$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: 7NnbAJ2rihejnZxASAkOGIEYnaKsT3zK/l9B2qKKwwk= Subject key identifier: DE:43:23:70:FB:6B:C1:08:81:0A:98:D5:79:9F:43:FC:CE:79:A7:2A Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 2697C6AACFF784D3FA0C6BA3993F0457C46A063B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: D6 Signing time: Thu 26 Mar 2026 10:11:37 +0000 Manifest this update: Thu 26 Mar 2026 10:06:37 +0000 Manifest next update: Sun 29 Mar 2026 16:49:37 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: kc+laSdMLvFhLTOh1GnBngFYuiJVCS3LhPR5lHgrK2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:97:c6:aa:cf:f7:84:d3:fa:0c:6b:a3:99:3f:04:57:c4:6a:06:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Mar 26 10:06:37 2026 GMT Not After : Mar 29 16:49:37 2026 GMT Subject: CN=DE432370FB6BC108810A98D5799F43FCCE79A72A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:1b:9c:ec:87:db:8d:0a:8d:77:c7:1e:1e: f1:3b:db:40:c6:5f:fd:f5:36:e1:b6:7d:7a:b9:76: 36:a7:0b:62:c9:a9:37:1c:16:90:be:87:d3:f8:5b: 87:13:a1:ef:ae:6e:f3:8c:08:72:53:c6:05:a8:85: 40:46:fc:29:9d:40:2e:48:23:fd:f8:d6:ef:9e:6c: c4:ea:57:10:85:b7:6f:ce:60:c4:19:45:12:5a:d1: 0f:ec:b6:7b:c9:fa:14:d1:12:9a:ec:71:4a:24:2f: 2a:3f:88:3f:cb:88:ae:74:04:4e:98:42:fb:60:49: 2b:ba:b1:ed:09:83:ab:30:b9:4f:08:c3:c7:cf:1e: db:09:92:99:d6:07:04:98:d1:2a:a8:ee:37:b8:53: aa:7d:47:a4:91:83:a2:54:02:40:6a:31:b5:47:b3: 7d:a1:f0:de:92:b9:26:17:ea:44:e7:d6:57:57:e4: 36:50:bb:00:b1:37:b0:52:2e:d7:91:c7:31:b5:8c: 05:31:87:30:f1:24:17:81:d8:f0:3f:02:b1:a9:36: c6:64:86:89:4c:96:22:85:eb:1f:30:98:ef:db:bb: 8c:7b:40:06:10:db:fc:0f:a5:aa:1f:2d:55:58:71: 70:9d:e8:aa:18:72:9c:60:57:0e:2f:32:ae:a4:5d: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:43:23:70:FB:6B:C1:08:81:0A:98:D5:79:9F:43:FC:CE:79:A7:2A X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1c:ab:cd:76:a8:97:4b:10:51:92:cd:ff:8a:0f:58:7d:52: 31:b8:a0:d2:53:de:99:7a:aa:6b:a8:e0:c2:c1:d7:be:28:1a: cb:a5:a1:ca:76:49:a6:59:22:2f:dd:a2:02:e9:4e:88:2e:fc: d9:ea:6c:f0:06:25:b7:f3:f1:24:1b:48:0d:ed:85:fe:59:58: 86:7e:64:82:64:56:f9:b0:be:5f:63:ea:56:ef:55:d1:4e:51: 31:e9:b4:06:8d:b4:0f:ad:44:e0:16:68:99:fc:42:07:06:fc: 00:8e:2a:5d:2e:1a:9e:03:0a:c2:fc:d8:43:bf:c0:b3:64:04: 4a:1e:72:2e:64:4c:6c:d7:3f:be:2a:d0:35:5b:8a:6e:b2:07: 9a:87:6f:41:29:45:2c:3d:25:6e:bf:ff:33:a1:56:be:b5:ae: 13:1c:e4:ce:02:11:38:b0:68:71:a7:bf:cd:47:95:d6:b5:06: b8:1b:27:9b:51:ba:84:29:69:2c:ac:69:c4:ab:41:24:a9:82: b4:b6:65:74:aa:76:f3:45:0e:f3:c7:c0:46:69:f7:24:9f:20: d3:11:09:03:5e:3f:48:3d:1d:d4:4c:79:eb:30:31:ab:a1:28: fa:26:0b:5b:bd:b0:0c:6f:45:f2:98:c9:f3:4d:87:ee:12:25: 6d:62:fd:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpfGqs/3hNP6DGujmT8EV8RqBjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNjAzMjYxMDA2MzdaFw0yNjAzMjkxNjQ5MzdaMDMxMTAvBgNV BAMTKERFNDMyMzcwRkI2QkMxMDg4MTBBOThENTc5OUY0M0ZDQ0U3OUE3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsexuc7IfbjQqNd8ceHvE720DG X/31NuG2fXq5djanC2LJqTccFpC+h9P4W4cToe+ubvOMCHJTxgWohUBG/CmdQC5I I/341u+ebMTqVxCFt2/OYMQZRRJa0Q/stnvJ+hTREprscUokLyo/iD/LiK50BE6Y QvtgSSu6se0Jg6swuU8Iw8fPHtsJkpnWBwSY0Sqo7je4U6p9R6SRg6JUAkBqMbVH s32h8N6SuSYX6kTn1ldX5DZQuwCxN7BSLteRxzG1jAUxhzDxJBeB2PA/ArGpNsZk holMliKF6x8wmO/bu4x7QAYQ2/wPpaofLVVYcXCd6KoYcpxgVw4vMq6kXb6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3kMjcPtrwQiBCpjVeZ9D/M55pyowHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgcq812qJdLEFGSzf+KD1h9UjG4oNJT3pl6 qmuo4MLB174oGsulocp2SaZZIi/dogLpTogu/NnqbPAGJbfz8SQbSA3thf5ZWIZ+ ZIJkVvmwvl9j6lbvVdFOUTHptAaNtA+tROAWaJn8QgcG/ACOKl0uGp4DCsL82EO/ wLNkBEoeci5kTGzXP74q0DVbim6yB5qHb0EpRSw9JW6//zOhVr61rhMc5M4CETiw aHGnv81Hlda1BrgbJ5tRuoQpaSysacSrQSSpgrS2ZXSqdvNFDvPHwEZp9ySfINMR CQNeP0g9HdRMeeswMauhKPomC1u9sAxvRfKYyfNNh+4SJW1i/Tw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:01:27 2026 by rpki-client