$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: ReX/v7tKsiS0sZfqiyB1EWJ5dRhWDsq4q2J2qtdJEzk= Subject key identifier: D7:C0:D2:76:B5:A8:22:4D:8F:B6:75:A7:F4:F3:FE:46:D1:BD:FC:A7 Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 3E852056BE32E8B20EF5B0BF2AD47C508188A984 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 0421 Signing time: Sat 28 Feb 2026 15:01:58 +0000 Manifest this update: Sat 28 Feb 2026 14:56:58 +0000 Manifest next update: Wed 04 Mar 2026 00:33:58 +0000 Files and hashes: 1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: jJYNTfIAyMC2NRZr4ppEtCVznm9AD64Q42L5AHJhiL4=) 2: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: 2+21cgS9YAYcOp19nxMBI5CX1Jc0yGks8hyoPNdCeDQ=) 3: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: bhUXyn1m9ClF/H6g61K6U8JFPr/lZN61y4GI83n7uSM=) 4: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: 3eopVQqiWPVgj7Y7wPol6NGPgwP5M//0/cpmmW6/O2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:85:20:56:be:32:e8:b2:0e:f5:b0:bf:2a:d4:7c:50:81:88:a9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Feb 28 14:56:58 2026 GMT Not After : Mar 4 00:33:58 2026 GMT Subject: CN=D7C0D276B5A8224D8FB675A7F4F3FE46D1BDFCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:bc:42:78:7a:eb:02:50:1f:c1:f2:51:5a: 1b:39:88:6d:bc:6e:e4:06:6d:42:68:f2:f1:df:25: 1d:17:a8:21:93:9e:cf:5c:b9:63:5a:34:d3:23:e8: 3a:15:b0:fc:5d:39:7d:91:c0:2e:42:2c:a8:f5:24: 51:d0:47:a7:20:fc:b4:fd:dd:e2:71:dc:30:07:33: 4f:39:a1:3b:c9:39:28:31:03:06:43:a6:9f:75:e4: 5d:a7:40:e2:86:93:fe:fd:2a:eb:bc:63:83:2b:c4: 05:37:ca:3d:c6:c0:e9:f2:7f:0f:64:d3:9a:2d:79: 0a:c2:3c:d4:37:e7:60:cf:94:dc:56:3b:6b:dc:f2: a3:bf:16:34:55:5a:3d:81:7e:f9:38:ea:53:2c:ba: d6:c3:2e:0c:55:38:ab:a4:8f:86:e3:44:f3:e9:9e: fe:af:a1:4a:8b:ee:4c:40:9b:c5:94:e7:ac:ae:b9: df:30:75:c7:af:f4:dc:fd:4a:09:ce:aa:62:1d:c6: 43:19:ed:ff:a3:0c:7c:ad:25:37:58:30:db:0b:32: 4e:04:34:e0:7d:e6:c9:2a:17:9b:00:ca:dc:85:5b: 88:e3:49:cc:9a:fd:d7:97:a2:ce:b9:1a:cb:9d:49: 04:43:2d:5b:36:8e:f5:73:ec:43:b0:be:51:c8:85: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C0:D2:76:B5:A8:22:4D:8F:B6:75:A7:F4:F3:FE:46:D1:BD:FC:A7 X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f2:73:00:55:9d:44:41:8c:04:b3:22:8e:2c:c3:74:16:b5: 69:82:8d:7d:e3:77:09:6d:47:cd:85:2b:ca:a3:d2:c4:cf:14: 79:cf:97:f6:6a:dd:81:02:f4:db:9c:50:5a:d5:34:76:76:5d: 99:6d:df:b8:98:12:54:2e:13:3b:d1:18:8a:53:18:f0:87:70: 28:6f:bd:ca:5f:ed:e5:c1:43:09:2f:26:74:54:60:65:9b:2e: c1:25:4f:6d:02:ff:b4:8b:cc:e0:5a:d8:3d:5c:2e:a1:e6:8f: df:1d:f3:4f:82:ed:00:29:98:29:72:55:72:5b:cd:1a:0a:fc: cc:34:62:73:35:1d:71:94:f2:65:80:cb:6c:28:c9:f8:16:6d: db:0b:9a:02:22:6b:33:bc:63:72:f9:60:e2:75:eb:7d:9a:1d: e7:db:f1:47:8f:30:28:a9:b1:a2:3c:8c:2c:27:fa:d6:50:2b: d6:96:b1:b7:14:53:d5:39:30:d5:18:bd:e2:13:37:a9:7e:f6: 40:6b:3f:c0:15:9d:69:21:d0:37:32:2f:58:3a:6b:2a:c1:4a: a1:df:3f:60:ed:18:69:36:df:d0:01:2d:63:70:52:77:11:57: 49:1a:18:d6:76:68:6c:dc:7c:9c:b7:46:36:9b:f1:1f:f0:16: 81:93:16:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoUgVr4y6LIO9bC/KtR8UIGIqYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNjAyMjgxNDU2NThaFw0yNjAzMDQwMDMzNThaMDMxMTAvBgNV BAMTKEQ3QzBEMjc2QjVBODIyNEQ4RkI2NzVBN0Y0RjNGRTQ2RDFCREZDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKArxCeHrrAlAfwfJRWhs5iG28 buQGbUJo8vHfJR0XqCGTns9cuWNaNNMj6DoVsPxdOX2RwC5CLKj1JFHQR6cg/LT9 3eJx3DAHM085oTvJOSgxAwZDpp915F2nQOKGk/79Kuu8Y4MrxAU3yj3GwOnyfw9k 05oteQrCPNQ352DPlNxWO2vc8qO/FjRVWj2Bfvk46lMsutbDLgxVOKukj4bjRPPp nv6voUqL7kxAm8WU56yuud8wdcev9Nz9SgnOqmIdxkMZ7f+jDHytJTdYMNsLMk4E NOB95skqF5sAytyFW4jjScya/deXos65GsudSQRDLVs2jvVz7EOwvlHIhRPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU18DSdrWoIk2PtnWn9PP+RtG9/KcwHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLycwBVnURBjASzIo4sw3QWtWmCjX3jdwlt R82FK8qj0sTPFHnPl/Zq3YEC9NucUFrVNHZ2XZlt37iYElQuEzvRGIpTGPCHcChv vcpf7eXBQwkvJnRUYGWbLsElT20C/7SLzOBa2D1cLqHmj98d80+C7QApmClyVXJb zRoK/Mw0YnM1HXGU8mWAy2woyfgWbdsLmgIiazO8Y3L5YOJ1632aHefb8UePMCip saI8jCwn+tZQK9aWsbcUU9U5MNUYveITN6l+9kBrP8AVnWkh0DcyL1g6ayrBSqHf P2DtGGk239ABLWNwUncRV0kaGNZ2aGzcfJy3Rjab8R/wFoGTFoA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:16:03 2026 by rpki-client