$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: DzT09i0oXciGegAL0YgrPM/PXxPA+lPVHTNjhcrbgvo= Subject key identifier: 51:D1:60:04:70:23:AC:A2:1D:AC:93:D2:91:2E:DB:26:EE:31:FA:E5 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 25EC9347F5E9513A6E920B1347BE5A0BF2155928 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 02A5 Signing time: Thu 26 Mar 2026 11:01:10 +0000 Manifest this update: Thu 26 Mar 2026 10:56:10 +0000 Manifest next update: Sun 29 Mar 2026 16:47:10 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) 2: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: tMgRD9BFKle8rycZQsZ1LN4kz5LsJVmYmZllZ+R2fJE=) 3: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:93:47:f5:e9:51:3a:6e:92:0b:13:47:be:5a:0b:f2:15:59:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Mar 26 10:56:10 2026 GMT Not After : Mar 29 16:47:10 2026 GMT Subject: CN=51D160047023ACA21DAC93D2912EDB26EE31FAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:aa:2e:35:9f:19:92:24:f5:f6:d2:01:75: 2c:a0:b2:cb:4a:d9:c8:53:47:89:ef:1a:c3:d1:7b: 1c:c6:25:ed:b1:b6:2a:ed:58:93:b2:95:11:45:98: 8e:6d:b2:fd:17:5e:ce:5c:e8:9a:e9:68:b2:79:df: f8:78:da:10:81:76:82:5b:29:2c:40:b2:ca:25:f6: 39:b5:41:d1:fa:36:b7:8a:2a:46:2b:8d:09:57:78: a8:88:6e:27:b9:ba:e5:f1:0e:48:ec:44:5c:19:4f: 1a:3b:35:ee:5d:f0:1b:0b:3f:4d:18:a0:64:a5:aa: ba:c9:d4:c4:d7:6c:c3:04:a8:3e:94:b0:19:3e:ba: bc:fe:99:19:6e:8d:a0:be:f4:5d:d8:0f:da:6d:bc: 60:b6:28:21:6c:0a:13:31:34:b9:d6:76:0c:b7:59: b3:22:f5:2b:e4:28:f6:ee:2d:f4:b0:86:0d:71:88: a4:86:17:97:91:d9:da:1d:71:2a:68:d3:ef:76:6c: b3:ce:28:4e:d8:a2:9d:78:8c:0b:a7:16:93:15:ff: 8e:4e:1a:1f:71:09:97:04:ae:e3:1e:0e:cd:80:b0: 7a:19:20:6a:86:32:1a:74:99:09:43:ce:8b:cc:b6: 2b:b9:a9:1a:f8:12:e3:93:c0:03:a5:30:98:cc:77: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D1:60:04:70:23:AC:A2:1D:AC:93:D2:91:2E:DB:26:EE:31:FA:E5 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:67:85:61:6c:8e:af:c4:61:b8:e8:d6:8c:19:44:b3:f9:5c: a2:8f:87:d2:09:cb:48:ed:44:66:f1:3d:10:02:a9:ce:94:d4: df:b7:52:1d:95:e5:f8:78:55:28:64:7b:9a:cd:87:6e:9a:71: 6e:22:29:fe:f1:d4:84:85:b1:78:2e:f1:ca:6f:ba:8c:48:9a: b7:53:bc:2f:56:3a:ce:69:32:6d:9e:3d:27:6b:4e:8f:a6:33: eb:f7:45:e4:23:e7:b8:d9:68:7c:c2:ad:ef:a4:35:10:07:71: b8:35:41:db:ac:87:08:41:37:e2:54:bf:87:c1:c9:ab:d7:56: f6:08:62:a8:13:c6:81:52:33:b3:a4:1d:d5:25:4e:c5:59:b9: 97:e1:2a:75:a8:0f:59:50:7a:a3:ed:22:52:23:7b:40:08:81: 96:19:e7:52:ef:89:cf:3e:f5:ac:93:0a:6e:06:50:e5:db:c6: ee:44:46:44:2b:19:b5:00:39:f9:5b:41:49:79:35:60:65:b8: ed:a0:a4:1a:70:02:7e:2e:6e:f9:d9:8c:06:a0:1b:26:f4:bc: a3:74:11:b9:d8:5e:cd:e2:55:28:21:3d:07:9b:a4:79:d4:70: 32:c0:4a:6d:f7:2f:ed:14:ff:01:3d:fe:18:7d:32:92:02:64: 2a:37:5a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeyTR/XpUTpukgsTR75aC/IVWSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNjAzMjYxMDU2MTBaFw0yNjAzMjkxNjQ3MTBaMDMxMTAvBgNV BAMTKDUxRDE2MDA0NzAyM0FDQTIxREFDOTNEMjkxMkVEQjI2RUUzMUZBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfKouNZ8ZkiT19tIBdSygsstK 2chTR4nvGsPRexzGJe2xtirtWJOylRFFmI5tsv0XXs5c6JrpaLJ53/h42hCBdoJb KSxAssol9jm1QdH6NreKKkYrjQlXeKiIbie5uuXxDkjsRFwZTxo7Ne5d8BsLP00Y oGSlqrrJ1MTXbMMEqD6UsBk+urz+mRlujaC+9F3YD9ptvGC2KCFsChMxNLnWdgy3 WbMi9SvkKPbuLfSwhg1xiKSGF5eR2dodcSpo0+92bLPOKE7Yop14jAunFpMV/45O Gh9xCZcEruMeDs2AsHoZIGqGMhp0mQlDzovMtiu5qRr4EuOTwAOlMJjMdycTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUdFgBHAjrKIdrJPSkS7bJu4x+uUwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpnhWFsjq/EYbjo1owZRLP5XKKPh9IJy0jt RGbxPRACqc6U1N+3Uh2V5fh4VShke5rNh26acW4iKf7x1ISFsXgu8cpvuoxImrdT vC9WOs5pMm2ePSdrTo+mM+v3ReQj57jZaHzCre+kNRAHcbg1QdushwhBN+JUv4fB yavXVvYIYqgTxoFSM7OkHdUlTsVZuZfhKnWoD1lQeqPtIlIje0AIgZYZ51Lvic8+ 9ayTCm4GUOXbxu5ERkQrGbUAOflbQUl5NWBluO2gpBpwAn4ubvnZjAagGyb0vKN0 EbnYXs3iVSghPQebpHnUcDLASm33L+0U/wE9/hh9MpICZCo3WmM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:19:59 2026 by rpki-client