$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: jHKjG+tiRQmBxUbXcL7fQ38bm2J25o1sNbthDazyD4Q= Subject key identifier: 78:07:73:6B:AC:96:1B:38:7B:D6:79:B7:17:58:89:B0:9C:F7:C2:DD Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 4142F36871FF0A1A2177FE5B56AF9C9E2ACBBEC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 027A Signing time: Wed 25 Mar 2026 15:51:00 +0000 Manifest this update: Wed 25 Mar 2026 15:46:00 +0000 Manifest next update: Sun 29 Mar 2026 01:19:00 +0000 Files and hashes: 1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: //+o8fHe6E0loKsGSmkgVyIWp7gWm5okCpSCAbrnfh4=) 2: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: bHeQUn1Q5QAuSGrNtjd44dOar8ur2WH9gvGqnCAjkQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:42:f3:68:71:ff:0a:1a:21:77:fe:5b:56:af:9c:9e:2a:cb:be:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Mar 25 15:46:00 2026 GMT Not After : Mar 29 01:19:00 2026 GMT Subject: CN=7807736BAC961B387BD679B7175889B09CF7C2DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:2f:4f:88:c9:98:3a:a6:f0:ef:35:3a:0b: b2:dc:6a:09:c0:70:79:10:22:b1:26:8f:28:23:db: 38:93:aa:d9:d2:13:02:29:44:cf:93:03:57:69:88: 86:cc:2c:35:32:c2:36:c3:cd:3c:c4:85:4e:bc:53: 67:5c:99:26:14:a3:27:e1:31:64:91:6b:10:0a:8a: ee:13:52:f9:0c:42:cf:19:55:3f:f7:e7:db:8d:66: 36:ec:c1:e8:2e:d2:e7:23:92:9c:96:44:66:82:a0: d2:93:f5:02:f1:fa:2e:57:f1:ba:a7:50:75:cb:e7: d8:87:f0:8b:6b:fa:44:5d:39:eb:9e:8d:b1:f1:47: b8:fb:8c:a2:71:49:50:6f:85:5e:bf:c6:61:01:6a: 6d:91:f2:7e:39:8f:42:60:82:61:7f:30:df:a9:71: 01:63:e3:6d:4e:75:75:1e:4b:00:91:e9:43:4a:44: db:f1:6a:74:bd:fb:55:07:b3:b1:c1:2c:3d:9e:4a: 57:2d:96:1b:ee:97:0e:69:d1:82:66:fe:d7:fa:fd: 6b:22:10:fe:bb:1d:d0:5d:ec:10:f9:c9:ac:09:fa: 90:19:ff:74:04:d3:47:67:93:e5:c4:cd:f2:52:20: a4:14:d4:15:18:21:7c:2b:a7:4e:27:3d:0d:77:d7: 6c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:07:73:6B:AC:96:1B:38:7B:D6:79:B7:17:58:89:B0:9C:F7:C2:DD X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4e:12:ee:93:da:59:2f:4e:8d:ae:1f:3b:d7:88:a1:48:2c: ed:d7:35:5d:f2:14:72:be:0b:a4:81:50:7d:61:54:e4:71:e6: ba:22:e9:3d:7b:2d:44:d9:7b:29:8d:66:79:a4:33:bd:f4:7d: e9:1c:17:84:9f:89:f3:a8:91:a6:a3:bd:77:b2:39:70:3f:16: 56:4f:fe:09:6e:e1:ca:30:2f:01:74:9f:a3:d8:c1:09:09:90: e7:b9:29:6b:b6:dc:1c:35:39:7d:e5:ac:e4:59:40:9a:42:c9: e4:98:af:44:e6:b6:4a:8f:a1:e9:ab:a3:ba:91:45:f9:c0:9f: 49:ad:58:ea:32:5b:12:03:56:7e:d9:75:5a:76:66:f0:a8:71: 26:6c:dd:8e:b4:a0:e1:27:65:e6:0a:ed:51:a1:13:c7:c4:9a: 03:b1:99:7c:8d:0d:c8:31:9f:75:76:36:bd:35:2a:eb:25:89: 4c:e1:79:65:8c:86:76:88:1a:12:76:88:bb:7e:6f:5a:54:dc: 57:6a:da:0c:b5:55:77:88:19:7f:7b:b9:e6:6c:04:0d:84:a6: 7a:60:9f:ff:9c:a4:b4:93:17:24:c6:d3:6f:34:d4:65:d9:0b: 7f:72:bd:c0:16:87:55:9c:3e:97:42:a5:28:a6:c2:b3:c3:3d: 53:ed:2d:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQULzaHH/Chohd/5bVq+cnirLvscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNjAzMjUxNTQ2MDBaFw0yNjAzMjkwMTE5MDBaMDMxMTAvBgNV BAMTKDc4MDc3MzZCQUM5NjFCMzg3QkQ2NzlCNzE3NTg4OUIwOUNGN0MyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMC9PiMmYOqbw7zU6C7LcagnA cHkQIrEmjygj2ziTqtnSEwIpRM+TA1dpiIbMLDUywjbDzTzEhU68U2dcmSYUoyfh MWSRaxAKiu4TUvkMQs8ZVT/359uNZjbswegu0ucjkpyWRGaCoNKT9QLx+i5X8bqn UHXL59iH8Itr+kRdOeuejbHxR7j7jKJxSVBvhV6/xmEBam2R8n45j0JggmF/MN+p cQFj421OdXUeSwCR6UNKRNvxanS9+1UHs7HBLD2eSlctlhvulw5p0YJm/tf6/Wsi EP67HdBd7BD5yawJ+pAZ/3QE00dnk+XEzfJSIKQU1BUYIXwrp04nPQ1312yXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAdza6yWGzh71nm3F1iJsJz3wt0wHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlOEu6T2lkvTo2uHzvXiKFILO3XNV3yFHK+ C6SBUH1hVORx5roi6T17LUTZeymNZnmkM730fekcF4SfifOokaajvXeyOXA/FlZP /glu4cowLwF0n6PYwQkJkOe5KWu23Bw1OX3lrORZQJpCyeSYr0TmtkqPoemro7qR RfnAn0mtWOoyWxIDVn7ZdVp2ZvCocSZs3Y60oOEnZeYK7VGhE8fEmgOxmXyNDcgx n3V2Nr01KusliUzheWWMhnaIGhJ2iLt+b1pU3Fdq2gy1VXeIGX97ueZsBA2Epnpg n/+cpLSTFyTG02801GXZC39yvcAWh1WcPpdCpSimwrPDPVPtLeg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:57 2026 by rpki-client