$ rpki-client -vvf repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft File: B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft (raw, json) Hash identifier: RGre5zdRf0Y1kzelweNG2Vy7LrL6Ni+bVe5Ol0axYbI= Subject key identifier: 76:EC:D2:78:8D:F8:0B:6C:4F:41:5B:8C:C1:65:25:E2:9D:59:54:C5 Authority key identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC Certificate issuer: /CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC Certificate serial: 37BA676783029A9EE3B708BEF211B46DA2CF652F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft Manifest number: 6B Signing time: Wed 25 Mar 2026 21:52:01 +0000 Manifest this update: Wed 25 Mar 2026 21:47:01 +0000 Manifest next update: Sun 29 Mar 2026 03:09:01 +0000 Files and hashes: 1: B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl (hash: mnQXysS6mD1zy2Nvq3/7IEBdbKZcAbwxLZC8vOjogec=) 2: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: DZ++EX33vrVv29PriPGZOi+tkuRnHbRvl+nMO8/2+oI=) 3: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: KdcszIzsjtlFTy1TnrOq7FG5XAfFe/aLCqLEjewq8yE=) 4: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: pZ8/jlcW67uo3RV+YVwV6BROA/FZ969qlSyF5c20C4w=) 5: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: 63tfpqlJCEzr1F8+1HAkrMYkUUC5brVRNqbAmx9Yovs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ba:67:67:83:02:9a:9e:e3:b7:08:be:f2:11:b4:6d:a2:cf:65:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC Validity Not Before: Mar 25 21:47:01 2026 GMT Not After : Mar 29 03:09:01 2026 GMT Subject: CN=76ECD2788DF80B6C4F415B8CC16525E29D5954C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:72:5c:92:5d:02:80:21:15:69:3a:48:0e: 5a:7a:53:4b:c9:2e:d9:35:64:c4:66:06:f7:56:4a: 21:52:87:50:31:c8:4f:33:af:33:86:62:b5:ca:a5: 45:9d:b3:1a:19:75:e6:1a:f6:10:64:fd:52:02:f7: 83:2b:77:d6:f6:6a:4d:af:0c:83:f3:aa:b8:cc:71: c1:08:32:ea:dc:94:e7:96:75:09:63:f2:30:01:07: 37:00:bc:ed:5b:41:a1:04:d5:87:ee:28:a7:12:58: 98:21:82:7b:1d:9b:31:33:e2:13:67:27:a6:1a:81: 8c:15:af:42:da:15:65:a1:47:d3:18:f8:2b:e5:07: a3:47:8b:66:6f:3c:0f:f4:1f:fc:91:79:4b:75:97: 24:13:09:fd:41:b5:55:4c:36:ed:47:9d:d1:56:00: 49:55:01:34:e6:89:24:5b:24:28:34:9d:74:8f:61: f2:c2:04:42:ce:96:9e:a3:4d:d7:fb:dc:1c:bf:86: 3c:a1:22:1a:21:f3:ac:c9:2a:3e:b8:71:72:dc:22: 56:c2:2f:84:7d:95:7e:9e:71:4c:73:fd:8e:11:27: f1:8f:3d:78:be:d3:3a:9d:b2:c3:a8:56:de:ea:55: 3c:e6:06:81:38:36:1e:8d:e4:8a:f1:d3:6c:09:8b: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EC:D2:78:8D:F8:0B:6C:4F:41:5B:8C:C1:65:25:E2:9D:59:54:C5 