$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: hUbMmLTQZVuvHRT8EHsZ7Phb6p+HuJtXYUN6K+co+U0= Subject key identifier: EC:FF:46:F3:52:A1:49:B0:71:46:92:49:95:B5:A9:03:EA:39:CB:F7 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 59E4E1AFE264EC3D405471CD448CBE42250417DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01E6 Signing time: Wed 25 Mar 2026 04:01:08 +0000 Manifest this update: Wed 25 Mar 2026 03:56:08 +0000 Manifest next update: Sat 28 Mar 2026 14:11:08 +0000 Files and hashes: 1: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: CrvhvQWyVC6WruEH7RHMhE+Df/teFD8hFntgP0rYZX8=) 2: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: HVzVEZKhesoTY020j8ak7SvbYVxGbYC4+RXUTxdFP9U=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: oqNdF4uJU42w94bKSytVgmfGCQbpEC2b6KNqL//ouqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e4:e1:af:e2:64:ec:3d:40:54:71:cd:44:8c:be:42:25:04:17:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Mar 25 03:56:08 2026 GMT Not After : Mar 28 14:11:08 2026 GMT Subject: CN=ECFF46F352A149B07146924995B5A903EA39CBF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:91:09:68:12:2f:bb:a6:58:0b:33:cc:bd: 12:c6:cc:d3:91:74:18:ce:0c:ce:75:05:d3:65:38: 3d:7d:19:78:8d:6c:52:af:6c:2f:8c:6c:25:8a:a5: 18:1b:b6:27:a6:fc:44:16:0a:f4:b7:9b:ef:37:76: df:9e:84:0a:1c:47:41:49:c2:6d:66:97:bc:9c:42: e7:b1:64:65:dd:b7:fc:2e:86:c0:78:a4:e1:c7:14: a3:6d:4b:cc:66:fa:35:50:e0:37:25:70:f7:d3:59: 36:dd:23:7d:ae:24:68:a7:f6:0b:ce:0e:8f:06:c0: 21:ad:fe:0a:1b:95:4a:4d:62:f1:1d:54:a3:dc:8b: 22:0b:d7:0f:a2:9b:9c:94:ae:a2:0c:c5:f6:fe:3e: ee:9c:b2:ef:06:8c:42:7d:f4:55:ee:d6:3f:b6:a3: 43:a2:16:fb:b0:fc:3c:1e:86:94:16:8a:94:c8:48: c4:b3:75:17:d4:01:bd:6c:dc:a9:d4:74:67:25:d5: 6d:b8:a7:3e:89:96:d8:cf:2b:e7:75:9f:33:0d:5d: ef:f5:97:93:e9:c1:2a:7a:87:c6:9d:a5:d2:88:2c: ac:bc:d8:ab:0e:db:37:0a:c6:8a:44:77:06:b5:17: 34:8a:f2:32:5e:48:b1:e7:89:e9:73:aa:45:22:bf: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FF:46:F3:52:A1:49:B0:71:46:92:49:95:B5:A9:03:EA:39:CB:F7 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f2:58:04:0a:c0:16:7e:cc:b9:a9:f1:db:ab:c4:7d:e6:28: 6c:5d:bb:7d:76:61:e8:84:f7:58:d1:90:dc:58:47:cd:5b:a4: 7c:38:99:3a:5a:d1:25:64:db:4c:71:e9:d9:43:e3:6c:09:1e: 32:07:58:6d:f5:aa:29:f6:cd:4e:e1:72:56:e7:24:86:7f:87: 4a:55:7f:e2:74:52:0c:c6:a0:ec:e2:7d:3b:d1:8a:8d:79:de: 5b:7e:76:02:b7:67:53:ea:2e:51:88:da:4b:5c:7b:f4:81:b6: 36:f3:12:c4:75:b7:b4:1b:95:a3:b8:d2:49:cc:39:00:5a:e4: 6d:9c:73:7b:c6:66:a4:5c:2f:57:ec:a3:03:47:a9:31:78:7e: 87:46:1d:c6:05:6f:60:e6:5a:1e:42:78:cc:31:26:b4:fb:6a: 86:0f:01:b0:a4:c0:97:ee:58:7e:44:dc:d7:28:76:fb:a5:5c: c8:8c:c9:39:0f:f2:bb:22:0b:7d:95:d8:83:c5:d8:9d:97:5a: cf:e6:9f:00:64:53:3b:de:c6:9a:71:bc:06:9a:ee:77:98:5f: cd:43:ac:bd:fa:ba:2d:2f:31:00:80:7a:21:ac:71:4e:36:ef: 87:a1:2c:23:9f:b7:62:96:7e:69:25:9f:1d:b1:30:84:2d:61: 00:5c:4e:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeThr+Jk7D1AVHHNRIy+QiUEF9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNjAzMjUwMzU2MDhaFw0yNjAzMjgxNDExMDhaMDMxMTAvBgNV BAMTKEVDRkY0NkYzNTJBMTQ5QjA3MTQ2OTI0OTk1QjVBOTAzRUEzOUNCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDJEJaBIvu6ZYCzPMvRLGzNOR dBjODM51BdNlOD19GXiNbFKvbC+MbCWKpRgbtiem/EQWCvS3m+83dt+ehAocR0FJ wm1ml7ycQuexZGXdt/wuhsB4pOHHFKNtS8xm+jVQ4DclcPfTWTbdI32uJGin9gvO Do8GwCGt/goblUpNYvEdVKPciyIL1w+im5yUrqIMxfb+Pu6csu8GjEJ99FXu1j+2 o0OiFvuw/DwehpQWipTISMSzdRfUAb1s3KnUdGcl1W24pz6JltjPK+d1nzMNXe/1 l5PpwSp6h8adpdKILKy82KsO2zcKxopEdwa1FzSK8jJeSLHnielzqkUiv9UFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7P9G81KhSbBxRpJJlbWpA+o5y/cwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfyWAQKwBZ+zLmp8durxH3mKGxdu312YeiE 91jRkNxYR81bpHw4mTpa0SVk20xx6dlD42wJHjIHWG31qin2zU7hclbnJIZ/h0pV f+J0UgzGoOzifTvRio153lt+dgK3Z1PqLlGI2ktce/SBtjbzEsR1t7QblaO40knM OQBa5G2cc3vGZqRcL1fsowNHqTF4fodGHcYFb2DmWh5CeMwxJrT7aoYPAbCkwJfu WH5E3NcodvulXMiMyTkP8rsiC32V2IPF2J2XWs/mnwBkUzvexppxvAaa7neYX81D rL36ui0vMQCAeiGscU4274ehLCOft2KWfmklnx2xMIQtYQBcTqQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:40 2026 by rpki-client