$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: LxqbDhAkBjI9A121+NG6km4Du8hXVohVi6vntt1zbSg= Subject key identifier: E7:48:2D:BF:E7:14:F3:53:C2:37:E4:F3:BA:38:4B:0D:48:B4:54:46 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 2A028EA5A979260547D0E133475D67126A050F23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: 0118 Signing time: Wed 25 Mar 2026 07:00:56 +0000 Manifest this update: Wed 25 Mar 2026 06:55:56 +0000 Manifest next update: Sat 28 Mar 2026 17:19:56 +0000 Files and hashes: 1: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: zEZvPFcpdQUBU9ZY3QGsIfNLAuseGzG3MnwsvIUsGJA=) 2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: 9S29qFeJZloki9PWW9tdgsR5Hw2QfhcPZXeZtm9LI8o=) 3: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: pTegOhD4z3Faaf9uEY5aINqGFpg8v+KgvZMxN268mY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:02:8e:a5:a9:79:26:05:47:d0:e1:33:47:5d:67:12:6a:05:0f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Mar 25 06:55:56 2026 GMT Not After : Mar 28 17:19:56 2026 GMT Subject: CN=E7482DBFE714F353C237E4F3BA384B0D48B45446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:c5:b1:a5:1b:fa:34:f6:d0:c5:0e:ef:f7: a1:a1:57:78:68:de:f8:ba:7d:a7:4f:70:5c:79:18: bb:74:82:78:e7:53:67:9f:2f:04:8b:e5:3f:d5:c0: 91:18:07:4b:a5:9d:12:3f:a2:94:81:ea:70:1a:6c: af:78:21:11:3e:20:45:41:df:a5:cd:90:ca:11:07: 97:15:9f:29:53:68:5e:a5:65:3a:f8:44:3d:18:3f: e1:23:0a:c7:f9:27:21:8d:72:ef:88:f2:5a:b0:6a: 98:13:cf:cb:e0:80:01:e8:f3:2e:db:4f:6d:1c:27: 97:05:1b:98:a8:b6:e0:eb:58:6a:7c:d3:7c:ca:14: ca:66:ff:c1:d0:4d:40:50:25:d9:d4:ee:a7:fc:ac: 77:5c:83:77:be:7a:a3:4a:a3:f6:95:f3:59:47:16: 29:5b:d6:cc:88:11:6a:e9:6b:23:d9:d6:64:e9:a7: f3:52:07:1f:02:96:e4:d9:53:83:7a:df:11:ca:3d: 07:da:de:1e:73:f9:d2:ab:50:e1:4d:d3:43:7f:b1: 8f:b1:dd:f4:a3:0d:09:3f:74:0d:54:22:81:46:63: 60:c5:98:83:92:a1:8f:06:6a:1b:df:17:b8:5f:ba: 28:eb:61:12:0f:53:19:c4:f1:38:78:ff:25:c1:73: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:48:2D:BF:E7:14:F3:53:C2:37:E4:F3:BA:38:4B:0D:48:B4:54:46 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:79:bb:ea:7c:8f:31:d3:ab:a1:0a:46:dd:10:48:e2:3b:9c: cb:d0:c3:6c:f2:1e:d2:66:a5:a4:9e:bd:c1:cf:49:96:37:75: b5:10:80:70:bc:2d:f5:2f:7c:a9:7e:59:c6:81:2b:de:19:83: fe:7e:de:2a:5e:c1:08:0d:b1:11:88:e2:92:66:8c:fc:16:48: 7c:1a:2e:12:b6:20:79:7e:c9:20:76:ff:3d:af:e9:e4:08:1f: fd:7c:bc:f0:4b:6a:30:c6:f9:44:74:68:28:93:f0:38:d3:59: 0c:ea:97:53:a8:05:bb:a1:55:58:d4:8c:c0:91:74:3e:72:70: b3:0c:cf:70:f3:8b:bf:a1:dc:43:5b:cb:64:86:01:a5:18:22: 8b:46:9e:e4:77:e1:53:64:31:b5:b5:e9:b4:0e:be:f8:41:2f: 3f:23:8f:f2:31:99:33:57:02:7d:11:0d:de:7e:52:16:18:7f: 67:42:c6:72:56:57:59:96:9d:d9:e6:6d:47:f5:3a:7e:94:97: 91:da:3d:a4:ce:17:f5:64:d7:6d:7c:f9:28:40:84:79:cc:f3: b7:2a:e4:61:a2:8b:f1:50:92:63:89:1e:f3:0a:57:3d:a7:5c: 0c:87:01:82:2c:f2:b3:88:42:f8:84:15:0b:07:11:e1:0f:8f: c4:d4:ad:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgKOpal5JgVH0OEzR11nEmoFDyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNjAzMjUwNjU1NTZaFw0yNjAzMjgxNzE5NTZaMDMxMTAvBgNV BAMTKEU3NDgyREJGRTcxNEYzNTNDMjM3RTRGM0JBMzg0QjBENDhCNDU0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCye8WxpRv6NPbQxQ7v96GhV3ho 3vi6fadPcFx5GLt0gnjnU2efLwSL5T/VwJEYB0ulnRI/opSB6nAabK94IRE+IEVB 36XNkMoRB5cVnylTaF6lZTr4RD0YP+EjCsf5JyGNcu+I8lqwapgTz8vggAHo8y7b T20cJ5cFG5iotuDrWGp803zKFMpm/8HQTUBQJdnU7qf8rHdcg3e+eqNKo/aV81lH Filb1syIEWrpayPZ1mTpp/NSBx8CluTZU4N63xHKPQfa3h5z+dKrUOFN00N/sY+x 3fSjDQk/dA1UIoFGY2DFmIOSoY8GahvfF7hfuijrYRIPUxnE8Th4/yXBc5oLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50gtv+cU81PCN+TzujhLDUi0VEYwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV5u+p8jzHTq6EKRt0QSOI7nMvQw2zyHtJm paSevcHPSZY3dbUQgHC8LfUvfKl+WcaBK94Zg/5+3ipewQgNsRGI4pJmjPwWSHwa LhK2IHl+ySB2/z2v6eQIH/18vPBLajDG+UR0aCiT8DjTWQzql1OoBbuhVVjUjMCR dD5ycLMMz3Dzi7+h3ENby2SGAaUYIotGnuR34VNkMbW16bQOvvhBLz8jj/IxmTNX An0RDd5+UhYYf2dCxnJWV1mWndnmbUf1On6Ul5HaPaTOF/Vk1218+ShAhHnM87cq 5GGii/FQkmOJHvMKVz2nXAyHAYIs8rOIQviEFQsHEeEPj8TUrQA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:45:04 2026 by rpki-client