$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: wxDJmSK1LHveIFvThMR0h7EP1Z+MH8rb0uvzlX9f7ho= Subject key identifier: 73:E7:1E:D4:BA:51:51:28:0F:40:F5:C2:E5:7A:E6:D0:C4:16:3D:2D Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 35E129359B245BB80C43DC31587A2907E19225A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: E4 Signing time: Thu 26 Mar 2026 06:01:51 +0000 Manifest this update: Thu 26 Mar 2026 05:56:51 +0000 Manifest next update: Sun 29 Mar 2026 13:46:51 +0000 Files and hashes: 1: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: 3Qt5AjFdde65JQYMxndwsbUPUzJUDglNR7hPD2nsdqI=) 2: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=) 3: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=) 4: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=) 5: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=) 6: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=) 7: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=) 8: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e1:29:35:9b:24:5b:b8:0c:43:dc:31:58:7a:29:07:e1:92:25:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Mar 26 05:56:51 2026 GMT Not After : Mar 29 13:46:51 2026 GMT Subject: CN=73E71ED4BA5151280F40F5C2E57AE6D0C4163D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:9a:2e:80:ef:67:63:7f:4e:33:94:47:d7: 76:95:30:c1:78:3b:ce:70:d2:a0:6b:b0:06:4a:21: f4:bb:d6:b7:aa:73:cb:9c:75:b1:d3:a2:d6:b2:2d: 37:a3:46:44:18:9f:c1:1b:72:84:d8:14:d8:07:21: 12:11:89:c1:8f:6b:81:92:1b:6f:9c:38:14:f2:53: d9:89:ec:80:4e:d4:b3:ff:19:d5:19:a0:f5:64:a9: 60:d2:6e:b0:9d:e4:63:d5:1b:61:63:34:0b:b8:17: 9e:38:1b:c8:b3:5d:28:b8:c0:86:36:f5:6d:f4:ed: 1d:55:c6:f7:c3:63:da:21:77:6e:2f:f9:63:b6:91: d8:a0:68:18:fd:15:ea:85:a8:48:c6:ee:0c:3c:6b: b4:b3:1c:aa:df:35:1e:b0:63:71:c1:ea:54:29:83: fa:cb:cc:3c:f5:5b:19:09:7e:28:d1:24:da:59:eb: e8:a7:44:03:12:f0:92:5a:23:ea:dd:16:72:98:d0: a4:38:f4:c0:e0:91:2b:2c:dd:0f:9d:c7:fe:f5:5b: 5e:f0:d8:53:1c:9b:5e:74:3f:d2:61:37:8a:80:3d: e3:1a:86:e1:35:7d:e7:4e:b0:49:de:01:14:ab:00: 03:12:27:cc:2c:d8:90:25:67:26:31:b9:6c:be:1c: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E7:1E:D4:BA:51:51:28:0F:40:F5:C2:E5:7A:E6:D0:C4:16:3D:2D X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ef:a6:b6:bf:72:91:93:6d:a3:50:a8:76:7f:2a:d3:b3:76: 66:01:bb:7d:88:2f:87:82:9f:b2:d9:74:00:e9:cb:9a:de:19: 65:29:83:a2:2c:3e:b4:a2:9e:67:9f:75:1e:15:58:60:ef:39: 53:f5:23:fe:09:1b:9a:d7:98:50:7c:ea:94:b0:8a:83:d1:ee: e9:ef:9f:14:fc:fb:47:13:93:ae:2e:c0:91:c8:c4:9f:4e:7b: 0d:5e:03:df:97:31:64:68:c7:69:b2:c3:ac:f4:f8:32:62:13: 5a:53:02:3a:f5:5f:b2:5d:52:c9:81:c8:0f:b9:cf:c9:bc:07: bb:67:87:5a:3c:ac:04:8c:ba:42:9f:25:2d:bf:81:1a:b1:8d: 6a:a8:ed:f7:03:02:26:d5:95:5d:50:40:2e:e5:bf:19:59:17: 0b:12:11:91:ee:c4:ad:2c:bd:9c:6d:42:27:70:65:a5:30:f3: c6:26:c5:2f:97:6b:6b:18:bb:dd:ec:c1:60:a5:27:02:5a:8c: d9:39:e8:e6:2d:85:ac:18:52:38:cc:da:d3:d9:8f:8c:a3:82: 4a:e6:3f:67:79:47:cb:17:59:f2:7b:22:5b:45:3a:b1:48:61: 3e:fa:4a:e2:76:2e:67:5f:09:81:3f:0f:5c:67:76:b5:65:c9: 00:c6:51:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeEpNZskW7gMQ9wxWHopB+GSJaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNjAzMjYwNTU2NTFaFw0yNjAzMjkxMzQ2NTFaMDMxMTAvBgNV BAMTKDczRTcxRUQ0QkE1MTUxMjgwRjQwRjVDMkU1N0FFNkQwQzQxNjNEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgpougO9nY39OM5RH13aVMMF4 O85w0qBrsAZKIfS71reqc8ucdbHTotayLTejRkQYn8EbcoTYFNgHIRIRicGPa4GS G2+cOBTyU9mJ7IBO1LP/GdUZoPVkqWDSbrCd5GPVG2FjNAu4F544G8izXSi4wIY2 9W307R1VxvfDY9ohd24v+WO2kdigaBj9FeqFqEjG7gw8a7SzHKrfNR6wY3HB6lQp g/rLzDz1WxkJfijRJNpZ6+inRAMS8JJaI+rdFnKY0KQ49MDgkSss3Q+dx/71W17w 2FMcm150P9JhN4qAPeMahuE1fedOsEneARSrAAMSJ8ws2JAlZyYxuWy+HIuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+ce1LpRUSgPQPXC5Xrm0MQWPS0wHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLvpra/cpGTbaNQqHZ/KtOzdmYBu32IL4eC n7LZdADpy5reGWUpg6IsPrSinmefdR4VWGDvOVP1I/4JG5rXmFB86pSwioPR7unv nxT8+0cTk64uwJHIxJ9Oew1eA9+XMWRox2myw6z0+DJiE1pTAjr1X7JdUsmByA+5 z8m8B7tnh1o8rASMukKfJS2/gRqxjWqo7fcDAibVlV1QQC7lvxlZFwsSEZHuxK0s vZxtQidwZaUw88YmxS+Xa2sYu93swWClJwJajNk56OYthawYUjjM2tPZj4yjgkrm P2d5R8sXWfJ7IltFOrFIYT76SuJ2LmdfCYE/D1xndrVlyQDGUSE= -----END CERTIFICATE-----Generated at Fri Mar 27 02:05:06 2026 by rpki-client