$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: knfDrXQsBLJMzHGn5Dvh4bnUjaZYTiTpn3ZqiyV9DZ8= Subject key identifier: 6B:F4:0B:83:2B:84:9F:13:2D:D9:E5:64:F3:AC:18:23:E6:36:D7:51 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 62A57344D0A2BEF86B578D4D7F618DE14812DDD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0293 Signing time: Tue 24 Mar 2026 22:21:33 +0000 Manifest this update: Tue 24 Mar 2026 22:16:33 +0000 Manifest next update: Sat 28 Mar 2026 04:31:33 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: sx7oZBs7estL7aNZUmO9oRk1EPlXA/zCFyzUOngOWfg=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: YLN2Zk3zWpI/CaRS/oMZ/BlS5kf+exkOs/mOccI3tP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a5:73:44:d0:a2:be:f8:6b:57:8d:4d:7f:61:8d:e1:48:12:dd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Mar 24 22:16:33 2026 GMT Not After : Mar 28 04:31:33 2026 GMT Subject: CN=6BF40B832B849F132DD9E564F3AC1823E636D751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:36:10:48:2e:e2:08:2e:f3:a8:24:c1:33: 2e:2a:70:1c:97:12:0d:0e:3f:bb:93:e7:0d:d9:c0: 8f:80:ab:96:96:44:b9:eb:9a:35:f0:f4:8f:e4:93: 9e:db:17:a6:73:b1:5b:6c:60:2e:2f:08:d4:c3:2d: 61:b4:86:cb:a4:64:ca:20:e4:16:ed:6e:8a:5f:d8: 98:fa:31:e3:7c:50:e5:da:b5:1b:8c:b4:81:7a:b6: 74:0b:8a:8d:f8:0c:69:d4:00:02:2c:b2:51:3a:ec: ce:04:ee:a9:98:39:8b:1b:29:83:76:a0:7d:fe:61: af:79:17:cd:a6:10:af:bc:4d:69:74:fa:aa:ce:40: d3:d7:10:d8:05:dc:1a:9f:1f:47:07:d4:d0:95:74: c2:b5:65:6c:7e:a8:ef:91:e3:31:b3:69:09:5f:23: 41:d8:34:b0:92:fe:fd:95:e2:c8:92:75:6c:7b:2e: 87:b4:85:42:ab:21:a3:48:40:33:81:1f:8b:d7:1c: de:9e:36:43:32:8d:a4:8d:9c:55:69:93:fe:89:be: 92:e2:85:82:4e:31:9d:bf:ef:d7:62:b0:52:80:31: 96:38:0c:a8:11:89:39:6d:67:57:a5:9b:1d:43:56: 4b:45:0a:4a:5d:6a:0a:95:41:72:c2:fd:c6:c3:cd: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F4:0B:83:2B:84:9F:13:2D:D9:E5:64:F3:AC:18:23:E6:36:D7:51 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e9:d4:87:5a:65:dd:ba:46:97:2e:bb:e5:fd:01:60:e2:cf: ed:c7:13:0d:4c:92:bd:b5:ed:15:27:fd:54:49:ce:a4:03:c0: c6:15:85:fe:f2:34:89:5e:ac:f1:63:19:a9:56:29:f1:9f:a8: c9:df:cb:ac:54:05:9b:b7:cb:6b:3f:fc:73:f4:b9:4f:b3:31: f8:5b:f4:9a:2d:a2:e0:d8:71:5f:f4:89:7e:1f:59:e0:ab:87: 4c:aa:ad:31:d4:71:3c:7c:72:f9:7b:c4:7d:19:27:cf:3c:0e: 66:21:4d:ed:16:20:b4:93:50:17:a8:68:d2:f3:3d:32:19:81: bb:d2:4d:3a:9c:7d:36:a2:ca:ee:f5:10:91:9c:db:12:34:7e: e8:65:f2:3f:cc:01:98:d4:e8:34:ab:2f:c8:86:c2:b7:8d:77: 80:d6:6e:84:a9:1b:8f:12:3b:29:64:10:8b:63:50:f6:3b:7d: 6a:ca:2d:7d:b8:00:46:c9:20:bb:10:64:7d:16:a6:85:84:ca: 80:43:62:43:4c:64:47:2a:9c:a9:8c:57:56:4b:b6:07:ea:01: 35:e5:84:3e:6b:1b:1f:e2:72:34:eb:3d:bf:b0:02:56:08:57: 12:f8:80:6b:9a:bd:f3:9f:43:61:31:70:f2:9a:36:11:c3:86: 9c:3e:5c:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqVzRNCivvhrV41Nf2GN4UgS3dQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNjAzMjQyMjE2MzNaFw0yNjAzMjgwNDMxMzNaMDMxMTAvBgNV BAMTKDZCRjQwQjgzMkI4NDlGMTMyREQ5RTU2NEYzQUMxODIzRTYzNkQ3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgzYQSC7iCC7zqCTBMy4qcByX Eg0OP7uT5w3ZwI+Aq5aWRLnrmjXw9I/kk57bF6ZzsVtsYC4vCNTDLWG0hsukZMog 5Bbtbopf2Jj6MeN8UOXatRuMtIF6tnQLio34DGnUAAIsslE67M4E7qmYOYsbKYN2 oH3+Ya95F82mEK+8TWl0+qrOQNPXENgF3BqfH0cH1NCVdMK1ZWx+qO+R4zGzaQlf I0HYNLCS/v2V4siSdWx7Loe0hUKrIaNIQDOBH4vXHN6eNkMyjaSNnFVpk/6JvpLi hYJOMZ2/79disFKAMZY4DKgRiTltZ1elmx1DVktFCkpdagqVQXLC/cbDzRfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa/QLgyuEnxMt2eVk86wYI+Y211EwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHp1IdaZd26Rpcuu+X9AWDiz+3HEw1Mkr21 7RUn/VRJzqQDwMYVhf7yNIlerPFjGalWKfGfqMnfy6xUBZu3y2s//HP0uU+zMfhb 9JotouDYcV/0iX4fWeCrh0yqrTHUcTx8cvl7xH0ZJ888DmYhTe0WILSTUBeoaNLz PTIZgbvSTTqcfTaiyu71EJGc2xI0fuhl8j/MAZjU6DSrL8iGwreNd4DWboSpG48S OylkEItjUPY7fWrKLX24AEbJILsQZH0WpoWEyoBDYkNMZEcqnKmMV1ZLtgfqATXl hD5rGx/icjTrPb+wAlYIVxL4gGuavfOfQ2ExcPKaNhHDhpw+XOk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:06:46 2026 by rpki-client