$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json) Hash identifier: 7fvNLNGNl4+RKIPwcMC8gLmKCtomXtLQ3+nncRcXGLY= Subject key identifier: 24:73:75:33:D4:CF:EA:39:20:D4:2F:6A:D6:71:BC:84:5A:16:4C:99 Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Certificate serial: 58F30F48FD8663117233389A3FA06D2CA8461DFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft Manifest number: 0554 Signing time: Sun 01 Mar 2026 12:12:21 +0000 Manifest this update: Sun 01 Mar 2026 12:07:21 +0000 Manifest next update: Wed 04 Mar 2026 15:00:21 +0000 Files and hashes: 1: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=) 2: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: Qs10IY7r1DXsn/GeyMllB7e24s547LfxAMUYkHxk7Kg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f3:0f:48:fd:86:63:11:72:33:38:9a:3f:a0:6d:2c:a8:46:1d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Validity Not Before: Mar 1 12:07:21 2026 GMT Not After : Mar 4 15:00:21 2026 GMT Subject: CN=24737533D4CFEA3920D42F6AD671BC845A164C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:84:1f:7f:cd:d6:f4:b2:29:28:ed:1b:03: f2:ac:f2:91:8b:93:fd:ef:b6:18:6d:9a:ce:8a:81: 6c:df:6a:41:dd:cb:30:51:19:c5:5c:1b:95:85:ff: bd:91:2f:62:f6:6d:ed:08:e8:89:9c:1b:e0:e1:35: f2:bf:8e:06:c1:7a:a5:06:49:dc:36:1b:6e:f4:1c: 56:54:2f:5f:f9:1e:95:fd:58:24:61:5e:34:73:1b: c2:3f:2a:af:9d:14:fb:16:85:f4:15:ad:b9:64:6e: 47:64:be:28:99:f3:e8:dc:6d:00:b8:70:72:59:a7: 68:b9:37:01:8e:91:91:31:33:28:a3:88:d7:13:05: 9e:68:73:b1:4a:8f:a1:7f:3d:5c:a0:f3:b5:fa:a5: 2a:d9:21:83:79:61:01:bd:2c:87:81:a9:6d:c7:cc: 54:c0:08:ea:22:cb:b7:8f:ae:ee:db:b3:57:6e:e7: 9c:97:19:68:f1:77:2f:3a:66:35:9c:ae:36:43:87: 72:91:96:98:84:1f:31:8b:8b:b7:01:2b:41:dc:42: 2f:82:17:64:d1:4c:31:31:54:f3:6e:03:ce:38:37: 65:ef:b9:ac:14:39:c4:37:52:2b:ef:02:17:a7:8f: dc:d0:1b:65:a0:51:1b:22:c0:8b:ea:1d:38:30:5b: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:75:33:D4:CF:EA:39:20:D4:2F:6A:D6:71:BC:84:5A:16:4C:99 X509v3 Authority Key Identifier: keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:32:9c:c4:28:67:78:4d:0b:5e:c8:1e:a4:68:35:18:5e:76: 0e:a2:d8:05:c3:b4:bc:d7:ca:3b:3b:08:cc:d5:d3:8c:99:79: 05:57:2c:6d:e0:72:a9:57:eb:f3:b6:f7:b1:a7:7d:eb:93:7b: 51:b8:cb:c7:61:f4:17:74:2a:65:0f:1e:26:a5:b6:81:1e:cf: bb:71:65:26:d4:8a:83:64:8a:0a:24:cb:67:22:c6:41:b6:7b: bb:d5:f4:e2:9a:63:44:04:8a:3e:a7:ea:67:42:53:ea:fb:52: 71:6d:81:eb:68:65:14:25:c9:c4:3d:5c:16:29:0d:2f:96:6c: a2:19:74:9a:20:f6:53:39:39:5e:42:ef:9a:0c:be:55:ff:2d: 2e:a0:4f:de:93:6a:1f:ff:70:e5:0c:21:6c:4e:ba:aa:a5:30: 91:c3:e9:09:fb:70:fc:ba:97:cd:3f:41:42:78:fd:91:5e:30: 74:52:34:3b:14:79:b4:46:a4:fc:8a:ed:19:d9:a8:b0:83:fe: bb:33:9e:4a:1a:9a:44:44:6b:e0:ff:de:22:e5:fe:fc:5a:a0: 34:32:61:5d:03:7e:b8:20:da:ed:52:15:ca:d5:18:61:44:f3: 65:3d:60:72:79:2c:32:27:0d:14:a3:c8:12:c3:87:86:68:cd: 49:55:f5:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPMPSP2GYxFyMziaP6BtLKhGHfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy RTVDMEE5NTAeFw0yNjAzMDExMjA3MjFaFw0yNjAzMDQxNTAwMjFaMDMxMTAvBgNV BAMTKDI0NzM3NTMzRDRDRkVBMzkyMEQ0MkY2QUQ2NzFCQzg0NUExNjRDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4oQff83W9LIpKO0bA/Ks8pGL k/3vthhtms6KgWzfakHdyzBRGcVcG5WF/72RL2L2be0I6ImcG+DhNfK/jgbBeqUG Sdw2G270HFZUL1/5HpX9WCRhXjRzG8I/Kq+dFPsWhfQVrblkbkdkviiZ8+jcbQC4 cHJZp2i5NwGOkZExMyijiNcTBZ5oc7FKj6F/PVyg87X6pSrZIYN5YQG9LIeBqW3H zFTACOoiy7ePru7bs1du55yXGWjxdy86ZjWcrjZDh3KRlpiEHzGLi7cBK0HcQi+C F2TRTDExVPNuA844N2XvuawUOcQ3UivvAhenj9zQG2WgURsiwIvqHTgwW5a7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHN1M9TP6jkg1C9q1nG8hFoWTJkwHwYDVR0j BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4 Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQynMQoZ3hNC17IHqRoNRhedg6i2AXDtLzX yjs7CMzV04yZeQVXLG3gcqlX6/O297GnfeuTe1G4y8dh9Bd0KmUPHialtoEez7tx ZSbUioNkigoky2cixkG2e7vV9OKaY0QEij6n6mdCU+r7UnFtgetoZRQlycQ9XBYp DS+WbKIZdJog9lM5OV5C75oMvlX/LS6gT96Tah//cOUMIWxOuqqlMJHD6Qn7cPy6 l80/QUJ4/ZFeMHRSNDsUebRGpPyK7RnZqLCD/rsznkoamkREa+D/3iLl/vxaoDQy YV0Dfrgg2u1SFcrVGGFE82U9YHJ5LDInDRSjyBLDh4ZozUlV9dQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:32:27 2026 by rpki-client