$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: CHclD95O9nsuDB7eSrW/CX91LjP1oZEb824LOyckr/w= Subject key identifier: 1A:75:52:D6:57:86:F2:D9:0F:F9:B1:2C:D8:ED:1D:78:E7:38:6C:1B Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 1CE93E9A17A945588DFC26EC49181DADC9B7DAF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 02C5 Signing time: Wed 25 Mar 2026 15:01:50 +0000 Manifest this update: Wed 25 Mar 2026 14:56:50 +0000 Manifest next update: Sun 29 Mar 2026 00:08:50 +0000 Files and hashes: 1: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: kybQY7rBZampG6pJA1Oe9sFLMXzLtrePMpSgXy90TsI=) 2: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=) 3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=) 4: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e9:3e:9a:17:a9:45:58:8d:fc:26:ec:49:18:1d:ad:c9:b7:da:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Mar 25 14:56:50 2026 GMT Not After : Mar 29 00:08:50 2026 GMT Subject: CN=1A7552D65786F2D90FF9B12CD8ED1D78E7386C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:bc:59:c7:2d:56:5a:d7:67:3c:33:fd:4b: 96:c9:f2:ea:6e:a1:70:2f:50:83:06:75:27:90:9a: f7:48:03:15:68:d6:80:a3:3f:40:49:84:16:5a:d6: cd:12:46:37:3a:c4:6f:70:0e:69:c3:75:f7:2a:49: 3b:9d:86:58:00:bd:79:81:09:9a:46:11:94:c2:5b: 15:48:06:e1:2d:20:02:04:91:4a:91:dc:a4:ac:78: 18:6d:b1:80:f9:5b:b9:37:99:33:81:6b:51:25:77: 48:57:22:68:b2:0b:76:b1:e6:10:2c:5e:35:1f:15: 72:d7:e5:71:6d:90:b8:94:db:64:78:48:c1:17:1e: 56:27:08:3a:3e:49:c9:f5:90:9d:cd:d3:69:cd:ed: d6:aa:3f:c4:10:86:bf:56:51:36:20:36:31:30:2f: 0b:78:d5:d9:4e:82:d1:5d:f2:c1:f3:09:64:5b:c4: 50:de:77:b5:b7:fb:1a:5e:cd:1f:5d:42:68:ca:08: 7b:0e:e3:a0:f5:29:e1:af:a6:f8:1e:3c:19:da:a3: 0d:ba:3a:bb:38:bc:da:b4:af:17:27:bb:f6:3d:4d: 4b:e4:bb:c7:5b:92:25:c4:79:a1:2c:2d:a6:48:1c: ef:a8:c9:6e:35:9e:89:8c:b1:bc:d3:19:a2:82:18: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:75:52:D6:57:86:F2:D9:0F:F9:B1:2C:D8:ED:1D:78:E7:38:6C:1B X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b7:87:47:76:8d:27:34:9b:36:dc:2e:26:3f:22:d9:e7:5c: b1:30:54:28:b7:75:44:a9:de:e9:9b:94:e7:0b:65:24:d8:f0: 63:0a:be:f4:81:63:86:a5:cc:67:e6:fe:eb:fe:c6:d4:cd:7b: 5f:19:d6:a0:10:9f:d7:b0:9a:a8:8b:8a:9e:16:0d:c4:49:2f: 45:15:fd:b5:7d:11:d0:b5:89:ca:1c:17:c9:c8:d7:26:f4:a8: 7d:13:95:7e:3a:31:ec:86:17:fc:30:bd:ef:f7:3c:7e:aa:47: bd:48:23:06:65:f1:b4:a2:ec:1f:18:16:d7:98:bc:1c:36:8e: 7a:97:7c:fd:20:ac:ad:d7:a0:ac:3d:4e:7a:b1:cc:83:38:93: 6b:06:54:d9:24:41:47:0c:82:c2:89:e6:50:72:03:22:8e:5e: 46:69:af:77:8b:f2:b6:ab:69:bd:e6:2c:64:40:d5:5f:da:cc: 9f:ee:fa:10:4c:05:ff:40:36:4e:36:3b:51:db:f5:09:dc:3f: 60:00:4e:e9:fe:69:5f:72:f8:ab:e8:9b:86:17:cd:d0:2b:8a: 9c:b4:8e:d0:41:6f:88:4c:79:20:d8:6c:28:91:eb:87:60:2f: 54:25:03:f4:38:45:66:99:e2:f4:aa:0e:4b:a7:51:0f:64:f7: 40:44:83:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOk+mhepRViN/CbsSRgdrcm32vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNjAzMjUxNDU2NTBaFw0yNjAzMjkwMDA4NTBaMDMxMTAvBgNV BAMTKDFBNzU1MkQ2NTc4NkYyRDkwRkY5QjEyQ0Q4RUQxRDc4RTczODZDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Q7xZxy1WWtdnPDP9S5bJ8upu oXAvUIMGdSeQmvdIAxVo1oCjP0BJhBZa1s0SRjc6xG9wDmnDdfcqSTudhlgAvXmB CZpGEZTCWxVIBuEtIAIEkUqR3KSseBhtsYD5W7k3mTOBa1Eld0hXImiyC3ax5hAs XjUfFXLX5XFtkLiU22R4SMEXHlYnCDo+Scn1kJ3N02nN7daqP8QQhr9WUTYgNjEw Lwt41dlOgtFd8sHzCWRbxFDed7W3+xpezR9dQmjKCHsO46D1KeGvpvgePBnaow26 Ors4vNq0rxcnu/Y9TUvku8dbkiXEeaEsLaZIHO+oyW41nomMsbzTGaKCGFsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGnVS1leG8tkP+bEs2O0deOc4bBswHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm3h0d2jSc0mzbcLiY/ItnnXLEwVCi3dUSp 3umblOcLZSTY8GMKvvSBY4alzGfm/uv+xtTNe18Z1qAQn9ewmqiLip4WDcRJL0UV /bV9EdC1icocF8nI1yb0qH0TlX46MeyGF/wwve/3PH6qR71IIwZl8bSi7B8YFteY vBw2jnqXfP0grK3XoKw9TnqxzIM4k2sGVNkkQUcMgsKJ5lByAyKOXkZpr3eL8rar ab3mLGRA1V/azJ/u+hBMBf9ANk42O1Hb9QncP2AATun+aV9y+Kvom4YXzdAripy0 jtBBb4hMeSDYbCiR64dgL1QlA/Q4RWaZ4vSqDkunUQ9k90BEg/8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:20 2026 by rpki-client