$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: xeXLOtBLWhYkIksf4L3WLo/7/ivTiXIeGqi4e9inaXQ= Subject key identifier: 00:DD:87:82:42:A5:92:07:39:AA:58:FB:7E:F1:D6:F4:95:06:74:B6 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 4F96EAC1DD2913438A0A37426CA6A1606EA8C097 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 026F Signing time: Sun 01 Mar 2026 08:10:58 +0000 Manifest this update: Sun 01 Mar 2026 08:05:58 +0000 Manifest next update: Wed 04 Mar 2026 19:28:58 +0000 Files and hashes: 1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: //+o8fHe6E0loKsGSmkgVyIWp7gWm5okCpSCAbrnfh4=) 2: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: CdpmNA4lDuOYnJvErT/Q61h9nOolgPnEi9MOyYZ7o0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:96:ea:c1:dd:29:13:43:8a:0a:37:42:6c:a6:a1:60:6e:a8:c0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Mar 1 08:05:58 2026 GMT Not After : Mar 4 19:28:58 2026 GMT Subject: CN=00DD878242A5920739AA58FB7EF1D6F4950674B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:e2:07:a6:ad:ac:ad:10:37:ca:8f:25:be: 09:d1:db:00:78:a2:ae:c4:11:99:34:57:c4:67:ad: 70:97:13:71:63:47:e7:0f:14:77:41:87:31:9d:d5: 2e:68:03:27:da:0a:e9:34:14:76:69:c3:db:9a:f3: 8a:ef:8d:3d:f4:61:dc:c3:6a:f9:0c:f9:4f:fe:83: 16:0e:c8:25:77:41:2b:cc:cc:82:f2:13:1c:f2:53: 8e:21:35:b8:2a:12:98:84:02:a0:96:c1:40:68:4c: ca:3f:fc:0f:68:ec:f6:c6:ef:1d:97:38:40:8f:fe: 24:08:05:60:32:05:5c:62:46:21:57:f6:a7:ff:76: b7:ee:6b:6e:ca:71:26:3c:5a:15:c7:b0:d7:13:7d: 4e:5a:5e:63:c9:f8:6c:db:f7:37:f3:66:1d:7a:9b: 94:62:8b:9e:a6:08:8e:25:97:92:ce:78:13:f3:c5: 30:27:82:ef:30:b7:01:e4:9a:44:87:a4:a1:72:95: 15:74:5f:87:90:cc:8c:84:75:a1:46:3c:d1:49:33: d4:73:7f:9d:c8:98:11:b1:d4:67:43:92:1a:2c:99: 39:07:93:1b:bb:1d:0f:94:dc:de:41:26:86:f4:5c: d0:78:24:ab:df:13:21:85:3c:3c:42:b3:38:06:a8: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DD:87:82:42:A5:92:07:39:AA:58:FB:7E:F1:D6:F4:95:06:74:B6 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6d:dd:70:ec:f2:20:4f:e8:b2:c7:be:29:a8:18:c7:a5:4e: 23:4b:c8:94:f5:f0:70:e0:b2:75:1a:48:92:61:3e:35:49:dc: b5:dc:b5:eb:e0:67:a0:ad:55:45:32:8e:5f:35:44:18:06:d3: ca:a6:46:af:d9:bd:ae:4b:0d:86:df:9f:cf:3c:14:4f:a6:2a: 9c:21:9d:94:2a:a0:70:8c:25:6b:32:12:cd:b0:be:49:50:08: ec:21:f6:99:fa:ba:c8:29:f8:d6:74:21:26:57:6e:df:3c:bf: dc:24:59:84:0c:f0:1a:6d:6a:c1:34:7b:bc:83:b6:36:ec:2d: 0b:99:66:8e:4e:e7:2b:30:95:59:1f:74:73:5b:5a:36:9b:7e: a1:94:25:40:d9:c6:a9:cc:ec:c5:a1:0e:ab:cf:23:c4:36:cb: ab:ef:c8:e1:9c:e6:2f:43:05:55:f9:40:1d:35:95:80:78:99: dc:a8:50:ed:5b:52:2b:a7:ef:36:c7:c0:33:01:5a:a4:07:cd: 1e:c9:e9:1b:d5:5b:3f:b7:ca:59:69:ab:47:bc:2f:d5:88:60: 2c:8f:7c:f9:06:09:14:7c:fc:2b:f5:02:0d:1a:4b:f2:58:8a: ed:b9:05:28:d7:f5:0e:e1:d6:86:92:aa:a8:c8:c5:1a:72:09: 4f:79:d7:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5bqwd0pE0OKCjdCbKahYG6owJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNjAzMDEwODA1NThaFw0yNjAzMDQxOTI4NThaMDMxMTAvBgNV BAMTKDAwREQ4NzgyNDJBNTkyMDczOUFBNThGQjdFRjFENkY0OTUwNjc0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYOIHpq2srRA3yo8lvgnR2wB4 oq7EEZk0V8RnrXCXE3FjR+cPFHdBhzGd1S5oAyfaCuk0FHZpw9ua84rvjT30YdzD avkM+U/+gxYOyCV3QSvMzILyExzyU44hNbgqEpiEAqCWwUBoTMo//A9o7PbG7x2X OECP/iQIBWAyBVxiRiFX9qf/drfua27KcSY8WhXHsNcTfU5aXmPJ+Gzb9zfzZh16 m5Rii56mCI4ll5LOeBPzxTAngu8wtwHkmkSHpKFylRV0X4eQzIyEdaFGPNFJM9Rz f53ImBGx1GdDkhosmTkHkxu7HQ+U3N5BJob0XNB4JKvfEyGFPDxCszgGqMhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAN2HgkKlkgc5qlj7fvHW9JUGdLYwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlt3XDs8iBP6LLHvimoGMelTiNLyJT18HDg snUaSJJhPjVJ3LXctevgZ6CtVUUyjl81RBgG08qmRq/Zva5LDYbfn888FE+mKpwh nZQqoHCMJWsyEs2wvklQCOwh9pn6usgp+NZ0ISZXbt88v9wkWYQM8BptasE0e7yD tjbsLQuZZo5O5yswlVkfdHNbWjabfqGUJUDZxqnM7MWhDqvPI8Q2y6vvyOGc5i9D BVX5QB01lYB4mdyoUO1bUiun7zbHwDMBWqQHzR7J6RvVWz+3yllpq0e8L9WIYCyP fPkGCRR8/Cv1Ag0aS/JYiu25BSjX9Q7h1oaSqqjIxRpyCU951+0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:56:38 2026 by rpki-client