$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: BNqKRBD5pt4GcquEwr50fKqO0lJZPcAwVD07WnqkO3E= Subject key identifier: A5:D2:F3:AF:D0:B9:A2:2F:1D:A8:CA:89:9E:B6:E9:4C:B5:75:3E:D4 Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 69AB65C4616848A1AB9F0C028F6E4E5035B34263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: FF Signing time: Tue 24 Mar 2026 11:41:19 +0000 Manifest this update: Tue 24 Mar 2026 11:36:19 +0000 Manifest next update: Fri 27 Mar 2026 14:56:19 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: Ub40BPe4KMOTxitaoAUpxbpNc0bfpI5fDNOKKNlDeX8=) 2: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: 8U8FAVo8Pet+bI7LhH/+NyRX8QIsWxOPMGoHPKNTvgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ab:65:c4:61:68:48:a1:ab:9f:0c:02:8f:6e:4e:50:35:b3:42:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Mar 24 11:36:19 2026 GMT Not After : Mar 27 14:56:19 2026 GMT Subject: CN=A5D2F3AFD0B9A22F1DA8CA899EB6E94CB5753ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:d9:f4:5d:c2:77:e6:c6:9e:1a:f0:f7:f1: 54:52:4d:ca:a4:3f:12:3b:fd:28:32:79:14:a6:2c: cd:af:45:c0:49:9a:2b:da:2e:3a:97:44:c9:7b:52: 56:f3:8d:c5:20:d4:78:e7:92:be:49:0e:f5:73:0a: 65:ea:a7:96:93:15:d1:ee:0b:56:7c:2d:ca:8d:06: c8:db:f8:1a:12:a5:d0:f5:d6:56:60:29:4a:38:77: 06:f3:55:62:77:e9:e7:86:7f:83:9c:3b:7f:d7:45: 61:42:65:aa:3b:9d:be:24:45:76:90:e9:48:af:5a: 66:d8:0d:09:8d:65:45:1c:c6:ca:7e:1a:a7:b5:5f: 36:a2:0d:31:f6:10:34:6c:0a:44:7f:ad:c1:67:9c: fa:cc:73:ea:e6:34:eb:ae:72:f7:82:50:be:86:5c: 73:8f:f7:30:4a:b0:0a:fe:4e:4b:44:c2:91:75:e8: 15:35:2a:64:e1:8b:d4:78:80:e6:36:04:6b:57:f5: 72:1f:ab:77:5e:2a:e2:be:78:69:bd:36:bf:f7:af: 80:07:17:4a:dc:17:5c:1f:c3:b3:1e:ce:ed:79:b8: 97:97:4f:19:d6:83:f9:53:2c:95:be:ab:0f:d1:6c: 71:0d:7d:f8:e5:c0:a0:02:46:71:45:01:ec:15:15: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D2:F3:AF:D0:B9:A2:2F:1D:A8:CA:89:9E:B6:E9:4C:B5:75:3E:D4 X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:65:56:1e:9a:ac:9a:fe:33:3e:b2:49:e6:2e:1d:0e:02:ba: c2:72:26:91:e4:b7:46:49:d2:92:00:83:e2:67:e0:80:f3:8b: c8:1d:b2:e8:3b:04:09:b5:22:e7:93:5f:3a:d1:42:f5:e0:09: d7:5f:e6:6b:09:d3:9b:bd:40:68:18:59:09:03:93:68:94:47: 71:9d:52:be:72:45:ed:7d:ed:2b:5d:f4:94:4d:e3:99:37:f2: 69:9b:9a:b9:85:2e:a9:7b:5c:0c:ef:e9:d9:00:fd:b5:2a:61: 8f:0e:8e:84:19:86:48:67:e1:c6:ad:a3:88:83:a9:29:3c:02: f5:38:d4:f5:ef:a9:a0:c1:48:33:4e:d1:88:71:70:3c:51:d5: ef:49:82:83:ac:35:38:b0:2c:a7:b0:d3:87:b7:12:1e:5c:8f: 67:96:ee:43:ff:71:0a:d5:4e:0a:8e:11:32:87:92:9b:e2:10: 61:eb:1d:60:93:95:49:e1:67:f4:b4:40:86:d1:3b:57:06:2f: ae:d8:3c:28:c7:f3:15:c2:53:eb:81:eb:53:a0:02:87:64:1c: 96:db:7d:51:da:63:6f:24:ae:46:e3:0a:44:42:a5:ca:4e:ef: 79:38:8a:be:28:e6:d8:9d:3c:02:fa:11:46:11:15:16:21:d8: d9:e2:00:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaatlxGFoSKGrnwwCj25OUDWzQmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNjAzMjQxMTM2MTlaFw0yNjAzMjcxNDU2MTlaMDMxMTAvBgNV BAMTKEE1RDJGM0FGRDBCOUEyMkYxREE4Q0E4OTlFQjZFOTRDQjU3NTNFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxtn0XcJ35saeGvD38VRSTcqk PxI7/SgyeRSmLM2vRcBJmivaLjqXRMl7UlbzjcUg1Hjnkr5JDvVzCmXqp5aTFdHu C1Z8LcqNBsjb+BoSpdD11lZgKUo4dwbzVWJ36eeGf4OcO3/XRWFCZao7nb4kRXaQ 6UivWmbYDQmNZUUcxsp+Gqe1XzaiDTH2EDRsCkR/rcFnnPrMc+rmNOuucveCUL6G XHOP9zBKsAr+TktEwpF16BU1KmThi9R4gOY2BGtX9XIfq3deKuK+eGm9Nr/3r4AH F0rcF1wfw7Mezu15uJeXTxnWg/lTLJW+qw/RbHENffjlwKACRnFFAewVFSjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpdLzr9C5oi8dqMqJnrbpTLV1PtQwHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALplVh6arJr+Mz6ySeYuHQ4CusJyJpHkt0ZJ 0pIAg+Jn4IDzi8gdsug7BAm1IueTXzrRQvXgCddf5msJ05u9QGgYWQkDk2iUR3Gd Ur5yRe197Std9JRN45k38mmbmrmFLql7XAzv6dkA/bUqYY8OjoQZhkhn4cato4iD qSk8AvU41PXvqaDBSDNO0YhxcDxR1e9JgoOsNTiwLKew04e3Eh5cj2eW7kP/cQrV TgqOETKHkpviEGHrHWCTlUnhZ/S0QIbRO1cGL67YPCjH8xXCU+uB61OgAodkHJbb fVHaY28krkbjCkRCpcpO73k4ir4o5tidPAL6EUYRFRYh2NniAHw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:41 2026 by rpki-client