$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: pCdAVvs/7VM0loyCVJZMOose8gquGOlkLyDty8bqSTU= Subject key identifier: CA:EC:02:A1:8E:2C:1E:1B:10:BD:BA:07:7C:27:C4:44:D6:CA:99:D2 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 6DFD484698A5FF9F3FB5756B54EC97728C3645A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 020B Signing time: Sat 28 Feb 2026 19:42:09 +0000 Manifest this update: Sat 28 Feb 2026 19:37:09 +0000 Manifest next update: Tue 03 Mar 2026 21:53:09 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) 2: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: 1VNjSiftbPWouyozXjYzJ/m5zE4KkzD265qKsJMEZrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fd:48:46:98:a5:ff:9f:3f:b5:75:6b:54:ec:97:72:8c:36:45:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Feb 28 19:37:09 2026 GMT Not After : Mar 3 21:53:09 2026 GMT Subject: CN=CAEC02A18E2C1E1B10BDBA077C27C444D6CA99D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:53:d3:b2:41:f1:50:ec:fd:95:94:08:9a: 62:ba:c3:3a:12:d2:6b:b7:a1:c4:d2:fd:ca:81:82: a2:ec:c6:ea:60:c4:71:98:0e:29:b9:ea:d8:b7:e8: 84:fe:89:53:a6:d5:1e:d1:94:a2:b4:10:ea:6a:a2: d9:6a:14:b0:aa:23:2f:e0:07:b7:19:a5:d9:d6:13: 85:d2:62:62:6d:01:b6:5c:96:a6:07:ef:c5:b2:58: 06:30:43:f0:1a:02:ea:a4:d0:3f:df:74:22:80:ae: 0f:a4:c4:0a:02:84:01:ce:9f:5b:3d:94:e1:c8:50: 3f:32:93:4e:38:aa:03:7e:12:db:7a:c8:c9:b9:15: 3f:3d:78:ff:4e:8f:57:5c:4e:1d:b5:f5:d4:9f:e5: b2:56:77:4f:34:ec:90:d2:14:35:b3:21:7b:d1:5e: 06:ed:97:c4:33:f4:f0:90:7f:7e:51:54:c1:ba:6b: b4:a2:cc:65:96:9c:ee:df:a0:db:4b:7c:10:6b:d7: 45:2c:cb:60:23:58:ce:b6:34:21:b3:5a:20:97:19: 55:3f:03:8d:3c:3b:f5:43:b9:e6:05:1a:81:1c:c3: 8b:92:72:9d:79:9a:ee:00:90:83:9b:28:48:ce:16: c6:a3:d3:81:0e:07:01:18:37:f3:ca:65:cd:18:5f: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:02:A1:8E:2C:1E:1B:10:BD:BA:07:7C:27:C4:44:D6:CA:99:D2 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:6f:a9:1d:b7:80:81:b5:0a:0d:12:5c:93:23:fd:ce:ae:0c: c8:f7:f5:50:d8:97:97:88:dc:c7:4b:6b:fc:f7:c3:ec:ae:ad: eb:c7:79:c3:2d:7f:2d:cd:5d:9d:0f:19:7b:e4:93:bd:2c:36: 87:c8:53:13:8c:bd:13:25:07:f3:ae:5c:f5:21:5e:67:47:ab: de:d7:e4:5e:5a:23:e1:8d:8c:e0:90:28:57:24:7d:54:84:af: 2b:dd:98:5c:52:3f:b7:38:f1:89:c2:93:3d:b0:79:d8:e4:fe: 44:e5:4b:a1:e3:38:20:e6:d8:fa:6c:07:c6:c9:f9:f6:43:f1: 83:9f:6c:86:9d:1d:a1:81:74:b7:d7:9b:5d:d5:48:63:aa:41: be:f8:f4:aa:b5:de:e8:28:cd:c2:48:b4:e8:45:07:f6:2c:2c: 95:2e:19:ec:37:c8:50:e2:91:1f:61:ac:50:55:9a:85:a5:d3: 81:a2:9c:d7:eb:6d:ab:4f:63:0f:5d:54:3e:e1:8f:d7:df:55: 40:51:d8:62:1f:d3:11:9f:fc:dc:59:20:9c:20:2d:a2:a4:51: 9c:84:d0:14:ab:07:e7:84:e7:19:83:19:5e:66:c3:d7:90:62: d6:3d:0b:4f:cb:08:ab:3a:09:23:53:39:cb:5f:05:9f:7d:51: 3d:92:20:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbf1IRpil/58/tXVrVOyXcow2RakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNjAyMjgxOTM3MDlaFw0yNjAzMDMyMTUzMDlaMDMxMTAvBgNV BAMTKENBRUMwMkExOEUyQzFFMUIxMEJEQkEwNzdDMjdDNDQ0RDZDQTk5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVclPTskHxUOz9lZQImmK6wzoS 0mu3ocTS/cqBgqLsxupgxHGYDim56ti36IT+iVOm1R7RlKK0EOpqotlqFLCqIy/g B7cZpdnWE4XSYmJtAbZclqYH78WyWAYwQ/AaAuqk0D/fdCKArg+kxAoChAHOn1s9 lOHIUD8yk044qgN+Ett6yMm5FT89eP9Oj1dcTh219dSf5bJWd0807JDSFDWzIXvR Xgbtl8Qz9PCQf35RVMG6a7SizGWWnO7foNtLfBBr10Usy2AjWM62NCGzWiCXGVU/ A408O/VDueYFGoEcw4uScp15mu4AkIObKEjOFsaj04EOBwEYN/PKZc0YX3e3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyuwCoY4sHhsQvboHfCfERNbKmdIwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9vqR23gIG1Cg0SXJMj/c6uDMj39VDYl5eI 3MdLa/z3w+yurevHecMtfy3NXZ0PGXvkk70sNofIUxOMvRMlB/OuXPUhXmdHq97X 5F5aI+GNjOCQKFckfVSEryvdmFxSP7c48YnCkz2wedjk/kTlS6HjOCDm2PpsB8bJ +fZD8YOfbIadHaGBdLfXm13VSGOqQb749Kq13ugozcJItOhFB/YsLJUuGew3yFDi kR9hrFBVmoWl04GinNfrbatPYw9dVD7hj9ffVUBR2GIf0xGf/NxZIJwgLaKkUZyE 0BSrB+eE5xmDGV5mw9eQYtY9C0/LCKs6CSNTOctfBZ99UT2SIFU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:14 2026 by rpki-client