$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft File: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json) Hash identifier: JtcVrjaEP0X9I5JawJar/Mbht4UiD7uFvoQw2Fd6JBk= Subject key identifier: ED:CD:B0:29:93:0B:98:3A:A1:80:50:F6:4E:47:73:0E:35:52:2B:8A Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B Certificate issuer: /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B Certificate serial: 65E035BC4252978C1D558C23AC5C5E39F2B1364E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft Manifest number: 0239 Signing time: Thu 26 Mar 2026 05:02:37 +0000 Manifest this update: Thu 26 Mar 2026 04:57:37 +0000 Manifest next update: Sun 29 Mar 2026 12:59:37 +0000 Files and hashes: 1: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: B2FjcS8NX9OrWQzAiwwJtRhptJ6HVZuxOJh0c7BRUIQ=) 2: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: 9yEpf7UptHKPtJGMSNZGjTG/u5N0H8I6F7MGckJB2CA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e0:35:bc:42:52:97:8c:1d:55:8c:23:ac:5c:5e:39:f2:b1:36:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B Validity Not Before: Mar 26 04:57:37 2026 GMT Not After : Mar 29 12:59:37 2026 GMT Subject: CN=EDCDB029930B983AA18050F64E47730E35522B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:11:51:85:e4:2b:d0:b1:fe:75:7a:b3:be: 72:04:0e:b9:c0:ec:45:f4:0e:2b:37:ed:4e:2e:51: e5:33:b9:57:cc:5a:39:f6:97:eb:c9:a6:3e:39:32: f5:7f:de:e8:8e:e2:31:9d:13:21:db:ba:53:df:d0: 4f:d1:a4:76:2e:6b:15:c7:78:48:ef:17:02:f8:9e: d1:ba:b1:92:b3:4f:c3:28:60:6f:1b:b8:94:ed:3e: 71:f0:21:df:7d:31:e4:f9:f8:b2:25:62:e7:ea:d5: 57:5a:ce:f8:c0:83:02:b0:3e:c0:7a:3b:d3:5a:22: 59:72:e8:16:70:93:78:e2:97:cf:e3:ed:6c:70:73: 3b:05:d6:40:87:40:f3:4f:56:20:f0:95:cc:23:3d: d1:cc:83:11:6a:78:72:75:03:e9:cc:4d:a0:1a:b6: c2:da:b2:d0:a4:4c:93:7b:94:3f:00:66:26:3e:ed: eb:62:65:69:21:ec:cd:b7:76:66:36:9b:bd:8c:b1: 3a:7a:59:3d:37:18:96:34:e0:1c:0c:3b:ed:2f:76: d0:46:62:fb:f2:3c:00:d6:a7:28:4e:5e:2e:4a:62: 5f:cd:e8:f1:a7:29:94:2e:43:a1:be:5c:11:f7:dc: 7a:78:01:29:be:4b:0e:aa:f9:5e:41:a5:2d:40:9a: 76:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CD:B0:29:93:0B:98:3A:A1:80:50:F6:4E:47:73:0E:35:52:2B:8A X509v3 Authority Key Identifier: keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:65:67:86:ab:d0:b9:b3:f4:64:d0:da:98:52:b7:7f:3e:24: f0:80:7c:50:12:08:e0:85:45:01:37:f6:43:78:60:74:38:7c: 13:0a:ec:e2:fa:80:dc:f0:a9:b2:6d:26:de:48:e4:48:79:eb: ee:23:b2:61:e6:b5:6e:73:19:be:9a:7b:ea:ff:1a:e3:ec:42: 82:4d:81:4f:93:31:9f:77:a4:89:21:e0:71:8c:00:7e:c9:ea: bb:4e:bc:1c:49:51:70:20:21:99:15:27:da:ac:86:50:a7:3a: b9:fe:79:f6:0b:a8:a7:ac:80:e6:6c:81:4c:44:57:42:c7:f9: e1:2e:37:b9:63:3c:dc:78:b6:20:03:5c:24:e5:86:f5:e2:fa: f7:4a:07:18:84:aa:59:63:ac:5e:8f:99:28:91:f0:e7:44:57: a1:4f:a8:9a:51:97:b0:df:58:2d:76:66:3c:d3:c6:be:b3:0e: 74:a2:3d:df:c5:07:b2:10:9a:d3:91:0e:15:c3:06:50:0c:bb: 36:5e:da:e5:da:e9:b3:8e:81:ea:b5:ac:26:f8:29:5c:05:3f: d7:4d:2b:61:b1:53:6c:06:e1:aa:f1:e2:0c:90:b3:dd:0e:ab: 5a:94:5f:70:3b:db:57:b4:74:02:58:92:db:5c:8f:6f:72:e2: 36:a6:db:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeA1vEJSl4wdVYwjrFxeOfKxNk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJE OTAwM0E4QjAeFw0yNjAzMjYwNDU3MzdaFw0yNjAzMjkxMjU5MzdaMDMxMTAvBgNV BAMTKEVEQ0RCMDI5OTMwQjk4M0FBMTgwNTBGNjRFNDc3MzBFMzU1MjJCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLhFRheQr0LH+dXqzvnIEDrnA 7EX0Dis37U4uUeUzuVfMWjn2l+vJpj45MvV/3uiO4jGdEyHbulPf0E/RpHYuaxXH eEjvFwL4ntG6sZKzT8MoYG8buJTtPnHwId99MeT5+LIlYufq1VdazvjAgwKwPsB6 O9NaIlly6BZwk3jil8/j7WxwczsF1kCHQPNPViDwlcwjPdHMgxFqeHJ1A+nMTaAa tsLastCkTJN7lD8AZiY+7etiZWkh7M23dmY2m72MsTp6WT03GJY04BwMO+0vdtBG YvvyPADWpyhOXi5KYl/N6PGnKZQuQ6G+XBH33Hp4ASm+Sw6q+V5BpS1AmnYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7c2wKZMLmDqhgFD2TkdzDjVSK4owHwYDVR0j BBgwFoAUasWNJIVef+JKxFK30P3bm9kAOoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTUwNTMxOS1jMzNkLTQzNGEtYWJjNS02YTYxY2U4NTNlOTUvMC82QUM1OEQyNDg1 NUU3RkUyNEFDNDUyQjdEMEZEREI5QkQ5MDAzQThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJEOTAw M0E4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U1MDUzMTktYzMzZC00MzRhLWFi YzUtNmE2MWNlODUzZTk1LzAvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERC OUJEOTAwM0E4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdlZ4ar0Lmz9GTQ2phSt38+JPCAfFASCOCF RQE39kN4YHQ4fBMK7OL6gNzwqbJtJt5I5Eh56+4jsmHmtW5zGb6ae+r/GuPsQoJN gU+TMZ93pIkh4HGMAH7J6rtOvBxJUXAgIZkVJ9qshlCnOrn+efYLqKesgOZsgUxE V0LH+eEuN7ljPNx4tiADXCTlhvXi+vdKBxiEqlljrF6PmSiR8OdEV6FPqJpRl7Df WC12ZjzTxr6zDnSiPd/FB7IQmtORDhXDBlAMuzZe2uXa6bOOgeq1rCb4KVwFP9dN K2GxU2wG4arx4gyQs90Oq1qUX3A721e0dAJYkttcj29y4jam21w= -----END CERTIFICATE-----Generated at Thu Mar 26 08:02:48 2026 by rpki-client