$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: MZul5lblULk2VoJ59uzl5s47VMZeYuXOdJ5ZL+NwMDI= Subject key identifier: DD:89:BD:E4:2E:53:4E:40:9C:50:34:85:EE:FB:5D:29:10:DF:27:C8 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 172BA656742310AE92DD135D11EDA9035E78C98A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 01F5 Signing time: Thu 26 Mar 2026 07:00:05 +0000 Manifest this update: Thu 26 Mar 2026 06:55:05 +0000 Manifest next update: Sun 29 Mar 2026 09:07:05 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: 80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=) 2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: H2K3SLgysLdn1ttz+htBkkhhqUNKb5Sez6iiFNbbo8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2b:a6:56:74:23:10:ae:92:dd:13:5d:11:ed:a9:03:5e:78:c9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Mar 26 06:55:05 2026 GMT Not After : Mar 29 09:07:05 2026 GMT Subject: CN=DD89BDE42E534E409C503485EEFB5D2910DF27C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:a1:90:98:d3:71:02:ac:75:15:b8:7b:ed: 48:d4:17:3a:70:a6:8d:0f:99:c6:ad:26:69:57:4c: 39:1b:3e:72:98:22:34:79:1b:04:5b:28:8c:a1:6a: 4c:89:8f:1a:ec:36:db:e8:6d:6e:3f:d5:59:b5:82: 84:0f:80:ef:24:55:23:01:bf:66:06:e5:0e:8f:05: b9:95:a0:75:0b:5a:5b:f6:f8:f2:27:5c:0a:b3:75: 68:ee:3d:a6:d2:4a:d8:cb:93:73:b4:16:ae:83:08: 22:55:34:ff:ef:7b:8a:eb:e1:8a:c2:71:ef:63:d5: 53:68:56:04:7c:c3:f1:ac:0c:f1:d5:70:dd:83:cd: a2:98:29:ad:41:27:1b:ad:cd:cf:96:00:d5:64:cf: 1e:81:2f:7e:f0:a3:c9:b9:a6:bf:f6:ea:a9:f4:a9: 7f:ac:49:94:6b:58:06:91:3d:e6:14:b4:6d:34:e8: 17:21:74:a7:3d:0f:59:87:14:fd:c7:31:1d:b4:fc: 25:78:97:eb:68:79:e9:ac:76:f5:3c:14:db:00:95: 7c:a9:36:f2:33:e7:02:5f:5f:a2:89:7e:9d:33:3a: b6:13:5a:54:04:21:37:53:83:92:1a:5a:e9:ab:fa: cb:15:b3:33:5b:84:0f:89:53:e7:c8:6f:e5:99:4e: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:89:BD:E4:2E:53:4E:40:9C:50:34:85:EE:FB:5D:29:10:DF:27:C8 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:95:a6:bf:f8:b6:98:77:36:7c:ae:7d:40:c0:2a:42:c8:ba: 40:b9:8e:1d:73:b7:9d:2b:f2:1d:cf:d5:dc:af:65:a8:9c:80: 13:e0:02:58:22:52:00:01:db:74:ad:45:6f:51:da:c5:26:42: 6a:60:aa:f0:34:93:13:09:9c:9a:0a:ee:1a:fd:2b:a6:97:c9: 1a:0a:f5:5b:15:1c:d1:41:97:d9:4e:c3:dd:0b:99:ab:09:6c: 8b:86:66:97:3d:ac:ba:d3:25:c7:6b:31:0f:bd:d6:4e:82:09: dd:ba:2a:9f:fa:aa:23:47:c0:58:11:d5:bc:a2:3a:85:ad:c6: cc:cc:1f:75:e2:7b:ce:4d:7f:0d:1e:9b:31:30:2b:c5:55:97: 88:18:5c:ec:cc:4a:bd:9d:a4:d1:6c:ce:28:d8:e0:84:9e:29: fc:f6:ce:ba:76:15:99:c1:6b:ca:09:35:af:12:33:68:46:98: 0a:23:a8:31:7c:9b:33:a7:8f:2f:f7:fc:eb:f7:59:90:2e:cf: fd:d8:7b:28:5f:74:08:78:1b:e5:b0:40:5a:ed:11:c6:c4:8c: 0a:cf:f2:98:a9:ae:8d:a8:3a:56:f0:30:b0:a5:7d:a9:d6:b4: 7d:4b:de:7d:db:3a:a5:49:3c:26:cc:58:19:90:0f:1b:80:5b: db:d4:f9:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyumVnQjEK6S3RNdEe2pA154yYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNjAzMjYwNjU1MDVaFw0yNjAzMjkwOTA3MDVaMDMxMTAvBgNV BAMTKEREODlCREU0MkU1MzRFNDA5QzUwMzQ4NUVFRkI1RDI5MTBERjI3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4K6GQmNNxAqx1Fbh77UjUFzpw po0PmcatJmlXTDkbPnKYIjR5GwRbKIyhakyJjxrsNtvobW4/1Vm1goQPgO8kVSMB v2YG5Q6PBbmVoHULWlv2+PInXAqzdWjuPabSStjLk3O0Fq6DCCJVNP/ve4rr4YrC ce9j1VNoVgR8w/GsDPHVcN2DzaKYKa1BJxutzc+WANVkzx6BL37wo8m5pr/26qn0 qX+sSZRrWAaRPeYUtG006BchdKc9D1mHFP3HMR20/CV4l+toeemsdvU8FNsAlXyp NvIz5wJfX6KJfp0zOrYTWlQEITdTg5IaWumr+ssVszNbhA+JU+fIb+WZTka1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Ym95C5TTkCcUDSF7vtdKRDfJ8gwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGVpr/4tph3NnyufUDAKkLIukC5jh1zt50r 8h3P1dyvZaicgBPgAlgiUgAB23StRW9R2sUmQmpgqvA0kxMJnJoK7hr9K6aXyRoK 9VsVHNFBl9lOw90LmasJbIuGZpc9rLrTJcdrMQ+91k6CCd26Kp/6qiNHwFgR1byi OoWtxszMH3Xie85Nfw0emzEwK8VVl4gYXOzMSr2dpNFszijY4ISeKfz2zrp2FZnB a8oJNa8SM2hGmAojqDF8mzOnjy/3/Ov3WZAuz/3YeyhfdAh4G+WwQFrtEcbEjArP 8pipro2oOlbwMLClfanWtH1L3n3bOqVJPCbMWBmQDxuAW9vU+bw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:57:16 2026 by rpki-client