$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: zEMtwNEyAa4B3JAFkaMfNNrMv1YROPhNAuRoa9Ion1U= Subject key identifier: 83:69:18:81:C8:16:1A:E6:06:EB:6B:DD:B1:5E:E7:57:75:B5:02:5D Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 57D7F62452B6C84E8BF5EA9EAAED3425674D1821 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 01CA Signing time: Sat 28 Feb 2026 14:30:45 +0000 Manifest this update: Sat 28 Feb 2026 14:25:45 +0000 Manifest next update: Tue 03 Mar 2026 23:48:45 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) 2: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: 4ZzrbwEdLAANNNbiYPqqhWBQRsPEPoNAKHwZqCnF+xM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d7:f6:24:52:b6:c8:4e:8b:f5:ea:9e:aa:ed:34:25:67:4d:18:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Feb 28 14:25:45 2026 GMT Not After : Mar 3 23:48:45 2026 GMT Subject: CN=83691881C8161AE606EB6BDDB15EE75775B5025D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:76:39:02:91:9a:bf:1b:39:67:e6:c1:ec: 1c:5d:9d:a2:01:c9:af:fd:b3:de:7b:79:9c:d1:4f: 82:b8:e4:c3:6c:1b:56:5c:20:56:14:81:f4:84:98: 74:d0:70:c1:cd:dd:6e:d1:68:64:ce:8d:84:ac:4f: 55:46:f5:b5:21:1f:52:8a:99:cb:3c:9a:f2:11:7d: 71:39:c0:d8:af:1d:cf:fb:35:4f:b4:bd:b6:67:47: 01:cc:f4:86:11:75:38:0d:98:7e:1e:fc:f2:94:9e: 00:c1:3b:23:7b:41:bb:4e:5b:c5:dc:33:ce:54:dc: 75:39:cc:66:a1:93:84:d4:2f:5a:1d:3c:bb:7b:b5: de:67:a4:dc:05:b2:1d:41:80:81:d2:c2:2f:18:ab: bb:7e:84:a0:30:79:71:6c:5d:aa:15:0a:a5:09:ba: 70:22:5f:97:02:f6:2e:44:e4:85:3f:77:f7:84:4c: 14:ec:17:7d:eb:1a:09:76:0f:c6:c9:0c:7d:b6:4d: fa:21:ca:95:42:53:a3:ee:06:9e:0d:1d:6d:b6:26: 94:c5:52:89:64:fa:d7:e3:e7:3e:2e:8b:34:2e:30: ab:1d:72:97:57:fb:f0:37:0b:5e:ea:53:28:a6:00: c9:3c:8f:46:0f:e7:50:06:39:97:5d:d2:f4:a6:07: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:69:18:81:C8:16:1A:E6:06:EB:6B:DD:B1:5E:E7:57:75:B5:02:5D X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0f:3c:65:1e:7d:5d:98:e2:81:26:8f:f9:ba:5f:03:e1:90: 38:4b:87:dd:c7:c9:dc:1e:4f:e6:80:a2:a9:15:3e:64:91:0f: 6a:10:4e:f7:0c:1c:5b:c2:23:55:90:f3:a4:fa:09:46:87:48: 6b:6f:82:20:dc:92:e2:55:0e:62:12:db:e2:6c:29:b0:4f:c8: 32:13:ad:e0:98:30:46:09:35:84:ee:b7:2c:5d:c9:89:d7:d2: e0:91:c9:06:ed:12:2d:37:d2:c1:33:91:ed:56:4e:ae:18:5b: 53:99:4c:92:5f:06:00:d2:89:4d:ff:95:c8:e6:47:91:c1:8e: f8:b2:bb:96:e8:4a:7c:b1:3b:2d:b5:6a:7a:a8:96:b7:a8:94: 92:72:e7:f9:d4:4f:ec:17:b6:1a:09:3c:2e:db:1c:3a:9a:af: 3b:82:aa:d3:73:4b:cf:0b:6a:8d:f7:df:08:4c:ff:ac:66:cf: ae:01:66:69:0b:93:9d:f3:e8:b7:b1:8a:ed:65:a0:84:a8:ec: d1:ad:63:6d:b4:23:cb:ac:3d:ea:24:e8:ea:68:36:e2:6d:40: 08:bc:a4:4d:a7:e2:6f:27:f8:48:5a:e1:c2:69:18:0c:e8:64: 77:63:c3:d5:f5:bd:23:f5:33:16:a3:35:b6:e2:5c:f2:f8:bd: 1b:28:1d:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9f2JFK2yE6L9eqequ00JWdNGCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNjAyMjgxNDI1NDVaFw0yNjAzMDMyMzQ4NDVaMDMxMTAvBgNV BAMTKDgzNjkxODgxQzgxNjFBRTYwNkVCNkJEREIxNUVFNzU3NzVCNTAyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGe3Y5ApGavxs5Z+bB7BxdnaIB ya/9s957eZzRT4K45MNsG1ZcIFYUgfSEmHTQcMHN3W7RaGTOjYSsT1VG9bUhH1KK mcs8mvIRfXE5wNivHc/7NU+0vbZnRwHM9IYRdTgNmH4e/PKUngDBOyN7QbtOW8Xc M85U3HU5zGahk4TUL1odPLt7td5npNwFsh1BgIHSwi8Yq7t+hKAweXFsXaoVCqUJ unAiX5cC9i5E5IU/d/eETBTsF33rGgl2D8bJDH22TfohypVCU6PuBp4NHW22JpTF Uolk+tfj5z4uizQuMKsdcpdX+/A3C17qUyimAMk8j0YP51AGOZdd0vSmB0vTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg2kYgcgWGuYG62vdsV7nV3W1Al0wHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwPPGUefV2Y4oEmj/m6XwPhkDhLh93Hydwe T+aAoqkVPmSRD2oQTvcMHFvCI1WQ86T6CUaHSGtvgiDckuJVDmIS2+JsKbBPyDIT reCYMEYJNYTutyxdyYnX0uCRyQbtEi030sEzke1WTq4YW1OZTJJfBgDSiU3/lcjm R5HBjviyu5boSnyxOy21anqolreolJJy5/nUT+wXthoJPC7bHDqarzuCqtNzS88L ao333whM/6xmz64BZmkLk53z6Lexiu1loISo7NGtY220I8usPeok6OpoNuJtQAi8 pE2n4m8n+Eha4cJpGAzoZHdjw9X1vSP1MxajNbbiXPL4vRsoHb0= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:11 2026 by rpki-client