$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: tdt/m5YolQO1H+sbqfZqKT4aMvLbmL5fqvINRPBz6xA= Subject key identifier: 9B:BD:41:0D:29:9A:C1:85:2A:DC:C4:E7:3F:03:E1:8F:8E:88:99:A4 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 751AC95B8CEE1F5F58DC9993BF3B6E5E08799879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 049C Signing time: Wed 25 Mar 2026 15:32:12 +0000 Manifest this update: Wed 25 Mar 2026 15:27:12 +0000 Manifest next update: Sat 28 Mar 2026 16:31:12 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: 4koTKbuSm5r7Pl1jSIPYg5hfh0COUg87FPCs6jXDQ6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1a:c9:5b:8c:ee:1f:5f:58:dc:99:93:bf:3b:6e:5e:08:79:98:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Mar 25 15:27:12 2026 GMT Not After : Mar 28 16:31:12 2026 GMT Subject: CN=9BBD410D299AC1852ADCC4E73F03E18F8E8899A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:2c:98:09:f5:92:ab:8f:29:78:07:17:aa: 47:28:24:5d:96:45:44:62:0b:53:f7:c5:6a:6d:04: 11:76:4b:4c:eb:2c:c8:70:ee:47:af:1f:e7:9b:86: 1c:af:6f:2a:dc:0f:c4:48:5f:6c:b7:39:38:3a:5c: 78:ef:75:19:63:e9:7f:70:4a:42:e6:a5:61:68:e2: 1f:66:8f:4e:f7:b6:ff:6b:a2:ab:12:77:f8:c1:38: de:6a:62:a6:1c:ad:7a:43:3b:5c:e8:9a:de:ea:6f: 7a:b5:3e:1c:78:3b:ad:61:a0:99:45:66:7d:54:c0: 06:d6:b3:86:85:f7:56:bc:21:c4:8e:e5:f5:b0:91: fc:00:c4:e3:a6:f7:c7:34:56:18:72:2d:c5:ab:b6: 08:99:5a:03:64:b6:e2:06:0b:da:70:b6:01:8f:41: cf:a7:30:99:a7:28:67:e7:23:b0:c7:3d:ab:f0:81: e0:2a:e3:61:7a:4e:18:1d:ed:c0:14:f9:0f:dd:dc: 2f:5e:62:01:b4:0e:e8:94:e9:4d:d6:9a:18:1d:45: 37:4e:d5:47:88:6e:bd:69:cd:ec:89:92:f3:5b:83: da:d8:21:7d:31:77:c1:a5:e4:49:b6:87:66:a7:90: 77:af:2e:a6:34:91:90:72:d8:41:51:81:e8:f8:43: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:41:0D:29:9A:C1:85:2A:DC:C4:E7:3F:03:E1:8F:8E:88:99:A4 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:69:fe:6c:6c:1f:7c:d9:52:b1:61:dd:08:5a:cc:77:3f:f8: 24:f7:05:25:24:da:1e:15:ec:c7:5b:77:57:1f:cc:93:07:02: 87:dc:b6:7c:4f:d5:df:f7:32:b9:31:0d:80:79:eb:4c:d6:f3: d9:c1:58:8c:29:95:70:ed:8c:91:b5:44:2f:0b:ee:8c:e7:5c: 3f:66:db:67:a4:3e:96:4a:de:47:33:f1:da:2e:72:72:5e:51: e4:f0:29:32:09:38:e3:e4:58:45:1d:34:5e:f9:8c:9b:ef:af: 6b:ab:f5:02:e2:38:6c:d4:90:fe:92:1b:23:17:1f:f8:1d:9a: 6a:2c:d9:c1:be:3e:8a:01:cc:b9:12:1e:05:07:fc:04:b2:eb: 48:27:88:27:10:e0:72:02:b1:bc:d9:cc:1f:4a:a6:0c:76:67: e9:eb:d5:1f:a4:33:a5:43:b8:14:94:23:f7:ab:c4:27:c0:e1: 1e:e5:7f:b6:03:91:96:84:12:f9:46:dc:3f:76:79:60:65:24: e0:26:df:fc:38:91:c2:ea:c7:07:0e:b2:67:92:66:9d:49:59: bc:93:75:10:0e:9d:d9:36:2e:c7:6a:32:98:4a:ff:19:57:4d: a4:d1:bb:12:e8:30:b6:11:fa:88:ae:11:6f:a6:ec:30:0c:c5: 89:2f:88:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRrJW4zuH19Y3JmTvztuXgh5mHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNjAzMjUxNTI3MTJaFw0yNjAzMjgxNjMxMTJaMDMxMTAvBgNV BAMTKDlCQkQ0MTBEMjk5QUMxODUyQURDQzRFNzNGMDNFMThGOEU4ODk5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5iyYCfWSq48peAcXqkcoJF2W RURiC1P3xWptBBF2S0zrLMhw7kevH+ebhhyvbyrcD8RIX2y3OTg6XHjvdRlj6X9w SkLmpWFo4h9mj073tv9roqsSd/jBON5qYqYcrXpDO1zomt7qb3q1Phx4O61hoJlF Zn1UwAbWs4aF91a8IcSO5fWwkfwAxOOm98c0VhhyLcWrtgiZWgNktuIGC9pwtgGP Qc+nMJmnKGfnI7DHPavwgeAq42F6Thgd7cAU+Q/d3C9eYgG0DuiU6U3WmhgdRTdO 1UeIbr1pzeyJkvNbg9rYIX0xd8Gl5Em2h2ankHevLqY0kZBy2EFRgej4Q7DxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm71BDSmawYUq3MTnPwPhj46ImaQwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFp/mxsH3zZUrFh3QhazHc/+CT3BSUk2h4V 7Mdbd1cfzJMHAofctnxP1d/3MrkxDYB560zW89nBWIwplXDtjJG1RC8L7oznXD9m 22ekPpZK3kcz8doucnJeUeTwKTIJOOPkWEUdNF75jJvvr2ur9QLiOGzUkP6SGyMX H/gdmmos2cG+PooBzLkSHgUH/ASy60gniCcQ4HICsbzZzB9Kpgx2Z+nr1R+kM6VD uBSUI/erxCfA4R7lf7YDkZaEEvlG3D92eWBlJOAm3/w4kcLqxwcOsmeSZp1JWbyT dRAOndk2LsdqMphK/xlXTaTRuxLoMLYR+oiuEW+m7DAMxYkviCA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:52 2026 by rpki-client