$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: ieuTXzhjz7iLyVro81oUMZwAWx1zNXkN/gwzAp3jYvs= Subject key identifier: EC:ED:C8:37:41:DC:35:DB:C2:B6:3A:6C:D9:1F:A2:ED:62:88:EE:14 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 38E16F59E23A2ECE84549BFBBB5DBEEA130E5C38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 031F Signing time: Wed 25 Mar 2026 15:32:44 +0000 Manifest this update: Wed 25 Mar 2026 15:27:44 +0000 Manifest next update: Sat 28 Mar 2026 17:47:44 +0000 Files and hashes: 1: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: AqGJ+U5Mo9ghkRCYSu8TV0Rs9TzNov6K3CdWaQE8TDE=) 2: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 3: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 4: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e1:6f:59:e2:3a:2e:ce:84:54:9b:fb:bb:5d:be:ea:13:0e:5c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Mar 25 15:27:44 2026 GMT Not After : Mar 28 17:47:44 2026 GMT Subject: CN=ECEDC83741DC35DBC2B63A6CD91FA2ED6288EE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:90:ca:66:88:c4:b0:ae:0d:c4:95:3c:6b: 01:d4:77:64:27:c5:33:c8:7d:f9:3f:ed:5f:4f:c7: 1e:4a:57:b4:1e:a4:14:fa:68:91:fc:df:50:da:39: 69:d9:6e:af:3e:8e:82:aa:c8:b1:6b:19:b5:61:a0: 1b:30:96:d8:a0:ef:f2:4d:b7:46:04:df:59:c7:af: c9:e8:5e:ee:0b:ca:c5:72:87:ec:2f:f0:b9:fa:42: a1:dd:10:04:32:a8:b1:61:29:d0:e0:5b:b5:10:fa: a3:8c:f5:78:f1:c1:2c:6f:e9:46:4c:89:b2:03:34: 13:16:f7:64:83:e2:37:62:36:78:fd:b6:dc:5a:6b: 73:53:19:ac:c3:2d:1e:5c:82:f9:3a:06:ae:5e:70: 87:42:d3:4c:12:a1:7c:01:b5:97:c1:84:53:69:99: 05:92:72:40:20:8d:01:f5:9f:a6:78:a9:6b:df:04: 2a:40:52:6e:b1:0f:82:ec:fd:69:23:2e:8a:15:75: 0d:72:60:f7:a7:14:eb:13:ba:a0:5e:37:84:0a:98: 10:62:e7:83:c3:5e:9e:f3:47:2e:93:df:3e:b4:f5: fd:8b:63:19:e6:21:42:af:d6:05:60:02:e5:64:51: 0e:0a:da:e6:e2:c3:b4:b9:8e:40:ab:5a:55:5a:4b: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:ED:C8:37:41:DC:35:DB:C2:B6:3A:6C:D9:1F:A2:ED:62:88:EE:14 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:37:9d:e3:41:23:e1:d3:e7:3c:f5:4e:1f:73:6d:d3:a7:75: f4:4e:32:ba:62:ba:e5:44:0e:77:55:3e:68:e3:23:10:4d:61: 51:ad:3b:21:ac:f7:cf:cc:f4:50:cb:a3:eb:8b:30:9d:d2:26: 74:22:68:0e:60:e6:0d:fe:3a:52:91:20:dd:dd:96:63:fb:de: 1b:7d:28:ca:b7:dc:01:f6:60:b7:76:35:c7:04:c8:28:67:e1: c7:a4:9c:1d:04:62:eb:ac:c5:1f:79:e5:58:78:51:31:21:9b: 95:12:f6:48:8f:c3:86:77:4c:ae:ca:44:ed:58:95:32:b5:05: e3:59:07:07:4f:88:7a:0a:a3:61:53:45:55:8f:38:82:9a:b3: 2e:64:81:64:65:41:33:1c:9d:56:2b:66:f0:2f:13:0f:fa:32: 4f:0b:4d:f1:e3:e1:c8:6b:93:4a:53:3a:dd:92:05:69:09:ce: cd:45:0a:fe:fd:60:0c:f8:75:d6:ad:1e:7a:b3:aa:ba:69:f5: ea:91:b9:78:52:78:89:3f:65:cb:2b:89:53:76:1b:13:fe:5c: 0c:5b:ac:da:12:07:d1:2e:43:85:fa:6d:57:7b:85:8f:2f:b0: bf:87:22:7c:19:81:e2:77:fb:ce:ea:f9:68:3c:60:8e:15:0a: 4f:55:3d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOFvWeI6Ls6EVJv7u12+6hMOXDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNjAzMjUxNTI3NDRaFw0yNjAzMjgxNzQ3NDRaMDMxMTAvBgNV BAMTKEVDRURDODM3NDFEQzM1REJDMkI2M0E2Q0Q5MUZBMkVENjI4OEVFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IJDKZojEsK4NxJU8awHUd2Qn xTPIffk/7V9Pxx5KV7QepBT6aJH831DaOWnZbq8+joKqyLFrGbVhoBswltig7/JN t0YE31nHr8noXu4LysVyh+wv8Ln6QqHdEAQyqLFhKdDgW7UQ+qOM9XjxwSxv6UZM ibIDNBMW92SD4jdiNnj9ttxaa3NTGazDLR5cgvk6Bq5ecIdC00wSoXwBtZfBhFNp mQWSckAgjQH1n6Z4qWvfBCpAUm6xD4Ls/WkjLooVdQ1yYPenFOsTuqBeN4QKmBBi 54PDXp7zRy6T3z609f2LYxnmIUKv1gVgAuVkUQ4K2ubiw7S5jkCrWlVaS2ePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7O3IN0HcNdvCtjps2R+i7WKI7hQwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANw3neNBI+HT5zz1Th9zbdOndfROMrpiuuVE DndVPmjjIxBNYVGtOyGs98/M9FDLo+uLMJ3SJnQiaA5g5g3+OlKRIN3dlmP73ht9 KMq33AH2YLd2NccEyChn4ceknB0EYuusxR955Vh4UTEhm5US9kiPw4Z3TK7KRO1Y lTK1BeNZBwdPiHoKo2FTRVWPOIKasy5kgWRlQTMcnVYrZvAvEw/6Mk8LTfHj4chr k0pTOt2SBWkJzs1FCv79YAz4ddatHnqzqrpp9eqRuXhSeIk/ZcsriVN2GxP+XAxb rNoSB9EuQ4X6bVd7hY8vsL+HInwZgeJ3+87q+Wg8YI4VCk9VPRI= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:53 2026 by rpki-client