$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json) Hash identifier: s9bmKdlHu1hG+qpcsin9hgdd9l1nSG8nQtU5cEezCWk= Subject key identifier: F1:B2:23:E0:53:05:07:23:24:30:4D:96:64:22:41:3C:43:89:C7:8C Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Certificate serial: 70371D4A02FCD9E3695B98706B308F58550C1686 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft Manifest number: 042C Signing time: Wed 25 Mar 2026 10:12:15 +0000 Manifest this update: Wed 25 Mar 2026 10:07:15 +0000 Manifest next update: Sat 28 Mar 2026 11:07:15 +0000 Files and hashes: 1: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: urXrJr87j5ESWIdZUyyvVpbnNMIBrCPErU0W2IQsIAY=) 2: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: /QE3JbQC9fGdo5sebo5tYuWfdXhEXpRAxCPxewOPZfY=) 3: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: xc/83gc+FBU0xbiGAZua0yG6URQbasVkyKt0kN1IjoE=) 4: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: RtKaOt0QVcUfg/opcNyngIYtGMAYjqUtlrzDiVJb3H0=) 5: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: 34VivCMsiTDVNTFP1p40Yoca9I1GgGGiMK5Ca/vIQhs=) 6: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: qU8RTkvPo3iqRGCD9LWcjtrQELpG4pQ8Ybiv4OTKWyg=) 7: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: pCJYjvXonKex+skSqmImkbu4oPl5fBK9Q5SIxdeC0qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:37:1d:4a:02:fc:d9:e3:69:5b:98:70:6b:30:8f:58:55:0c:16:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Validity Not Before: Mar 25 10:07:15 2026 GMT Not After : Mar 28 11:07:15 2026 GMT Subject: CN=F1B223E05305072324304D966422413C4389C78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:26:68:36:7e:e6:6a:0d:34:c5:97:d4:ec: 64:35:fd:9e:44:71:2a:ed:c3:95:ff:0c:97:85:47: 14:8a:89:4d:92:d2:ba:4b:d9:33:2a:fd:76:84:84: 14:33:10:13:4a:a3:2a:8e:46:8c:55:04:2d:7f:ac: 89:87:f5:a1:e3:ee:fd:d9:f2:77:30:63:fc:6e:a3: e0:17:78:ca:73:e1:46:89:c6:8b:ca:a4:f9:cc:ae: 3e:91:eb:80:ee:8e:1b:60:6c:81:01:ee:86:e1:70: 67:8b:c3:9f:ef:94:57:b7:8e:76:b8:9d:2d:b8:89: 28:07:60:85:40:9d:42:14:e9:ec:35:1e:0e:3a:2d: c2:62:97:23:6b:f6:59:70:47:02:28:72:70:1c:0b: 17:81:c5:62:7f:a0:10:52:e0:d7:00:1a:93:b6:d8: 6f:2c:1c:4b:ac:6f:5b:f0:ae:ba:e0:8e:58:93:a0: 71:97:1e:5c:77:a1:be:3d:d7:5e:db:47:f8:cc:3e: 3b:7c:d0:80:ef:47:e6:3f:91:42:65:7b:c2:48:db: cf:c1:4d:b1:81:3a:42:e0:33:3e:5b:88:93:4e:df: 41:a7:25:d9:51:ba:33:1a:d8:bc:b8:c7:e9:52:05: c3:68:bb:b5:13:dd:ba:c6:93:70:fc:67:52:72:fb: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:23:E0:53:05:07:23:24:30:4D:96:64:22:41:3C:43:89:C7:8C X509v3 Authority Key Identifier: keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d5:82:f2:85:6b:37:46:4e:f1:19:28:44:9a:0c:a4:54:56: 78:3c:e2:06:3a:f6:41:5e:2d:62:58:53:16:dd:8d:a3:1a:13: e2:59:11:09:c4:b8:e9:3a:62:6d:5e:ce:14:47:62:57:9e:c1: b2:11:e5:8c:c2:6e:e5:78:1a:ef:ae:b4:de:5f:32:4f:1b:07: 43:e6:7b:66:e9:65:41:08:be:b0:0d:d4:f2:8d:7d:ac:1d:2d: 3a:52:83:2f:c6:21:d3:91:de:91:55:c6:4e:40:0c:cc:39:46: 9b:05:43:f4:29:63:c1:b6:09:d3:f5:a0:36:20:30:9d:e6:68: bc:cb:d3:9d:57:20:09:0a:00:27:d2:d3:54:9c:9f:e5:a1:ad: 9b:84:08:05:1a:c2:d1:71:a3:e5:ed:ac:e4:dd:4a:d2:26:ab: 17:2a:a8:96:00:c5:ca:96:d0:60:24:6e:20:50:e4:fa:a1:82: d1:79:2f:2d:fc:e5:3d:07:f1:83:94:86:43:bf:9f:e1:5b:97: df:5e:c9:fe:ac:8e:80:de:0e:5e:46:fc:26:6b:53:79:b1:4d: 3f:89:f9:27:3b:b2:f3:dd:35:08:74:29:c3:e5:18:d3:a2:8b: 9b:4b:d9:d0:71:39:70:fc:7c:4f:6a:04:65:04:2b:34:dd:b1: 23:8b:4f:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDcdSgL82eNpW5hwazCPWFUMFoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF NTY2Rjk0RTAeFw0yNjAzMjUxMDA3MTVaFw0yNjAzMjgxMTA3MTVaMDMxMTAvBgNV BAMTKEYxQjIyM0UwNTMwNTA3MjMyNDMwNEQ5NjY0MjI0MTNDNDM4OUM3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHyZoNn7mag00xZfU7GQ1/Z5E cSrtw5X/DJeFRxSKiU2S0rpL2TMq/XaEhBQzEBNKoyqORoxVBC1/rImH9aHj7v3Z 8ncwY/xuo+AXeMpz4UaJxovKpPnMrj6R64DujhtgbIEB7obhcGeLw5/vlFe3jna4 nS24iSgHYIVAnUIU6ew1Hg46LcJilyNr9llwRwIocnAcCxeBxWJ/oBBS4NcAGpO2 2G8sHEusb1vwrrrgjliToHGXHlx3ob49117bR/jMPjt80IDvR+Y/kUJle8JI28/B TbGBOkLgMz5biJNO30GnJdlRujMa2Ly4x+lSBcNou7UT3brGk3D8Z1Jy+3a5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8bIj4FMFByMkME2WZCJBPEOJx4wwHwYDVR0j BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2 Rjk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEz MGUtMTBiMmM2ODhjMmZjLzAvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYx QkVFNTY2Rjk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHVgvKFazdGTvEZKESaDKRUVng84gY69kFe LWJYUxbdjaMaE+JZEQnEuOk6Ym1ezhRHYleewbIR5YzCbuV4Gu+utN5fMk8bB0Pm e2bpZUEIvrAN1PKNfawdLTpSgy/GIdOR3pFVxk5ADMw5RpsFQ/QpY8G2CdP1oDYg MJ3maLzL051XIAkKACfS01Scn+WhrZuECAUawtFxo+XtrOTdStImqxcqqJYAxcqW 0GAkbiBQ5PqhgtF5Ly385T0H8YOUhkO/n+Fbl99eyf6sjoDeDl5G/CZrU3mxTT+J +Sc7svPdNQh0KcPlGNOii5tL2dBxOXD8fE9qBGUEKzTdsSOLT3M= -----END CERTIFICATE-----Generated at Thu Mar 26 12:18:59 2026 by rpki-client