$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: sHTZPQdZItp0vXBFsNYBfja62kZqlt5bXZDehCO9RmU= Subject key identifier: 33:38:E2:A2:E5:46:1E:1B:7E:16:45:76:F3:23:95:10:93:A5:4B:54 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 67E1C99CF8C6F25781F140D3987B58D2BAFB620E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 055E Signing time: Wed 25 Mar 2026 02:10:59 +0000 Manifest this update: Wed 25 Mar 2026 02:05:59 +0000 Manifest next update: Sat 28 Mar 2026 11:45:59 +0000 Files and hashes: 1: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 2: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) 4: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) 5: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: O37fxhKSe/MluNkKgOJWDhckk1J6D7zz7W6avVLl4iM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e1:c9:9c:f8:c6:f2:57:81:f1:40:d3:98:7b:58:d2:ba:fb:62:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Mar 25 02:05:59 2026 GMT Not After : Mar 28 11:45:59 2026 GMT Subject: CN=3338E2A2E5461E1B7E164576F323951093A54B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:fc:b9:1b:f4:c3:21:d8:8c:3a:48:72:7d: 42:64:3e:92:2b:39:43:47:3f:9f:f9:62:f5:ad:c1: b6:4f:8e:ec:70:3d:e1:2b:3d:90:9f:27:b5:4e:b0: d5:61:c0:7b:60:76:0f:2f:a4:8d:2a:a5:de:48:c1: a9:33:96:f3:de:62:8f:55:9b:82:68:50:cd:fc:01: bd:b5:d4:ae:33:7f:80:d2:3f:8d:e7:b2:cf:da:4f: 10:18:ce:3f:8a:1e:9d:2c:ab:19:6f:00:87:e7:64: f4:e2:91:46:72:a9:f5:c9:d2:4c:c3:69:67:f9:61: 2a:be:2a:73:90:ea:40:f0:12:60:14:c6:3d:cc:7a: 71:47:77:03:a4:56:34:24:52:85:df:5a:b8:26:c5: af:df:c8:3b:6d:1d:e8:1a:0b:9a:60:1c:b9:96:85: 3c:73:a2:bd:73:36:3e:26:32:db:83:8d:9e:14:ec: ce:9d:fd:f0:56:a3:ff:de:92:73:85:85:7c:5b:14: 07:b5:56:cb:01:52:f2:a3:a8:67:fb:35:7f:ae:b4: 5f:35:7d:be:79:98:35:ab:5a:f1:ef:7b:c7:17:ca: 43:71:f1:18:cc:67:1a:3a:f7:af:63:22:62:9d:0b: ed:d7:06:83:37:ef:ba:17:94:3e:ab:ac:f3:6a:df: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:38:E2:A2:E5:46:1E:1B:7E:16:45:76:F3:23:95:10:93:A5:4B:54 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:52:91:3f:01:ca:64:cf:1b:25:7c:3d:7e:53:d9:a2:14: da:ff:4d:50:27:26:6c:62:48:26:90:9c:cb:ce:fe:b3:0a:ad: e9:54:96:75:00:58:a1:69:83:cc:81:96:3f:ea:ee:5c:6a:4e: 5f:3c:b0:86:db:15:a3:97:b3:63:6f:97:a6:57:64:8f:b1:94: 3e:30:0f:47:12:0b:4c:4c:be:77:84:51:fe:5e:8a:f5:5f:3e: 59:51:db:eb:37:c3:47:08:fe:a0:20:85:ed:61:c9:4c:2e:71: fd:25:c9:22:72:de:b1:dc:de:2e:b7:e3:45:f0:54:96:17:39: b6:d1:dd:17:dc:9e:c5:b2:90:de:6e:a2:0d:c1:ba:53:ed:bf: 9c:ca:27:3e:07:76:59:4c:06:6b:e2:2d:a9:5f:95:d6:5c:0c: 9b:b2:a6:44:fc:b8:44:4b:90:91:7c:4e:04:c8:26:c3:8b:85: 00:18:f7:4e:b9:06:ee:36:0c:64:54:fd:ec:89:c9:49:99:44: 1d:e7:ab:d0:2b:41:08:79:74:2d:ef:1c:dc:23:43:09:4a:28: 91:0d:a8:ce:72:a7:96:fb:df:4f:a6:5e:39:4b:dc:fb:9f:4b: 49:1d:b5:98:31:16:d6:32:6f:3b:6e:60:ce:a7:0c:03:6e:fc: d4:c5:9f:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+HJnPjG8leB8UDTmHtY0rr7Yg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNjAzMjUwMjA1NTlaFw0yNjAzMjgxMTQ1NTlaMDMxMTAvBgNV BAMTKDMzMzhFMkEyRTU0NjFFMUI3RTE2NDU3NkYzMjM5NTEwOTNBNTRCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklPy5G/TDIdiMOkhyfUJkPpIr OUNHP5/5YvWtwbZPjuxwPeErPZCfJ7VOsNVhwHtgdg8vpI0qpd5IwakzlvPeYo9V m4JoUM38Ab211K4zf4DSP43nss/aTxAYzj+KHp0sqxlvAIfnZPTikUZyqfXJ0kzD aWf5YSq+KnOQ6kDwEmAUxj3MenFHdwOkVjQkUoXfWrgmxa/fyDttHegaC5pgHLmW hTxzor1zNj4mMtuDjZ4U7M6d/fBWo//eknOFhXxbFAe1VssBUvKjqGf7NX+utF81 fb55mDWrWvHve8cXykNx8RjMZxo6969jImKdC+3XBoM377oXlD6rrPNq32iFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMzjiouVGHht+FkV28yOVEJOlS1QwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiBUpE/AcpkzxslfD1+U9miFNr/TVAnJmxi SCaQnMvO/rMKrelUlnUAWKFpg8yBlj/q7lxqTl88sIbbFaOXs2Nvl6ZXZI+xlD4w D0cSC0xMvneEUf5eivVfPllR2+s3w0cI/qAghe1hyUwucf0lySJy3rHc3i6340Xw VJYXObbR3RfcnsWykN5uog3BulPtv5zKJz4HdllMBmviLalfldZcDJuypkT8uERL kJF8TgTIJsOLhQAY9065Bu42DGRU/eyJyUmZRB3nq9ArQQh5dC3vHNwjQwlKKJEN qM5yp5b730+mXjlL3PufS0kdtZgxFtYybztuYM6nDANu/NTFn+c= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:38 2026 by rpki-client