$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: e0sgjnSPHypjBEfdZxk4zk7WzLohdWkZt5W+lczcwSs= Subject key identifier: 5E:D2:4E:B9:18:DF:6A:1B:CC:DB:95:75:36:5F:01:C2:0F:96:FB:60 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 04421E991054BB1B648A9DD86884A684BEF6CB8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 0262 Signing time: Tue 24 Mar 2026 22:40:03 +0000 Manifest this update: Tue 24 Mar 2026 22:35:03 +0000 Manifest next update: Fri 27 Mar 2026 22:43:03 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: zwTS0I3yHyTRPMMjOlix3sPU89yfOA8bdamwt+xt3VE=) 2: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: lOYHmtMwkGuKWEBtte6MMbwhg1KwNEgHRr5yEsXHNfc=) 3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 7LVSpHD/+5SvrNtdEAOca6lFeRx3Ycxz9J1G8TF3m/w=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: qXl6Y01U+k/Ra/QYHsyqr3b9BVCalPhgbHMkcfSQuTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:42:1e:99:10:54:bb:1b:64:8a:9d:d8:68:84:a6:84:be:f6:cb:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Mar 24 22:35:03 2026 GMT Not After : Mar 27 22:43:03 2026 GMT Subject: CN=5ED24EB918DF6A1BCCDB9575365F01C20F96FB60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:ba:83:3a:86:05:d2:96:fb:3d:f0:ba:fb: 42:d0:e2:18:3d:c8:cc:23:42:2e:c3:31:87:d3:55: 09:e5:32:3c:54:08:92:e4:48:24:eb:f5:c3:99:11: 93:03:9b:70:cd:25:e6:1c:c3:8c:64:34:60:8f:01: b0:8d:a1:94:4b:6f:72:5d:28:ff:64:ad:0c:48:3e: a5:3e:cc:91:d9:6a:65:ba:5d:4b:03:10:e3:a9:a9: ef:2e:fd:d1:a5:57:50:e6:f7:0f:a4:8e:6f:88:83: 46:f5:00:2a:30:8b:ec:f7:fb:be:16:44:7f:0a:88: 3f:3b:d4:ec:83:1f:12:29:75:8c:cd:97:2b:b8:96: 31:ed:f9:1d:e0:32:48:1c:d0:07:d2:3f:6a:c7:ab: 1b:d9:57:ec:3f:f3:69:28:32:29:e2:0d:81:38:70: 83:d7:79:09:ec:c5:83:49:6b:e0:d7:8a:4e:70:27: 1e:53:32:ca:a3:f1:1a:da:a5:f1:14:7c:dd:1c:c2: be:00:23:23:5b:ad:dc:07:be:90:81:f8:06:0a:58: cc:0e:b7:18:84:d5:f3:1b:48:83:08:e7:33:80:14: b1:ed:c5:09:b9:58:70:69:09:8f:ab:35:0b:30:74: 8e:39:bf:da:3e:50:6c:5d:6e:e6:40:7f:51:da:bf: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D2:4E:B9:18:DF:6A:1B:CC:DB:95:75:36:5F:01:C2:0F:96:FB:60 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c8:87:a5:b6:2f:b0:39:e5:8d:6d:b0:7b:b6:cf:96:00:3b: e7:21:7f:e7:89:79:d3:81:3b:2e:a6:a2:72:c5:f8:67:6a:aa: 53:4a:83:20:f1:0e:b1:97:de:21:7b:02:1c:ee:3d:b3:3a:05: 3d:32:69:9a:56:f8:3f:4b:bf:7f:ab:83:bc:60:1e:06:a7:ce: 8a:8d:9b:7f:97:9f:54:b0:bb:17:8e:d5:46:fd:f3:70:52:1c: 01:5a:78:50:bb:f7:cc:3f:a4:10:59:06:11:d7:75:3e:72:9f: 86:a5:8e:46:27:7d:78:2d:35:97:7b:af:13:b2:c8:c7:dd:39: 06:ab:16:50:df:be:ff:42:ea:54:43:b4:b6:a0:d7:67:cc:9d: 26:73:25:7b:cf:10:f1:8b:c1:2b:b3:75:bc:56:e2:93:62:6f: e9:5c:a7:c9:0e:d6:44:95:03:cd:d1:c2:23:32:7f:b1:bf:31: d8:f0:83:e6:cf:a9:1e:85:27:dd:c8:4b:f7:54:34:80:c4:1d: 32:9d:3e:92:b2:50:25:dc:0c:f7:ba:bf:4f:de:31:04:7a:c5: 5d:ef:4f:55:7d:0a:69:e2:89:cd:0c:7e:c7:4b:90:a2:d1:b4: e2:1d:d3:70:fe:d4:9b:73:68:52:1b:6c:79:04:05:be:ea:23: d3:f8:2a:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEIemRBUuxtkip3YaISmhL72y48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNjAzMjQyMjM1MDNaFw0yNjAzMjcyMjQzMDNaMDMxMTAvBgNV BAMTKDVFRDI0RUI5MThERjZBMUJDQ0RCOTU3NTM2NUYwMUMyMEY5NkZCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrbqDOoYF0pb7PfC6+0LQ4hg9 yMwjQi7DMYfTVQnlMjxUCJLkSCTr9cOZEZMDm3DNJeYcw4xkNGCPAbCNoZRLb3Jd KP9krQxIPqU+zJHZamW6XUsDEOOpqe8u/dGlV1Dm9w+kjm+Ig0b1ACowi+z3+74W RH8KiD871OyDHxIpdYzNlyu4ljHt+R3gMkgc0AfSP2rHqxvZV+w/82koMiniDYE4 cIPXeQnsxYNJa+DXik5wJx5TMsqj8RrapfEUfN0cwr4AIyNbrdwHvpCB+AYKWMwO txiE1fMbSIMI5zOAFLHtxQm5WHBpCY+rNQswdI45v9o+UGxdbuZAf1Hav0b/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtJOuRjfahvM25V1Nl8Bwg+W+2AwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfIh6W2L7A55Y1tsHu2z5YAO+chf+eJedOB Oy6monLF+GdqqlNKgyDxDrGX3iF7AhzuPbM6BT0yaZpW+D9Lv3+rg7xgHganzoqN m3+Xn1SwuxeO1Ub983BSHAFaeFC798w/pBBZBhHXdT5yn4aljkYnfXgtNZd7rxOy yMfdOQarFlDfvv9C6lRDtLag12fMnSZzJXvPEPGLwSuzdbxW4pNib+lcp8kO1kSV A83RwiMyf7G/Mdjwg+bPqR6FJ93IS/dUNIDEHTKdPpKyUCXcDPe6v0/eMQR6xV3v T1V9Cmniic0MfsdLkKLRtOId03D+1JtzaFIbbHkEBb7qI9P4KpM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:33 2026 by rpki-client