$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: dLtKMkCcsnyf8BplJ48t2ouFaJPyJRxyt7dsjDBf4R4= Subject key identifier: 5F:30:16:14:B8:B6:78:23:20:61:52:4F:F4:27:7E:BE:FB:78:32:30 Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 1C4816EA144212C5B0BEC8EB238A44EDEE85C8D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 01E0 Signing time: Thu 26 Mar 2026 00:51:17 +0000 Manifest this update: Thu 26 Mar 2026 00:46:17 +0000 Manifest next update: Sun 29 Mar 2026 03:47:17 +0000 Files and hashes: 1: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: 4fMFoTp9REXavd6YcpcKv+VpmP8fBODVMZY8DgaVA/c=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: u1ZCBaEvzWoXZcuQFB7bwDokShFYSVBKQyrrnHALGmM=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: /JnF9ntQ1zhi5AvVex5MT/29rhLCl1+fBFP+3yAKjbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:48:16:ea:14:42:12:c5:b0:be:c8:eb:23:8a:44:ed:ee:85:c8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Mar 26 00:46:17 2026 GMT Not After : Mar 29 03:47:17 2026 GMT Subject: CN=5F301614B8B678232061524FF4277EBEFB783230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:0d:7d:a6:c3:21:0e:18:01:12:06:fe:12: 3e:11:41:c4:ec:72:e3:9e:f7:93:25:ce:ea:35:1f: 71:b5:f1:b3:f4:ab:5d:30:18:6a:d7:f5:ee:2b:72: 9b:6d:2d:59:d5:de:0b:84:44:6f:b0:43:e7:2a:7b: 48:ab:bf:52:b3:60:7c:fc:d2:2e:1c:cc:09:fe:52: 42:19:cc:60:f5:57:81:08:7f:44:75:08:f1:bf:35: 7f:e9:96:0f:2d:2f:b1:d6:6e:37:ba:a1:86:d1:0f: 6e:82:59:a9:dc:1e:e2:ae:64:c4:30:3f:cd:eb:85: b9:20:81:c8:8e:21:b5:bb:d2:1a:29:8d:bb:12:d0: ce:b7:2b:a8:af:a0:b0:90:88:32:7e:34:7f:19:9c: 5d:3c:91:ac:9b:25:e1:f6:b8:1b:dc:34:b0:7f:60: 87:32:10:e2:e7:d1:e8:99:18:7e:f6:2c:32:13:9b: cd:4d:1d:5c:a3:ef:02:85:b8:0d:9d:55:00:1f:21: 00:e5:b9:56:b4:ee:c5:ce:65:6c:1b:d8:b6:63:27: 68:a8:26:3a:9c:1a:32:73:ec:b7:9a:31:96:51:3f: e2:60:38:33:cb:5e:01:3a:9b:97:c5:87:44:89:c7: 71:c4:5d:d5:9a:c2:46:3d:d3:b4:10:b3:ca:6b:b8: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:30:16:14:B8:B6:78:23:20:61:52:4F:F4:27:7E:BE:FB:78:32:30 X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:44:9b:3d:ca:95:79:1c:9f:b9:69:64:2b:91:80:2c:6c:fd: 89:d2:b0:65:7f:17:2c:b6:9f:84:0e:94:4d:15:aa:c1:a5:b5: 67:7d:b3:54:dd:2b:f3:72:1b:6f:20:d3:0f:32:89:22:28:ad: 97:1d:3f:0a:eb:42:3d:ea:6a:b9:13:38:82:2b:7d:93:99:8f: d6:08:91:ce:79:f5:cd:2d:a0:eb:92:9d:eb:c7:bc:e4:37:d9: 33:53:b6:3c:ef:f5:cc:55:c8:27:b2:4c:3b:90:29:73:a4:78: ad:0b:ff:cf:e7:09:cd:a0:d2:8c:02:ca:84:25:a6:e3:e4:0b: e3:72:b2:ce:7d:c4:5d:da:11:b5:64:31:3d:66:b1:3d:6f:f2: 09:39:ec:a7:20:50:36:1e:8c:1f:7e:af:93:9b:3a:80:0f:09: 8e:46:eb:3b:27:8a:fc:27:fa:ee:a5:18:ba:e3:bb:f8:0b:91: 2f:3d:77:7a:43:c6:99:d2:ff:af:66:db:a3:54:a2:90:8c:9f: 04:5e:0f:fb:1a:b5:43:87:22:1a:ae:d9:98:29:97:ca:94:04: 66:fc:56:1d:f5:d0:68:3a:ac:21:da:f2:8b:bf:62:bf:09:5c: 26:b8:1d:f7:b5:c1:ef:79:18:82:c8:9a:52:88:b0:68:97:ea: 92:18:98:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEgW6hRCEsWwvsjrI4pE7e6FyNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNjAzMjYwMDQ2MTdaFw0yNjAzMjkwMzQ3MTdaMDMxMTAvBgNV BAMTKDVGMzAxNjE0QjhCNjc4MjMyMDYxNTI0RkY0Mjc3RUJFRkI3ODMyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+w19psMhDhgBEgb+Ej4RQcTs cuOe95Mlzuo1H3G18bP0q10wGGrX9e4rcpttLVnV3guERG+wQ+cqe0irv1KzYHz8 0i4czAn+UkIZzGD1V4EIf0R1CPG/NX/plg8tL7HWbje6oYbRD26CWancHuKuZMQw P83rhbkggciOIbW70hopjbsS0M63K6ivoLCQiDJ+NH8ZnF08kaybJeH2uBvcNLB/ YIcyEOLn0eiZGH72LDITm81NHVyj7wKFuA2dVQAfIQDluVa07sXOZWwb2LZjJ2io JjqcGjJz7LeaMZZRP+JgODPLXgE6m5fFh0SJx3HEXdWawkY907QQs8pruLgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXzAWFLi2eCMgYVJP9Cd+vvt4MjAwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZEmz3KlXkcn7lpZCuRgCxs/YnSsGV/Fyy2 n4QOlE0VqsGltWd9s1TdK/NyG28g0w8yiSIorZcdPwrrQj3qarkTOIIrfZOZj9YI kc559c0toOuSnevHvOQ32TNTtjzv9cxVyCeyTDuQKXOkeK0L/8/nCc2g0owCyoQl puPkC+Nyss59xF3aEbVkMT1msT1v8gk57KcgUDYejB9+r5ObOoAPCY5G6zsnivwn +u6lGLrju/gLkS89d3pDxpnS/69m26NUopCMnwReD/satUOHIhqu2Zgpl8qUBGb8 Vh310Gg6rCHa8ou/Yr8JXCa4Hfe1we95GILImlKIsGiX6pIYmBE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:31 2026 by rpki-client