$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft File: A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft (raw, json) Hash identifier: NAgCjsoO+uAXzm5zXHFCUfvZUtYJKMDOV1LRhRHe7wQ= Subject key identifier: 1D:08:46:C6:F6:F8:51:22:41:18:C0:5E:64:69:73:18:BE:65:19:3A Authority key identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 Certificate issuer: /CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1 Certificate serial: 0425141B575DB0465397DCC9719B7447707C4235 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft Manifest number: 01F7 Signing time: Wed 25 Mar 2026 10:31:39 +0000 Manifest this update: Wed 25 Mar 2026 10:26:39 +0000 Manifest next update: Sat 28 Mar 2026 13:16:39 +0000 Files and hashes: 1: A6053DEB0B12DBEE36D52629512562089CCBC1A1.crl (hash: dfFAbS0DBfyoRGxD8LHu0xuRyDdxDYRpLiSiUuhnkN0=) 2: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: uYRFbOTJHuqcvL3sxKrVp0jUqn44sf+z1FQI1Oe3KA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.crl rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:25:14:1b:57:5d:b0:46:53:97:dc:c9:71:9b:74:47:70:7c:42:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1 Validity Not Before: Mar 25 10:26:39 2026 GMT Not After : Mar 28 13:16:39 2026 GMT Subject: CN=1D0846C6F6F851224118C05E64697318BE65193A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:3d:b1:02:a2:e6:90:78:e6:07:30:a3:25: e4:9b:c2:f2:43:ad:00:c3:2e:e2:a7:60:6f:8f:d9: 32:3a:43:47:9a:81:ef:a8:a8:96:25:e8:dd:47:66: 84:1c:a9:0e:5a:a2:1b:8b:d6:7a:b3:25:14:b0:2b: 62:92:db:ba:5e:ea:f0:a9:d8:c7:1d:b3:0d:f8:42: 11:a1:a2:53:ac:ed:bd:64:b3:bb:81:ed:95:c9:2a: 8a:ab:60:99:3e:59:84:58:90:ca:e4:76:da:3b:11: f1:c9:4b:fc:86:64:7a:d0:85:6a:16:9a:92:2a:08: 39:25:31:f7:bf:f9:9a:2a:90:81:c0:11:54:f0:88: 1b:f6:a3:de:15:17:eb:da:b8:f8:0f:59:14:53:5d: 72:9b:9f:11:b2:e6:db:35:84:fc:b6:c5:ae:7b:77: 8b:db:39:d6:85:8c:08:97:64:f5:33:99:d6:a9:6b: ae:9a:02:bd:67:ca:77:76:dc:85:9a:7c:f6:b8:12: 2c:a5:89:a8:da:c0:ed:28:57:e6:a9:a3:29:f4:c0: ab:83:49:ab:b5:ae:23:eb:54:9b:63:c9:3a:b7:b7: 6b:02:6b:4b:19:95:55:58:c9:02:8f:1d:57:a9:83: ab:db:01:55:ae:52:ea:96:3b:e0:a8:8c:5a:bb:43: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:46:C6:F6:F8:51:22:41:18:C0:5E:64:69:73:18:BE:65:19:3A X509v3 Authority Key Identifier: keyid:A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4d:78:ca:cb:43:35:05:fb:a7:fc:54:ff:e9:73:e4:3a:87: 13:4f:a6:ae:5c:29:05:58:e9:66:00:55:ad:64:0e:c0:7f:2e: 6c:7a:03:a0:02:d6:b3:e8:27:f4:98:a3:56:87:7f:fd:eb:1a: 78:d7:ad:b4:4a:6d:75:45:92:5b:34:b6:dc:66:84:7c:f5:a8: b7:a5:a2:ee:d5:cb:b7:62:ef:97:9c:5b:ee:d5:ea:50:9b:d2: 67:90:3f:bc:18:4f:93:cb:58:07:ed:04:53:42:13:b6:38:e6: 59:54:8d:05:a1:1c:ef:a7:ec:c8:1b:d0:65:61:58:11:46:c0: 9e:4d:8c:31:8f:2e:64:3b:e5:9f:12:50:2f:95:97:18:17:77: 0b:45:10:26:f8:e4:80:4e:45:7e:31:77:64:30:23:be:11:f9: 46:af:36:07:58:6a:45:7e:68:5d:8c:61:bf:4d:d7:5c:c1:e7: 34:9d:34:e3:99:29:31:9e:de:46:ac:80:d0:be:9a:1b:cb:fc: 95:f7:3a:82:9e:74:24:0d:e7:cd:35:ba:bf:92:4c:0a:0f:05: f6:f4:d0:15:ed:51:04:7a:88:c5:05:30:5c:cc:d7:78:d5:cb: 59:e7:9a:64:e3:8c:fe:8d:0c:8b:5e:d4:60:45:1f:79:3e:0c: 7d:17:be:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCUUG1ddsEZTl9zJcZt0R3B8QjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwNTNERUIwQjEyREJFRTM2RDUyNjI5NTEyNTYyMDg5 Q0NCQzFBMTAeFw0yNjAzMjUxMDI2MzlaFw0yNjAzMjgxMzE2MzlaMDMxMTAvBgNV BAMTKDFEMDg0NkM2RjZGODUxMjI0MTE4QzA1RTY0Njk3MzE4QkU2NTE5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6D2xAqLmkHjmBzCjJeSbwvJD rQDDLuKnYG+P2TI6Q0eage+oqJYl6N1HZoQcqQ5aohuL1nqzJRSwK2KS27pe6vCp 2Mcdsw34QhGholOs7b1ks7uB7ZXJKoqrYJk+WYRYkMrkdto7EfHJS/yGZHrQhWoW mpIqCDklMfe/+ZoqkIHAEVTwiBv2o94VF+vauPgPWRRTXXKbnxGy5ts1hPy2xa57 d4vbOdaFjAiXZPUzmdapa66aAr1nynd23IWafPa4EiyliajawO0oV+apoyn0wKuD Sau1riPrVJtjyTq3t2sCa0sZlVVYyQKPHVepg6vbAVWuUuqWO+CojFq7Q9RhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHQhGxvb4USJBGMBeZGlzGL5lGTowHwYDVR0j BBgwFoAUpgU96wsS2+421SYpUSViCJzLwaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Q3ZjllYi0zYzJkLTQxYTEtOTA4MS0wNzgwYTU4ODczZWEvMC9BNjA1M0RFQjBC MTJEQkVFMzZENTI2Mjk1MTI1NjIwODlDQ0JDMUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwNTNERUIwQjEyREJFRTM2RDUyNjI5NTEyNTYyMDg5Q0NC QzFBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQTYwNTNERUIwQjEyREJFRTM2RDUyNjI5NTEyNTYy MDg5Q0NCQzFBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBNeMrLQzUF+6f8VP/pc+Q6hxNPpq5cKQVY 6WYAVa1kDsB/Lmx6A6AC1rPoJ/SYo1aHf/3rGnjXrbRKbXVFkls0ttxmhHz1qLel ou7Vy7di75ecW+7V6lCb0meQP7wYT5PLWAftBFNCE7Y45llUjQWhHO+n7Mgb0GVh WBFGwJ5NjDGPLmQ75Z8SUC+VlxgXdwtFECb45IBORX4xd2QwI74R+UavNgdYakV+ aF2MYb9N11zB5zSdNOOZKTGe3kasgNC+mhvL/JX3OoKedCQN5801ur+STAoPBfb0 0BXtUQR6iMUFMFzM13jVy1nnmmTjjP6NDIte1GBFH3k+DH0Xvsg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:44 2026 by rpki-client