$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: Wk/t3/JGB7pmMX5mgRPW3fCYgmv+xR+cv0BJ14tivJQ= Subject key identifier: 39:15:29:64:F0:BF:C3:00:ED:5A:C0:91:11:36:27:F6:60:ED:17:D7 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 7E2CF24929F65998B3C589F5ABC499E6B543CBDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0296 Signing time: Wed 25 Mar 2026 17:10:03 +0000 Manifest this update: Wed 25 Mar 2026 17:05:03 +0000 Manifest next update: Sat 28 Mar 2026 22:14:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=) 2: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: 6n/5OA72AXCjjosVXdMW7YOTcN45ygS/jwNp4kwGcDI=) 3: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: G6q+ji3yFL/G+ROfvGqGZ4h9avpUHfcEbpzAoAOSho8=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2c:f2:49:29:f6:59:98:b3:c5:89:f5:ab:c4:99:e6:b5:43:cb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Mar 25 17:05:03 2026 GMT Not After : Mar 28 22:14:03 2026 GMT Subject: CN=39152964F0BFC300ED5AC091113627F660ED17D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:e8:1a:51:87:f1:bf:74:10:b7:71:5c:b6: 56:8e:3f:08:24:67:e6:ca:88:12:86:3d:b0:ff:54: 7e:58:72:21:3b:b9:96:7a:1e:3c:2e:88:26:a6:bd: 88:88:e9:f4:d7:ae:15:5e:d7:87:e2:e3:19:6a:5d: 4b:2e:46:85:84:b3:22:1d:70:35:64:76:70:5e:07: 3b:35:b0:0c:c4:e8:21:dc:fb:ad:0f:e8:d8:a0:df: e4:55:25:70:ef:b0:4c:08:61:a3:af:24:59:74:86: 12:ba:c5:11:c7:16:70:d5:5d:8c:3b:b1:19:2b:21: 25:0b:e9:05:60:54:4d:f1:17:d4:cd:8f:31:67:e9: 62:cc:51:45:8e:39:79:fa:62:ad:cd:2d:07:5c:19: 7f:1c:8b:86:fc:41:01:a2:52:3b:67:10:71:69:ed: 28:47:13:7b:83:49:4d:64:19:99:5b:c0:d2:e3:92: 43:0a:3a:18:94:ba:b5:b5:9f:72:ef:83:2b:a2:6d: 8c:54:c9:37:2f:91:3b:a1:9a:3b:c0:c9:06:53:71: 17:29:74:de:77:e5:cd:eb:8c:fc:31:a6:8b:9b:ea: a3:05:9c:d7:84:5e:71:7d:a9:2a:a3:1d:71:dc:c9: 37:f8:53:93:01:51:75:31:be:ca:51:48:70:9a:50: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:15:29:64:F0:BF:C3:00:ED:5A:C0:91:11:36:27:F6:60:ED:17:D7 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bc:c9:7c:d7:8a:c8:b1:dc:3f:9e:3d:23:a5:72:93:61:45: b9:8b:05:1c:a0:25:01:dc:4b:c8:1d:2c:fd:5b:0c:21:64:1e: 4f:63:4d:3c:9e:06:1b:c8:6c:9e:71:a0:9f:be:81:57:28:8d: b0:09:96:ab:b1:e1:8d:9b:ff:85:fe:92:ae:e8:41:0d:aa:d7: 13:f9:85:8a:89:b7:dd:58:d1:b4:54:eb:4e:ca:22:30:25:ed: 36:cd:d5:b4:3b:f2:f7:4e:97:61:90:45:f2:2d:0c:c8:ee:e4: 47:a6:0f:49:51:af:e4:51:6f:75:0e:f0:b1:88:10:cd:44:76: ba:cb:3a:8e:08:9f:a7:db:40:24:25:4c:ef:54:6f:8e:fe:f2: 0e:c1:9b:1d:8f:c2:fa:7c:c6:1c:44:f1:a8:d0:79:48:11:e9: e0:66:86:ae:56:32:dd:a7:c3:5f:76:c4:a5:a5:e2:37:cd:fb: cd:33:4a:a3:4e:e5:3b:40:fa:49:ef:7b:f4:38:38:33:b7:3c: ff:6a:0c:00:0b:d3:7f:2f:7d:4b:1b:05:ef:68:0f:4c:2b:84: 66:e5:fa:24:3d:35:51:40:5b:07:af:2d:a2:29:f5:a7:06:eb: d1:cf:8e:25:52:8e:f4:3b:04:bc:97:68:aa:44:ba:2b:c5:18: d9:15:68:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfizySSn2WZizxYn1q8SZ5rVDy9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNjAzMjUxNzA1MDNaFw0yNjAzMjgyMjE0MDNaMDMxMTAvBgNV BAMTKDM5MTUyOTY0RjBCRkMzMDBFRDVBQzA5MTExMzYyN0Y2NjBFRDE3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl6OgaUYfxv3QQt3FctlaOPwgk Z+bKiBKGPbD/VH5YciE7uZZ6HjwuiCamvYiI6fTXrhVe14fi4xlqXUsuRoWEsyId cDVkdnBeBzs1sAzE6CHc+60P6Nig3+RVJXDvsEwIYaOvJFl0hhK6xRHHFnDVXYw7 sRkrISUL6QVgVE3xF9TNjzFn6WLMUUWOOXn6Yq3NLQdcGX8ci4b8QQGiUjtnEHFp 7ShHE3uDSU1kGZlbwNLjkkMKOhiUurW1n3LvgyuibYxUyTcvkTuhmjvAyQZTcRcp dN535c3rjPwxpoub6qMFnNeEXnF9qSqjHXHcyTf4U5MBUXUxvspRSHCaUA0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORUpZPC/wwDtWsCRETYn9mDtF9cwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI68yXzXisix3D+ePSOlcpNhRbmLBRygJQHc S8gdLP1bDCFkHk9jTTyeBhvIbJ5xoJ++gVcojbAJlqux4Y2b/4X+kq7oQQ2q1xP5 hYqJt91Y0bRU607KIjAl7TbN1bQ78vdOl2GQRfItDMju5EemD0lRr+RRb3UO8LGI EM1EdrrLOo4In6fbQCQlTO9Ub47+8g7Bmx2Pwvp8xhxE8ajQeUgR6eBmhq5WMt2n w192xKWl4jfN+80zSqNO5TtA+knve/Q4ODO3PP9qDAAL038vfUsbBe9oD0wrhGbl +iQ9NVFAWwevLaIp9acG69HPjiVSjvQ7BLyXaKpEuivFGNkVaHo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:08 2026 by rpki-client