$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: Y9945MBD/DoO4MRUyeznZjVQp93Inyx2yM+2b7059PI= Subject key identifier: 9B:44:62:7D:5C:29:5F:F2:98:B7:DA:90:44:B1:F8:26:5B:1F:4E:69 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 1A2A6F89F16BA445F297CABD69FFECF5901F2587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0554 Signing time: Sun 01 Mar 2026 05:12:45 +0000 Manifest this update: Sun 01 Mar 2026 05:07:45 +0000 Manifest next update: Wed 04 Mar 2026 06:39:45 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: 0kM4+0THBqUtUgFFYCOoBBrE1rWtF2yosg1n28SeoQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2a:6f:89:f1:6b:a4:45:f2:97:ca:bd:69:ff:ec:f5:90:1f:25:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Mar 1 05:07:45 2026 GMT Not After : Mar 4 06:39:45 2026 GMT Subject: CN=9B44627D5C295FF298B7DA9044B1F8265B1F4E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:47:94:af:b6:84:1f:5a:27:f5:64:ff:15: 79:07:bf:71:74:33:2e:44:50:45:19:c0:ab:df:5b: b5:09:54:89:3b:02:39:27:5a:9e:11:46:15:3b:ba: c1:62:f4:1c:02:d6:6a:b3:52:46:2f:55:8c:8f:86: 76:a5:75:3b:7e:2c:29:c0:f9:45:b3:30:cb:40:41: d7:2a:a0:51:ca:22:d2:58:73:87:fc:a6:8f:12:55: 11:c4:09:ca:60:01:90:ff:3f:a4:95:94:13:ed:c0: 7a:ae:40:30:4b:1d:1a:ab:0e:8f:23:93:83:7b:de: 54:fb:00:e3:62:64:b6:3b:03:5b:09:8f:b6:a5:68: 2f:e4:fb:1f:4a:74:52:f6:fe:de:06:28:66:3b:e2: a4:50:b2:01:19:8c:53:67:40:a0:56:a0:3c:58:1a: 3d:19:da:14:d8:92:03:2f:fc:f7:1c:4f:a2:f1:79: 58:c0:98:8a:a2:f0:48:c2:28:2b:db:db:69:25:48: ac:95:38:24:8f:f5:b6:18:9b:37:a8:ec:1c:35:f2: e7:d3:1c:eb:0f:99:8f:e0:f7:2a:bf:dd:d7:41:89: ef:b3:a3:1c:24:33:57:47:e3:45:03:4c:08:3d:a4: 9c:57:50:8c:d5:3a:e3:bf:af:ad:53:bc:a5:10:8d: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:44:62:7D:5C:29:5F:F2:98:B7:DA:90:44:B1:F8:26:5B:1F:4E:69 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:34:d8:5d:30:e7:dd:b2:18:54:99:70:ff:01:11:32:c3:16: 28:e8:06:98:06:56:8f:63:2f:93:af:8a:6b:9f:b3:c0:2a:00: 5e:87:30:56:f4:ec:99:31:4f:f1:ac:33:d3:51:06:aa:ca:46: f4:00:8e:54:ff:27:8f:2e:19:29:15:f0:f9:95:c4:51:1a:88: 54:91:ef:d3:23:45:57:ec:23:48:67:53:2c:59:51:08:a6:26: 36:eb:d9:65:76:8d:8e:7a:ed:03:8d:9e:f7:4e:5e:12:2d:a3: 3a:d7:34:67:43:29:44:d0:2a:1d:c2:1f:d8:99:68:ff:ed:a7: 5c:ea:bd:de:2d:b5:4c:5c:75:95:8a:3f:9f:73:db:df:78:a1: 59:20:d6:79:3b:09:5c:02:53:71:8b:3d:81:ca:72:ea:76:85: 6a:92:1c:38:13:cf:1c:62:01:f4:be:53:38:7d:4d:f7:54:f6: d5:6f:e8:3c:d3:af:94:42:94:38:35:89:e2:78:7c:3c:41:2a: 9a:20:86:6c:0b:91:7f:82:06:4f:d3:ab:30:76:bf:aa:c3:6c: ab:48:0e:0e:5d:eb:2f:d0:2f:56:4c:11:39:c5:ca:68:07:21: dc:03:72:0f:44:60:41:8b:6d:d1:2e:07:08:98:4e:34:89:28: 4d:f2:04:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGipvifFrpEXyl8q9af/s9ZAfJYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNjAzMDEwNTA3NDVaFw0yNjAzMDQwNjM5NDVaMDMxMTAvBgNV BAMTKDlCNDQ2MjdENUMyOTVGRjI5OEI3REE5MDQ0QjFGODI2NUIxRjRFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpEeUr7aEH1on9WT/FXkHv3F0 My5EUEUZwKvfW7UJVIk7AjknWp4RRhU7usFi9BwC1mqzUkYvVYyPhnaldTt+LCnA +UWzMMtAQdcqoFHKItJYc4f8po8SVRHECcpgAZD/P6SVlBPtwHquQDBLHRqrDo8j k4N73lT7AONiZLY7A1sJj7alaC/k+x9KdFL2/t4GKGY74qRQsgEZjFNnQKBWoDxY Gj0Z2hTYkgMv/PccT6LxeVjAmIqi8EjCKCvb22klSKyVOCSP9bYYmzeo7Bw18ufT HOsPmY/g9yq/3ddBie+zoxwkM1dH40UDTAg9pJxXUIzVOuO/r61TvKUQjUEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm0RifVwpX/KYt9qQRLH4JlsfTmkwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY02F0w592yGFSZcP8BETLDFijoBpgGVo9j L5Ovimufs8AqAF6HMFb07JkxT/GsM9NRBqrKRvQAjlT/J48uGSkV8PmVxFEaiFSR 79MjRVfsI0hnUyxZUQimJjbr2WV2jY567QONnvdOXhItozrXNGdDKUTQKh3CH9iZ aP/tp1zqvd4ttUxcdZWKP59z2994oVkg1nk7CVwCU3GLPYHKcup2hWqSHDgTzxxi AfS+Uzh9TfdU9tVv6DzTr5RClDg1ieJ4fDxBKpoghmwLkX+CBk/TqzB2v6rDbKtI Dg5d6y/QL1ZMETnFymgHIdwDcg9EYEGLbdEuBwiYTjSJKE3yBBc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:42 2026 by rpki-client