$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: BmfyIcEqhCa6YrtZt6q3a27cAB4ery2Xbzw+Dcqkv0k= Subject key identifier: 0F:21:70:D4:48:D5:5F:10:BA:6C:DD:42:3B:E0:84:45:DF:D0:56:12 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 39C758C4F9075659A170E03BC6F47FE671FF4848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 032A Signing time: Wed 25 Mar 2026 05:30:01 +0000 Manifest this update: Wed 25 Mar 2026 05:25:01 +0000 Manifest next update: Sat 28 Mar 2026 14:39:01 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: d1fVTMXux6rsxs5u7mFPK2SAxfogfDLQrrOtADDQDa8=) 2: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: UCJ/WO7R0Ly/fSkFt+cBOKkaXGO4zwpxw1eY4oqqHMc=) 3: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: e2maHu55FP5fp6lO5LJsBGEPwnDr2gnnfc83H1faNCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c7:58:c4:f9:07:56:59:a1:70:e0:3b:c6:f4:7f:e6:71:ff:48:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Mar 25 05:25:01 2026 GMT Not After : Mar 28 14:39:01 2026 GMT Subject: CN=0F2170D448D55F10BA6CDD423BE08445DFD05612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:79:e7:97:2c:25:6e:98:11:01:d5:bc:be: b1:b7:5c:00:60:af:bc:45:35:62:96:90:c1:d9:33: 31:26:20:98:13:9c:92:4e:71:1c:dc:f9:3c:d0:75: c4:77:a3:a6:e1:73:62:f3:25:9a:8b:42:56:34:67: 12:f6:01:59:6b:ef:27:2a:f4:dd:4d:b4:d1:8d:91: 59:d2:40:a4:5f:8a:96:86:ce:70:20:ad:3b:33:99: fa:39:d3:41:41:13:39:5e:e3:ec:25:9c:e5:69:31: a6:44:55:ce:bd:05:49:f0:49:df:2a:4a:58:26:70: 86:30:cc:17:5e:c6:1c:96:50:7c:56:c9:69:69:dd: 89:76:6f:af:be:c5:fe:fc:42:bf:ea:59:68:de:10: 4b:65:3f:d9:5d:28:f3:06:24:f8:63:3c:02:54:e7: de:ed:73:8e:4c:b7:35:8a:6d:88:95:58:f4:cc:79: 3f:cf:cc:35:d4:6e:26:ee:5d:34:c4:c2:d0:4a:2b: 1e:80:41:36:46:c7:e6:91:d9:dd:ee:a5:49:0f:99: 5c:fc:5a:55:11:d7:9f:9f:d2:a0:2c:fb:1a:02:1a: ce:00:b8:cd:c8:b5:a9:eb:a9:02:65:9f:af:34:1b: 41:c7:5c:28:cf:30:48:e7:b6:50:02:a4:19:fd:cc: c2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:70:D4:48:D5:5F:10:BA:6C:DD:42:3B:E0:84:45:DF:D0:56:12 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bb:56:38:8a:e3:f4:ca:68:56:16:10:c1:e3:b8:f5:24:8f: 69:f8:3d:6b:8e:b9:2a:f9:b3:82:54:10:4e:51:77:a4:65:df: e2:19:ab:ee:18:ab:ac:93:c6:8c:41:42:c4:c2:1e:e8:f8:27: b3:70:e2:88:7e:bb:73:29:06:25:ef:c9:70:ac:d9:46:a6:05: dd:af:64:4a:40:98:4e:5e:e7:5e:fc:f5:3b:75:ed:24:07:dc: c0:04:66:9d:56:fa:e2:eb:63:34:1c:7c:1e:76:77:89:48:4c: ad:65:a5:2f:ce:0e:d3:42:9f:84:80:1c:fd:4a:ed:6f:64:fb: 23:4e:d4:0e:4f:46:da:c3:dd:0c:ce:69:55:ed:cc:0c:f2:4f: b9:8a:c5:41:4a:38:bd:bd:48:99:b6:d6:e7:94:1e:3a:e6:10: 2b:cc:0f:87:c1:a9:7c:f5:2b:ab:b9:b2:cd:be:ce:a5:cc:05: 21:1d:0d:c5:f3:a6:12:3a:3d:44:53:0c:35:56:ca:1e:fd:7a: 72:d1:46:c5:d4:6c:a5:e4:a3:31:d7:12:cb:cc:91:16:cf:f4: da:94:df:1d:c0:4f:ac:5b:c1:d5:67:d0:6c:3a:75:c3:af:0d: ed:3d:0d:94:39:83:5c:3b:52:59:3d:1c:bd:26:11:c6:a5:ca: 2f:a4:94:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcdYxPkHVlmhcOA7xvR/5nH/SEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNjAzMjUwNTI1MDFaFw0yNjAzMjgxNDM5MDFaMDMxMTAvBgNV BAMTKDBGMjE3MEQ0NDhENTVGMTBCQTZDREQ0MjNCRTA4NDQ1REZEMDU2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQy3nnlywlbpgRAdW8vrG3XABg r7xFNWKWkMHZMzEmIJgTnJJOcRzc+TzQdcR3o6bhc2LzJZqLQlY0ZxL2AVlr7ycq 9N1NtNGNkVnSQKRfipaGznAgrTszmfo500FBEzle4+wlnOVpMaZEVc69BUnwSd8q SlgmcIYwzBdexhyWUHxWyWlp3Yl2b6++xf78Qr/qWWjeEEtlP9ldKPMGJPhjPAJU 597tc45MtzWKbYiVWPTMeT/PzDXUbibuXTTEwtBKKx6AQTZGx+aR2d3upUkPmVz8 WlUR15+f0qAs+xoCGs4AuM3ItanrqQJln680G0HHXCjPMEjntlACpBn9zMLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyFw1EjVXxC6bN1CO+CERd/QVhIwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy7VjiK4/TKaFYWEMHjuPUkj2n4PWuOuSr5 s4JUEE5Rd6Rl3+IZq+4Yq6yTxoxBQsTCHuj4J7Nw4oh+u3MpBiXvyXCs2UamBd2v ZEpAmE5e51789Tt17SQH3MAEZp1W+uLrYzQcfB52d4lITK1lpS/ODtNCn4SAHP1K 7W9k+yNO1A5PRtrD3QzOaVXtzAzyT7mKxUFKOL29SJm21ueUHjrmECvMD4fBqXz1 K6u5ss2+zqXMBSEdDcXzphI6PURTDDVWyh79enLRRsXUbKXkozHXEsvMkRbP9NqU 3x3AT6xbwdVn0Gw6dcOvDe09DZQ5g1w7Ulk9HL0mEcalyi+klH0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:55 2026 by rpki-client