$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: AvLiE+kRVOsIYagqm2MxKcpK0Fb8Whm0qZt11acfSas= Subject key identifier: 68:1F:A3:5F:DD:5B:36:45:F9:0D:AF:DA:B7:9E:FD:1B:DE:20:36:6D Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 3056357AAA74199360484960536FF646765C3A08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 042C Signing time: Wed 25 Mar 2026 15:22:01 +0000 Manifest this update: Wed 25 Mar 2026 15:17:01 +0000 Manifest next update: Sat 28 Mar 2026 17:38:01 +0000 Files and hashes: 1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: jJYNTfIAyMC2NRZr4ppEtCVznm9AD64Q42L5AHJhiL4=) 2: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: Xr3ci6HdvZYGsdrpxPR/AKXAWZJO1NSE4jYnBbgzoHg=) 3: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: 2+21cgS9YAYcOp19nxMBI5CX1Jc0yGks8hyoPNdCeDQ=) 4: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: bhUXyn1m9ClF/H6g61K6U8JFPr/lZN61y4GI83n7uSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:56:35:7a:aa:74:19:93:60:48:49:60:53:6f:f6:46:76:5c:3a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Mar 25 15:17:01 2026 GMT Not After : Mar 28 17:38:01 2026 GMT Subject: CN=681FA35FDD5B3645F90DAFDAB79EFD1BDE20366D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:81:31:2e:0c:45:de:f1:b4:22:65:21:78:e7: e2:3a:df:28:79:8b:e5:9c:bd:ed:97:8d:b1:c1:87: 09:eb:c9:8e:c8:f2:e7:86:a5:f2:fd:f5:6f:db:99: 74:b6:ac:59:ba:0c:f4:aa:64:4a:53:77:78:d7:b4: 95:47:09:41:a5:3e:50:e0:3a:de:58:07:f9:b3:68: ad:b5:f6:2d:af:43:e9:3c:0a:0a:ca:fc:79:13:8f: b2:87:eb:4a:25:ec:c1:98:93:31:80:59:b3:80:12: 6a:7e:d2:aa:ee:81:21:04:9e:48:4a:a9:f1:87:9e: b4:12:4c:e6:09:f8:ee:e0:dc:de:43:80:0b:f8:09: 46:3c:1f:c9:db:7d:8c:62:61:bc:90:c0:4c:ec:b7: f5:f5:41:73:aa:68:dc:d1:27:54:1d:88:76:5b:15: 3b:30:83:8a:d1:97:fb:e5:dd:43:ca:fa:df:e6:7c: 77:8e:01:e0:94:93:71:77:0f:ef:88:77:6d:62:82: 82:94:44:2d:82:0d:57:3d:61:e7:ff:ae:cf:94:a4: 4a:d7:c1:09:13:2d:34:57:01:cb:01:a4:b5:cd:62: 26:67:73:4c:5f:fb:b0:df:ed:b5:96:08:c4:60:df: 8c:b2:81:ba:65:8a:4c:f8:68:81:27:9d:bc:1f:24: bf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1F:A3:5F:DD:5B:36:45:F9:0D:AF:DA:B7:9E:FD:1B:DE:20:36:6D X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:02:19:39:ea:2c:e6:a8:19:9c:53:d3:f0:73:40:25:88:b0: 3e:3a:fa:cf:b4:56:98:4f:cb:a7:b2:e1:03:fb:00:0a:18:73: 95:20:44:09:32:bb:44:4e:c8:d4:90:1a:a3:4c:2d:5e:ad:24: d0:0a:27:34:c2:36:9e:a5:5d:ec:17:09:60:c6:3f:64:18:4a: ac:3e:37:61:b9:a7:74:0d:24:a6:da:37:18:9b:68:9c:b5:d7: 82:72:e1:b6:a6:46:64:10:81:d0:02:bd:82:14:6e:2d:4a:4f: 0e:cf:44:23:54:96:7f:b5:c6:cf:94:0d:e3:08:d5:f4:c7:83: cb:a6:5b:d7:47:59:55:79:0e:b7:ea:92:2b:9b:35:9c:bf:3a: 7c:56:75:9e:49:61:f5:34:a0:e0:4f:5f:b9:f9:43:c9:ae:10: e1:4d:6e:67:0c:16:ce:63:cc:9c:21:ae:a7:cb:8b:45:9c:04: 0c:30:6c:f2:5f:fe:94:3c:26:78:5f:b4:b4:73:cc:12:d3:2e: b1:b6:ef:af:61:14:3b:78:12:4a:53:a0:14:a2:2c:99:8a:2e: 5a:79:7b:34:00:e1:c9:db:14:1a:03:5b:00:ec:09:07:0c:6a: e8:8a:b7:3e:56:d9:87:99:0c:ca:8f:a1:99:f3:04:26:85:79: bd:c5:16:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFY1eqp0GZNgSElgU2/2RnZcOggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNjAzMjUxNTE3MDFaFw0yNjAzMjgxNzM4MDFaMDMxMTAvBgNV BAMTKDY4MUZBMzVGREQ1QjM2NDVGOTBEQUZEQUI3OUVGRDFCREUyMDM2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvgTEuDEXe8bQiZSF45+I63yh5 i+Wcve2XjbHBhwnryY7I8ueGpfL99W/bmXS2rFm6DPSqZEpTd3jXtJVHCUGlPlDg Ot5YB/mzaK219i2vQ+k8CgrK/HkTj7KH60ol7MGYkzGAWbOAEmp+0qrugSEEnkhK qfGHnrQSTOYJ+O7g3N5DgAv4CUY8H8nbfYxiYbyQwEzst/X1QXOqaNzRJ1QdiHZb FTswg4rRl/vl3UPK+t/mfHeOAeCUk3F3D++Id21igoKURC2CDVc9Yef/rs+UpErX wQkTLTRXAcsBpLXNYiZnc0xf+7Df7bWWCMRg34yygbplikz4aIEnnbwfJL8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaB+jX91bNkX5Da/at579G94gNm0wHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoCGTnqLOaoGZxT0/BzQCWIsD46+s+0VphP y6ey4QP7AAoYc5UgRAkyu0ROyNSQGqNMLV6tJNAKJzTCNp6lXewXCWDGP2QYSqw+ N2G5p3QNJKbaNxibaJy114Jy4bamRmQQgdACvYIUbi1KTw7PRCNUln+1xs+UDeMI 1fTHg8umW9dHWVV5DrfqkiubNZy/OnxWdZ5JYfU0oOBPX7n5Q8muEOFNbmcMFs5j zJwhrqfLi0WcBAwwbPJf/pQ8JnhftLRzzBLTLrG2769hFDt4EkpToBSiLJmKLlp5 ezQA4cnbFBoDWwDsCQcMauiKtz5W2YeZDMqPoZnzBCaFeb3FFrM= -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:15 2026 by rpki-client