$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft File: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft (raw, json) Hash identifier: qSu/H3Mjtl1s9rPq/mB7ikHklr7rmSRRMUgGvYSMKK0= Subject key identifier: 96:C9:52:04:7F:8A:F6:16:0F:10:89:02:4D:A3:9B:4C:2D:6B:1F:7F Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 236FE35700B97E36EE2C7A200382C4D642E20171 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft Manifest number: 060C Signing time: Fri 27 Mar 2026 00:41:45 +0000 Manifest this update: Fri 27 Mar 2026 00:36:45 +0000 Manifest next update: Mon 30 Mar 2026 07:48:45 +0000 Files and hashes: 1: AS24520.roa (hash: y1yvRIZ8+TDA64wDSsRNCNqIaAq5n9yz8ocQqUodaN0=) 2: AS137346.roa (hash: PdCcl7m4oX+SJS93oiHUxTuOW/ltjw+gLpTGiEDO7T8=) 3: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl (hash: M29ye4ALAWr+MZgpv7I3rtOO6VaPB0QvQO3FLH7CoYU=) 4: AS138885.roa (hash: KBG2NoRZnqbnYcgksYOwC0KCRBHPElk3mPGCqiBh3T0=) 5: AS46024.roa (hash: NvN7LEt17vokuJNXvPtDV42n133GcbLHvsn6T/4Ucrk=) 6: AS38755.roa (hash: UAv9TVco4YZMMpoyfxeTeDqzZj8/8ApHy5F/bpaezNg=) 7: AS140421.roa (hash: 4eYpelzRlfn/JSekFeK7MGqHpXTMYSIlvgvlpip/4os=) 8: AS135457.roa (hash: mets9wGAfFgpWdv6mbdX5do/lpd7VUlbp3mPEVeZduw=) 9: AS38768.roa (hash: PGr9yvhk+yyWBflhHC7aOtOCuBJG6GOBZHZ6s7YNwL8=) 10: AS38496.roa (hash: NoTu4uTVv76+CbUMhzog8IYBnzZtHyJJiJKWizpeK8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 07:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6f:e3:57:00:b9:7e:36:ee:2c:7a:20:03:82:c4:d6:42:e2:01:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Mar 27 00:36:45 2026 GMT Not After : Mar 30 07:48:45 2026 GMT Subject: CN=96C952047F8AF6160F1089024DA39B4C2D6B1F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:af:0d:ad:fa:e2:98:a0:23:fe:7a:c4:df: 8e:f3:71:d9:0d:cf:3f:4b:a0:b9:db:1a:82:6f:6d: cc:af:27:63:c0:dc:73:b5:52:a1:2b:ae:54:73:a7: f8:c6:b2:24:a2:51:fd:4f:84:78:9f:55:55:93:67: 07:0b:71:3c:91:26:20:4d:b5:8d:be:4b:8e:30:5b: 57:85:fe:0d:7f:25:40:eb:33:23:f1:86:8a:b0:73: 01:57:c1:13:35:6c:e1:74:3b:a5:8a:c0:07:27:bb: 13:27:85:58:bb:af:fd:02:6c:d8:c8:f6:6b:80:af: fe:f7:f7:b3:68:a7:36:ee:a0:71:ba:7d:7d:c6:88: 67:85:07:7a:d1:df:c2:6a:01:0e:ee:4e:c5:28:3a: 9c:c0:67:9a:2b:88:e3:7c:df:5d:43:18:71:05:2c: 48:8c:3a:48:af:a9:c9:a0:46:1b:90:b0:74:8d:dc: d4:ec:8e:26:93:71:cd:7b:ef:5d:5a:66:7e:b6:84: 08:1c:37:61:c0:c3:6e:cf:12:83:f3:2c:37:36:c9: 60:b1:79:e6:26:8a:4c:ab:3f:2a:d6:e0:03:c7:21: 