$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json) Hash identifier: Kqb5clPWoc/xu5Te5xCytdGYsnYvb9IqRhPSwzEO5BY= Subject key identifier: FB:24:F8:47:89:CD:60:D6:2E:9E:EC:8A:17:99:75:FC:DA:C5:83:FB Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Certificate serial: 0D1AC09CA0D1F31637876095444EE8F532808719 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft Manifest number: 04EC Signing time: Wed 25 Mar 2026 22:01:07 +0000 Manifest this update: Wed 25 Mar 2026 21:56:07 +0000 Manifest next update: Sat 28 Mar 2026 22:07:07 +0000 Files and hashes: 1: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: sD1D71HTJcX0Tgc5u0wKCnB+drLmqPRrwWzHCdL5tpk=) 2: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=) 3: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: u5WfQAzN1c26Bk/yoWUZSKe+Zg3RVzlzDJ1SjGA5ptQ=) 4: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: wSXmjp3YB+mwpMivu5fLsbuhoL1V5/Se6dnZ8BT3Dd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1a:c0:9c:a0:d1:f3:16:37:87:60:95:44:4e:e8:f5:32:80:87:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Validity Not Before: Mar 25 21:56:07 2026 GMT Not After : Mar 28 22:07:07 2026 GMT Subject: CN=FB24F84789CD60D62E9EEC8A179975FCDAC583FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:53:f0:78:72:04:1c:ca:c3:76:e9:4b:de: 7d:06:85:ff:3f:4f:48:f3:5a:e2:52:69:ba:32:0a: 01:73:86:f9:e5:67:d9:87:b8:91:9b:03:83:46:ae: 48:b5:1c:ff:73:0e:84:39:2e:b3:72:5b:6e:5e:e0: 6d:c3:cd:c1:d3:8b:7a:e8:c3:68:34:0f:ec:2c:de: 5d:38:5d:5c:06:af:c3:72:8e:e8:11:27:bf:e8:11: 31:e6:63:8f:66:c9:50:ae:11:6c:8b:f3:e9:07:a9: c4:3e:18:11:8c:36:15:01:b2:da:1c:88:48:59:3c: 80:83:b8:f0:3b:17:ed:5f:00:a7:b9:09:0e:5f:bd: 54:03:e7:40:9b:cd:09:e3:96:01:5f:fe:78:15:2b: 3f:07:6e:eb:f9:2c:18:3a:26:98:11:62:b5:68:a4: 40:b2:bb:7d:3a:2c:da:bf:14:dd:48:78:af:ac:22: 30:29:a8:01:ab:15:2d:50:95:ec:f4:64:3e:68:68: 9e:b5:17:0b:44:22:1b:4d:91:57:1e:30:9b:21:fc: 14:36:d9:4a:a1:d6:72:89:e6:3a:e6:f5:a7:f2:84: ef:ad:ca:1a:f6:ca:53:b0:ce:dc:a1:2b:96:dd:b9: 7c:33:7d:7c:77:34:54:f8:9c:27:c5:8a:6b:42:86: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:24:F8:47:89:CD:60:D6:2E:9E:EC:8A:17:99:75:FC:DA:C5:83:FB X509v3 Authority Key Identifier: keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2c:1c:0a:06:5a:0e:20:25:8e:c8:f6:50:ce:21:13:21:af: 9c:a7:bc:09:55:c1:68:4e:12:35:eb:29:e8:15:f9:e0:a1:e4: 93:c7:3c:99:74:cf:15:e3:2b:52:3e:10:fa:b9:3a:f5:fd:d7: 42:4c:5c:5d:1a:ac:5b:bd:9c:42:33:54:90:b5:c0:14:74:75: ad:65:4b:99:32:18:68:f3:4f:5a:19:56:12:36:e2:56:23:69: a7:6e:86:6c:af:e8:5f:01:51:c4:ad:65:d9:da:71:e7:31:a7: c7:09:55:c9:d0:d7:c1:d0:72:be:07:54:20:31:f9:e5:90:31: 0d:d9:ff:b5:96:f6:3c:1d:53:ba:06:2f:23:d0:9b:3e:27:ef: 47:c3:46:21:7f:b7:ce:1c:33:6d:39:94:48:bc:29:74:88:7c: 6b:79:6f:ad:4e:60:63:7d:8d:c0:b1:aa:06:c5:ef:11:44:b9: b8:11:2b:2b:6d:5e:d8:a4:32:24:9a:3f:29:e6:8c:86:9d:4d: 0b:cf:4b:5d:c4:7b:27:f4:16:0c:47:40:70:36:44:df:19:76: 23:52:5d:81:ac:27:bc:17:7e:06:21:6d:64:a3:5c:e1:d5:da: 69:c0:ec:c8:56:0d:57:54:ce:ca:07:41:80:10:9a:53:97:7c: 66:4c:de:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRrAnKDR8xY3h2CVRE7o9TKAhxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNE NkMzRjFDRTAeFw0yNjAzMjUyMTU2MDdaFw0yNjAzMjgyMjA3MDdaMDMxMTAvBgNV BAMTKEZCMjRGODQ3ODlDRDYwRDYyRTlFRUM4QTE3OTk3NUZDREFDNTgzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnFPweHIEHMrDdulL3n0Ghf8/ T0jzWuJSaboyCgFzhvnlZ9mHuJGbA4NGrki1HP9zDoQ5LrNyW25e4G3DzcHTi3ro w2g0D+ws3l04XVwGr8NyjugRJ7/oETHmY49myVCuEWyL8+kHqcQ+GBGMNhUBstoc iEhZPICDuPA7F+1fAKe5CQ5fvVQD50CbzQnjlgFf/ngVKz8Hbuv5LBg6JpgRYrVo pECyu306LNq/FN1IeK+sIjApqAGrFS1Qlez0ZD5oaJ61FwtEIhtNkVceMJsh/BQ2 2Uqh1nKJ5jrm9afyhO+tyhr2ylOwztyhK5bduXwzfXx3NFT4nCfFimtChgi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+yT4R4nNYNYunuyKF5l1/NrFg/swHwYDVR0j BBgwFoAUxuOiKBfObgmN/GdLJiiMg9bD8c4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmVlMWVlMS1hNWI1LTRjNjQtYmJiYi0yNjM2MzUyZGFjZmMvMC9DNkUzQTIyODE3 Q0U2RTA5OERGQzY3NEIyNjI4OEM4M0Q2QzNGMUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNENkMz RjFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlZTFlZTEtYTViNS00YzY0LWJi YmItMjYzNjM1MmRhY2ZjLzAvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhD ODNENkMzRjFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgsHAoGWg4gJY7I9lDOIRMhr5ynvAlVwWhO EjXrKegV+eCh5JPHPJl0zxXjK1I+EPq5OvX910JMXF0arFu9nEIzVJC1wBR0da1l S5kyGGjzT1oZVhI24lYjaaduhmyv6F8BUcStZdnacecxp8cJVcnQ18HQcr4HVCAx +eWQMQ3Z/7WW9jwdU7oGLyPQmz4n70fDRiF/t84cM205lEi8KXSIfGt5b61OYGN9 jcCxqgbF7xFEubgRKyttXtikMiSaPynmjIadTQvPS13Eeyf0FgxHQHA2RN8ZdiNS XYGsJ7wXfgYhbWSjXOHV2mnA7MhWDVdUzsoHQYAQmlOXfGZM3kg= -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:57 2026 by rpki-client