$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: pNjdo8dl2CSeBJ308sUybXL8Y0jFN9d8EZNcHxfP+cU= Subject key identifier: 5D:A4:B2:3A:78:4A:33:78:71:EC:0F:17:69:9D:4B:6F:DB:D0:A6:E4 Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 64533F4620EFA6F052E0440DED1B60E09870D82A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 0302 Signing time: Wed 25 Mar 2026 06:01:26 +0000 Manifest this update: Wed 25 Mar 2026 05:56:26 +0000 Manifest next update: Sat 28 Mar 2026 12:12:26 +0000 Files and hashes: 1: 3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (hash: 1qisgGmZ4ZLz1lme/uSxLcvbwX2pXl2QEYezWVi61a0=) 2: 3130332e3137342e31362e302f32342d3234203d3e20313437303933.roa (hash: KF7nH5pW5/ZblyJqWbcvRko2OuzeK910SdQ0o3we0k8=) 3: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: VETfA/AZP7t0/OHFQ9d9jxGE5c9b5klbIBj3itQI1x0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:53:3f:46:20:ef:a6:f0:52:e0:44:0d:ed:1b:60:e0:98:70:d8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Mar 25 05:56:26 2026 GMT Not After : Mar 28 12:12:26 2026 GMT Subject: CN=5DA4B23A784A337871EC0F17699D4B6FDBD0A6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c3:c9:22:58:23:5e:b2:59:05:89:79:a5:8e: d4:93:b8:e4:c3:83:0c:8c:6e:a2:5f:5a:bc:2e:0d: b4:fa:19:ff:21:57:e8:cc:9c:b3:0b:f9:7a:b2:dc: 10:5f:70:6e:a6:06:e7:53:29:d4:1b:18:4f:8b:f6: 88:38:08:09:f2:84:59:77:af:e5:dd:5c:cc:4f:fe: 2c:74:ff:ea:f3:ce:57:0e:e2:29:4f:e4:dd:0d:1d: 23:3a:e8:7a:4f:d4:83:70:a3:92:e8:d5:85:cc:b3: db:06:a7:4b:78:11:c1:e3:28:8c:5f:77:84:74:1e: 3f:84:fc:3d:56:b7:7e:e5:75:cb:01:4e:7e:b8:9a: 13:b1:8b:c8:9f:08:d6:46:4f:3c:22:80:cc:9f:f4: 18:9e:12:c5:3e:1c:87:39:54:5d:e8:83:bb:ee:d9: 7e:97:f6:9e:85:83:2c:eb:fe:c2:f9:b9:11:fd:d6: 79:ee:b3:34:a6:e9:3f:eb:fd:fb:58:55:ea:8f:da: bf:98:f0:90:36:82:3d:6a:24:f2:d8:44:56:b0:7a: 11:91:b0:83:96:b6:01:b2:23:70:f3:fb:05:be:d8: 9e:91:f7:71:a8:72:47:7d:44:05:0d:66:0d:e9:a5: be:be:1e:6d:f1:3f:e4:9a:0b:0b:48:1b:d3:cf:73: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A4:B2:3A:78:4A:33:78:71:EC:0F:17:69:9D:4B:6F:DB:D0:A6:E4 X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:73:ec:d3:cd:7c:44:35:15:42:b1:a9:6a:05:a1:2f:ad:b3: 14:03:06:d1:98:fa:59:db:89:db:f2:8d:fe:b2:43:bf:79:2c: c5:a7:a0:ea:2a:23:55:3a:a9:ea:20:52:fd:4d:d5:90:68:ef: 0c:8c:a1:c3:39:e2:04:09:3b:3c:4b:66:13:88:cf:e9:5e:7c: cf:8d:54:67:a1:dc:66:0f:40:f8:58:43:b7:d1:9b:1d:1a:90: c9:cf:54:08:b8:aa:87:8a:90:7e:33:7a:71:2f:40:ff:bf:8f: 94:b1:9f:89:1b:12:7f:66:54:19:25:90:61:b1:09:40:cf:e3: b3:c5:4c:ff:6f:80:36:2b:ef:62:bc:a3:b9:98:a3:e3:42:45: bd:42:4b:b6:b0:2b:da:9a:56:2a:53:24:01:e8:16:5b:be:ab: ac:08:ad:77:d4:85:be:cf:53:16:50:eb:57:57:c0:7b:66:30: b3:de:10:77:e0:c9:ec:09:21:a5:56:38:a8:ba:d9:81:ff:af: bd:ca:2b:12:2d:f0:3a:75:fc:0e:5b:b3:d5:84:49:7d:f1:cb: b2:30:c3:78:1a:1b:f4:b9:b0:5e:f1:2d:bf:44:b5:f9:f1:07: c3:61:f0:6c:23:ac:2b:d4:8a:4b:c9:bc:05:a4:78:f8:89:07: 1f:80:4a:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFM/RiDvpvBS4EQN7Rtg4Jhw2CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNjAzMjUwNTU2MjZaFw0yNjAzMjgxMjEyMjZaMDMxMTAvBgNV BAMTKDVEQTRCMjNBNzg0QTMzNzg3MUVDMEYxNzY5OUQ0QjZGREJEMEE2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDww8kiWCNeslkFiXmljtSTuOTD gwyMbqJfWrwuDbT6Gf8hV+jMnLML+Xqy3BBfcG6mBudTKdQbGE+L9og4CAnyhFl3 r+XdXMxP/ix0/+rzzlcO4ilP5N0NHSM66HpP1INwo5Lo1YXMs9sGp0t4EcHjKIxf d4R0Hj+E/D1Wt37ldcsBTn64mhOxi8ifCNZGTzwigMyf9BieEsU+HIc5VF3og7vu 2X6X9p6Fgyzr/sL5uRH91nnuszSm6T/r/ftYVeqP2r+Y8JA2gj1qJPLYRFawehGR sIOWtgGyI3Dz+wW+2J6R93Gockd9RAUNZg3ppb6+Hm3xP+SaCwtIG9PPczA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXaSyOnhKM3hx7A8XaZ1Lb9vQpuQwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFz7NPNfEQ1FUKxqWoFoS+tsxQDBtGY+lnb idvyjf6yQ795LMWnoOoqI1U6qeogUv1N1ZBo7wyMocM54gQJOzxLZhOIz+lefM+N VGeh3GYPQPhYQ7fRmx0akMnPVAi4qoeKkH4zenEvQP+/j5Sxn4kbEn9mVBklkGGx CUDP47PFTP9vgDYr72K8o7mYo+NCRb1CS7awK9qaVipTJAHoFlu+q6wIrXfUhb7P UxZQ61dXwHtmMLPeEHfgyewJIaVWOKi62YH/r73KKxIt8Dp1/A5bs9WESX3xy7Iw w3gaG/S5sF7xLb9EtfnxB8Nh8GwjrCvUikvJvAWkePiJBx+ASgM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:29 2026 by rpki-client