$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: C6ZjNmTLY5ioALBn6ljQ4GIczveM4/P+hQJUwUarG2w= Subject key identifier: 6C:30:7B:8A:91:5D:D3:C4:DD:CC:75:28:4D:85:C7:11:1D:21:EF:DD Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 4B9DD3F937083AD9460FC67DA563A19DC5A40A27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 0228 Signing time: Tue 24 Mar 2026 21:31:49 +0000 Manifest this update: Tue 24 Mar 2026 21:26:49 +0000 Manifest next update: Sat 28 Mar 2026 06:04:49 +0000 Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) 2: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: 1WQNEJEiqjBt+UQOUCPMe/BUYC6iVyrTqK/nCdf4+WQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9d:d3:f9:37:08:3a:d9:46:0f:c6:7d:a5:63:a1:9d:c5:a4:0a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Mar 24 21:26:49 2026 GMT Not After : Mar 28 06:04:49 2026 GMT Subject: CN=6C307B8A915DD3C4DDCC75284D85C7111D21EFDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:32:59:c2:6c:e2:d5:9a:7d:48:40:f4:fe: 08:e2:cf:40:3d:27:65:49:96:0f:55:59:2d:e3:f7: cd:ee:0b:ce:e9:c9:5b:55:b6:e4:48:93:75:74:06: 27:32:7d:ca:e8:96:e5:41:ab:a1:0a:68:7c:84:7f: a6:3d:c2:c5:eb:7f:20:67:0f:98:d4:09:3b:32:6f: 17:1c:9b:46:33:be:ac:1a:2d:8d:46:f8:48:db:ca: e0:5d:0b:00:eb:e2:e1:43:3c:9f:89:35:8d:6e:6c: 74:68:61:87:d2:19:ff:51:b2:d5:72:a8:e7:c6:38: 35:8c:95:bf:38:03:d4:04:c1:97:c2:d1:e4:18:0d: 80:17:2a:50:81:7c:5a:97:03:c9:65:ee:50:f3:59: f1:0a:03:84:8d:a1:dd:2a:84:f9:a9:69:b3:25:51: 10:3c:c6:43:bf:ef:b3:e5:51:4b:52:83:0f:73:53: a8:24:fc:ff:3f:ab:d4:9d:30:67:61:07:de:bf:16: d8:84:95:05:66:7c:4a:c4:3b:2c:60:3c:de:ab:fc: 69:64:30:28:cb:7e:6d:5a:95:df:03:54:ea:e7:bc: 0c:d3:7a:86:46:ee:e2:aa:3f:f0:77:bf:1b:89:f7: 96:10:b9:36:3d:7c:f7:34:dd:6b:2d:f3:55:07:9d: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:30:7B:8A:91:5D:D3:C4:DD:CC:75:28:4D:85:C7:11:1D:21:EF:DD X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:7e:63:3d:f0:05:0c:fc:1c:c9:61:6a:57:71:49:27:c3:85: 46:9b:1a:15:d1:a6:50:89:c6:be:9f:fe:4a:58:09:14:f5:e7: 9b:56:61:a1:ed:2c:f6:b9:89:77:f7:47:1f:67:fd:e9:fd:23: 89:da:7a:ab:d2:8a:3d:95:ee:19:48:02:16:3e:b7:fe:d7:eb: e7:21:8c:f3:db:c9:b8:1f:f3:86:28:ac:77:0d:08:41:4b:c1: 92:dc:67:8a:82:5e:7d:52:91:32:07:ad:7d:7e:6a:b0:2b:40: 53:51:76:2d:50:ac:bd:14:42:a3:e6:85:99:2b:ad:ef:e4:35: a3:05:4a:01:ca:64:1a:f0:b1:1f:07:fc:4c:f5:0b:5b:6c:e4: b2:98:38:3b:9f:e1:a2:0f:4e:96:d1:b9:62:0f:c1:9f:34:88: eb:15:38:87:76:cb:ce:7c:9c:80:32:06:e0:4c:64:cd:91:1d: 6c:1a:4a:2a:9a:c1:e9:f5:a6:b4:28:09:cb:3f:a5:1f:ca:08: ef:17:37:b7:7a:80:ed:27:62:44:7d:a8:a7:34:18:41:0d:42: af:75:98:82:07:64:61:f2:b5:89:1f:e0:67:ec:97:23:49:b4: 20:6c:62:cc:b3:2f:42:5e:1c:cd:c6:4d:7a:77:5f:e1:d9:8d: 4a:df:a1:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS53T+TcIOtlGD8Z9pWOhncWkCicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNjAzMjQyMTI2NDlaFw0yNjAzMjgwNjA0NDlaMDMxMTAvBgNV BAMTKDZDMzA3QjhBOTE1REQzQzRERENDNzUyODREODVDNzExMUQyMUVGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojDJZwmzi1Zp9SED0/gjiz0A9 J2VJlg9VWS3j983uC87pyVtVtuRIk3V0BicyfcroluVBq6EKaHyEf6Y9wsXrfyBn D5jUCTsybxccm0YzvqwaLY1G+EjbyuBdCwDr4uFDPJ+JNY1ubHRoYYfSGf9RstVy qOfGODWMlb84A9QEwZfC0eQYDYAXKlCBfFqXA8ll7lDzWfEKA4SNod0qhPmpabMl URA8xkO/77PlUUtSgw9zU6gk/P8/q9SdMGdhB96/FtiElQVmfErEOyxgPN6r/Glk MCjLfm1ald8DVOrnvAzTeoZG7uKqP/B3vxuJ95YQuTY9fPc03Wst81UHnaePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbDB7ipFd08TdzHUoTYXHER0h790wHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHF+Yz3wBQz8HMlhaldxSSfDhUabGhXRplCJ xr6f/kpYCRT155tWYaHtLPa5iXf3Rx9n/en9I4naeqvSij2V7hlIAhY+t/7X6+ch jPPbybgf84YorHcNCEFLwZLcZ4qCXn1SkTIHrX1+arArQFNRdi1QrL0UQqPmhZkr re/kNaMFSgHKZBrwsR8H/Ez1C1ts5LKYODuf4aIPTpbRuWIPwZ80iOsVOId2y858 nIAyBuBMZM2RHWwaSiqawen1prQoCcs/pR/KCO8XN7d6gO0nYkR9qKc0GEENQq91 mIIHZGHytYkf4GfslyNJtCBsYsyzL0JeHM3GTXp3X+HZjUrfoUg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:43 2026 by rpki-client