$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: VUzKjXOigaqThU/9ftmWTEySFoPvZRjMEtojv/VEm4s= Subject key identifier: C6:E2:9E:F6:19:CF:3B:C3:E9:6B:79:FA:E8:F6:66:6A:A4:17:DB:66 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 1ECD2E518AF5AC606169FD5225F5759E92F9C0BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 0201 Signing time: Thu 26 Mar 2026 11:11:30 +0000 Manifest this update: Thu 26 Mar 2026 11:06:30 +0000 Manifest next update: Sun 29 Mar 2026 19:21:30 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: a0pLp5FVIOKCyynC3nqEg0f7XooNhe6lSNrvEp9yAtY=) 2: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: nNtuDch1T6loQOI43k4Pa/PnmvoP73GfE/Ea1GsFAQw=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: /7nSnTLbwVfpQ7BQMvH+hbu0RTezH74cMtOOEigk3zY=) 4: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: ykutlh6qdNzVN7bBDzDHt5e94sIfUDO8MhuG5vLDSlc=) 5: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: mQS4LiJE4ceMRDyobMHBeWNNLMr7gJoMOJ9JhAyQHto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:cd:2e:51:8a:f5:ac:60:61:69:fd:52:25:f5:75:9e:92:f9:c0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Mar 26 11:06:30 2026 GMT Not After : Mar 29 19:21:30 2026 GMT Subject: CN=C6E29EF619CF3BC3E96B79FAE8F6666AA417DB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:5a:d1:78:7f:a1:87:7a:ad:f2:32:6d:bd: c2:dd:d2:c9:4a:57:65:94:a6:3e:05:ef:f1:1c:71: 5a:94:aa:29:fc:5e:90:07:4b:de:7b:cf:8e:8a:4f: d1:6d:fc:dc:f7:ad:42:db:5b:57:b2:1c:4e:09:84: 62:f9:45:f5:c4:6e:dc:fb:eb:db:07:0c:7c:b6:c0: 35:a3:6e:a1:ed:6a:5d:b8:1e:ef:41:3a:e7:da:99: e3:b6:f1:a8:1a:54:57:e8:e1:df:fc:65:89:97:ab: 61:fc:2f:51:27:85:71:90:be:de:b2:0a:63:c5:5a: 3f:9d:c4:93:41:f8:d5:ad:10:fb:53:e6:53:09:e9: a0:09:ca:71:07:9e:5b:03:86:6a:04:72:81:87:c5: 23:a2:2a:83:2b:3a:15:af:16:0d:22:e3:83:dd:c6: 53:12:6a:b7:73:25:0e:0f:31:0d:8c:43:0a:72:59: b8:9a:8a:c7:9a:8c:05:62:e0:73:d2:96:91:a5:3c: ec:81:33:71:69:8d:5e:76:96:f1:c8:8e:57:f7:49: 93:29:81:07:29:79:0a:cd:4e:0c:fb:69:72:7d:3a: 47:87:58:72:1d:0e:b3:90:dc:37:6c:13:88:4d:d3: af:ca:eb:76:39:2e:1d:f7:41:f6:f9:94:18:0d:61: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E2:9E:F6:19:CF:3B:C3:E9:6B:79:FA:E8:F6:66:6A:A4:17:DB:66 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:69:5f:fa:71:84:49:bc:6e:0e:e1:e9:98:28:9e:35:b4:15: 7f:e0:f0:8e:11:b3:91:50:9c:8f:84:09:32:ff:65:39:ed:83: 69:83:a8:3e:a7:5c:c7:20:49:79:b7:f8:05:3f:39:27:20:2a: 1d:a6:aa:a2:51:f9:97:55:e6:0a:9d:79:d6:29:ac:d7:a7:2e: 04:63:fb:a7:8c:58:d8:82:2e:2f:ca:30:a8:6d:18:01:79:d6: 76:5b:1a:43:e6:a7:3c:f1:a4:5a:c1:e8:e0:bc:9d:0f:09:85: d2:1a:6d:fd:ef:bd:fe:14:38:c5:e7:ec:2e:5f:3e:ff:1a:1b: 32:c7:f2:80:c0:3d:cd:c2:66:e0:80:ae:57:15:75:2f:5c:f5: d6:8d:98:72:04:82:5c:59:da:61:59:45:3d:5b:0b:d6:f5:ab: 3d:fd:1e:3a:79:b5:06:6e:55:5c:c9:35:73:0b:38:57:ed:29: 1d:2e:36:d3:c6:fd:59:92:ea:82:8b:4c:61:43:45:01:06:ac: 7b:44:0f:a6:ea:e0:31:34:79:33:9a:6c:43:66:9f:09:d3:03: 60:db:65:3c:fa:58:63:41:4e:f2:4a:b9:af:00:9c:b8:0b:43: 57:3e:d2:99:bb:11:93:38:7a:46:f6:fc:76:44:12:58:22:f2: 76:d6:d1:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHs0uUYr1rGBhaf1SJfV1npL5wL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNjAzMjYxMTA2MzBaFw0yNjAzMjkxOTIxMzBaMDMxMTAvBgNV BAMTKEM2RTI5RUY2MTlDRjNCQzNFOTZCNzlGQUU4RjY2NjZBQTQxN0RCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDah1rReH+hh3qt8jJtvcLd0slK V2WUpj4F7/EccVqUqin8XpAHS957z46KT9Ft/Nz3rULbW1eyHE4JhGL5RfXEbtz7 69sHDHy2wDWjbqHtal24Hu9BOufameO28agaVFfo4d/8ZYmXq2H8L1EnhXGQvt6y CmPFWj+dxJNB+NWtEPtT5lMJ6aAJynEHnlsDhmoEcoGHxSOiKoMrOhWvFg0i44Pd xlMSardzJQ4PMQ2MQwpyWbiaiseajAVi4HPSlpGlPOyBM3FpjV52lvHIjlf3SZMp gQcpeQrNTgz7aXJ9OkeHWHIdDrOQ3DdsE4hN06/K63Y5Lh33Qfb5lBgNYbLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuKe9hnPO8Ppa3n66PZmaqQX22YwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxpX/pxhEm8bg7h6ZgonjW0FX/g8I4Rs5FQ nI+ECTL/ZTntg2mDqD6nXMcgSXm3+AU/OScgKh2mqqJR+ZdV5gqdedYprNenLgRj +6eMWNiCLi/KMKhtGAF51nZbGkPmpzzxpFrB6OC8nQ8JhdIabf3vvf4UOMXn7C5f Pv8aGzLH8oDAPc3CZuCArlcVdS9c9daNmHIEglxZ2mFZRT1bC9b1qz39Hjp5tQZu VVzJNXMLOFftKR0uNtPG/VmS6oKLTGFDRQEGrHtED6bq4DE0eTOabENmnwnTA2Db ZTz6WGNBTvJKua8AnLgLQ1c+0pm7EZM4ekb2/HZEElgi8nbW0cQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:15 2026 by rpki-client