80:ec:04:69:fc:b5:44:84:c0:96:5a:b3:94:a3:4c: aa:da:4e:d7:ac:48:88:81:10:ea:6f:74:31:02:b1: cd:fb:ca:11:5d:7f:a2:a2:3c:f5:d5:90:bc:9c:2c: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:64:29:37:E8:F3:5E:0F:07:77:21:3E:F1:33:9B:DA:E1:B5:D6:E3 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b2:9b:a9:f3:15:6d:77:3c:d2:9f:0b:c1:35:4e:84:b2:6b: f8:e1:21:45:41:c6:ec:82:a3:12:dc:30:7c:e8:42:3c:b3:c3: 14:de:f9:fa:90:b0:71:f1:e5:8f:e6:8b:8b:eb:1c:02:be:b3: 35:24:a0:2b:ba:f1:6a:d7:8c:a3:d5:77:16:e5:46:81:2f:a5: fd:33:a8:60:2b:2c:72:a6:1e:ce:19:7a:6c:0f:42:6d:dc:ef: 96:3b:31:be:a9:32:e1:79:78:66:75:40:c8:2a:4b:db:2c:96: 05:94:3d:0f:75:aa:f9:45:24:64:94:c4:ed:99:47:07:0b:ec: 73:11:70:de:e7:fb:e0:42:10:88:24:2a:ae:b0:7e:6c:55:7c: c1:87:e2:80:ab:fa:3e:8a:96:98:02:b7:f8:52:4a:89:40:1d: 5a:dc:62:d1:ed:56:e9:58:a8:3e:fd:3a:70:63:32:e7:91:0d: 05:f8:72:2c:54:ed:44:22:b7:9a:dc:8f:39:71:98:e0:99:50: fb:71:f9:a0:09:9b:5e:83:bc:86:fc:c0:15:a4:6f:0a:0d:e3: 8d:3f:b3:3a:30:a9:90:8c:be:d2:e8:85:02:7e:1a:bf:cb:ea: 05:04:ef:b7:a9:27:a1:a6:29:16:06:30:c8:41:d1:f0:e4:9c: 94:81:95:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwiOflxd4LLy8G6SALDpzi+IMZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNjAzMjUwMTA2MzZaFw0yNjAzMjgwNjA2MzZaMDMxMTAvBgNV BAMTKDNBNjQyOTM3RThGMzVFMEYwNzc3MjEzRUYxMzM5QkRBRTFCNUQ2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuW9ShghK2gqNYxyxFWxJAoofd RCouZmB9osqOwJcExkT+tQdh052LQDaV5i2jwHDVAJuGqFa8XhCiRQrc/2Jy28VE /cOPSw2k6CNrCMiZ3vZ10XtnljaoEN8CTAtD9xS0UUAWq++KpWgJBxqWAxuUvggn JjNrJKRDjvd1kl8gkUXjCpLjBi/XqoDtKh6zvr/l5RVNbCl8Nm6OpVenjyHGDFdb nI8z2A1u52Rj3MOQ+Eh++DdA+Lg4oDm2zoHnmON2MPK5/o4XauwvpEzg2MTKLYDs BGn8tUSEwJZas5SjTKraTtesSIiBEOpvdDECsc37yhFdf6KiPPXVkLycLOZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOmQpN+jzXg8HdyE+8TOb2uG11uMwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4 NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+ym6nzFW13PNKfC8E1ToSya/jhIUVBxuyC oxLcMHzoQjyzwxTe+fqQsHHx5Y/mi4vrHAK+szUkoCu68WrXjKPVdxblRoEvpf0z qGArLHKmHs4ZemwPQm3c75Y7Mb6pMuF5eGZ1QMgqS9sslgWUPQ91qvlFJGSUxO2Z RwcL7HMRcN7n++BCEIgkKq6wfmxVfMGH4oCr+j6KlpgCt/hSSolAHVrcYtHtVulY qD79OnBjMueRDQX4cixU7UQit5rcjzlxmOCZUPtx+aAJm16DvIb8wBWkbwoN440/ szowqZCMvtLohQJ+Gr/L6gUE77epJ6GmKRYGMMhB0fDknJSBlQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:52 2026 by rpki-client