$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: h0TkNYu07NiYkB9TENa3w3d40muZQuvAUAnOtDzmQuE= Subject key identifier: 5D:ED:41:58:91:29:C3:E2:DD:F6:61:C7:9A:C3:69:BA:49:47:0F:29 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 6ED55D90D401D4C671936E8F4FAC404C5767D7F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 055B Signing time: Thu 26 Mar 2026 00:31:16 +0000 Manifest this update: Thu 26 Mar 2026 00:26:16 +0000 Manifest next update: Sun 29 Mar 2026 07:38:16 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=) 2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: kg7T/qyBon3Ydvrn4aF8JHLFMKqe0mClLcWOv3nm5sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d5:5d:90:d4:01:d4:c6:71:93:6e:8f:4f:ac:40:4c:57:67:d7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: Mar 26 00:26:16 2026 GMT Not After : Mar 29 07:38:16 2026 GMT Subject: CN=5DED41589129C3E2DDF661C79AC369BA49470F29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:6b:11:bd:2a:24:a1:36:fc:81:d6:18:5e: 8b:55:09:bd:80:03:5a:b4:b3:74:6b:e4:cb:44:38: bd:38:36:27:cf:f4:34:3a:7c:28:18:2e:4a:80:67: f6:e8:f5:0e:4d:ee:ed:ea:d9:b6:d6:77:48:71:f9: 1a:9d:29:32:a9:dc:73:41:9a:36:15:2e:9d:07:65: f6:bb:b8:a1:e3:6e:6a:3b:e6:1c:15:31:f5:56:d8: 29:84:fb:6a:c8:08:fd:7f:1f:6e:e1:98:63:96:ae: d5:95:6b:03:ef:7e:7e:c5:a3:30:94:4f:8e:02:25: 2e:c1:35:e5:e0:61:4f:5e:08:e9:8b:08:d9:eb:95: ec:2b:4c:d8:c4:43:0c:94:fa:66:69:56:68:85:10: b8:ce:70:33:a8:65:e1:76:a0:09:29:b9:e7:08:5a: c6:95:50:4e:d5:f4:06:f0:d7:00:c6:78:61:e6:30: 13:3e:f0:1f:96:5f:af:64:48:7f:27:34:ca:05:b9: 6d:ff:18:ab:fb:65:53:c0:74:7e:5f:a5:f3:07:78: b9:aa:9c:2a:dc:7b:f3:92:3b:69:51:95:53:8b:59: 32:da:bb:4f:b0:38:dd:8e:d1:8f:bb:95:cc:2e:ce: 11:55:fe:c6:a2:d6:e9:fa:76:4c:d9:61:2a:28:89: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:ED:41:58:91:29:C3:E2:DD:F6:61:C7:9A:C3:69:BA:49:47:0F:29 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c1:ed:af:3b:90:ae:e1:75:72:e9:8f:06:6c:1f:0e:f9:67: bc:9e:b2:9b:94:df:c6:ad:33:b4:ea:07:64:30:a1:6b:63:9a: 97:dd:b1:be:c7:33:a2:fb:34:1a:1a:25:cb:50:30:f1:f2:b8: ae:56:d6:31:a7:68:e4:59:1c:e1:13:14:48:36:43:b6:79:6f: ef:32:66:e6:54:12:1d:2a:f4:ff:bb:1a:64:83:02:c4:59:ca: 37:4e:53:b7:40:64:80:b6:a6:83:39:d1:c8:3a:4d:c3:be:08: f1:3b:48:83:10:54:26:fb:64:54:77:54:ac:86:a0:01:ed:63: 8a:d1:40:5f:61:18:9b:8a:bf:81:19:53:9a:64:a3:5f:f2:72: 50:9f:c7:cc:6c:8e:ce:c4:4f:6a:eb:6d:55:4a:c9:a3:c9:f4: 1b:64:3d:cc:e2:4a:be:ce:57:28:f1:9d:3e:4f:36:24:7d:02: c6:d4:ce:cf:19:d7:f9:8e:48:d9:ef:ae:67:f2:ac:83:9c:4b: eb:62:ab:72:e5:5d:25:31:d5:80:18:25:dd:b0:47:79:11:de: 62:fb:bf:fb:30:80:d1:60:42:15:80:81:5f:58:8a:30:1a:6c: 1c:54:90:c4:bf:38:30:73:03:b3:b1:6e:c2:c9:7f:69:c4:65: ec:32:fc:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtVdkNQB1MZxk26PT6xATFdn1/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNjAzMjYwMDI2MTZaFw0yNjAzMjkwNzM4MTZaMDMxMTAvBgNV BAMTKDVERUQ0MTU4OTEyOUMzRTJEREY2NjFDNzlBQzM2OUJBNDk0NzBGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcGsRvSokoTb8gdYYXotVCb2A A1q0s3Rr5MtEOL04NifP9DQ6fCgYLkqAZ/bo9Q5N7u3q2bbWd0hx+RqdKTKp3HNB mjYVLp0HZfa7uKHjbmo75hwVMfVW2CmE+2rICP1/H27hmGOWrtWVawPvfn7FozCU T44CJS7BNeXgYU9eCOmLCNnrlewrTNjEQwyU+mZpVmiFELjOcDOoZeF2oAkpuecI WsaVUE7V9Abw1wDGeGHmMBM+8B+WX69kSH8nNMoFuW3/GKv7ZVPAdH5fpfMHeLmq nCrce/OSO2lRlVOLWTLau0+wON2O0Y+7lcwuzhFV/sai1un6dkzZYSooiYa3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXe1BWJEpw+Ld9mHHmsNpuklHDykwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrB7a87kK7hdXLpjwZsHw75Z7yespuU38at M7TqB2QwoWtjmpfdsb7HM6L7NBoaJctQMPHyuK5W1jGnaORZHOETFEg2Q7Z5b+8y ZuZUEh0q9P+7GmSDAsRZyjdOU7dAZIC2poM50cg6TcO+CPE7SIMQVCb7ZFR3VKyG oAHtY4rRQF9hGJuKv4EZU5pko1/yclCfx8xsjs7ET2rrbVVKyaPJ9BtkPcziSr7O VyjxnT5PNiR9AsbUzs8Z1/mOSNnvrmfyrIOcS+tiq3LlXSUx1YAYJd2wR3kR3mL7 v/swgNFgQhWAgV9YijAabBxUkMS/ODBzA7OxbsLJf2nEZewy/Go= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:32 2026 by rpki-client