$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: Flnm0djnCcavyckOeVHLHYqCoiwYJU4aOc1jxWS6cS0= Subject key identifier: E3:C0:EC:A8:38:2F:66:1C:3D:63:48:56:88:C1:5F:35:A2:DD:6A:FA Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 798F30343279AF4DA5FD1AFFCBA1B0FBEC7B0260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: DC Signing time: Thu 26 Mar 2026 04:01:31 +0000 Manifest this update: Thu 26 Mar 2026 03:56:31 +0000 Manifest next update: Sun 29 Mar 2026 14:59:31 +0000 Files and hashes: 1: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: huJZ0P8oUpN7vFassjuNvpzR+kEwcoSnNOpqLQ9IqIU=) 2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) 3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8f:30:34:32:79:af:4d:a5:fd:1a:ff:cb:a1:b0:fb:ec:7b:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Mar 26 03:56:31 2026 GMT Not After : Mar 29 14:59:31 2026 GMT Subject: CN=E3C0ECA8382F661C3D63485688C15F35A2DD6AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:ec:f4:e6:20:0b:4a:7f:aa:ca:74:80:0e: 84:57:e0:c5:15:af:dd:90:de:82:58:eb:ed:45:6d: aa:e2:b5:53:86:1c:6c:fd:f1:8b:3e:4e:b1:21:67: 40:da:c7:ad:be:cb:56:19:61:32:8a:d9:72:77:13: 5d:c8:e8:f3:b6:0d:77:ca:7b:5d:fc:eb:bf:4d:86: 51:33:5a:4b:1c:0e:c5:f4:4a:3a:c3:28:dc:c7:d1: cd:ac:27:3c:aa:10:53:49:e2:e2:3b:11:15:fa:74: ca:28:fd:a7:60:c6:49:30:ea:83:d3:a0:75:86:41: 19:13:bb:01:b8:53:66:75:1e:19:84:3d:1a:92:0f: 32:bc:c6:06:78:c0:de:42:e7:02:fd:a4:8e:7a:d7: c1:c1:d2:98:d9:f5:b4:3a:b0:94:90:20:7b:01:6a: 15:4d:58:2f:b4:91:0b:fe:e1:aa:95:db:35:dd:98: 68:d6:ad:ce:3a:88:6a:27:bd:55:aa:dc:a8:40:87: e8:c8:eb:26:bb:fe:6d:a3:c7:2b:1f:50:02:30:68: 57:38:8e:b7:da:62:ff:70:e6:4d:20:e0:1f:cb:02: 3f:d5:f5:5e:9d:b0:51:e2:23:36:af:39:51:5d:d7: ec:c5:d5:5b:4a:9b:87:c7:cf:92:35:cf:bb:ee:e1: 4b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C0:EC:A8:38:2F:66:1C:3D:63:48:56:88:C1:5F:35:A2:DD:6A:FA X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1b:34:9b:32:cb:f4:c7:b4:e6:2f:91:8c:32:fe:31:af:84: eb:7e:07:bd:93:b5:63:cc:bc:0c:eb:06:35:e7:8d:59:76:ad: 69:20:25:37:2b:00:dc:25:58:81:c8:92:56:0b:28:e2:0e:39: 40:1c:5e:a4:74:f3:e7:b2:d3:b4:80:5d:c7:f3:15:37:b0:52: 55:7e:28:bc:08:48:19:5c:56:bd:d8:01:4c:c7:e1:ed:43:2f: 06:58:5d:b8:55:cd:7f:3a:0a:f6:f6:12:84:65:c3:f0:f3:7b: 52:5a:54:4d:e3:2c:78:05:e0:b1:9e:3e:be:7c:2d:cf:f2:74: 09:54:a2:8e:eb:6a:f9:a7:f5:3d:ce:12:54:9e:d0:fb:dd:01: 99:a1:f7:b2:b4:05:11:06:88:75:7b:d1:27:29:ad:3f:92:bb: 3e:d5:0f:7c:d5:f7:84:2c:1f:11:b4:dc:b8:a3:c1:fc:71:1b: 06:7a:21:a2:c8:a8:fe:e5:1e:1a:c2:dd:c7:15:8a:2a:55:c3: ab:9e:95:96:73:43:61:9a:85:c5:6e:a4:78:a9:b6:40:5f:33: 80:90:c6:ac:30:2a:26:f8:25:f6:d1:79:e7:46:77:b5:24:96: 9d:e7:32:14:1d:55:19:21:78:32:2c:d9:06:b2:5d:c6:05:1a: 60:35:f3:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeY8wNDJ5r02l/Rr/y6Gw++x7AmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNjAzMjYwMzU2MzFaFw0yNjAzMjkxNDU5MzFaMDMxMTAvBgNV BAMTKEUzQzBFQ0E4MzgyRjY2MUMzRDYzNDg1Njg4QzE1RjM1QTJERDZBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCuz05iALSn+qynSADoRX4MUV r92Q3oJY6+1FbaritVOGHGz98Ys+TrEhZ0Dax62+y1YZYTKK2XJ3E13I6PO2DXfK e138679NhlEzWkscDsX0SjrDKNzH0c2sJzyqEFNJ4uI7ERX6dMoo/adgxkkw6oPT oHWGQRkTuwG4U2Z1HhmEPRqSDzK8xgZ4wN5C5wL9pI5618HB0pjZ9bQ6sJSQIHsB ahVNWC+0kQv+4aqV2zXdmGjWrc46iGonvVWq3KhAh+jI6ya7/m2jxysfUAIwaFc4 jrfaYv9w5k0g4B/LAj/V9V6dsFHiIzavOVFd1+zF1VtKm4fHz5I1z7vu4UsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU48DsqDgvZhw9Y0hWiMFfNaLdavowHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8bNJsyy/THtOYvkYwy/jGvhOt+B72TtWPM vAzrBjXnjVl2rWkgJTcrANwlWIHIklYLKOIOOUAcXqR08+ey07SAXcfzFTewUlV+ KLwISBlcVr3YAUzH4e1DLwZYXbhVzX86Cvb2EoRlw/Dze1JaVE3jLHgF4LGePr58 Lc/ydAlUoo7ravmn9T3OElSe0PvdAZmh97K0BREGiHV70ScprT+Suz7VD3zV94Qs HxG03LijwfxxGwZ6IaLIqP7lHhrC3ccViipVw6uelZZzQ2GahcVupHiptkBfM4CQ xqwwKib4JfbReedGd7Uklp3nMhQdVRkheDIs2QayXcYFGmA18+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 20:11:30 2026 by rpki-client