$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: EhNkmhdmYAwvhRbkBvHFanyHXrK+y1BCQBC9wzx77v8= Subject key identifier: 92:5F:88:AC:85:01:6F:EE:AD:77:55:58:A9:11:10:05:1F:C8:96:DF Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 2EC776CE4EDC92B237DAB36A778483BD05AAAC09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 0211 Signing time: Wed 25 Mar 2026 14:12:25 +0000 Manifest this update: Wed 25 Mar 2026 14:07:24 +0000 Manifest next update: Sun 29 Mar 2026 00:17:24 +0000 Files and hashes: 1: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Z9x86L9cvYXdwPWT7FHQP4GKwyxq3AVT2OalSxbymqQ=) 2: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: J82C0W5gWS+0nPFST4jO4cxVXr962imYvRiRZK5MNzE=) 3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: IbLWzBm08AS4RfKW9sTYAdOcxbZNJ6mrAM/VuC4qUdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c7:76:ce:4e:dc:92:b2:37:da:b3:6a:77:84:83:bd:05:aa:ac:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Mar 25 14:07:24 2026 GMT Not After : Mar 29 00:17:24 2026 GMT Subject: CN=925F88AC85016FEEAD775558A91110051FC896DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:1e:51:c4:a9:0d:35:6d:a3:ef:3c:cc:66: d0:bb:ea:15:23:1f:05:f2:1f:34:17:b8:78:5b:f0: e6:d4:de:79:5f:9a:9f:c4:75:2c:38:b4:68:23:a2: 5a:73:cd:63:f5:89:0e:88:68:2a:7a:b3:c7:50:f2: 75:68:52:97:df:f2:f3:47:86:9e:62:75:f1:a8:40: 01:81:1e:69:48:22:36:a8:41:99:13:dc:32:00:c2: 43:12:1c:6b:c8:e7:fd:61:8d:9a:3d:49:31:18:51: 3c:8a:0b:40:94:dd:e5:6b:8e:ee:8d:be:7d:07:a4: 30:c6:02:43:fc:13:ac:41:1e:62:30:6c:a9:f6:96: 0b:a1:bb:49:59:6a:67:0a:10:09:db:0c:96:bd:d9: d1:c7:c5:2f:cf:e1:81:63:19:a7:de:9a:3d:e7:a0: 45:f5:b2:74:1b:80:fb:61:99:1a:26:fc:8d:1d:9f: 13:ae:4c:b1:59:6d:5f:fc:4c:0b:b5:ef:12:cd:dd: 02:ec:4f:67:ae:46:09:bc:7d:7f:23:94:b4:87:18: 0b:a5:bd:c5:7d:16:d5:2d:6d:7d:6b:f7:d2:ad:e5: e8:55:e5:da:83:6a:b5:34:55:d0:39:fa:1e:09:a2: ae:20:7d:e1:f4:a7:28:f0:26:f0:89:a9:dd:33:bd: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5F:88:AC:85:01:6F:EE:AD:77:55:58:A9:11:10:05:1F:C8:96:DF X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:dd:f1:86:77:f2:aa:b0:e0:30:c0:86:da:e5:b7:4e:83:76: b8:51:27:7c:70:e8:d6:fa:6f:d7:1c:16:b0:fd:4c:90:95:8d: 63:ce:ae:b3:86:30:3d:c4:11:17:16:2b:ea:6e:b1:af:07:e4: cd:2d:f9:94:55:44:25:d7:18:ce:e3:72:5c:ed:f3:c1:6b:e3: a5:57:bf:be:92:2a:60:4f:20:5b:4c:a7:c0:21:cd:d3:35:4d: ec:48:89:b6:38:56:b3:24:7c:5c:e0:53:bf:13:b2:2f:31:52: b8:7c:94:d1:d4:a2:85:65:f1:23:f0:75:8e:b2:a7:07:fe:68: 3a:00:b0:53:8b:ce:53:52:ec:1e:c9:48:8a:7b:5d:5c:e1:e2: 14:85:f1:2b:e9:91:85:f7:6a:d0:7f:0e:4d:8a:41:db:34:4f: 54:56:9d:46:c7:0e:8f:27:b7:7d:c0:54:bb:c0:20:9a:79:0a: 42:16:7c:24:74:49:f2:28:7b:ae:e4:c1:1b:7c:0d:fe:60:68: 16:e8:b2:fe:40:0a:c0:b2:00:68:b0:d9:8c:e6:28:a5:43:3b: f5:19:4a:a4:00:b1:ed:96:59:53:78:15:e9:71:8e:1c:5e:b3: 4e:13:00:e3:70:ab:65:fc:86:60:d0:16:d2:ab:c0:00:e0:77: b6:0f:56:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsd2zk7ckrI32rNqd4SDvQWqrAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNjAzMjUxNDA3MjRaFw0yNjAzMjkwMDE3MjRaMDMxMTAvBgNV BAMTKDkyNUY4OEFDODUwMTZGRUVBRDc3NTU1OEE5MTExMDA1MUZDODk2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAB5RxKkNNW2j7zzMZtC76hUj HwXyHzQXuHhb8ObU3nlfmp/EdSw4tGgjolpzzWP1iQ6IaCp6s8dQ8nVoUpff8vNH hp5idfGoQAGBHmlIIjaoQZkT3DIAwkMSHGvI5/1hjZo9STEYUTyKC0CU3eVrju6N vn0HpDDGAkP8E6xBHmIwbKn2lguhu0lZamcKEAnbDJa92dHHxS/P4YFjGafemj3n oEX1snQbgPthmRom/I0dnxOuTLFZbV/8TAu17xLN3QLsT2euRgm8fX8jlLSHGAul vcV9FtUtbX1r99Kt5ehV5dqDarU0VdA5+h4Joq4gfeH0pyjwJvCJqd0zvbWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkl+IrIUBb+6td1VYqREQBR/Ilt8wHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/d8YZ38qqw4DDAhtrlt06DdrhRJ3xw6Nb6 b9ccFrD9TJCVjWPOrrOGMD3EERcWK+pusa8H5M0t+ZRVRCXXGM7jclzt88Fr46VX v76SKmBPIFtMp8AhzdM1TexIibY4VrMkfFzgU78Tsi8xUrh8lNHUooVl8SPwdY6y pwf+aDoAsFOLzlNS7B7JSIp7XVzh4hSF8SvpkYX3atB/Dk2KQds0T1RWnUbHDo8n t33AVLvAIJp5CkIWfCR0SfIoe67kwRt8Df5gaBbosv5ACsCyAGiw2YzmKKVDO/UZ SqQAse2WWVN4Felxjhxes04TAONwq2X8hmDQFtKrwADgd7YPVvg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:48:35 2026 by rpki-client