$ rpki-client -vvf repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft File: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft (raw, json) Hash identifier: FoBsyfeLLkcyTEq6p5EmpW9J32yJcUMYYoz045MKmxk= Subject key identifier: 1D:89:7D:16:B5:A6:D9:A8:3A:22:CB:0E:0D:0B:18:D5:5D:1A:49:E2 Authority key identifier: 06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59 Certificate issuer: /CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159 Certificate serial: 7201750413101E5F65109B71E4C75ADE2E63A7D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft Manifest number: 0306 Signing time: Tue 24 Mar 2026 10:41:39 +0000 Manifest this update: Tue 24 Mar 2026 10:36:39 +0000 Manifest next update: Fri 27 Mar 2026 18:04:39 +0000 Files and hashes: 1: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl (hash: x97nRwl1Jn0xyz6D71cBPsFBvf7bUu5JW10y+PDZLoA=) 2: 3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (hash: HPAI2gh/1HuKjzOsiopIeCg4F+M7JZClMF/J1ZpnE0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:01:75:04:13:10:1e:5f:65:10:9b:71:e4:c7:5a:de:2e:63:a7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159 Validity Not Before: Mar 24 10:36:39 2026 GMT Not After : Mar 27 18:04:39 2026 GMT Subject: CN=1D897D16B5A6D9A83A22CB0E0D0B18D55D1A49E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:8f:67:e4:0f:22:0e:62:68:0b:b0:3d:a4: 87:2b:fe:4d:dd:ab:c3:5a:1a:15:c2:57:01:1a:09: a6:87:c0:c7:ee:0e:3b:96:87:e0:3a:5a:03:13:5c: 51:fd:1c:5f:a5:20:df:8d:33:14:5f:56:9e:34:5b: 8c:8f:20:96:d8:fd:65:ae:79:50:38:eb:b0:5c:da: 80:a8:55:56:eb:db:9f:cd:91:dd:28:a4:10:3c:5a: 7d:58:81:40:7d:1d:78:70:09:6c:d2:9e:e2:23:0b: b5:95:ed:71:b2:44:d1:a7:74:a3:64:2a:83:37:10: 65:96:49:0c:62:fd:df:9f:08:54:8b:5a:ba:79:33: 2f:ba:07:f0:84:f0:02:e8:5d:e6:65:09:54:77:1f: 99:09:0d:89:bf:cb:9b:2d:97:08:45:87:3a:9e:18: 3f:68:cc:3d:a9:8e:ad:31:00:94:49:df:a2:8f:16: be:d1:d7:2d:93:00:9a:2a:6a:e7:d5:9f:0d:ec:a8: 88:91:84:16:ec:f3:23:44:3f:f0:1d:f4:cb:bf:6b: b8:19:ff:19:5f:5a:be:48:73:fa:37:37:5a:5e:d6: 01:fd:e5:91:ce:17:7b:1f:37:ff:51:43:fb:32:dd: 83:db:94:c7:3d:ee:c7:a1:80:6d:17:aa:50:a7:88: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:89:7D:16:B5:A6:D9:A8:3A:22:CB:0E:0D:0B:18:D5:5D:1A:49:E2 X509v3 Authority Key Identifier: keyid:06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fc:70:ad:a9:b8:51:ac:c7:d8:9f:91:f0:86:11:2e:18:00: ec:aa:e2:e6:a3:00:95:2e:9f:6a:e0:4d:3a:65:d7:fc:4b:62: 72:3f:38:b8:0c:5a:92:52:34:7b:ea:30:46:70:47:49:0b:8a: 59:58:89:90:0a:61:5f:b4:d0:ef:e0:2f:a8:16:28:09:79:10: 36:8d:21:43:d2:bb:62:9a:d5:7c:83:ad:63:03:5a:7b:a1:36: 5a:e3:ad:26:c4:3f:ec:cf:fd:b7:5d:68:58:dc:d5:9f:4e:5d: f6:c7:45:7b:b4:9a:e2:48:b4:f4:ba:d4:f0:d7:51:0f:44:ed: 89:b7:01:4e:6e:ad:70:20:bf:02:49:62:20:95:4a:d1:17:09: 5c:c7:07:65:ad:a7:73:37:23:da:cf:c7:f9:7b:a0:1b:2b:0a: d2:94:0d:c5:87:e2:dd:96:2a:32:87:87:c8:f3:ac:85:c7:a1: 77:f4:53:11:47:72:89:96:4e:fd:3d:67:f2:33:2f:0e:dd:4a: bc:a1:6a:7e:70:56:a7:72:d3:4e:61:dd:f7:0d:d2:ad:1c:1c: c8:e7:c4:b3:90:b8:ff:ac:55:0d:6c:e7:01:37:a8:0b:1e:1b: d5:4c:51:24:11:f3:7e:83:9f:ed:53:52:dc:2d:e3:8b:37:94: 56:a5:44:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgF1BBMQHl9lEJtx5Mda3i5jp9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBG RkVBMjE1OTAeFw0yNjAzMjQxMDM2MzlaFw0yNjAzMjcxODA0MzlaMDMxMTAvBgNV BAMTKDFEODk3RDE2QjVBNkQ5QTgzQTIyQ0IwRTBEMEIxOEQ1NUQxQTQ5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJo9n5A8iDmJoC7A9pIcr/k3d q8NaGhXCVwEaCaaHwMfuDjuWh+A6WgMTXFH9HF+lIN+NMxRfVp40W4yPIJbY/WWu eVA467Bc2oCoVVbr25/Nkd0opBA8Wn1YgUB9HXhwCWzSnuIjC7WV7XGyRNGndKNk KoM3EGWWSQxi/d+fCFSLWrp5My+6B/CE8ALoXeZlCVR3H5kJDYm/y5stlwhFhzqe GD9ozD2pjq0xAJRJ36KPFr7R1y2TAJoqaufVnw3sqIiRhBbs8yNEP/Ad9Mu/a7gZ /xlfWr5Ic/o3N1pe1gH95ZHOF3sfN/9RQ/sy3YPblMc97sehgG0XqlCniKazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYl9FrWm2ag6IssODQsY1V0aSeIwHwYDVR0j BBgwFoAUBhppK/wWsRnB2P2wfIHN4P/qIVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzMxZmIyNy02MTMzLTQ3ZWEtYjdjYy0yMjI3ZTA0Y2EyNjUvMC8wNjFBNjkyQkZD MTZCMTE5QzFEOEZEQjA3QzgxQ0RFMEZGRUEyMTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBGRkVB MjE1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzczMWZiMjctNjEzMy00N2VhLWI3 Y2MtMjIyN2UwNGNhMjY1LzAvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNE RTBGRkVBMjE1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKr8cK2puFGsx9ifkfCGES4YAOyq4uajAJUu n2rgTTpl1/xLYnI/OLgMWpJSNHvqMEZwR0kLillYiZAKYV+00O/gL6gWKAl5EDaN IUPSu2Ka1XyDrWMDWnuhNlrjrSbEP+zP/bddaFjc1Z9OXfbHRXu0muJItPS61PDX UQ9E7Ym3AU5urXAgvwJJYiCVStEXCVzHB2Wtp3M3I9rPx/l7oBsrCtKUDcWH4t2W KjKHh8jzrIXHoXf0UxFHcomWTv09Z/IzLw7dSryhan5wVqdy005h3fcN0q0cHMjn xLOQuP+sVQ1s5wE3qAseG9VMUSQR836Dn+1TUtwt44s3lFalRL0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:11 2026 by rpki-client