$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: PWNIOT3RshdP2aNGK0P260pzcoik+L1O34vv+1rKF3Y= Subject key identifier: 4B:1D:4E:A5:CE:A0:5A:DA:37:07:CB:53:07:2E:12:A4:E5:B5:42:F4 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 721EBC83071B0824E3FBA6ADE4AEB138C3898FBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 0216 Signing time: Wed 25 Mar 2026 16:21:39 +0000 Manifest this update: Wed 25 Mar 2026 16:16:39 +0000 Manifest next update: Sat 28 Mar 2026 23:29:39 +0000 Files and hashes: 1: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: AQKHGE4RABOC00rde5gs8ZVqoasQmL+YO3qDnOgdteY=) 2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1e:bc:83:07:1b:08:24:e3:fb:a6:ad:e4:ae:b1:38:c3:89:8f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Mar 25 16:16:39 2026 GMT Not After : Mar 28 23:29:39 2026 GMT Subject: CN=4B1D4EA5CEA05ADA3707CB53072E12A4E5B542F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:03:cd:db:22:54:1c:36:10:8c:c5:88:4c:3b: b0:39:41:d5:d4:78:fb:77:b0:bf:d6:a9:72:bd:00: 9d:46:25:cd:2b:f9:1c:3f:c7:14:13:12:0b:f0:16: 19:64:22:87:67:9c:39:fc:8b:9a:a4:c6:54:a3:93: dd:a5:04:e8:37:f3:b1:b4:96:6d:3a:b2:42:2c:d2: 84:e6:46:19:39:fd:b0:27:6f:f9:46:28:75:ae:bc: f4:1b:0a:9f:90:c8:d7:e0:52:5d:59:b4:d2:62:02: 18:49:76:a1:65:fc:9d:2e:a4:30:5f:c3:b9:56:fc: f8:7d:31:ff:3c:4e:67:ef:b9:25:c4:18:fe:27:13: 01:77:c3:cb:37:ad:95:f7:13:d6:14:93:1b:7e:d3: 47:83:5e:a7:17:3e:26:82:a4:bd:7d:db:51:59:89: cb:71:34:d6:a3:b5:94:5f:3f:f0:9d:62:ca:e0:f7: f9:1b:48:17:ce:53:f0:85:9a:9a:cf:1a:2b:4a:09: 80:cb:0b:0a:47:dc:8a:b7:02:c7:ce:88:8c:9c:38: 81:f1:ca:3a:dd:49:d7:33:63:e4:e9:03:a3:e0:4d: e8:e9:86:e2:be:5f:41:3b:67:e1:45:ec:a9:22:c6: 6e:29:b0:df:57:f4:1c:c9:7f:10:c2:48:75:94:cd: bf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1D:4E:A5:CE:A0:5A:DA:37:07:CB:53:07:2E:12:A4:E5:B5:42:F4 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:90:8b:7b:1a:f8:71:ac:4d:59:17:88:b9:ac:41:33:1d:3c: 7c:a4:b0:e1:a2:e9:9c:2a:69:e7:ce:4e:1a:93:8e:7a:da:bf: 2d:1b:4e:24:66:19:d1:e7:a6:60:ac:4c:e3:1b:d9:c2:05:df: 92:d6:e0:05:18:a0:33:a9:d6:e4:29:11:41:76:1f:03:0f:cb: 4e:ed:96:12:42:03:54:68:5c:82:a9:db:3a:8d:fa:1c:f3:25: 58:87:f1:31:78:f0:0c:01:84:90:4e:ec:43:2e:69:69:58:aa: e1:6f:3a:e9:20:4f:11:21:18:86:3a:28:4b:70:1a:da:a8:d7: 93:d2:69:6a:23:f7:37:46:cb:a9:84:23:16:4e:44:1e:41:70: 6b:54:84:94:c5:cd:88:00:bc:20:cd:53:36:88:4d:2e:68:21: 3e:cf:ee:9d:83:86:fc:af:68:d7:56:ad:25:b7:07:9e:94:82: db:8d:ee:02:c6:3e:5c:c0:12:b5:f9:ac:4b:ba:24:69:5d:db: 14:9f:e6:a6:f1:ea:d0:05:83:ea:8a:dc:21:13:75:6d:56:88: 4d:65:f6:9f:c5:3d:68:41:4d:81:8a:a5:7b:56:c9:01:7e:b8: 72:6d:15:dd:da:81:ab:a0:05:e6:59:6e:b9:8e:52:8f:ca:78: c7:6e:ec:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUch68gwcbCCTj+6at5K6xOMOJj78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNjAzMjUxNjE2MzlaFw0yNjAzMjgyMzI5MzlaMDMxMTAvBgNV BAMTKDRCMUQ0RUE1Q0VBMDVBREEzNzA3Q0I1MzA3MkUxMkE0RTVCNTQyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8A83bIlQcNhCMxYhMO7A5QdXU ePt3sL/WqXK9AJ1GJc0r+Rw/xxQTEgvwFhlkIodnnDn8i5qkxlSjk92lBOg387G0 lm06skIs0oTmRhk5/bAnb/lGKHWuvPQbCp+QyNfgUl1ZtNJiAhhJdqFl/J0upDBf w7lW/Ph9Mf88TmfvuSXEGP4nEwF3w8s3rZX3E9YUkxt+00eDXqcXPiaCpL1921FZ ictxNNajtZRfP/CdYsrg9/kbSBfOU/CFmprPGitKCYDLCwpH3Iq3AsfOiIycOIHx yjrdSdczY+TpA6PgTejphuK+X0E7Z+FF7Kkixm4psN9X9BzJfxDCSHWUzb9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSx1Opc6gWto3B8tTBy4SpOW1QvQwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOCQi3sa+HGsTVkXiLmsQTMdPHyksOGi6Zwq aefOThqTjnravy0bTiRmGdHnpmCsTOMb2cIF35LW4AUYoDOp1uQpEUF2HwMPy07t lhJCA1RoXIKp2zqN+hzzJViH8TF48AwBhJBO7EMuaWlYquFvOukgTxEhGIY6KEtw Gtqo15PSaWoj9zdGy6mEIxZORB5BcGtUhJTFzYgAvCDNUzaITS5oIT7P7p2Dhvyv aNdWrSW3B56UgtuN7gLGPlzAErX5rEu6JGld2xSf5qbx6tAFg+qK3CETdW1WiE1l 9p/FPWhBTYGKpXtWyQF+uHJtFd3agaugBeZZbrmOUo/KeMdu7Ks= -----END CERTIFICATE-----Generated at Thu Mar 26 21:54:56 2026 by rpki-client