$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: RcP2J4Q7NrN3oSbDKnC4JGs/l9d3BZCHpPKnkBz4DGE= Subject key identifier: A0:B7:3F:2C:49:FC:62:A8:50:DC:DA:88:E9:EE:78:1A:82:0E:6E:B4 Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 38D747D03CFF1D1263F533C36887CCD5F5930075 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 01FE Signing time: Thu 26 Mar 2026 17:51:19 +0000 Manifest this update: Thu 26 Mar 2026 17:46:19 +0000 Manifest next update: Mon 30 Mar 2026 05:25:19 +0000 Files and hashes: 1: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: GWXv/Jcvhsgx5xupvgCdstajkZkqV0dY8SAdabOvJ9g=) 2: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: i3ESbQ36PH0x0YZRRb1dwZH8AAI55qaiHNWQxdDcIDQ=) 3: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 2T9anWJYGXV0eFwi77jhWK8yssFnyZlgHKcoPcMUt7I=) 4: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: xIS6sNK0UqeUJFxq14NuNTlsbhpsETkb9gDhOu1ONl8=) 5: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: fqgPEiZyAb0hynbzck5IXEWLrXIgp6VsY2Pj0WiOvP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d7:47:d0:3c:ff:1d:12:63:f5:33:c3:68:87:cc:d5:f5:93:00:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Mar 26 17:46:19 2026 GMT Not After : Mar 30 05:25:19 2026 GMT Subject: CN=A0B73F2C49FC62A850DCDA88E9EE781A820E6EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:8a:b4:10:1b:1e:f4:b3:1c:79:17:97:dd: e7:40:72:c2:62:fe:f6:3b:9b:89:6e:2b:96:5c:2a: 4c:af:d1:71:b2:a5:a0:96:43:8a:4c:c8:2a:4d:69: 30:10:69:26:28:17:31:6f:f1:ce:9d:e0:50:67:fc: ee:70:3d:96:d5:fe:09:17:0f:6c:29:bf:95:76:ed: 4e:21:c7:6b:f9:f5:b6:50:bc:37:55:4e:ca:82:42: eb:4e:1c:4f:e3:84:03:e2:6d:8e:3b:4a:68:ac:42: 7d:36:67:4b:a1:61:46:f1:17:42:af:5f:f2:0d:aa: 60:f1:2c:4c:70:a1:81:81:e7:93:eb:23:7e:b9:a3: 18:ef:bb:2c:97:73:e4:0e:be:8a:fb:bb:d4:63:3d: 9e:b6:86:f3:3e:8f:56:04:42:f8:be:a1:91:f4:02: 5c:73:c6:c2:32:b2:07:1f:5e:df:c5:0c:e7:2e:ce: 71:64:ef:51:09:12:e5:e0:a8:ae:b4:b7:99:c9:ed: 96:8b:58:52:21:ad:bf:81:ba:11:30:c3:ff:e0:d1: 70:0d:65:c7:92:0c:79:2e:87:48:95:71:85:0b:66: a5:19:5f:80:1d:79:e6:45:08:da:c3:e7:7c:17:9b: 32:09:31:f6:ef:7b:e7:e8:4f:ea:52:d5:12:e9:21: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:3F:2C:49:FC:62:A8:50:DC:DA:88:E9:EE:78:1A:82:0E:6E:B4 X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9b:30:cd:47:03:59:82:0d:d5:04:4b:75:1d:55:d6:19:90: 1c:af:a4:8c:97:c1:70:c1:dd:77:fe:61:2d:b5:28:fc:c2:36: 63:b1:8e:8a:9a:03:5b:3c:29:32:d4:a6:7b:3f:92:7a:51:c0: 5f:41:4b:cc:47:34:72:58:f8:2b:8a:31:10:a0:ea:03:75:d0: 2d:9c:23:1b:f0:a9:4c:91:43:9f:96:8f:2d:e1:b7:28:7f:94: 8d:70:8b:f3:5c:24:61:a0:16:e5:3f:bb:3f:f4:43:37:d7:46: 93:82:75:0e:ed:b5:b3:84:98:12:fe:4d:4e:98:0e:29:31:34: 78:25:27:1b:cb:6c:c1:96:85:a0:04:08:0f:21:94:e4:e2:4f: 6b:98:e7:b2:c5:89:ad:a4:9a:d9:52:5a:f2:91:28:74:c4:5f: ed:ff:9b:88:9d:13:85:84:86:c0:e6:c6:8a:19:ae:00:ca:31: fc:24:89:22:53:f7:02:f4:ed:a5:43:a9:80:77:b6:82:55:91: 54:bd:a2:67:17:25:88:48:f1:2d:be:7c:ae:76:a1:45:9c:35: e2:34:0c:af:41:07:53:78:d8:a5:10:9f:b8:e3:6e:9a:e0:95: 8b:7f:97:85:66:6d:07:60:8b:93:dc:2d:5c:1b:97:43:22:e9: 67:ca:c6:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONdH0Dz/HRJj9TPDaIfM1fWTAHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNjAzMjYxNzQ2MTlaFw0yNjAzMzAwNTI1MTlaMDMxMTAvBgNV BAMTKEEwQjczRjJDNDlGQzYyQTg1MERDREE4OEU5RUU3ODFBODIwRTZFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyIq0EBse9LMceReX3edAcsJi /vY7m4luK5ZcKkyv0XGypaCWQ4pMyCpNaTAQaSYoFzFv8c6d4FBn/O5wPZbV/gkX D2wpv5V27U4hx2v59bZQvDdVTsqCQutOHE/jhAPibY47SmisQn02Z0uhYUbxF0Kv X/INqmDxLExwoYGB55PrI365oxjvuyyXc+QOvor7u9RjPZ62hvM+j1YEQvi+oZH0 AlxzxsIysgcfXt/FDOcuznFk71EJEuXgqK60t5nJ7ZaLWFIhrb+BuhEww//g0XAN ZceSDHkuh0iVcYULZqUZX4AdeeZFCNrD53wXmzIJMfbve+foT+pS1RLpIY8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLc/LEn8YqhQ3NqI6e54GoIObrQwHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIObMM1HA1mCDdUES3UdVdYZkByvpIyXwXDB 3Xf+YS21KPzCNmOxjoqaA1s8KTLUpns/knpRwF9BS8xHNHJY+CuKMRCg6gN10C2c IxvwqUyRQ5+Wjy3htyh/lI1wi/NcJGGgFuU/uz/0QzfXRpOCdQ7ttbOEmBL+TU6Y DikxNHglJxvLbMGWhaAECA8hlOTiT2uY57LFia2kmtlSWvKRKHTEX+3/m4idE4WE hsDmxooZrgDKMfwkiSJT9wL07aVDqYB3toJVkVS9omcXJYhI8S2+fK52oUWcNeI0 DK9BB1N42KUQn7jjbprglYt/l4VmbQdgi5PcLVwbl0Mi6WfKxs4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:00 2026 by rpki-client