17:8b:ec:01:35:a8:f3:45:f0:2c:92:6c:62:67:44: 84:f2:0e:d2:d2:3d:e9:d9:30:bc:ad:91:fa:df:5b: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C9:52:04:7F:8A:F6:16:0F:10:89:02:4D:A3:9B:4C:2D:6B:1F:7F X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:90:1d:fe:ce:94:ef:ff:5b:2f:24:fe:ff:18:83:6d:8e:18: f5:de:ba:5c:31:b4:26:3f:47:aa:0f:d8:1f:e0:2f:81:66:06: 59:29:25:f0:51:ce:c9:f7:ce:c5:55:d0:51:a9:4d:50:f7:14: 35:14:64:85:0c:e7:e2:8d:c2:ad:e1:43:ee:32:bb:c5:13:79: b7:ea:bf:7e:df:fe:6c:08:1c:88:a3:18:21:2f:33:4a:14:8c: 57:17:9c:c9:43:89:aa:04:28:ab:7f:6c:30:48:30:81:b2:db: 9b:12:54:85:08:ed:b0:42:00:e1:d3:eb:b4:4f:39:56:e9:e2: 65:80:b7:80:59:b2:ac:b7:59:5e:b7:49:69:fe:db:f9:b6:76: 63:d8:c0:97:2d:96:45:86:a1:97:63:ca:0d:ba:1f:d7:31:e5: 45:1f:5d:57:37:5b:79:5f:d5:e2:19:75:83:4c:70:2f:41:6a: d3:81:b9:dc:c1:0e:55:48:25:e6:e8:27:34:96:c4:7c:69:2c: a6:f7:ed:60:5d:5d:56:fd:4d:44:eb:f8:fd:5f:f2:1a:0d:18: 10:4d:d2:d8:b8:1b:2b:ed:3d:c7:36:eb:4f:e3:53:ec:5d:31: 2e:04:11:35:3c:bf:06:34:f9:64:f5:2b:b2:0b:62:6d:0c:9b: c1:83:5a:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2/jVwC5fjbuLHogA4LE1kLiAXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNjAzMjcwMDM2NDVaFw0yNjAzMzAwNzQ4NDVaMDMxMTAvBgNV BAMTKDk2Qzk1MjA0N0Y4QUY2MTYwRjEwODkwMjREQTM5QjRDMkQ2QjFGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRq8NrfrimKAj/nrE347zcdkN zz9LoLnbGoJvbcyvJ2PA3HO1UqErrlRzp/jGsiSiUf1PhHifVVWTZwcLcTyRJiBN tY2+S44wW1eF/g1/JUDrMyPxhoqwcwFXwRM1bOF0O6WKwAcnuxMnhVi7r/0CbNjI 9muAr/7397NopzbuoHG6fX3GiGeFB3rR38JqAQ7uTsUoOpzAZ5oriON8311DGHEF LEiMOkivqcmgRhuQsHSN3NTsjiaTcc17711aZn62hAgcN2HAw27PEoPzLDc2yWCx eeYmikyrPyrW4APHIReL7AE1qPNF8CySbGJnRITyDtLSPenZMLytkfrfWzWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlslSBH+K9hYPEIkCTaObTC1rH38wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5 NzQtOTBlOTM5YmNiMGZiLzAvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZE NTFGOEZDMDZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOQHf7OlO//Wy8k/v8Yg22OGPXeulwxtCY/ R6oP2B/gL4FmBlkpJfBRzsn3zsVV0FGpTVD3FDUUZIUM5+KNwq3hQ+4yu8UTebfq v37f/mwIHIijGCEvM0oUjFcXnMlDiaoEKKt/bDBIMIGy25sSVIUI7bBCAOHT67RP OVbp4mWAt4BZsqy3WV63SWn+2/m2dmPYwJctlkWGoZdjyg26H9cx5UUfXVc3W3lf 1eIZdYNMcC9BatOBudzBDlVIJeboJzSWxHxpLKb37WBdXVb9TUTr+P1f8hoNGBBN 0ti4GyvtPcc260/jU+xdMS4EETU8vwY0+WT1K7ILYm0Mm8GDWuM= -----END CERTIFICATE-----Generated at Fri Mar 27 08:16:12 2026 by rpki-client