$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: RYiNFjwf6Y7yfxqd3o4z/SA11JfwBZTN6eeWvJxXgII= Subject key identifier: 12:18:B4:B4:F9:88:B6:B9:F9:46:1C:E0:0E:75:24:49:1C:CE:18:A6 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 66BF96452FA26124EF885F4877D7CAF2680B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 02CF Signing time: Tue 24 Mar 2026 23:01:39 +0000 Manifest this update: Tue 24 Mar 2026 22:56:39 +0000 Manifest next update: Sat 28 Mar 2026 10:04:39 +0000 Files and hashes: 1: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: IkxLQ4A4YTwlFqjsHn83WtWiIZbOPLj8HOwg1bV7vWA=) 2: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=) 3: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=) 4: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=) 5: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=) 6: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=) 7: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=) 8: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=) 9: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:bf:96:45:2f:a2:61:24:ef:88:5f:48:77:d7:ca:f2:68:0b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Mar 24 22:56:39 2026 GMT Not After : Mar 28 10:04:39 2026 GMT Subject: CN=1218B4B4F988B6B9F9461CE00E7524491CCE18A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:aa:56:8b:76:c9:78:5f:61:80:f4:1f:dc: 69:22:f6:7f:76:2a:ef:02:c2:7f:aa:63:42:e4:89: 31:95:5a:22:c9:b5:38:2b:4c:48:5d:97:77:45:f3: 8e:d4:2d:7c:70:7a:4b:e9:a4:a2:2b:87:19:72:26: 07:7e:21:7d:2d:9f:1e:23:8d:a7:c3:6e:d3:95:23: 75:46:91:6b:25:60:b4:53:34:ab:3b:3f:7a:fa:8a: d8:d1:df:02:c0:e3:05:b3:e8:fb:54:81:09:87:c7: 65:17:7f:63:a8:4e:ac:69:c3:76:ca:8f:76:d4:c9: 3a:9d:e9:67:0d:e2:c8:18:13:4c:ce:24:3f:41:3b: 5b:e9:59:78:82:e9:3d:94:1b:40:12:5b:5d:2f:fc: d1:10:63:61:c9:0f:3e:af:b0:2c:b0:93:d5:1b:7e: ba:9b:ff:bf:41:c7:d8:21:08:c5:5f:a4:8f:06:83: 9c:e0:81:fb:a2:57:8e:27:f6:26:9e:5c:51:98:73: 42:d3:6b:67:1f:80:b6:25:2f:97:97:e5:da:0e:74: 54:18:32:e4:61:89:5e:cf:b3:f0:fa:f3:4f:3f:bf: 93:3a:79:a2:41:6e:19:8e:3c:9e:e3:1b:95:ef:7b: 3b:bc:f0:bf:a4:a8:d9:f9:55:1b:f1:c0:69:a2:43: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:B4:B4:F9:88:B6:B9:F9:46:1C:E0:0E:75:24:49:1C:CE:18:A6 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5d:db:81:cf:f4:92:c9:a3:ca:80:56:37:ce:58:1f:57:b6: 32:d3:12:e2:33:ff:ea:34:8f:5b:0b:36:c6:46:5f:aa:c5:86: f1:e5:89:cd:57:8f:98:85:40:a6:8a:ac:fc:98:df:f8:ad:6d: 03:e0:4c:6a:54:8e:b0:34:81:83:eb:a3:8a:23:10:98:25:53: 31:3a:2d:e3:68:59:d9:9e:9d:0e:b7:06:26:a3:4d:2a:11:00: 08:b3:ba:9b:f6:8c:c3:21:23:8e:09:42:c0:97:7a:df:2c:ab: ae:50:99:d1:b7:b7:f5:69:e7:89:2c:02:79:2a:29:7d:e1:5d: c0:2c:a7:e9:f1:97:f8:27:6a:02:bb:13:39:d2:f3:6e:b3:c4: 27:75:2d:09:c0:ba:f9:62:3d:fd:cf:a9:a2:5b:2b:57:09:f2: 93:33:87:38:bd:a8:fe:14:b5:51:4d:b8:ac:6d:83:19:11:f0: 0e:03:f2:0f:d4:a2:0b:c2:90:f6:3e:89:c9:4c:0a:95:93:a0: e2:72:38:ef:67:1f:4f:b4:43:ad:cd:27:bb:11:57:cf:88:48: 93:cc:5c:2c:65:6b:b5:bd:6e:24:3a:f9:b3:2b:ca:a9:6a:ec: 3c:2d:f2:ab:a7:b1:3b:13:d0:75:b5:b4:b3:36:4d:04:d2:c5: cf:d1:da:32 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITZr+WRS+iYSTviF9Id9fK8mgLOTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2REEyQjI4RjQzOTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFC RjEzMDYxMB4XDTI2MDMyNDIyNTYzOVoXDTI2MDMyODEwMDQzOVowMzExMC8GA1UE AxMoMTIxOEI0QjRGOTg4QjZCOUY5NDYxQ0UwMEU3NTI0NDkxQ0NFMThBNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALS/qlaLdsl4X2GA9B/caSL2f3Yq 7wLCf6pjQuSJMZVaIsm1OCtMSF2Xd0XzjtQtfHB6S+mkoiuHGXImB34hfS2fHiON p8Nu05UjdUaRayVgtFM0qzs/evqK2NHfAsDjBbPo+1SBCYfHZRd/Y6hOrGnDdsqP dtTJOp3pZw3iyBgTTM4kP0E7W+lZeILpPZQbQBJbXS/80RBjYckPPq+wLLCT1Rt+ upv/v0HH2CEIxV+kjwaDnOCB+6JXjif2Jp5cUZhzQtNrZx+AtiUvl5fl2g50VBgy 5GGJXs+z8PrzTz+/kzp5okFuGY48nuMble97O7zwv6So2flVG/HAaaJD6MUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQSGLS0+Yi2uflGHOAOdSRJHM4YpjAfBgNVHSME GDAWgBRtorKPQ5HAFDS3Ip/U1o5mG/EwYTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdk MGY5OWMzLWU1NjctNDFhZS1hYTAwLTI2Y2I5NzgxZmJlOS8wLzZEQTJCMjhGNDM5 MUMwMTQzNEI3MjI5RkQ0RDY4RTY2MUJGMTMwNjEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi82REEyQjI4RjQzOTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEz MDYxLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83ZDBmOTljMy1lNTY3LTQxYWUtYWEw MC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQzOTFDMDE0MzRCNzIyOUZENEQ2OEU2 NjFCRjEzMDYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAhV3bgc/0ksmjyoBWN85YH1e2MtMS4jP/6jSP Wws2xkZfqsWG8eWJzVePmIVApoqs/Jjf+K1tA+BMalSOsDSBg+ujiiMQmCVTMTot 42hZ2Z6dDrcGJqNNKhEACLO6m/aMwyEjjglCwJd63yyrrlCZ0be39WnniSwCeSop feFdwCyn6fGX+CdqArsTOdLzbrPEJ3UtCcC6+WI9/c+polsrVwnykzOHOL2o/hS1 UU24rG2DGRHwDgPyD9SiC8KQ9j6JyUwKlZOg4nI472cfT7RDrc0nuxFXz4hIk8xc LGVrtb1uJDr5syvKqWrsPC3yq6exOxPQdbW0szZNBNLFz9HaMg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:07 2026 by rpki-client