$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json) Hash identifier: lDOigyLwIOKIzw7ZvbfUll9GfIo7bpgfloYnaBpSbNw= Subject key identifier: D8:6A:47:A4:AE:1C:9D:47:B5:67:2B:DF:5A:6C:EC:FD:FA:8F:D9:97 Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 3B9F7640483B8CED84E20086620EB3FB7FE32F6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft Manifest number: 04AF Signing time: Tue 24 Mar 2026 09:11:31 +0000 Manifest this update: Tue 24 Mar 2026 09:06:31 +0000 Manifest next update: Fri 27 Mar 2026 10:51:31 +0000 Files and hashes: 1: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: Vb5cnFC6Wpj880gEVaQTtTKJLSX6B7dTQEwn1sKGOMQ=) 2: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: I+1VVYj6jtqkdnEHUu+yoBW+N9Gr17EVEw+bCbgU0gI=) 3: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: m2OZ4XMcLl0P7HlEaALJYW+kWpR85aBYZcawB+LS50Q=) 4: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: 7pHManaPZkFlhfeOFk5WWLbfjaz9rFOW48sliqyfNRA=) 5: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: 2iQsY2shTRUgO13U5IiTRn4DaQNWjPojhHqwN4kzhnY=) 6: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: HwyLb5wrnXQ2TUn7JAl0tKf5RhJTtuv+1v09MJtniBE=) 7: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: 5TZyNRs07vd2OYc4UE6o24oVwD6bSICF8OEcVIlpiwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9f:76:40:48:3b:8c:ed:84:e2:00:86:62:0e:b3:fb:7f:e3:2f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Mar 24 09:06:31 2026 GMT Not After : Mar 27 10:51:31 2026 GMT Subject: CN=D86A47A4AE1C9D47B5672BDF5A6CECFDFA8FD997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:c9:98:c8:c4:52:39:3b:04:16:20:35:d9: 65:04:2c:da:39:c9:63:70:5f:56:5f:05:67:5c:8d: 4a:96:de:c0:e6:b3:89:47:1a:96:b5:62:ea:ad:b2: 22:be:ae:26:8a:bf:be:3c:b9:ba:af:14:d3:f9:36: 8b:5a:6c:4b:1e:50:df:b8:dd:41:38:e7:79:d9:0b: b7:ed:d9:b3:77:ac:57:44:07:e5:74:5f:51:ba:46: b6:c1:bc:db:82:6a:0c:80:a9:67:0e:74:9e:2a:f6: 52:25:f9:79:88:44:de:e1:65:2a:f8:a3:e8:9c:2d: 65:f6:67:da:bd:27:7a:12:56:b1:00:38:5f:38:99: de:67:28:ee:e2:cf:bd:dc:03:06:cb:ff:35:5f:6a: e6:ff:a7:8b:88:12:b4:e5:d9:1d:96:57:f8:d3:51: e9:fb:de:db:21:75:44:06:fb:99:d4:e8:96:9b:80: 84:0e:6e:e3:98:4c:4b:56:1d:e2:0d:f2:c7:ed:34: 99:6a:6b:18:9a:ee:cf:d3:21:e0:47:1d:d0:41:ef: 25:8e:5c:05:40:e1:3a:b1:13:9e:c6:f3:37:ef:23: 85:f6:45:79:70:76:68:11:61:f3:90:73:64:36:b8: b3:f8:c6:95:6c:ed:2b:fc:ea:68:fd:d7:68:01:73: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:47:A4:AE:1C:9D:47:B5:67:2B:DF:5A:6C:EC:FD:FA:8F:D9:97 X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:b8:5d:98:f4:4b:09:38:35:e3:5a:ec:71:02:5c:75:b4:74: 17:a3:ba:64:4b:7e:88:7b:41:51:b1:be:11:8b:c5:49:18:29: be:91:a6:30:c9:b4:eb:52:a5:a4:7c:8c:23:4d:99:45:35:ba: 84:3c:ec:f1:55:a1:d6:07:bb:fc:76:80:10:55:d7:a0:e8:d9: f9:53:27:ac:17:e4:e5:62:b4:9c:c4:65:50:2b:85:56:7e:b5: 6a:1e:b7:02:1f:35:72:8c:b4:74:b4:ab:83:2e:be:2f:bc:43: e3:2d:d0:2c:7f:26:31:a9:b5:19:c3:27:9b:02:9c:9d:c8:3a: ba:a5:55:77:48:97:d9:58:67:c6:ce:e9:5e:8d:15:db:bf:6f: c7:77:6b:19:d3:bd:e3:62:02:36:19:16:8e:79:97:0d:74:91: 79:8c:3b:81:84:4a:b9:40:52:04:39:9f:df:fe:ed:a6:84:3d: f2:74:01:bd:d8:81:e5:36:7b:29:c0:fc:14:cd:27:47:db:80: ba:81:cc:cb:30:7f:18:f1:63:0e:e4:1b:c8:6b:f1:f9:95:90: e2:75:f5:50:ef:f1:b9:ff:2d:c8:02:b0:52:7f:0e:16:8b:4e: a9:92:e0:83:b9:0e:7f:0c:0c:62:94:5c:98:9d:1f:b9:02:33: 00:2f:25:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO592QEg7jO2E4gCGYg6z+3/jL2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNjAzMjQwOTA2MzFaFw0yNjAzMjcxMDUxMzFaMDMxMTAvBgNV BAMTKEQ4NkE0N0E0QUUxQzlENDdCNTY3MkJERjVBNkNFQ0ZERkE4RkQ5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdocmYyMRSOTsEFiA12WUELNo5 yWNwX1ZfBWdcjUqW3sDms4lHGpa1YuqtsiK+riaKv748ubqvFNP5NotabEseUN+4 3UE453nZC7ft2bN3rFdEB+V0X1G6RrbBvNuCagyAqWcOdJ4q9lIl+XmIRN7hZSr4 o+icLWX2Z9q9J3oSVrEAOF84md5nKO7iz73cAwbL/zVfaub/p4uIErTl2R2WV/jT Uen73tshdUQG+5nU6JabgIQObuOYTEtWHeIN8sftNJlqaxia7s/TIeBHHdBB7yWO XAVA4TqxE57G8zfvI4X2RXlwdmgRYfOQc2Q2uLP4xpVs7Sv86mj912gBc4FZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GpHpK4cnUe1ZyvfWmzs/fqP2ZcwHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JD REM1QjQ5OTlEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL64XZj0Swk4NeNa7HECXHW0dBejumRLfoh7 QVGxvhGLxUkYKb6RpjDJtOtSpaR8jCNNmUU1uoQ87PFVodYHu/x2gBBV16Do2flT J6wX5OVitJzEZVArhVZ+tWoetwIfNXKMtHS0q4Muvi+8Q+Mt0Cx/JjGptRnDJ5sC nJ3IOrqlVXdIl9lYZ8bO6V6NFdu/b8d3axnTveNiAjYZFo55lw10kXmMO4GESrlA UgQ5n9/+7aaEPfJ0Ab3YgeU2eynA/BTNJ0fbgLqBzMswfxjxYw7kG8hr8fmVkOJ1 9VDv8bn/LcgCsFJ/DhaLTqmS4IO5Dn8MDGKUXJidH7kCMwAvJZw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:58 2026 by rpki-client