$ rpki-client -vvf repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft File: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft (raw, json) Hash identifier: mw9XBwpg/gcOuaAyb7RsxO87scPW3e1VdCwbvN9rf5o= Subject key identifier: 21:93:DF:6A:34:89:B6:C8:2B:32:C5:7E:21:E8:D6:6A:AD:8E:57:7E Authority key identifier: 6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF Certificate issuer: /CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Certificate serial: 637F68661DA919DBF480A41DF54D87424E7D109C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft Manifest number: 025C Signing time: Thu 26 Mar 2026 07:02:23 +0000 Manifest this update: Thu 26 Mar 2026 06:57:23 +0000 Manifest next update: Sun 29 Mar 2026 10:58:23 +0000 Files and hashes: 1: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: JBPQaOuTxEdCFfY8RKNZH+MHhyJwY41MarBrg7GwAtI=) 2: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl (hash: EkVCrqxyubzFoK8HC/pEbarbyuH6bKV9S7D0D+pfdJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7f:68:66:1d:a9:19:db:f4:80:a4:1d:f5:4d:87:42:4e:7d:10:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Validity Not Before: Mar 26 06:57:23 2026 GMT Not After : Mar 29 10:58:23 2026 GMT Subject: CN=2193DF6A3489B6C82B32C57E21E8D66AAD8E577E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:b1:35:bd:93:46:c4:0a:07:05:52:6b:13: 84:40:47:77:c5:5c:2b:78:38:d8:1e:ac:18:f3:b6: ac:4d:6a:32:e7:ee:56:80:95:01:6a:85:db:e0:08: 8a:35:0c:99:4e:3e:fa:38:f0:c1:98:74:e0:ad:5b: 5d:e2:2c:3b:c3:dd:e1:5e:54:ae:13:d9:5e:c3:97: c8:8d:52:5b:84:f7:17:17:be:e6:c4:9c:17:dc:b8: 34:d0:6a:80:5e:54:65:d2:25:b6:10:d5:a4:67:b5: 53:05:b6:4e:78:c1:71:55:2f:ac:e0:45:bd:4a:15: 36:50:3c:0b:a0:ec:32:c4:93:0b:76:1e:a2:74:36: dc:6f:40:f4:22:34:7c:47:98:6c:19:6c:51:48:1a: 1a:e0:b2:49:d1:c7:f6:cc:83:a8:cc:a7:a8:58:f1: f7:96:2c:be:ed:f0:92:26:69:4d:1b:fb:44:ee:25: 00:89:42:86:bb:22:84:07:c3:17:ac:68:27:28:91: 6e:ff:4b:9b:63:79:a8:fd:68:19:61:68:c0:de:e2: 49:1e:8e:35:c2:91:05:28:fa:69:bd:4a:43:d6:95: 64:3c:41:b2:54:f6:bf:b3:95:6e:1e:f7:dc:4f:fe: e8:23:b1:28:6c:91:fc:65:47:32:10:cd:94:17:07: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:DF:6A:34:89:B6:C8:2B:32:C5:7E:21:E8:D6:6A:AD:8E:57:7E X509v3 Authority Key Identifier: keyid:6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3b:75:de:81:0b:3e:7b:d3:e8:2d:9e:64:15:4e:aa:43:e1: 35:d3:8e:6d:86:93:cd:a6:b5:1b:29:7a:7b:51:89:e6:cd:cc: 5c:97:a1:c5:93:28:d5:f1:f4:c9:9c:9b:57:dd:9c:26:40:a8: 18:0e:0e:d9:a8:c6:4c:71:e7:ba:4c:ee:87:be:1a:f3:42:b1: 5e:3c:01:4c:19:ce:62:12:84:97:64:91:cd:9e:88:6f:32:d6: aa:7e:2f:21:80:18:34:10:8e:5a:fe:e4:f1:c1:e7:a4:4f:70: 94:25:d9:ca:8a:82:4d:39:d8:e9:d7:12:0c:d5:77:88:82:19: 50:4c:ad:dd:5e:8f:8d:f5:01:30:c1:b9:d2:76:08:a0:86:1c: 30:76:92:4e:0e:c9:65:b2:3a:bb:f3:01:0d:8e:b5:c3:43:11: 62:94:68:cc:58:cb:cb:d6:51:dc:94:8a:3e:b4:3b:cd:1d:bd: 02:87:3b:86:3e:0d:96:e3:ec:0c:46:61:f1:4f:93:82:d6:54: f9:47:aa:2f:f5:01:66:c9:14:74:79:be:17:57:72:6e:a9:5b: 69:d4:34:90:8f:15:62:2c:b4:b4:f6:86:50:7e:ba:a9:ce:1d: 2a:20:5b:8f:1d:83:60:e3:d2:2f:42:65:81:6f:01:16:d4:17: 1d:ee:07:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY39oZh2pGdv0gKQd9U2HQk59EJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1 MkZEMzhCRjAeFw0yNjAzMjYwNjU3MjNaFw0yNjAzMjkxMDU4MjNaMDMxMTAvBgNV BAMTKDIxOTNERjZBMzQ4OUI2QzgyQjMyQzU3RTIxRThENjZBQUQ4RTU3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCibE1vZNGxAoHBVJrE4RAR3fF XCt4ONgerBjztqxNajLn7laAlQFqhdvgCIo1DJlOPvo48MGYdOCtW13iLDvD3eFe VK4T2V7Dl8iNUluE9xcXvubEnBfcuDTQaoBeVGXSJbYQ1aRntVMFtk54wXFVL6zg Rb1KFTZQPAug7DLEkwt2HqJ0NtxvQPQiNHxHmGwZbFFIGhrgsknRx/bMg6jMp6hY 8feWLL7t8JImaU0b+0TuJQCJQoa7IoQHwxesaCcokW7/S5tjeaj9aBlhaMDe4kke jjXCkQUo+mm9SkPWlWQ8QbJU9r+zlW4e99xP/ugjsShskfxlRzIQzZQXBxIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZPfajSJtsgrMsV+IejWaq2OV34wHwYDVR0j BBgwFoAUai9mK21q3ov8MNLN5J42AVL9OL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2YwYTgzYy0yYmMwLTQyYTUtYTRhZS0xMWE1Mzg4MmRmMTAvMC82QTJGNjYyQjZE NkFERThCRkMzMEQyQ0RFNDlFMzYwMTUyRkQzOEJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1MkZE MzhCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmMGE4M2MtMmJjMC00MmE1LWE0 YWUtMTFhNTM4ODJkZjEwLzAvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2 MDE1MkZEMzhCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo7dd6BCz570+gtnmQVTqpD4TXTjm2Gk82m tRspentRiebNzFyXocWTKNXx9Mmcm1fdnCZAqBgODtmoxkxx57pM7oe+GvNCsV48 AUwZzmIShJdkkc2eiG8y1qp+LyGAGDQQjlr+5PHB56RPcJQl2cqKgk052OnXEgzV d4iCGVBMrd1ej431ATDBudJ2CKCGHDB2kk4OyWWyOrvzAQ2OtcNDEWKUaMxYy8vW UdyUij60O80dvQKHO4Y+DZbj7AxGYfFPk4LWVPlHqi/1AWbJFHR5vhdXcm6pW2nU NJCPFWIstLT2hlB+uqnOHSogW48dg2Dj0i9CZYFvARbUFx3uB5E= -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:14 2026 by rpki-client