$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json) Hash identifier: OGJ5NYzqfPkBNKw4/KmSbqb4cZ5KPJsxiJQQx/lxg9g= Subject key identifier: E6:7B:F9:F8:C0:8F:A0:3E:3C:F5:A3:37:77:7B:BC:A0:B7:6C:05:D9 Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Certificate issuer: /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Certificate serial: 5BB08E39550710A568CF4FD7FEC85CBE56ED41D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 23:00:48 +0000 Manifest this update: Tue 24 Mar 2026 22:55:48 +0000 Manifest next update: Sat 28 Mar 2026 02:03:48 +0000 Files and hashes: 1: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: UN/a2XRTw8081uL/ZY93JqlCc8U4ClmN/ji+ij6yORg=) 2: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: 7dgE3Gc8Ts4JpoR+8irvbQrMw6eaegov7QXubOKEIZo=) 3: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: g0wg8Deehkfr6iJjF1icldun4thvTysDD1uiOyWBYM4=) 4: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: GwFAfVLpG/ugaQYqpWQY09MQmCe9PdpSsGdhvKfZQm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b0:8e:39:55:07:10:a5:68:cf:4f:d7:fe:c8:5c:be:56:ed:41:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Validity Not Before: Mar 24 22:55:48 2026 GMT Not After : Mar 28 02:03:48 2026 GMT Subject: CN=E67BF9F8C08FA03E3CF5A337777BBCA0B76C05D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:98:c0:89:a6:06:96:93:ae:92:a3:c8:03: 9b:a3:7c:59:15:1f:ea:61:cd:36:34:37:c8:58:89: 0f:3e:43:6c:49:6d:96:30:44:17:ff:1b:d4:b6:fe: 51:f9:95:7c:86:15:ab:e2:66:30:dc:34:f3:37:95: 61:f7:9e:02:58:0a:2b:f7:af:59:54:73:d9:ee:29: bf:82:fa:73:1c:db:76:c9:a6:c5:2b:0d:23:cb:0d: 3d:22:71:d1:a2:58:d7:77:05:9a:ca:94:c4:ea:1e: f6:3a:87:fc:fa:a8:d2:3f:39:f2:d4:fc:68:92:ce: 5c:08:88:b5:6d:75:48:af:ed:2d:05:9b:7b:f0:ae: a9:0f:d0:0b:bf:d2:10:5d:84:dc:5d:d7:73:94:fc: 75:13:34:dc:78:9f:73:9d:5b:f5:93:ad:32:9a:d3: bd:a2:37:d2:c0:c9:48:37:da:25:16:1d:64:0e:4e: 07:7e:68:28:5a:d1:52:fb:2b:95:e3:08:93:96:09: a7:a9:30:77:8d:30:9d:84:7e:d4:62:15:df:3b:f0: 37:6e:f1:18:07:fb:f8:e9:da:49:4f:cd:5c:b4:dc: 1f:9f:1c:34:56:97:41:e7:b0:37:0a:1e:96:0b:63: b3:f8:5f:f1:43:7c:82:05:a0:70:a4:fe:45:c9:eb: 60:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7B:F9:F8:C0:8F:A0:3E:3C:F5:A3:37:77:7B:BC:A0:B7:6C:05:D9 X509v3 Authority Key Identifier: keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:35:d4:e8:9b:2b:58:d8:51:90:19:69:34:51:23:d6:e2:34: bd:19:57:ec:80:c4:7a:f4:70:5f:d3:d6:f1:19:87:92:c8:a0: 5e:a3:80:c4:87:59:e8:d8:99:67:5f:56:01:2d:14:31:82:d4: db:95:1b:eb:a9:c4:e1:19:ce:37:4f:5d:e7:89:9d:ac:d7:40: dd:95:73:f6:0a:aa:a2:2f:89:2c:e6:01:ed:32:73:37:60:93: fc:52:11:96:14:17:1e:48:d5:43:99:07:50:b0:cf:91:c4:40: 49:28:d3:21:dd:36:2f:66:0b:b0:b6:1d:58:f1:a8:ec:af:bb: 4c:51:36:68:d6:90:5b:e3:36:db:16:70:2b:4f:af:b0:aa:d1: 2e:9e:45:78:1e:70:d6:4a:48:15:e5:ab:cf:17:e5:9b:e7:33: 13:17:d1:3a:75:76:f0:1d:ce:dd:6e:26:3a:5e:6f:4a:2f:d1: 98:e8:8b:19:7a:f3:b4:a0:d5:df:24:de:d1:39:7f:5a:98:60: c0:0b:59:34:36:65:3f:c7:d9:b3:7e:0d:59:81:49:19:6f:86: 06:8d:85:18:96:de:58:54:09:99:8e:ac:4d:c8:14:08:58:5c: 81:3b:1a:50:4d:28:df:42:b8:3a:5d:a9:63:c1:64:ab:93:87: d8:db:ed:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7COOVUHEKVoz0/X/shcvlbtQdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYz OTRCQThFOTAeFw0yNjAzMjQyMjU1NDhaFw0yNjAzMjgwMjAzNDhaMDMxMTAvBgNV BAMTKEU2N0JGOUY4QzA4RkEwM0UzQ0Y1QTMzNzc3N0JCQ0EwQjc2QzA1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXRpjAiaYGlpOukqPIA5ujfFkV H+phzTY0N8hYiQ8+Q2xJbZYwRBf/G9S2/lH5lXyGFaviZjDcNPM3lWH3ngJYCiv3 r1lUc9nuKb+C+nMc23bJpsUrDSPLDT0icdGiWNd3BZrKlMTqHvY6h/z6qNI/OfLU /GiSzlwIiLVtdUiv7S0Fm3vwrqkP0Au/0hBdhNxd13OU/HUTNNx4n3OdW/WTrTKa 072iN9LAyUg32iUWHWQOTgd+aCha0VL7K5XjCJOWCaepMHeNMJ2EftRiFd878Ddu 8RgH+/jp2klPzVy03B+fHDRWl0HnsDcKHpYLY7P4X/FDfIIFoHCk/kXJ62CJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5nv5+MCPoD489aM3d3u8oLdsBdkwHwYDVR0j BBgwFoAUanX5XqEcP5hMXGEP6SIgJjlLqOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMC82QTc1Rjk1RUEx MUMzRjk4NEM1QzYxMEZFOTIyMjAyNjM5NEJBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYzOTRC QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIw MjYzOTRCQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA11OibK1jYUZAZaTRRI9biNL0ZV+yAxHr0 cF/T1vEZh5LIoF6jgMSHWejYmWdfVgEtFDGC1NuVG+upxOEZzjdPXeeJnazXQN2V c/YKqqIviSzmAe0yczdgk/xSEZYUFx5I1UOZB1Cwz5HEQEko0yHdNi9mC7C2HVjx qOyvu0xRNmjWkFvjNtsWcCtPr7Cq0S6eRXgecNZKSBXlq88X5ZvnMxMX0Tp1dvAd zt1uJjpeb0ov0Zjoixl687Sg1d8k3tE5f1qYYMALWTQ2ZT/H2bN+DVmBSRlvhgaN hRiW3lhUCZmOrE3IFAhYXIE7GlBNKN9CuDpdqWPBZKuTh9jb7fI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:25:14 2026 by rpki-client