X509v3 Authority Key Identifier: keyid:B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b4:99:9f:25:67:d7:43:69:9e:a5:32:f6:42:7f:61:80:06: 76:e1:59:72:0a:30:fa:2d:dd:9c:e5:e8:82:89:63:27:17:64: df:f3:c0:1f:15:53:41:0c:e0:99:d4:ce:62:51:5d:66:82:06: 08:b2:4f:af:b6:08:99:bc:62:b7:c7:56:d6:89:5f:db:48:2b: 83:7f:6a:67:df:0a:ad:a9:21:f4:23:5b:8c:19:29:60:9d:ef: e9:95:6d:d1:bc:fb:fd:77:b3:48:34:3a:2e:af:5b:d2:43:b0: 83:c1:51:8d:0c:89:e4:ff:06:86:eb:2c:0e:f2:f0:9b:c8:97: 28:83:37:0f:5d:c9:7a:c2:0b:5d:57:15:c1:29:7d:aa:15:93: cf:df:dd:de:c2:1c:ec:56:9a:51:ad:6f:4d:79:5c:9b:e2:f2: e3:a9:ad:c1:be:ae:ac:9e:fe:b1:10:b7:b3:14:5a:c0:0c:f1: 17:d0:49:ad:ee:e9:12:63:c7:b8:8f:f2:d5:3c:e3:5f:77:7f: f1:49:f2:3a:a1:03:ff:e5:79:77:6c:bb:35:f7:61:67:ea:eb: 0d:d8:1b:86:8e:c4:7a:e3:6a:7e:b9:bf:fc:57:49:6f:91:42: 0c:f5:28:48:b2:d7:ae:ed:2c:bd:d3:14:9c:29:ec:8d:09:20: 87:79:43:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7pnZ4MCmp7jtwi+8hG0baLPZS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2RjFB MjM1REFCQzAeFw0yNjAzMjUyMTQ3MDFaFw0yNjAzMjkwMzA5MDFaMDMxMTAvBgNV BAMTKDc2RUNEMjc4OERGODBCNkM0RjQxNUI4Q0MxNjUyNUUyOUQ1OTU0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCplXJckl0CgCEVaTpIDlp6U0vJ Ltk1ZMRmBvdWSiFSh1AxyE8zrzOGYrXKpUWdsxoZdeYa9hBk/VIC94Mrd9b2ak2v DIPzqrjMccEIMurclOeWdQlj8jABBzcAvO1bQaEE1YfuKKcSWJghgnsdmzEz4hNn J6YagYwVr0LaFWWhR9MY+CvlB6NHi2ZvPA/0H/yReUt1lyQTCf1BtVVMNu1HndFW AElVATTmiSRbJCg0nXSPYfLCBELOlp6jTdf73By/hjyhIhoh86zJKj64cXLcIlbC L4R9lX6ecUxz/Y4RJ/GPPXi+0zqdssOoVt7qVTzmBoE4Nh6N5Irx02wJizbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUduzSeI34C2xPQVuMwWUl4p1ZVMUwHwYDVR0j BBgwFoAUtvKfdw9bMLX3tzj0UkUG8aI12rwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YThkNTRhZS04NzBkLTQzNDgtYWI1OC0zMDA5MGE3NjBhMzYvMC9CNkYyOUY3NzBG NUIzMEI1RjdCNzM4RjQ1MjQ1MDZGMUEyMzVEQUJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2RjFBMjM1 REFCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2 RjFBMjM1REFCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK0mZ8lZ9dDaZ6lMvZCf2GABnbhWXIKMPot 3Zzl6IKJYycXZN/zwB8VU0EM4JnUzmJRXWaCBgiyT6+2CJm8YrfHVtaJX9tIK4N/ amffCq2pIfQjW4wZKWCd7+mVbdG8+/13s0g0Oi6vW9JDsIPBUY0MieT/BobrLA7y 8JvIlyiDNw9dyXrCC11XFcEpfaoVk8/f3d7CHOxWmlGtb015XJvi8uOprcG+rqye /rEQt7MUWsAM8RfQSa3u6RJjx7iP8tU84193f/FJ8jqhA//leXdsuzX3YWfq6w3Y G4aOxHrjan65v/xXSW+RQgz1KEiy167tLL3TFJwp7I0JIId5Q8c= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:42 2026 by rpki-client