$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft File: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft (raw, json) Hash identifier: lwuNjyoyg1kdz2VCmZK0iKRDkIn0gWaSxE//TSOy+lA= Subject key identifier: B0:E2:F0:C5:3D:7C:AB:A0:6F:2E:95:30:8B:1E:21:C5:31:55:D1:06 Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF Certificate issuer: /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Certificate serial: 113EF938BEAC19071052A1DCFFC4B93304C4C2FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft Manifest number: 0243 Signing time: Thu 26 Mar 2026 00:21:59 +0000 Manifest this update: Thu 26 Mar 2026 00:16:59 +0000 Manifest next update: Sun 29 Mar 2026 02:51:59 +0000 Files and hashes: 1: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl (hash: QSXRlPqxV+cd0sK2uqedZaZEFLwbCwmQKMdemLS4aAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3e:f9:38:be:ac:19:07:10:52:a1:dc:ff:c4:b9:33:04:c4:c2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Validity Not Before: Mar 26 00:16:59 2026 GMT Not After : Mar 29 02:51:59 2026 GMT Subject: CN=B0E2F0C53D7CABA06F2E95308B1E21C53155D106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:dc:39:f8:fc:5b:77:c2:24:82:6c:d6:31: 76:07:6f:64:c1:6c:1a:52:3f:d5:e6:8e:82:ab:ea: a7:ee:35:3b:90:b7:e3:c3:65:19:99:88:9d:f2:28: 03:8c:f3:25:b5:d3:5e:ec:82:c4:d4:bf:df:7b:ab: 0e:6f:99:87:30:75:e9:7c:16:55:55:41:74:8b:65: 9c:02:47:e3:b3:8c:62:f9:b2:47:61:bd:e7:7b:51: 12:d5:08:2a:97:6f:eb:1f:8c:db:fc:05:4d:fb:41: 24:97:c2:c9:fa:b1:87:5c:97:fa:8c:07:30:21:99: f4:e7:c5:6d:00:75:7d:d6:a6:e7:18:df:5d:ad:f8: 4a:c0:1c:9d:d2:27:8c:25:66:aa:a8:5e:a0:2e:9d: 19:69:cc:d4:19:d5:64:1e:60:06:6f:31:f8:a5:cc: a6:8f:7b:cb:8c:cd:22:12:6a:4a:16:24:80:70:95: da:62:d6:ca:08:fe:66:bd:eb:b5:7b:f1:36:83:a7: 04:37:61:35:ed:67:9d:4f:af:79:d2:1d:54:cc:81: ae:d5:01:84:9f:8f:d8:f4:93:5a:e9:48:b1:9d:4a: 8e:8b:ac:74:22:b2:d2:56:9c:79:8d:a1:63:8e:24: fc:61:32:c7:f4:d1:6b:ab:be:b3:95:c4:07:a7:23: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E2:F0:C5:3D:7C:AB:A0:6F:2E:95:30:8B:1E:21:C5:31:55:D1:06 X509v3 Authority Key Identifier: keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d9:ff:21:cf:82:f9:1e:03:1e:83:21:b6:ed:7b:42:71:d1: be:4f:61:9a:d5:8c:45:94:6f:5f:a7:23:e1:20:3c:cc:42:f5: 89:b3:e1:66:af:1f:0c:14:91:a8:07:04:78:f6:3c:46:27:79: f2:85:c0:3c:19:06:49:43:56:e3:bc:d4:03:04:fb:19:e1:f0: 70:e3:25:24:6d:b2:a9:23:5d:e7:ba:87:e3:09:00:63:6d:b5: a5:b5:b4:aa:8d:90:0a:92:80:2a:7a:bd:7c:74:a6:d3:a8:c9: d7:26:a9:4a:d4:f3:2f:fa:62:3c:20:f6:b3:f6:39:90:70:1f: 4a:03:4e:09:99:81:3b:4e:3e:69:7d:d2:8b:22:71:94:92:7a: bc:a4:50:88:ea:0a:7e:a5:13:5c:a4:87:1c:45:b0:8d:1d:8d: a1:ef:02:da:ef:17:31:f5:a4:e4:32:e9:50:ac:38:b0:9c:47: aa:8e:8f:b4:f2:f3:03:3b:dc:05:40:3b:7e:55:94:b8:36:59: 79:ac:68:c4:9c:59:b5:f3:ac:e4:9c:8e:7e:fc:dc:a4:a9:f4: 58:24:34:7c:dc:23:78:08:b9:9c:53:41:83:6a:bb:2e:49:38: dd:da:b0:5f:84:ce:25:dc:7e:ea:75:92:bc:79:94:e1:b9:e2: 85:60:7d:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUET75OL6sGQcQUqHc/8S5MwTEwv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENF QUVDREZCRjAeFw0yNjAzMjYwMDE2NTlaFw0yNjAzMjkwMjUxNTlaMDMxMTAvBgNV BAMTKEIwRTJGMEM1M0Q3Q0FCQTA2RjJFOTUzMDhCMUUyMUM1MzE1NUQxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJutw5+Pxbd8IkgmzWMXYHb2TB bBpSP9XmjoKr6qfuNTuQt+PDZRmZiJ3yKAOM8yW1017sgsTUv997qw5vmYcwdel8 FlVVQXSLZZwCR+OzjGL5skdhved7URLVCCqXb+sfjNv8BU37QSSXwsn6sYdcl/qM BzAhmfTnxW0AdX3WpucY312t+ErAHJ3SJ4wlZqqoXqAunRlpzNQZ1WQeYAZvMfil zKaPe8uMzSISakoWJIBwldpi1soI/ma967V78TaDpwQ3YTXtZ51Pr3nSHVTMga7V AYSfj9j0k1rpSLGdSo6LrHQistJWnHmNoWOOJPxhMsf00WurvrOVxAenI9VtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsOLwxT18q6BvLpUwix4hxTFV0QYwHwYDVR0j BBgwFoAUpgFeXiYF1P32jrlvlqmJTOrs378wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGQzZWYyYy03ODFkLTRkMGMtYTY4Mi05MWFjMDExZWY2YjcvMC9BNjAxNUU1RTI2 MDVENEZERjY4RUI5NkY5NkE5ODk0Q0VBRUNERkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENFQUVD REZCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5 NENFQUVDREZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXZ/yHPgvkeAx6DIbbte0Jx0b5PYZrVjEWU b1+nI+EgPMxC9Ymz4WavHwwUkagHBHj2PEYnefKFwDwZBklDVuO81AME+xnh8HDj JSRtsqkjXee6h+MJAGNttaW1tKqNkAqSgCp6vXx0ptOoydcmqUrU8y/6Yjwg9rP2 OZBwH0oDTgmZgTtOPml90osicZSSerykUIjqCn6lE1ykhxxFsI0djaHvAtrvFzH1 pOQy6VCsOLCcR6qOj7Ty8wM73AVAO35VlLg2WXmsaMScWbXzrOScjn783KSp9Fgk NHzcI3gIuZxTQYNquy5JON3asF+EziXcfup1krx5lOG54oVgfeE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:06 2026 by rpki-client