$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: MxgOJiHbYb2hRvFR8vRDihLl8anzJU5b7yFNQRbtjCw= Subject key identifier: 86:40:78:3C:91:A8:16:A9:7F:AF:BA:CF:D8:E9:6E:C4:E6:76:6D:6E Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 24280B2A2E2045DD304A85B3B6B5C869D32903DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: 010F Signing time: Sun 01 Mar 2026 16:12:20 +0000 Manifest this update: Sun 01 Mar 2026 16:07:20 +0000 Manifest next update: Wed 04 Mar 2026 21:07:20 +0000 Files and hashes: 1: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 2: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 3: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: h/qDvoxjZk4MoYnH9a1ILdKrsz0iB/pshSoVggtPmJA=) 4: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:28:0b:2a:2e:20:45:dd:30:4a:85:b3:b6:b5:c8:69:d3:29:03:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Mar 1 16:07:20 2026 GMT Not After : Mar 4 21:07:20 2026 GMT Subject: CN=8640783C91A816A97FAFBACFD8E96EC4E6766D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:58:c4:44:bc:84:1c:96:48:16:e7:36:4c: d0:16:61:6e:16:b7:aa:4b:3a:49:b3:f1:57:5a:00: 26:a2:73:30:38:fc:00:52:d9:c2:af:11:22:28:ee: 70:ed:f4:dc:66:ac:68:85:da:6f:2b:55:02:32:69: dc:ca:12:db:88:b0:3a:2c:ff:4e:fd:89:e2:cd:49: 96:a5:b3:df:4b:d8:37:ce:46:92:7d:f6:04:62:3a: d8:d3:e8:fd:3c:69:40:78:be:f3:62:d4:cb:1e:bc: 71:31:5d:3e:1a:e0:59:57:3a:0c:c9:58:34:64:82: ef:32:9f:93:33:c0:d4:55:ec:c5:ec:cb:b4:f0:06: 79:20:f9:8b:80:b6:3b:7c:d9:a2:81:17:01:a9:86: 7f:92:71:61:48:09:e1:5d:70:b9:23:78:b1:49:f8: 4b:8f:5d:26:f9:f7:3c:92:f1:1c:e4:48:b1:2b:f0: 5d:01:e1:27:d8:fb:ac:21:a8:16:95:33:5e:59:85: 72:02:b4:81:59:70:e5:97:95:12:51:cb:b6:c8:73: d0:77:02:3c:36:99:91:8b:c3:6b:ef:49:74:d6:99: 5d:28:7d:4d:65:d2:fe:23:b2:31:fa:20:1c:c7:2d: 03:a1:b3:0b:c6:17:6d:e5:b2:cf:35:21:a5:8a:d1: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:40:78:3C:91:A8:16:A9:7F:AF:BA:CF:D8:E9:6E:C4:E6:76:6D:6E X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d9:cf:c5:7a:3e:70:d8:4d:ab:c6:03:ee:f7:e7:43:18:3e: 91:93:e8:2c:95:91:af:2f:4d:3a:40:2a:ef:84:09:ee:6d:14: 65:10:9b:80:f2:49:3d:02:49:07:07:94:8d:da:f9:ca:79:14: 0a:73:9c:27:bf:2f:84:a6:d2:8d:a4:2a:c0:24:a1:b5:14:aa: 76:bc:5b:e2:bf:4e:8b:31:11:14:d1:e6:bd:1e:d1:b8:58:a2: 00:d6:59:46:29:52:6a:65:fc:d6:7e:76:62:04:79:75:9b:9f: bd:58:a6:ab:50:b2:b8:4f:4d:c7:d2:65:25:ff:ce:83:58:15: e2:5a:57:1b:3b:6c:6b:87:08:d8:74:1b:59:ae:4c:ee:18:7f: 80:94:41:09:ef:1c:2e:74:88:71:af:b9:61:76:35:07:2d:04: 94:50:44:33:ce:14:11:83:3d:17:bb:b8:1a:48:65:71:df:94: b8:8b:a8:c7:d8:93:f5:74:a9:ca:51:18:40:e5:a9:79:b1:60: 01:c5:f4:b3:3e:cf:0f:cb:c9:14:b1:ac:5b:1c:eb:3f:1a:d3: ba:66:1e:aa:60:3d:9e:ac:83:73:8d:ab:e0:01:78:07:bc:3c: 3f:68:c0:57:db:7d:2d:89:79:dc:f8:17:40:6f:0d:b9:bf:cd: 65:4e:c7:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCgLKi4gRd0wSoWztrXIadMpA98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNjAzMDExNjA3MjBaFw0yNjAzMDQyMTA3MjBaMDMxMTAvBgNV BAMTKDg2NDA3ODNDOTFBODE2QTk3RkFGQkFDRkQ4RTk2RUM0RTY3NjZENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RljERLyEHJZIFuc2TNAWYW4W t6pLOkmz8VdaACaiczA4/ABS2cKvESIo7nDt9NxmrGiF2m8rVQIyadzKEtuIsDos /079ieLNSZals99L2DfORpJ99gRiOtjT6P08aUB4vvNi1MsevHExXT4a4FlXOgzJ WDRkgu8yn5MzwNRV7MXsy7TwBnkg+YuAtjt82aKBFwGphn+ScWFICeFdcLkjeLFJ +EuPXSb59zyS8RzkSLEr8F0B4SfY+6whqBaVM15ZhXICtIFZcOWXlRJRy7bIc9B3 Ajw2mZGLw2vvSXTWmV0ofU1l0v4jsjH6IBzHLQOhswvGF23lss81IaWK0XbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhkB4PJGoFql/r7rP2OluxOZ2bW4wHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbZz8V6PnDYTavGA+7350MYPpGT6CyVka8v TTpAKu+ECe5tFGUQm4DyST0CSQcHlI3a+cp5FApznCe/L4Sm0o2kKsAkobUUqna8 W+K/TosxERTR5r0e0bhYogDWWUYpUmpl/NZ+dmIEeXWbn71YpqtQsrhPTcfSZSX/ zoNYFeJaVxs7bGuHCNh0G1muTO4Yf4CUQQnvHC50iHGvuWF2NQctBJRQRDPOFBGD PRe7uBpIZXHflLiLqMfYk/V0qcpRGEDlqXmxYAHF9LM+zw/LyRSxrFsc6z8a07pm HqpgPZ6sg3ONq+ABeAe8PD9owFfbfS2Jedz4F0BvDbm/zWVOx9o= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:46 2026 by rpki-client