$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: y7zx7U9HKQR3f+Xrxr5ztXd3Ujdxjfis/6cXMavWDhU= Subject key identifier: 20:20:9C:48:E0:27:8F:42:47:29:B0:FA:87:46:98:D1:BF:5E:8E:33 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 6C69E66463CFD6AA8674CA8B8B967D8581D09FCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 0218 Signing time: Tue 24 Mar 2026 23:52:34 +0000 Manifest this update: Tue 24 Mar 2026 23:47:34 +0000 Manifest next update: Sat 28 Mar 2026 04:01:34 +0000 Files and hashes: 1: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=) 2: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=) 3: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=) 4: 6886844AB176920850E0984917E9713667D0A025.crl (hash: UwvCCbdi8hTU1cKX9htavnbLQWXGBkfExvbrHHaIynw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:69:e6:64:63:cf:d6:aa:86:74:ca:8b:8b:96:7d:85:81:d0:9f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Mar 24 23:47:34 2026 GMT Not After : Mar 28 04:01:34 2026 GMT Subject: CN=20209C48E0278F424729B0FA874698D1BF5E8E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:45:db:bd:4c:d8:db:fa:74:06:a8:75:17: 53:ae:5c:99:e0:7c:6c:45:14:54:0a:e5:c9:b1:d4: 03:c1:76:82:5a:b6:f8:b5:98:52:88:85:38:d6:50: 86:39:96:49:0c:a6:33:ea:cb:ae:8e:a5:48:ba:0b: 80:08:d3:c0:f7:c0:69:75:cc:72:f2:75:5d:fb:c1: ed:70:e9:c0:78:dc:71:c4:b8:03:e7:c2:8d:3d:59: 21:41:57:6a:0e:b3:fc:32:c5:55:33:99:ad:00:2b: 7b:1d:c3:38:d2:ea:18:b2:b7:ab:6b:2f:63:83:36: da:39:df:5c:1a:c4:ff:2e:11:c6:58:00:d1:f2:3f: de:41:a2:d2:97:bb:4c:ae:98:02:ae:a3:d3:c3:92: 1b:3b:0e:22:1d:29:13:6c:a5:6d:87:19:d4:71:b2: bf:41:97:3c:92:d1:e1:47:e6:2c:5e:7e:80:15:07: f2:c0:fa:be:d7:26:7e:bc:be:af:07:c5:53:a1:a4: 67:51:00:d7:67:fe:d8:00:dc:73:7c:35:01:e4:0a: 2a:f1:b4:1f:65:a1:b3:cc:02:d8:52:90:46:0c:81: 8a:12:f7:d6:eb:4a:1e:d8:fc:28:89:cb:fe:c6:b6: 58:d3:ba:a5:18:cd:a5:a8:a9:ba:22:9c:31:62:02: b3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:20:9C:48:E0:27:8F:42:47:29:B0:FA:87:46:98:D1:BF:5E:8E:33 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:22:8b:74:5c:c9:28:b8:9d:c8:21:e8:8e:2b:f4:c8:5a:62: d5:ed:6e:ad:43:f5:53:1d:a3:ba:5f:6d:92:42:88:61:cc:5f: 7e:24:e9:97:d7:51:ef:e4:dd:f4:0d:b3:39:5a:29:23:9c:76: 1f:a8:13:9c:3b:b9:62:0c:bc:eb:ee:2e:06:06:d0:9b:ea:47: 6e:a9:80:7a:99:69:d9:2a:5e:bb:57:36:ea:98:83:7c:4c:73: 76:df:b4:2f:87:71:86:cc:5a:eb:79:68:69:c3:bb:9d:2f:c5: 8b:8e:fd:64:1c:cd:a2:1e:ae:53:14:a8:a3:e7:7c:70:cc:04: fd:ed:42:a2:10:27:39:db:77:27:2f:33:ab:77:a5:d8:ef:24: 1d:6e:6b:8f:c2:91:da:3b:43:0c:2f:f1:59:0a:46:ec:cb:3f: 41:96:80:a3:04:d9:cd:70:2a:f4:f9:57:58:b8:19:8a:c5:68: f0:ed:3c:00:e7:30:76:f2:2b:38:51:94:4a:29:ed:57:c2:28: 6e:cd:15:ec:46:df:ba:90:50:ca:ac:c4:75:f1:2f:8c:49:f2: ac:1b:6c:11:8d:20:75:ce:f1:1b:8b:76:4d:10:2c:04:68:09: 8b:6f:be:88:b7:01:37:ec:3f:08:f2:b8:0c:74:a5:fd:37:15: 81:87:20:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGnmZGPP1qqGdMqLi5Z9hYHQn80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNjAzMjQyMzQ3MzRaFw0yNjAzMjgwNDAxMzRaMDMxMTAvBgNV BAMTKDIwMjA5QzQ4RTAyNzhGNDI0NzI5QjBGQTg3NDY5OEQxQkY1RThFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7kXbvUzY2/p0Bqh1F1OuXJng fGxFFFQK5cmx1APBdoJatvi1mFKIhTjWUIY5lkkMpjPqy66OpUi6C4AI08D3wGl1 zHLydV37we1w6cB43HHEuAPnwo09WSFBV2oOs/wyxVUzma0AK3sdwzjS6hiyt6tr L2ODNto531waxP8uEcZYANHyP95BotKXu0yumAKuo9PDkhs7DiIdKRNspW2HGdRx sr9BlzyS0eFH5ixefoAVB/LA+r7XJn68vq8HxVOhpGdRANdn/tgA3HN8NQHkCirx tB9lobPMAthSkEYMgYoS99brSh7Y/CiJy/7GtljTuqUYzaWoqboinDFiArPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUICCcSOAnj0JHKbD6h0aY0b9ejjMwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoii3RcySi4ncgh6I4r9MhaYtXtbq1D9VMd o7pfbZJCiGHMX34k6ZfXUe/k3fQNszlaKSOcdh+oE5w7uWIMvOvuLgYG0JvqR26p gHqZadkqXrtXNuqYg3xMc3bftC+HcYbMWut5aGnDu50vxYuO/WQczaIerlMUqKPn fHDMBP3tQqIQJznbdycvM6t3pdjvJB1ua4/Ckdo7Qwwv8VkKRuzLP0GWgKME2c1w KvT5V1i4GYrFaPDtPADnMHbyKzhRlEop7VfCKG7NFexG37qQUMqsxHXxL4xJ8qwb bBGNIHXO8RuLdk0QLARoCYtvvoi3ATfsPwjyuAx0pf03FYGHIFE= -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:48 2026 by rpki-client