$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: XP/Zb783mK85jFihMqd0+ukIr4HUA9WjGwF3cl0asFM= Subject key identifier: 48:F6:52:00:4D:F3:A7:60:C3:AF:7D:BC:BE:5F:9D:A0:D3:24:02:28 Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 3FB2F111B685D48A33B67394E27DBB7C27710AEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 0205 Signing time: Thu 26 Mar 2026 07:00:44 +0000 Manifest this update: Thu 26 Mar 2026 06:55:44 +0000 Manifest next update: Sun 29 Mar 2026 15:52:44 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: dsR0O3LNJOhg2x5FBCHHBAZo2Lg4Mw+TrUFIVlPinFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b2:f1:11:b6:85:d4:8a:33:b6:73:94:e2:7d:bb:7c:27:71:0a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Mar 26 06:55:44 2026 GMT Not After : Mar 29 15:52:44 2026 GMT Subject: CN=48F652004DF3A760C3AF7DBCBE5F9DA0D3240228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:67:60:52:89:4a:d4:17:40:3a:a0:90:da: ec:1c:24:80:48:1a:b3:d8:f6:01:07:75:44:58:ec: c1:df:45:75:8c:1c:77:c4:e5:b6:48:1f:e6:3f:91: 03:8b:ef:51:6e:9d:a1:7b:63:55:10:80:6d:c8:57: 09:c2:fe:4a:0b:18:bf:a5:48:5b:a1:01:1a:5a:3f: b6:62:f4:f5:a5:8e:41:9a:2e:7f:8e:0a:65:a3:0b: ac:12:ad:14:c4:21:64:59:cc:d5:19:d6:db:7e:df: 5a:59:74:19:6e:d7:e7:94:97:64:94:22:a3:c1:34: 13:8c:52:00:05:be:bb:f0:58:6d:c4:ef:a3:32:3d: 31:e4:aa:ad:d4:bf:3f:c0:19:4a:f4:ad:49:37:29: b4:ed:f4:ec:58:67:12:6f:ac:58:cc:9d:22:af:20: 02:5a:8d:5a:af:ae:ad:b7:4e:40:2b:75:7a:e4:55: 0f:11:10:26:de:9d:2c:2b:77:8a:2f:bb:7b:f3:9f: 7b:3c:d3:9c:ba:76:b0:45:d4:74:c7:cd:3f:b2:56: 1d:6c:65:f9:25:11:9a:9f:cd:bb:41:c9:6e:21:bf: 15:b4:b6:b1:80:90:a5:b7:24:24:c9:73:3e:f6:e2: a5:85:1c:dc:f0:88:ca:96:64:62:a9:34:44:c7:9f: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F6:52:00:4D:F3:A7:60:C3:AF:7D:BC:BE:5F:9D:A0:D3:24:02:28 X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e8:3b:e9:12:ab:b7:19:25:40:41:8b:bc:c2:7a:de:05:5f: ad:85:34:8a:5d:e3:ff:73:37:6d:5d:f2:a1:0a:8e:83:16:b7: 94:c3:6f:71:96:a9:80:e2:a9:21:85:4f:9f:5c:fb:20:77:01: 41:60:e8:e9:96:1e:0e:47:da:b8:99:37:34:84:06:2a:01:3b: 86:d6:3f:76:09:68:bd:74:a3:de:c6:2b:64:ea:62:7c:29:8b: 93:61:35:8a:63:16:2d:71:a0:0b:ac:d2:69:75:68:4d:54:b4: 23:19:0b:8f:c8:07:ec:15:c8:72:2a:51:71:4f:79:e8:a5:b4: 8c:c5:a6:bb:46:d8:3c:96:e5:9a:de:c8:fc:50:0d:50:91:39: 1d:13:9e:b3:d2:71:e9:82:6a:23:9c:78:b6:63:4e:4f:00:36: be:7d:2c:e3:71:46:e5:d2:7f:df:ed:22:7a:1f:d5:24:2e:e1: 4a:50:a2:99:48:4d:2a:63:a5:4e:30:db:ed:15:4b:76:3b:7e: 02:e1:77:8b:5d:02:8f:bf:ee:bc:9b:0a:8f:a7:ec:4b:8e:4d: d8:9f:6d:32:ab:13:5e:a9:6c:79:1f:c6:fd:64:5c:01:59:ce: db:0e:6f:6e:ec:53:f5:5c:d7:92:1a:74:ea:f5:07:59:ad:b9: dd:53:32:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7LxEbaF1IoztnOU4n27fCdxCuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNjAzMjYwNjU1NDRaFw0yNjAzMjkxNTUyNDRaMDMxMTAvBgNV BAMTKDQ4RjY1MjAwNERGM0E3NjBDM0FGN0RCQ0JFNUY5REEwRDMyNDAyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11WdgUolK1BdAOqCQ2uwcJIBI GrPY9gEHdURY7MHfRXWMHHfE5bZIH+Y/kQOL71FunaF7Y1UQgG3IVwnC/koLGL+l SFuhARpaP7Zi9PWljkGaLn+OCmWjC6wSrRTEIWRZzNUZ1tt+31pZdBlu1+eUl2SU IqPBNBOMUgAFvrvwWG3E76MyPTHkqq3Uvz/AGUr0rUk3KbTt9OxYZxJvrFjMnSKv IAJajVqvrq23TkArdXrkVQ8RECbenSwrd4ovu3vzn3s805y6drBF1HTHzT+yVh1s ZfklEZqfzbtByW4hvxW0trGAkKW3JCTJcz724qWFHNzwiMqWZGKpNETHnxqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSPZSAE3zp2DDr328vl+doNMkAigwHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjoO+kSq7cZJUBBi7zCet4FX62FNIpd4/9z N21d8qEKjoMWt5TDb3GWqYDiqSGFT59c+yB3AUFg6OmWHg5H2riZNzSEBioBO4bW P3YJaL10o97GK2TqYnwpi5NhNYpjFi1xoAus0ml1aE1UtCMZC4/IB+wVyHIqUXFP eeiltIzFprtG2DyW5ZreyPxQDVCROR0TnrPScemCaiOceLZjTk8ANr59LONxRuXS f9/tInof1SQu4UpQoplITSpjpU4w2+0VS3Y7fgLhd4tdAo+/7rybCo+n7EuOTdif bTKrE16pbHkfxv1kXAFZztsOb27sU/Vc15IadOr1B1mtud1TMoU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:36 2026 by rpki-client