$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: 4j4dX27PZYJhAADgfawEq+Xx7oplhk4upO2Ly7Sjv7g= Subject key identifier: CF:B0:E5:E5:5F:FC:F4:65:F7:B9:FD:5C:88:4A:E0:0B:94:34:4C:F8 Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 55396254A1E08CF8C20485682992CE2400555CA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 0256 Signing time: Wed 25 Mar 2026 06:12:11 +0000 Manifest this update: Wed 25 Mar 2026 06:07:11 +0000 Manifest next update: Sat 28 Mar 2026 09:09:11 +0000 Files and hashes: 1: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: j5m/gtnLH03T0qMmkSa4cWyqlRRGOFQBaNadW2Y3jZU=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:39:62:54:a1:e0:8c:f8:c2:04:85:68:29:92:ce:24:00:55:5c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Mar 25 06:07:11 2026 GMT Not After : Mar 28 09:09:11 2026 GMT Subject: CN=CFB0E5E55FFCF465F7B9FD5C884AE00B94344CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:05:46:09:44:3e:ac:53:0d:02:ef:fa:ba: d2:7c:e6:c0:0d:1f:a4:3e:47:27:08:c7:65:c7:ee: 66:a4:75:e4:ab:2d:08:f3:0f:19:4d:13:38:46:ab: 21:bf:4d:4e:20:a1:59:37:67:4e:50:78:c1:68:9c: de:25:2d:27:36:27:fd:4a:ac:83:8e:d3:2e:cd:64: 06:c5:41:0d:ab:44:ff:14:71:c9:5b:dd:d3:f1:f6: 95:f1:66:4c:52:6c:d4:26:e2:6b:c3:e9:d9:12:82: c5:44:4c:a1:1f:73:7b:9b:48:94:da:e7:76:ed:72: 84:13:fc:63:62:33:9d:84:6c:ba:52:06:c3:58:fb: 1d:f8:93:0c:8f:85:80:19:30:3d:a8:65:ba:96:40: 3e:83:f2:40:de:2d:a7:81:c7:89:f0:f6:a8:22:89: 55:35:20:01:56:88:47:be:5e:59:68:10:3c:b3:8e: 03:4e:ce:b1:fa:3c:3c:58:e2:a9:c9:d8:4c:0c:b9: 0a:9d:0f:0e:1f:53:d0:9c:e4:81:46:52:25:90:1b: eb:66:13:32:3c:14:0e:31:d4:e8:a1:39:f1:54:89: ec:13:bd:4c:68:52:6d:a1:78:74:72:7c:21:46:6d: f2:66:7e:f6:5a:78:73:b4:17:31:12:26:4f:bc:e8: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B0:E5:E5:5F:FC:F4:65:F7:B9:FD:5C:88:4A:E0:0B:94:34:4C:F8 X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:98:8c:8b:49:90:21:17:cc:78:19:cc:2b:ae:fe:58:7d:a9: 4a:ca:96:75:7e:75:c4:00:15:4a:ab:28:e6:aa:22:27:c5:b7: 12:ab:7c:27:6d:80:7d:fd:7f:c0:a1:34:81:c0:6f:3e:a0:92: af:53:d8:b3:19:c1:db:1f:38:a0:ce:83:7f:f8:e3:10:40:e7: 11:d7:6b:14:ad:77:ee:14:e9:ff:97:80:6c:db:30:d8:69:67: 00:b6:2c:d7:dc:6a:6f:7a:f5:24:eb:44:cc:c9:60:ad:82:b8: 1e:3d:41:0e:6c:fb:4b:58:c2:f7:91:68:b4:b5:77:e9:13:28: c0:6c:bf:23:7f:02:11:6a:fd:85:b4:8c:90:83:a9:a5:d4:5d: cc:c9:8e:ef:ff:a1:92:3b:af:d7:17:e4:fc:a3:ad:1e:82:3c: fe:48:73:66:f6:45:3d:1e:59:c4:1e:13:39:2c:03:87:83:d2: ad:cf:8c:39:1a:18:fe:13:ac:3f:66:1e:ea:45:21:0f:82:f2: cc:4b:56:a6:16:60:64:76:cb:86:21:2c:0a:20:3a:17:11:ee: 3d:16:cb:33:df:5b:77:0d:75:9b:73:a4:70:ff:75:e1:ac:e7: 33:43:b9:ba:8a:ee:79:4f:9f:66:fb:a4:aa:4a:c6:72:66:24: 0d:15:ae:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTliVKHgjPjCBIVoKZLOJABVXKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNjAzMjUwNjA3MTFaFw0yNjAzMjgwOTA5MTFaMDMxMTAvBgNV BAMTKENGQjBFNUU1NUZGQ0Y0NjVGN0I5RkQ1Qzg4NEFFMDBCOTQzNDRDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8AVGCUQ+rFMNAu/6utJ85sAN H6Q+RycIx2XH7makdeSrLQjzDxlNEzhGqyG/TU4goVk3Z05QeMFonN4lLSc2J/1K rIOO0y7NZAbFQQ2rRP8Ucclb3dPx9pXxZkxSbNQm4mvD6dkSgsVETKEfc3ubSJTa 53btcoQT/GNiM52EbLpSBsNY+x34kwyPhYAZMD2oZbqWQD6D8kDeLaeBx4nw9qgi iVU1IAFWiEe+XlloEDyzjgNOzrH6PDxY4qnJ2EwMuQqdDw4fU9Cc5IFGUiWQG+tm EzI8FA4x1OihOfFUiewTvUxoUm2heHRyfCFGbfJmfvZaeHO0FzESJk+86CPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7Dl5V/89GX3uf1ciErgC5Q0TPgwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWYjItJkCEXzHgZzCuu/lh9qUrKlnV+dcQA FUqrKOaqIifFtxKrfCdtgH39f8ChNIHAbz6gkq9T2LMZwdsfOKDOg3/44xBA5xHX axStd+4U6f+XgGzbMNhpZwC2LNfcam969STrRMzJYK2CuB49QQ5s+0tYwveRaLS1 d+kTKMBsvyN/AhFq/YW0jJCDqaXUXczJju//oZI7r9cX5PyjrR6CPP5Ic2b2RT0e WcQeEzksA4eD0q3PjDkaGP4TrD9mHupFIQ+C8sxLVqYWYGR2y4YhLAogOhcR7j0W yzPfW3cNdZtzpHD/deGs5zNDubqK7nlPn2b7pKpKxnJmJA0VrgE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:25 2026 by rpki-client