$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: XwC3k3Cf19fsEqVkCDf0djVVb7fAhSnfoAKEDH/PnBU= Subject key identifier: AD:C4:67:97:9F:14:79:1A:4F:D8:84:CB:42:E5:56:26:D7:CB:4B:00 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 706961FA5284AC6B1AEC018F068456AB2E015227 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 0357 Signing time: Thu 26 Mar 2026 09:31:39 +0000 Manifest this update: Thu 26 Mar 2026 09:26:39 +0000 Manifest next update: Sun 29 Mar 2026 14:48:39 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: 6ENMS9sGMllVln6p/hjqvtpowT+H/pc/2hPRdhxZbnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:69:61:fa:52:84:ac:6b:1a:ec:01:8f:06:84:56:ab:2e:01:52:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Mar 26 09:26:39 2026 GMT Not After : Mar 29 14:48:39 2026 GMT Subject: CN=ADC467979F14791A4FD884CB42E55626D7CB4B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:6d:a7:cb:1f:8b:54:89:c0:bb:b7:e1:1f: 02:f5:2f:33:21:1a:b2:ca:28:cc:85:bc:4a:1b:d4: 13:68:f0:1d:dc:6a:1b:56:79:b4:9a:bc:83:a4:86: 60:f3:0a:88:31:fb:39:01:c0:e1:41:21:7f:4c:96: 30:54:74:3e:2d:c1:0f:09:fc:6b:1d:17:06:5c:4b: d7:9f:60:ff:ba:78:48:88:89:91:c5:ae:6c:92:6d: e0:b3:f6:75:0e:82:1a:80:8e:43:d5:50:98:9a:e0: 1c:47:e1:3f:54:f8:d4:5d:2a:d8:56:fe:2b:13:94: 3b:b6:64:26:b6:d8:fc:89:77:e9:5e:8f:0f:90:1f: 08:0d:07:c2:38:4a:1e:3d:57:6c:df:e9:01:63:14: 4c:30:a6:a3:aa:3a:d9:a0:ad:6a:69:f6:b1:bf:10: 6a:00:2c:59:79:b7:02:40:d0:2a:85:a4:b3:ac:bb: 81:7b:e0:7b:c2:b6:9f:4d:5a:82:f3:c1:4a:3b:24: d0:b9:c9:99:79:7e:32:c6:b7:d1:dd:d3:d9:60:8f: 4f:1d:cd:01:1b:2f:6d:a4:d8:01:32:c4:c0:5b:7d: a1:d4:f9:76:c7:ec:92:18:23:b1:21:43:a9:47:91: 56:29:e0:84:6c:1d:de:2d:40:6b:07:5f:b5:f8:99: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C4:67:97:9F:14:79:1A:4F:D8:84:CB:42:E5:56:26:D7:CB:4B:00 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cc:ae:33:8b:9d:45:46:8b:5c:e8:d2:1a:a9:e5:47:f2:7e: 57:2b:7d:e3:f6:b3:d3:d0:79:45:1b:13:b2:c3:74:40:2d:1f: 35:5a:94:ee:c3:40:47:b8:c4:39:6c:25:a3:41:cf:e2:35:f7: 99:e2:fb:06:6e:af:fa:34:03:25:db:4f:a6:0e:b7:0a:5a:bd: dd:a8:39:6b:22:02:67:e7:a7:3f:14:0d:34:65:59:73:10:16: 2e:2b:e9:f4:2d:ec:b4:10:fa:c5:39:8b:df:43:ac:19:b4:f6: 3c:ae:c7:50:07:11:25:41:d4:ad:03:34:d1:d9:07:6c:5b:d4: 30:3a:4f:e4:41:1d:21:37:f7:b7:64:60:07:eb:bf:de:6e:d2: 39:cf:f8:3e:15:41:af:45:d0:a2:4a:61:91:f8:c0:47:6c:a0: 30:44:60:0d:22:78:96:b1:4d:8c:23:7c:fa:1e:55:93:a4:ac: 90:58:87:7d:f5:e9:32:b1:82:51:c0:33:56:33:66:47:97:e0: c7:60:25:9a:7e:01:4e:2c:28:eb:92:ab:cd:a0:47:a0:a2:35: 6a:1c:7d:2b:2b:01:13:54:cd:83:b3:9a:78:56:1a:79:13:69: 14:64:3b:2d:63:0e:4c:01:be:72:9a:b6:88:8f:e8:6f:d4:b0: 0b:5e:d8:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGlh+lKErGsa7AGPBoRWqy4BUicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNjAzMjYwOTI2MzlaFw0yNjAzMjkxNDQ4MzlaMDMxMTAvBgNV BAMTKEFEQzQ2Nzk3OUYxNDc5MUE0RkQ4ODRDQjQyRTU1NjI2RDdDQjRCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygG2nyx+LVInAu7fhHwL1LzMh GrLKKMyFvEob1BNo8B3cahtWebSavIOkhmDzCogx+zkBwOFBIX9MljBUdD4twQ8J /GsdFwZcS9efYP+6eEiIiZHFrmySbeCz9nUOghqAjkPVUJia4BxH4T9U+NRdKthW /isTlDu2ZCa22PyJd+lejw+QHwgNB8I4Sh49V2zf6QFjFEwwpqOqOtmgrWpp9rG/ EGoALFl5twJA0CqFpLOsu4F74HvCtp9NWoLzwUo7JNC5yZl5fjLGt9Hd09lgj08d zQEbL22k2AEyxMBbfaHU+XbH7JIYI7EhQ6lHkVYp4IRsHd4tQGsHX7X4mVexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrcRnl58UeRpP2ITLQuVWJtfLSwAwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/MrjOLnUVGi1zo0hqp5UfyflcrfeP2s9PQ eUUbE7LDdEAtHzValO7DQEe4xDlsJaNBz+I195ni+wZur/o0AyXbT6YOtwpavd2o OWsiAmfnpz8UDTRlWXMQFi4r6fQt7LQQ+sU5i99DrBm09jyux1AHESVB1K0DNNHZ B2xb1DA6T+RBHSE397dkYAfrv95u0jnP+D4VQa9F0KJKYZH4wEdsoDBEYA0ieJax TYwjfPoeVZOkrJBYh3316TKxglHAM1YzZkeX4MdgJZp+AU4sKOuSq82gR6CiNWoc fSsrARNUzYOzmnhWGnkTaRRkOy1jDkwBvnKatoiP6G/UsAte2Nw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:46 2026 by rpki-client