$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: C1LL3CyyEhHJBeO7FKUWsmB/4WiycM5808ac2FMBnFA= Subject key identifier: D6:BC:E2:82:87:FA:10:35:8C:AA:F6:DE:18:82:7B:BD:44:0C:C9:93 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 0D082F2D11CE9068F99AE0B4AD0FE9600638D1A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: 0134 Signing time: Thu 26 Mar 2026 02:12:29 +0000 Manifest this update: Thu 26 Mar 2026 02:07:29 +0000 Manifest next update: Sun 29 Mar 2026 04:12:29 +0000 Files and hashes: 1: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: bQWsJUVOFWO1OALxa+/tLK32/KVg6IEzubWKGYNkAVw=) 2: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: rkE87X9IPZMkAaZ2Cg/PkkY/W1edd4UKavJ1rej83oU=) 3: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: vcGZX4iuBt1A6+2sE99JWAst4OX3Kku9u32aVhGx/Cw=) 4: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: /IqnhWNrPsgnuT8v2xs7EC269ADw6nH5t0+DgUzbkxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:08:2f:2d:11:ce:90:68:f9:9a:e0:b4:ad:0f:e9:60:06:38:d1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Mar 26 02:07:29 2026 GMT Not After : Mar 29 04:12:29 2026 GMT Subject: CN=D6BCE28287FA10358CAAF6DE18827BBD440CC993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:5f:ce:62:c6:bc:df:ac:40:8b:3b:14:fc: 61:16:ee:90:9e:dc:11:8d:8a:21:44:7d:94:0f:3a: aa:9e:c2:b5:77:b8:12:34:8a:0e:cd:ce:32:08:51: 19:f9:1f:38:95:80:e1:0e:44:9f:17:1e:81:92:4a: 0f:ee:5e:7f:b7:56:7a:bc:3e:dc:f3:15:cc:91:a0: 1a:47:ed:34:bb:4f:c9:e6:4e:76:96:ec:f3:a1:73: 23:c0:bd:45:d1:d5:84:24:bf:49:28:36:31:a4:c6: 54:64:0c:46:49:9a:e5:ff:7e:4c:0a:b3:1b:1c:2e: 20:a0:38:20:6b:b1:d0:df:a3:10:eb:1f:68:4f:fd: 0e:f2:42:a6:f3:e0:e3:8b:7f:5e:b4:df:66:b9:3f: 31:f8:4c:61:22:a2:ac:fe:a1:31:12:83:af:ba:12: 3a:3a:9f:a8:27:5e:8f:1c:56:05:93:91:c7:1d:52: 2c:61:3a:90:c6:58:26:68:17:12:73:55:b3:b7:77: 11:c1:22:ef:3a:fe:bd:c9:06:c9:40:88:b9:dc:72: 77:04:04:11:a6:e5:2c:33:dd:db:33:a6:57:99:b5: 1b:15:dd:fb:d0:09:f9:ad:9a:44:b6:a2:49:be:02: f1:29:3c:83:5f:d8:16:cf:4b:ff:d8:c5:d4:18:15: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BC:E2:82:87:FA:10:35:8C:AA:F6:DE:18:82:7B:BD:44:0C:C9:93 X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3b:67:5b:b8:a3:9f:70:01:f4:9d:7f:2a:db:b9:ec:69:52: 25:4a:23:bc:22:65:ab:78:eb:9b:e3:5f:f2:3a:5e:7b:3e:5b: 3a:2c:94:6e:aa:cc:a7:3a:61:9e:31:d4:17:ef:ed:77:c6:67: 0c:c6:58:5d:5e:7e:69:b9:2f:9c:fa:0a:20:cd:c0:66:fd:6d: 81:6d:c4:34:61:60:c2:bf:1a:ab:61:dc:a8:f1:98:45:fb:f7: 1b:44:08:38:29:45:95:c1:1a:5c:31:17:a9:71:90:4c:da:f2: 20:59:58:3a:f1:92:ee:09:e7:26:e9:a2:c1:8b:51:aa:38:3a: cb:ba:2d:27:d3:fb:47:db:d9:82:c5:6e:8c:9a:33:24:58:65: 02:6e:d6:a1:34:bc:61:ba:01:00:03:0f:3a:cb:2b:d1:18:3c: 8d:e5:43:77:f8:3e:f4:c4:89:5b:ec:ba:1c:0e:a9:aa:d7:39: 95:4a:c0:bb:eb:68:c8:3f:ad:6b:5b:45:87:62:7f:77:e9:02: 8c:0f:88:2b:75:b9:26:db:10:df:bb:73:ff:f9:b0:fb:37:a9: 00:32:13:07:2d:0c:c4:d7:b7:23:a9:47:8b:64:0b:8f:c8:4d: fd:a2:fd:9f:a1:44:36:de:d3:47:02:2b:85:0c:b9:58:7b:ab: 24:88:7d:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQgvLRHOkGj5muC0rQ/pYAY40akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNjAzMjYwMjA3MjlaFw0yNjAzMjkwNDEyMjlaMDMxMTAvBgNV BAMTKEQ2QkNFMjgyODdGQTEwMzU4Q0FBRjZERTE4ODI3QkJENDQwQ0M5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44F/OYsa836xAizsU/GEW7pCe 3BGNiiFEfZQPOqqewrV3uBI0ig7NzjIIURn5HziVgOEORJ8XHoGSSg/uXn+3Vnq8 PtzzFcyRoBpH7TS7T8nmTnaW7POhcyPAvUXR1YQkv0koNjGkxlRkDEZJmuX/fkwK sxscLiCgOCBrsdDfoxDrH2hP/Q7yQqbz4OOLf16032a5PzH4TGEioqz+oTESg6+6 Ejo6n6gnXo8cVgWTkccdUixhOpDGWCZoFxJzVbO3dxHBIu86/r3JBslAiLnccncE BBGm5Swz3dszpleZtRsV3fvQCfmtmkS2okm+AvEpPINf2BbPS//YxdQYFYgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1rzigof6EDWMqvbeGIJ7vUQMyZMwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG47Z1u4o59wAfSdfyrbuexpUiVKI7wiZat4 65vjX/I6Xns+WzoslG6qzKc6YZ4x1Bfv7XfGZwzGWF1efmm5L5z6CiDNwGb9bYFt xDRhYMK/Gqth3KjxmEX79xtECDgpRZXBGlwxF6lxkEza8iBZWDrxku4J5ybposGL Uao4Osu6LSfT+0fb2YLFboyaMyRYZQJu1qE0vGG6AQADDzrLK9EYPI3lQ3f4PvTE iVvsuhwOqarXOZVKwLvraMg/rWtbRYdif3fpAowPiCt1uSbbEN+7c//5sPs3qQAy EwctDMTXtyOpR4tkC4/ITf2i/Z+hRDbe00cCK4UMuVh7qySIfZc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:17 2026 by rpki-client