$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: B05BQi9JvvRJhRHr362PbLYra5uaXsQsVFDp9amIi6Y= Subject key identifier: BF:DD:9B:03:89:E4:2D:1E:3F:A1:A0:CE:E8:36:4A:DA:9B:3E:9E:4D Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 6685CDC9A554828B074E61163B85127EEA4F0F41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: D2 Signing time: Wed 25 Mar 2026 01:22:35 +0000 Manifest this update: Wed 25 Mar 2026 01:17:35 +0000 Manifest next update: Sat 28 Mar 2026 06:02:35 +0000 Files and hashes: 1: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=) 2: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: 2bo14asIeMFuulQFAuyOMWvwruZszgFyWNm1gWivGps=) 3: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s=) 4: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: H33ymI9ju2NfQ2pOTJN+8hPqJ6LyJFP7aCyIqWIccfg=) 5: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: qHrXMqQTucTeofIinh+6AXijbtXSBcDb8eithAS0vbA=) 6: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: RAZLxNcCuXPKyabK8BqiTbT1v9ScTKbGOP4B7k/cmZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:85:cd:c9:a5:54:82:8b:07:4e:61:16:3b:85:12:7e:ea:4f:0f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Mar 25 01:17:35 2026 GMT Not After : Mar 28 06:02:35 2026 GMT Subject: CN=BFDD9B0389E42D1E3FA1A0CEE8364ADA9B3E9E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:1d:83:a4:ff:d6:f8:0c:e4:4f:01:c8:3b: ce:0a:1f:c8:de:10:0c:ac:81:18:d0:6d:94:4f:33: e7:6b:28:64:ac:3a:0c:78:59:32:9b:52:7b:fb:c4: 0a:08:9c:41:5d:41:b2:31:23:30:7e:be:ae:c6:7c: e7:36:ba:15:2e:44:36:8d:0a:d2:a3:63:d2:25:0c: 30:e1:65:0f:77:76:15:94:7a:5f:5f:30:68:43:fa: 75:8c:bc:c7:da:9d:bc:4f:42:31:85:09:5d:aa:aa: a1:1e:7f:aa:a2:83:c3:9b:cd:33:c3:ba:a8:be:72: 83:a7:f2:55:ac:7a:df:1b:65:d7:1b:55:e0:8c:b9: c4:ec:e7:4c:d2:c9:96:3e:2e:c8:e5:e2:78:3b:54: 41:89:3b:f8:54:b6:5d:f4:eb:ca:8d:5c:a5:8c:af: 1c:93:df:ee:04:16:3c:e5:b7:0c:6b:8e:4f:ae:78: 4d:6a:ee:5f:68:f6:18:58:3b:fa:74:7c:50:ca:70: c0:10:77:17:ee:b6:89:25:8b:19:32:23:41:40:ba: a6:91:7f:fe:12:bf:e7:96:b9:d3:a6:46:84:30:6b: 97:a7:b8:31:60:ff:89:8a:1e:85:27:5c:51:16:23: 77:61:84:9d:3b:35:fd:80:a1:d8:73:0c:1b:24:cb: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DD:9B:03:89:E4:2D:1E:3F:A1:A0:CE:E8:36:4A:DA:9B:3E:9E:4D X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:eb:28:e4:a1:57:d4:69:e5:99:ca:b0:cd:89:f3:cd:0d:a2: c5:ca:f0:c0:d1:c7:91:9d:88:cc:2a:d6:04:2d:17:ef:a2:ff: cf:c8:12:8f:04:fd:8b:ae:06:39:cd:d9:c3:65:1a:92:ac:f1: 64:de:bf:2c:7b:8f:90:ee:67:01:5f:cd:4e:91:7c:c5:10:f9: 17:18:e3:fd:ba:e6:5d:6a:a0:a5:15:0f:a0:f8:30:8b:f2:e4: 14:72:a6:a8:61:18:71:53:bb:42:62:7d:26:fa:5d:c4:aa:04: ff:a9:1e:5c:94:8a:51:59:01:23:2f:e0:2e:d1:51:9a:00:07: f0:52:32:a8:d2:6a:8b:58:85:c3:24:4f:7b:45:73:07:c7:c8: e5:35:9e:d9:06:03:a5:d1:bf:6b:d6:34:57:7c:0e:50:6a:b6: 1e:11:31:51:d1:81:ef:33:f3:b8:0d:a9:92:66:1a:26:7f:c3: df:d6:4a:f7:23:44:73:54:a6:ed:5e:bf:9a:4b:a9:62:b6:47: c6:bd:bd:8e:8e:1d:5b:5a:0f:c5:ba:76:51:30:1d:6d:43:84: f6:03:62:00:7a:56:7c:34:20:1f:ba:ae:51:88:72:96:c4:31: a4:50:99:24:f8:50:a7:a4:a4:ad:d9:a0:02:15:70:59:87:d2: 7b:6d:51:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoXNyaVUgosHTmEWO4USfupPD0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNjAzMjUwMTE3MzVaFw0yNjAzMjgwNjAyMzVaMDMxMTAvBgNV BAMTKEJGREQ5QjAzODlFNDJEMUUzRkExQTBDRUU4MzY0QURBOUIzRTlFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQx2DpP/W+AzkTwHIO84KH8je EAysgRjQbZRPM+drKGSsOgx4WTKbUnv7xAoInEFdQbIxIzB+vq7GfOc2uhUuRDaN CtKjY9IlDDDhZQ93dhWUel9fMGhD+nWMvMfanbxPQjGFCV2qqqEef6qig8ObzTPD uqi+coOn8lWset8bZdcbVeCMucTs50zSyZY+Lsjl4ng7VEGJO/hUtl3068qNXKWM rxyT3+4EFjzltwxrjk+ueE1q7l9o9hhYO/p0fFDKcMAQdxfutoklixkyI0FAuqaR f/4Sv+eWudOmRoQwa5enuDFg/4mKHoUnXFEWI3dhhJ07Nf2AodhzDBsky22pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv92bA4nkLR4/oaDO6DZK2ps+nk0wHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTrKOShV9Rp5ZnKsM2J880NosXK8MDRx5Gd iMwq1gQtF++i/8/IEo8E/YuuBjnN2cNlGpKs8WTevyx7j5DuZwFfzU6RfMUQ+RcY 4/265l1qoKUVD6D4MIvy5BRypqhhGHFTu0JifSb6XcSqBP+pHlyUilFZASMv4C7R UZoAB/BSMqjSaotYhcMkT3tFcwfHyOU1ntkGA6XRv2vWNFd8DlBqth4RMVHRge8z 87gNqZJmGiZ/w9/WSvcjRHNUpu1ev5pLqWK2R8a9vY6OHVtaD8W6dlEwHW1DhPYD YgB6Vnw0IB+6rlGIcpbEMaRQmST4UKekpK3ZoAIVcFmH0nttURU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:53 2026 by rpki-client