$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: ttD0vfvw7N3Jq3qt5Um6ZypkcMKyMujgIeBb3SHwNLE= Subject key identifier: 4C:87:95:AB:BD:85:8E:4A:24:71:92:E6:44:2F:AA:2D:DC:B9:04:12 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 68D33C3648DDF4A1129F562A0B8591514AB869A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 020E Signing time: Mon 02 Mar 2026 07:02:32 +0000 Manifest this update: Mon 02 Mar 2026 06:57:32 +0000 Manifest next update: Thu 05 Mar 2026 15:30:32 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: 9jANHIeAu5etTUQTU6yWL65SG8TzyIOYzHYwMxT191o=) 2: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=) 3: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=) 4: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d3:3c:36:48:dd:f4:a1:12:9f:56:2a:0b:85:91:51:4a:b8:69:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Mar 2 06:57:32 2026 GMT Not After : Mar 5 15:30:32 2026 GMT Subject: CN=4C8795ABBD858E4A247192E6442FAA2DDCB90412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:7d:8c:d0:a9:e4:75:2f:b8:30:b0:cc:10: d2:e0:ef:a0:1a:3d:b3:fa:a8:68:8b:7f:a4:30:f6: fa:f2:11:02:3f:73:48:5b:66:9a:18:f4:de:64:b0: f1:d7:f4:d0:34:d8:34:70:87:c3:30:6a:9e:a7:9e: a4:9a:e7:cc:bb:38:51:11:93:40:d0:a9:f6:45:61: 05:63:5a:2b:de:93:93:84:e7:38:e7:06:df:a5:1b: 2c:e2:9e:8e:4c:fb:50:60:1e:21:ef:7f:12:63:23: 65:28:e7:46:53:de:47:dd:96:45:f4:88:80:e5:fe: ac:6a:7b:6c:54:2a:11:e8:9c:c3:5d:63:85:c9:79: 60:92:94:b6:03:48:7a:b9:56:c0:3c:8b:a2:5b:e0: 4c:aa:61:ec:a0:91:c5:1c:eb:c2:30:2c:54:1e:03: 29:10:d0:1e:51:dd:88:26:3c:9b:2a:de:02:47:10: 3b:d7:b6:17:fe:59:40:5f:b5:75:4c:0f:f7:3f:21: 22:4b:fc:9d:e9:3e:70:aa:e2:38:bb:97:06:d2:92: e0:36:20:91:46:64:c9:40:62:1c:11:51:0e:3c:90: d0:5b:21:85:43:b9:7d:9c:df:40:4a:4f:17:4a:ed: 89:59:32:52:71:2d:8e:f0:d5:07:5f:ba:ed:9e:c5: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:95:AB:BD:85:8E:4A:24:71:92:E6:44:2F:AA:2D:DC:B9:04:12 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:32:e4:10:0e:2d:9f:fd:e1:e8:55:69:83:17:69:ca:74:77: 9b:1d:ed:7f:0f:df:e3:71:ca:65:27:72:3e:c5:c7:3e:e3:e9: 01:88:a9:94:4f:13:65:9b:7c:d7:ca:6b:e7:a1:50:27:36:bb: ea:88:4d:b5:45:f8:97:8f:d9:2e:5d:22:e8:4c:4b:5c:14:56: 16:84:cd:24:46:d8:9d:6c:e4:39:09:c6:06:e7:3e:47:c1:a3: 0e:8a:ba:1d:7e:71:74:95:e7:8d:78:3e:e3:60:fb:47:36:5c: 54:04:5f:7e:0e:50:cf:23:68:fd:80:0e:99:fa:9f:a2:2a:b0: f7:39:a2:ca:c1:d5:33:74:35:63:c1:84:3b:b3:11:91:e4:d4: f9:30:c0:1b:a8:53:5c:fe:d2:5a:19:66:2b:62:96:98:4a:7e: 5c:50:35:d2:97:f5:4d:55:0e:43:d1:18:bf:f6:b0:94:29:b9: 93:0a:18:bf:6d:cd:3a:26:75:11:01:17:ae:71:20:df:ad:f2: 6a:0b:7d:93:0f:76:d9:20:c2:65:d8:91:b6:16:14:85:f5:85: 69:3c:53:52:fd:08:8f:6b:84:db:05:1a:5e:0c:46:6f:c9:72: 1e:5b:38:27:6d:2f:28:0f:4a:f4:6e:25:3b:ba:d4:68:42:d4: be:23:40:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNM8Nkjd9KESn1YqC4WRUUq4aaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNjAzMDIwNjU3MzJaFw0yNjAzMDUxNTMwMzJaMDMxMTAvBgNV BAMTKDRDODc5NUFCQkQ4NThFNEEyNDcxOTJFNjQ0MkZBQTJERENCOTA0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijn2M0KnkdS+4MLDMENLg76Aa PbP6qGiLf6Qw9vryEQI/c0hbZpoY9N5ksPHX9NA02DRwh8Mwap6nnqSa58y7OFER k0DQqfZFYQVjWivek5OE5zjnBt+lGyzino5M+1BgHiHvfxJjI2Uo50ZT3kfdlkX0 iIDl/qxqe2xUKhHonMNdY4XJeWCSlLYDSHq5VsA8i6Jb4EyqYeygkcUc68IwLFQe AykQ0B5R3YgmPJsq3gJHEDvXthf+WUBftXVMD/c/ISJL/J3pPnCq4ji7lwbSkuA2 IJFGZMlAYhwRUQ48kNBbIYVDuX2c30BKTxdK7YlZMlJxLY7w1Qdfuu2exYYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTIeVq72FjkokcZLmRC+qLdy5BBIwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsy5BAOLZ/94ehVaYMXacp0d5sd7X8P3+Nx ymUncj7Fxz7j6QGIqZRPE2WbfNfKa+ehUCc2u+qITbVF+JeP2S5dIuhMS1wUVhaE zSRG2J1s5DkJxgbnPkfBow6Kuh1+cXSV5414PuNg+0c2XFQEX34OUM8jaP2ADpn6 n6IqsPc5osrB1TN0NWPBhDuzEZHk1PkwwBuoU1z+0loZZitilphKflxQNdKX9U1V DkPRGL/2sJQpuZMKGL9tzTomdREBF65xIN+t8moLfZMPdtkgwmXYkbYWFIX1hWk8 U1L9CI9rhNsFGl4MRm/Jch5bOCdtLygPSvRuJTu61GhC1L4jQNc= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:58 2026 by rpki-client