$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: GNA0wheJEixennFKHGUSvVvsX7Mrpq5+8W4EwBs5cNs= Subject key identifier: E9:2C:EE:FE:2A:32:FC:C7:7D:83:AC:1E:FD:5A:A9:DE:6F:04:E9:AA Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 4D00899927CA5C40CB3ED728AA3A953A4D99E361 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 0559 Signing time: Tue 24 Mar 2026 19:20:45 +0000 Manifest this update: Tue 24 Mar 2026 19:15:45 +0000 Manifest next update: Fri 27 Mar 2026 20:32:45 +0000 Files and hashes: 1: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: aPSzYRzlornGeWfzAIT0r9D4Jat0WM7vDnlZVZJVzG8=) 2: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=) 3: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=) 4: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=) 5: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=) 6: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=) 7: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=) 8: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:00:89:99:27:ca:5c:40:cb:3e:d7:28:aa:3a:95:3a:4d:99:e3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Mar 24 19:15:45 2026 GMT Not After : Mar 27 20:32:45 2026 GMT Subject: CN=E92CEEFE2A32FCC77D83AC1EFD5AA9DE6F04E9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:1c:1c:58:f6:0e:8d:fb:b9:10:90:01:f3: ce:79:08:c8:0c:c2:fd:f2:d4:f8:ba:de:dd:85:de: 5c:c0:46:3a:44:59:ef:b0:da:51:c4:cd:1c:cd:98: f0:a0:d0:8e:a8:4d:36:38:3f:ff:1c:f7:8b:5e:dd: 19:ed:1c:8d:99:ef:de:12:ab:63:ac:0c:3a:c5:c2: 3f:66:eb:fe:e8:03:fd:e7:bc:5b:9f:2c:d2:59:bc: 38:de:7a:f0:5c:05:50:73:3f:7c:db:25:11:bb:c4: fe:41:ae:21:53:15:8b:98:4f:5c:ee:15:fc:60:45: 78:48:2f:d5:08:3e:d9:f1:27:42:72:8f:22:cc:b7: cb:65:a3:57:b9:8f:42:f3:cb:b4:62:2d:f7:3e:f0: 59:b7:16:bd:47:ad:0b:69:60:64:dd:8f:03:68:c2: 29:a8:5a:d4:fc:9d:e7:8a:3b:09:39:a1:e3:ac:ac: 1a:8f:97:6b:d7:dc:5b:a4:19:b1:10:5f:e3:b1:65: 92:4a:26:84:3f:cf:76:06:77:77:bd:4c:a9:aa:0a: 82:15:a8:fe:b6:95:f3:df:10:b6:e4:f0:71:8c:b5: 2f:74:da:5a:4d:92:92:d5:b2:97:0d:1f:97:80:30: 9b:e8:1c:25:68:0f:22:c2:d4:f6:4c:e1:49:33:12: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:EE:FE:2A:32:FC:C7:7D:83:AC:1E:FD:5A:A9:DE:6F:04:E9:AA X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a9:7a:d5:03:de:a3:a0:db:1e:b9:39:65:88:8f:16:0a:97: 48:e4:c9:7a:67:98:dc:e8:6b:c8:12:3c:d6:5c:ad:29:09:3e: d6:89:5a:3e:3d:e0:4d:cf:c9:84:af:f5:32:d8:9c:5b:60:32: 4a:4a:81:90:bb:01:f0:55:08:1c:5a:46:6a:21:a1:3d:bd:2c: b3:6c:f4:d5:a9:d2:8e:68:52:35:18:c2:26:51:e3:cd:42:a4: e9:07:36:69:1a:ff:d4:75:ab:d2:74:87:13:42:bd:8f:d6:c5: 0a:bf:0d:75:fb:c9:cd:85:df:94:91:67:b1:e6:46:5e:6c:b0: f3:cf:be:45:95:09:3d:f3:7f:96:9b:c1:9a:22:d1:05:ac:e4: 9c:cf:59:29:f0:3b:34:2f:1d:a4:55:85:44:22:02:0e:d7:bc: 93:8b:3e:b6:fc:c8:8e:e1:34:25:e0:a4:d2:58:86:a2:0f:ce: 3f:ff:51:90:c2:77:77:a9:37:68:28:03:5e:21:01:e8:d8:59: c8:1e:ff:3c:c8:df:97:2c:95:1a:96:b8:4e:6d:e4:16:90:fb: e4:b7:30:57:1a:34:63:a9:61:d6:d9:89:03:be:9f:f0:e0:e5: 44:ae:76:48:5c:ff:4c:dd:03:6a:77:58:f3:8b:67:89:1a:35: 40:bc:67:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQCJmSfKXEDLPtcoqjqVOk2Z42EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNjAzMjQxOTE1NDVaFw0yNjAzMjcyMDMyNDVaMDMxMTAvBgNV BAMTKEU5MkNFRUZFMkEzMkZDQzc3RDgzQUMxRUZENUFBOURFNkYwNEU5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8hwcWPYOjfu5EJAB8855CMgM wv3y1Pi63t2F3lzARjpEWe+w2lHEzRzNmPCg0I6oTTY4P/8c94te3RntHI2Z794S q2OsDDrFwj9m6/7oA/3nvFufLNJZvDjeevBcBVBzP3zbJRG7xP5BriFTFYuYT1zu FfxgRXhIL9UIPtnxJ0JyjyLMt8tlo1e5j0Lzy7RiLfc+8Fm3Fr1HrQtpYGTdjwNo wimoWtT8neeKOwk5oeOsrBqPl2vX3FukGbEQX+OxZZJKJoQ/z3YGd3e9TKmqCoIV qP62lfPfELbk8HGMtS902lpNkpLVspcNH5eAMJvoHCVoDyLC1PZM4UkzEkmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Szu/ioy/Md9g6we/Vqp3m8E6aowHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6petUD3qOg2x65OWWIjxYKl0jkyXpnmNzo a8gSPNZcrSkJPtaJWj494E3PyYSv9TLYnFtgMkpKgZC7AfBVCBxaRmohoT29LLNs 9NWp0o5oUjUYwiZR481CpOkHNmka/9R1q9J0hxNCvY/WxQq/DXX7yc2F35SRZ7Hm Rl5ssPPPvkWVCT3zf5abwZoi0QWs5JzPWSnwOzQvHaRVhUQiAg7XvJOLPrb8yI7h NCXgpNJYhqIPzj//UZDCd3epN2goA14hAejYWcge/zzI35cslRqWuE5t5BaQ++S3 MFcaNGOpYdbZiQO+n/Dg5USudkhc/0zdA2p3WPOLZ4kaNUC8Z0w= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:44 2026 by rpki-client