$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: 1sdGstzy0wsN/Le2pI/URG1FhkXcabmwCePgQ1QyT00= Subject key identifier: 8D:E9:C8:5A:55:BB:50:6C:A0:70:E6:50:79:C9:F5:F5:7D:37:7A:F2 Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 7B1E4ADEEF9C4923F6AB0F2442892869131FE999 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 033E Signing time: Thu 26 Mar 2026 01:11:18 +0000 Manifest this update: Thu 26 Mar 2026 01:06:18 +0000 Manifest next update: Sun 29 Mar 2026 10:38:18 +0000 Files and hashes: 1: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: 3CT7uWMoBVKUAC6YcCDMnkvBpqs/t1yeptDxRE2S+LM=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: KlJ7xe9jxJPv2ghljBXv+XqaG+xdsmEYctXqZgRhERI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1e:4a:de:ef:9c:49:23:f6:ab:0f:24:42:89:28:69:13:1f:e9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Mar 26 01:06:18 2026 GMT Not After : Mar 29 10:38:18 2026 GMT Subject: CN=8DE9C85A55BB506CA070E65079C9F5F57D377AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:8d:72:90:10:47:d4:f3:f8:2d:0d:9c:2f: ee:13:0d:40:67:a1:37:c8:a9:be:21:6f:3e:06:38: 85:45:7e:e2:8d:da:87:85:f2:d9:c8:a0:45:e7:4d: a1:7c:70:74:fc:cc:de:86:a5:89:fb:ae:f8:f9:09: a2:b5:b1:3f:2a:78:19:69:ef:db:d9:8a:e9:20:a1: ea:e9:89:42:ce:87:b2:7c:3d:90:43:d7:9d:0c:3c: c0:b4:0b:e1:f5:1c:cc:2a:72:00:69:ef:c5:e2:ae: b6:8a:92:75:64:dd:85:8d:3b:da:a0:d3:3e:5d:fd: 9e:20:0e:f1:dc:fb:12:c9:01:8b:ab:3e:36:b7:e2: 33:16:a9:e8:fa:9a:22:57:d0:00:fb:ce:14:7e:3d: f8:25:c5:e6:61:97:1f:23:49:e2:93:ef:ef:2b:c1: 8e:bd:94:ca:17:1e:32:36:51:54:b2:4a:21:66:46: 5f:b7:34:e0:6f:69:b9:45:43:9c:0b:71:6d:36:e3: f2:f9:f8:77:0d:c2:c2:40:62:74:c9:36:5b:f9:f7: 60:8d:44:0a:81:0d:1f:fd:83:ab:7f:17:68:40:99: b6:cb:88:68:17:ba:c3:63:a4:64:25:37:96:b9:a6: d2:b4:fb:25:09:ec:dd:be:91:3e:93:6c:2c:eb:04: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E9:C8:5A:55:BB:50:6C:A0:70:E6:50:79:C9:F5:F5:7D:37:7A:F2 X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4b:4d:d6:e3:3b:6e:8b:e2:1d:28:0e:1a:84:94:35:3a:44: 19:37:76:7d:2a:ae:a0:f6:6d:a4:bb:6e:04:12:a6:09:b8:15: 43:97:cb:f8:a2:e3:9d:86:af:f2:e8:b8:ca:4f:8e:d7:15:d5: 31:49:c7:03:f0:d5:b0:20:20:a3:da:61:84:82:93:7b:8b:92: 26:29:1f:d3:6d:28:79:2c:50:22:b5:c0:86:1b:68:aa:17:88: 2f:0c:5f:30:60:09:cf:ca:68:8d:68:3b:bd:57:e5:a0:26:f7: 41:c1:36:5d:74:5c:b0:45:11:55:cf:da:43:3d:91:88:51:7e: cd:7e:9d:95:a2:5c:e8:fc:fd:66:eb:8a:3c:ed:84:61:ce:0c: 09:aa:8d:d0:af:88:94:0a:09:93:71:97:e5:44:5d:a2:8c:b9: c9:5f:44:b8:f5:ca:e9:05:cb:78:c6:f3:3a:6f:97:05:fb:de: 66:cb:a7:09:a0:ab:40:98:23:41:0c:72:af:98:14:56:8c:32: 59:df:e2:54:32:47:a2:5c:43:ab:8b:76:e7:26:37:e4:de:25: 05:37:4b:5e:22:42:fe:a2:35:75:1f:a9:e8:34:0c:62:49:0c: f9:b3:13:a8:f5:b1:22:c1:59:33:c3:67:70:56:25:74:57:b8: 97:65:8f:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUex5K3u+cSSP2qw8kQokoaRMf6ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNjAzMjYwMTA2MThaFw0yNjAzMjkxMDM4MThaMDMxMTAvBgNV BAMTKDhERTlDODVBNTVCQjUwNkNBMDcwRTY1MDc5QzlGNUY1N0QzNzdBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGio1ykBBH1PP4LQ2cL+4TDUBn oTfIqb4hbz4GOIVFfuKN2oeF8tnIoEXnTaF8cHT8zN6GpYn7rvj5CaK1sT8qeBlp 79vZiukgoerpiULOh7J8PZBD150MPMC0C+H1HMwqcgBp78XirraKknVk3YWNO9qg 0z5d/Z4gDvHc+xLJAYurPja34jMWqej6miJX0AD7zhR+PfglxeZhlx8jSeKT7+8r wY69lMoXHjI2UVSySiFmRl+3NOBvablFQ5wLcW024/L5+HcNwsJAYnTJNlv592CN RAqBDR/9g6t/F2hAmbbLiGgXusNjpGQlN5a5ptK0+yUJ7N2+kT6TbCzrBJ2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjenIWlW7UGygcOZQecn19X03evIwHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhLTdbjO26L4h0oDhqElDU6RBk3dn0qrqD2 baS7bgQSpgm4FUOXy/ii452Gr/LouMpPjtcV1TFJxwPw1bAgIKPaYYSCk3uLkiYp H9NtKHksUCK1wIYbaKoXiC8MXzBgCc/KaI1oO71X5aAm90HBNl10XLBFEVXP2kM9 kYhRfs1+nZWiXOj8/WbrijzthGHODAmqjdCviJQKCZNxl+VEXaKMuclfRLj1yukF y3jG8zpvlwX73mbLpwmgq0CYI0EMcq+YFFaMMlnf4lQyR6JcQ6uLducmN+TeJQU3 S14iQv6iNXUfqeg0DGJJDPmzE6j1sSLBWTPDZ3BWJXRXuJdlj68= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:43 2026 by rpki-client