$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: XWUWZeUsB4UC31WsTGVahJu+3izE51/l7gsOIpnrrgA= Subject key identifier: 29:49:49:0D:D9:D2:F3:F1:59:F3:F3:0E:B2:E1:65:1E:96:26:BC:E1 Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 09DB4AB29DA55EA7DF8B05A423DFD684D321D634 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 01F3 Signing time: Mon 02 Mar 2026 13:11:19 +0000 Manifest this update: Mon 02 Mar 2026 13:06:19 +0000 Manifest next update: Thu 05 Mar 2026 19:56:19 +0000 Files and hashes: 1: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: fqgPEiZyAb0hynbzck5IXEWLrXIgp6VsY2Pj0WiOvP0=) 2: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: xIS6sNK0UqeUJFxq14NuNTlsbhpsETkb9gDhOu1ONl8=) 3: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: GWXv/Jcvhsgx5xupvgCdstajkZkqV0dY8SAdabOvJ9g=) 4: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: 1hw/dR7WQoS3PA/6J+Oh8NVkDnLQSW2s3yTTDEg1zqU=) 5: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 2T9anWJYGXV0eFwi77jhWK8yssFnyZlgHKcoPcMUt7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:db:4a:b2:9d:a5:5e:a7:df:8b:05:a4:23:df:d6:84:d3:21:d6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Mar 2 13:06:19 2026 GMT Not After : Mar 5 19:56:19 2026 GMT Subject: CN=2949490DD9D2F3F159F3F30EB2E1651E9626BCE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:b4:2e:8b:d4:84:50:eb:5f:a6:59:74:47: 6e:85:e6:ff:e3:f3:df:19:f6:d6:3a:77:0e:63:27: cd:b3:ec:13:86:58:a3:99:06:a7:f1:d5:07:78:0f: 2a:19:66:b8:9b:02:1c:cb:14:87:b8:0a:bd:3a:24: 8d:d2:8e:c3:ed:f4:f8:7f:37:66:a7:b7:f5:d1:9c: 5d:a9:8a:4c:2f:89:7d:b2:8d:b0:0b:4a:0e:7e:f7: 5e:a3:f2:64:3d:7f:e2:fe:c8:b1:21:b8:e9:da:cd: 23:5d:fa:bf:9b:b8:8a:18:a0:87:05:bf:1d:90:91: 7a:3c:e5:ab:20:e2:5a:a0:f1:6b:04:ee:a0:fd:cd: f8:ff:80:d1:e0:d7:63:a9:1f:3f:ad:66:c4:f2:cd: 70:4a:3f:db:ee:19:ea:7f:68:df:a1:f1:7c:cf:ab: 35:b0:82:7b:06:7e:8d:14:e3:57:ac:fb:c8:62:a3: 83:f7:2d:06:bd:74:01:61:60:57:22:a4:92:62:d4: de:20:2a:aa:ce:d8:60:26:50:fa:b0:e5:7c:e1:48: e2:5e:0a:eb:23:cc:09:ce:2e:6c:1d:d9:15:82:d1: ff:3e:72:3e:98:df:c5:20:03:a5:1b:85:2f:59:0e: 3f:68:b7:a0:3d:d7:f5:22:11:08:5e:6f:75:fc:b6: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:49:0D:D9:D2:F3:F1:59:F3:F3:0E:B2:E1:65:1E:96:26:BC:E1 X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c5:32:e4:f6:f5:cb:ca:1d:59:fc:dc:4c:c8:72:95:6d:4d: bc:38:2f:42:fb:df:7a:98:7d:d9:ce:1f:1d:3c:2d:49:22:84: 20:38:72:a7:33:f6:cb:29:6c:57:f9:d4:4c:a1:d3:1c:ed:e9: db:f7:8a:9c:59:bb:82:13:e4:04:75:65:ea:b7:75:f3:e2:a1: f3:62:89:c1:c9:06:aa:21:33:0d:1b:45:03:65:78:a8:4d:b1: fa:a8:e2:6f:7b:f7:04:e4:f6:96:ba:56:d5:7e:fa:5f:08:71: 94:74:97:1f:0e:60:6a:17:49:5a:db:82:11:60:6b:f3:01:32: fe:12:c1:11:f7:f6:b8:97:49:ec:7b:6b:93:4b:55:08:27:f7: f3:25:2f:54:1f:22:7a:b4:ac:39:9c:d9:7f:8e:4b:5e:4c:af: d0:06:0b:6f:a2:00:c5:59:46:6b:69:2e:ff:6a:15:42:78:f6: 10:2a:dd:4e:77:91:6f:3b:0b:46:07:fe:24:1b:15:ad:c9:71: 78:2a:ee:84:0b:3f:9d:b3:05:a0:fa:81:2e:32:5d:3a:81:7f: 99:77:4f:2f:a6:ee:bd:85:26:70:3d:1d:48:ca:f1:56:29:ef: 21:d0:0b:1e:54:b0:3f:fb:2e:d0:14:cb:85:e1:9e:2c:b8:2a: 2e:51:6f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdtKsp2lXqffiwWkI9/WhNMh1jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNjAzMDIxMzA2MTlaFw0yNjAzMDUxOTU2MTlaMDMxMTAvBgNV BAMTKDI5NDk0OTBERDlEMkYzRjE1OUYzRjMwRUIyRTE2NTFFOTYyNkJDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQrQui9SEUOtfpll0R26F5v/j 898Z9tY6dw5jJ82z7BOGWKOZBqfx1Qd4DyoZZribAhzLFIe4Cr06JI3SjsPt9Ph/ N2ant/XRnF2pikwviX2yjbALSg5+916j8mQ9f+L+yLEhuOnazSNd+r+buIoYoIcF vx2QkXo85asg4lqg8WsE7qD9zfj/gNHg12OpHz+tZsTyzXBKP9vuGep/aN+h8XzP qzWwgnsGfo0U41es+8hio4P3LQa9dAFhYFcipJJi1N4gKqrO2GAmUPqw5XzhSOJe CusjzAnOLmwd2RWC0f8+cj6Y38UgA6UbhS9ZDj9ot6A91/UiEQheb3X8tpjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKUlJDdnS8/FZ8/MOsuFlHpYmvOEwHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvFMuT29cvKHVn83EzIcpVtTbw4L0L733qY fdnOHx08LUkihCA4cqcz9sspbFf51Eyh0xzt6dv3ipxZu4IT5AR1Zeq3dfPiofNi icHJBqohMw0bRQNleKhNsfqo4m979wTk9pa6VtV++l8IcZR0lx8OYGoXSVrbghFg a/MBMv4SwRH39riXSex7a5NLVQgn9/MlL1QfInq0rDmc2X+OS15Mr9AGC2+iAMVZ RmtpLv9qFUJ49hAq3U53kW87C0YH/iQbFa3JcXgq7oQLP52zBaD6gS4yXTqBf5l3 Ty+m7r2FJnA9HUjK8VYp7yHQCx5UsD/7LtAUy4Xhniy4Ki5Rb4M= -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:14 2026 by rpki-client