$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: pficFL7arcvUAIRQxrWqUk7vqkhwMzjYZJn5ViXjw4Q= Subject key identifier: A0:72:67:B7:B5:75:F7:BD:31:E0:25:40:69:00:1C:46:FF:F7:FC:28 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 7335F5EFE512BBE7AADA025CFD8036B28DC4FE7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: 0141 Signing time: Tue 24 Mar 2026 16:21:13 +0000 Manifest this update: Tue 24 Mar 2026 16:16:13 +0000 Manifest next update: Fri 27 Mar 2026 18:00:13 +0000 Files and hashes: 1: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: vL1rJDxR5w4Ggk0hiI/WKv9RCvHPYx85Tyvj9wmnt3E=) 2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: odYW4tuHIAmBKw7Yir5Faqa6Vv8eHC6lsyyVWAOjs3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:35:f5:ef:e5:12:bb:e7:aa:da:02:5c:fd:80:36:b2:8d:c4:fe:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Mar 24 16:16:13 2026 GMT Not After : Mar 27 18:00:13 2026 GMT Subject: CN=A07267B7B575F7BD31E0254069001C46FFF7FC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:a5:ad:37:0a:75:da:24:26:4f:e2:31:d1: 38:0e:b5:26:03:dd:63:1c:14:a4:2b:fa:b4:9b:1b: 4c:ac:04:69:e2:f0:9a:fe:cd:97:0c:d5:2e:ae:13: 7a:9a:d5:57:76:53:82:d2:64:49:08:df:77:32:76: 80:04:b3:1e:ae:12:3d:08:c2:39:b2:48:22:00:6c: 1e:54:1a:f9:3c:e6:1f:a5:9a:39:3a:e3:bb:e7:61: 01:b9:1e:5c:87:2b:97:1c:45:5c:21:5d:29:9e:83: a7:74:4d:33:90:77:72:53:91:8f:73:b1:de:e2:bf: 57:9b:6a:18:fe:c5:42:71:bc:bc:9c:54:40:11:8a: 35:ba:f0:be:96:e3:3e:8a:3d:8a:02:49:79:b9:0b: 13:2d:1a:f5:9c:dc:ec:39:99:81:2a:e6:86:7a:7a: df:db:b4:85:d5:9c:cf:b4:a6:c2:ee:c6:7b:be:74: c2:e8:fd:2f:49:ed:e5:42:b0:c3:60:82:01:20:5a: 17:69:95:ef:e7:36:91:b2:b7:64:8f:a9:2e:57:41: 54:3a:d9:74:af:2e:96:36:58:60:32:e8:14:63:66: 94:73:7d:51:94:97:28:2d:f7:0f:2e:15:e4:2d:2a: e9:3d:a8:df:14:21:c6:9f:71:14:5e:49:97:78:25: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:72:67:B7:B5:75:F7:BD:31:E0:25:40:69:00:1C:46:FF:F7:FC:28 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:32:30:ce:27:05:70:65:d3:2a:4e:e3:9e:b5:b4:1f:ed:85: 85:f4:a1:c7:b5:7f:1e:ff:2e:a0:9d:7c:c9:e0:b9:b7:92:68: 5a:1d:2f:7f:2a:67:e2:24:94:95:bb:77:5b:5d:79:34:4b:39: 3b:28:92:21:9e:61:b3:e1:12:b0:ce:64:89:ed:70:01:c4:45: a9:c2:d3:d5:6c:99:f6:f6:4d:e8:4b:fb:63:4e:c7:5b:4f:eb: 9a:e0:a3:87:8c:2c:2a:14:58:f7:81:fa:7a:e6:94:83:67:0e: 7a:8a:2d:e6:b4:3f:36:91:2f:0a:f8:ef:bf:bb:9d:2e:50:ca: ca:07:a3:7c:63:ba:d8:ac:9e:ca:02:2a:c8:d6:2f:98:3c:75: cd:d5:c7:49:26:18:8a:e6:05:8d:ed:97:7e:e9:b8:68:85:67: 75:8a:03:4c:f5:32:d6:36:ae:6e:12:2a:50:77:47:9d:ec:16: 54:6d:98:7f:53:47:92:74:ae:2d:3d:0e:42:fd:eb:97:16:cc: 41:e4:e1:f6:8e:70:a5:e4:87:5a:f0:01:05:8d:49:31:3e:ee: f4:95:8e:b5:cf:bd:9b:25:e5:d1:56:cd:fe:05:a6:d8:fe:cf: ca:f1:01:58:31:66:94:d1:97:cd:53:3d:c2:e4:28:55:01:c5: 92:b7:9e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczX17+USu+eq2gJc/YA2so3E/nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNjAzMjQxNjE2MTNaFw0yNjAzMjcxODAwMTNaMDMxMTAvBgNV BAMTKEEwNzI2N0I3QjU3NUY3QkQzMUUwMjU0MDY5MDAxQzQ2RkZGN0ZDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5qWtNwp12iQmT+Ix0TgOtSYD 3WMcFKQr+rSbG0ysBGni8Jr+zZcM1S6uE3qa1Vd2U4LSZEkI33cydoAEsx6uEj0I wjmySCIAbB5UGvk85h+lmjk647vnYQG5HlyHK5ccRVwhXSmeg6d0TTOQd3JTkY9z sd7iv1ebahj+xUJxvLycVEARijW68L6W4z6KPYoCSXm5CxMtGvWc3Ow5mYEq5oZ6 et/btIXVnM+0psLuxnu+dMLo/S9J7eVCsMNgggEgWhdple/nNpGyt2SPqS5XQVQ6 2XSvLpY2WGAy6BRjZpRzfVGUlygt9w8uFeQtKuk9qN8UIcafcRReSZd4JUgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHJnt7V1970x4CVAaQAcRv/3/CgwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMyMM4nBXBl0ypO4561tB/thYX0oce1fx7/ LqCdfMngubeSaFodL38qZ+IklJW7d1tdeTRLOTsokiGeYbPhErDOZIntcAHERanC 09Vsmfb2TehL+2NOx1tP65rgo4eMLCoUWPeB+nrmlINnDnqKLea0PzaRLwr477+7 nS5QysoHo3xjutisnsoCKsjWL5g8dc3Vx0kmGIrmBY3tl37puGiFZ3WKA0z1MtY2 rm4SKlB3R53sFlRtmH9TR5J0ri09DkL965cWzEHk4faOcKXkh1rwAQWNSTE+7vSV jrXPvZsl5dFWzf4Fptj+z8rxAVgxZpTRl81TPcLkKFUBxZK3nvI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:42 2026 by rpki-client