$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: tfaF4JPRfVlGGuA/Y4hapChi6L0hqQBN0eXQ0fnLs2A= Subject key identifier: 5A:10:71:5F:A5:09:1A:80:38:C1:11:43:4B:CE:69:D4:B2:E1:11:B0 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 0B648B082A52DB6E6552F64712B3717746F273FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: CB Signing time: Mon 02 Mar 2026 00:51:32 +0000 Manifest this update: Mon 02 Mar 2026 00:46:32 +0000 Manifest next update: Thu 05 Mar 2026 05:11:32 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: bo0Pn6e/sCUBsIsRVcCcFt8k2oNFHwvpAaCrWtKA9W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:64:8b:08:2a:52:db:6e:65:52:f6:47:12:b3:71:77:46:f2:73:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Mar 2 00:46:32 2026 GMT Not After : Mar 5 05:11:32 2026 GMT Subject: CN=5A10715FA5091A8038C111434BCE69D4B2E111B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:e3:89:fa:06:aa:46:b9:db:ad:63:5f:c0: a2:12:a6:0b:93:19:13:b8:de:32:ac:73:65:8b:4c: c9:46:7c:ca:1c:07:d5:97:05:b4:bf:49:24:49:f5: b1:bb:95:bb:a6:3c:c1:20:59:c9:f6:ad:b3:b5:a7: 09:40:b6:b7:a3:b8:0c:05:d6:53:44:01:0b:26:f6: 66:98:64:1b:cb:be:03:bf:52:93:74:0c:1f:f2:17: 37:6e:8f:10:fc:b5:62:1d:30:f6:d4:0f:5b:1a:7f: 11:04:64:c0:9b:f9:aa:bf:ea:f4:26:a9:1b:b9:2a: e8:64:12:36:d5:91:0a:da:4b:6e:08:c4:85:c7:d0: b3:91:b5:02:d4:6f:d0:e3:17:d2:2e:39:31:0d:e8: 91:03:54:20:44:b2:00:87:32:99:92:df:ab:e4:4f: 65:85:8a:cd:07:33:7a:f5:04:45:ef:35:fd:2f:c3: c9:b0:f3:38:fd:e5:94:15:6e:2a:8d:9d:dd:a1:8d: 45:dc:b7:ad:16:2f:97:3e:b5:c4:7f:f6:75:4a:2c: cf:65:48:0d:f1:3a:47:27:72:1f:27:af:00:dd:fb: c1:a6:ba:9c:89:19:ee:c8:95:51:d1:1f:ca:6b:45: 06:fa:ad:8a:70:a0:94:38:36:12:18:32:b2:6b:8a: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:10:71:5F:A5:09:1A:80:38:C1:11:43:4B:CE:69:D4:B2:E1:11:B0 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3c:ad:f1:72:0e:ac:c5:9e:55:04:77:b5:30:7e:40:1b:fe: b6:4a:4c:8c:91:f5:27:d6:0a:e4:e7:5a:19:01:64:39:a6:78: c0:45:0a:ae:e8:6e:56:11:eb:40:2f:bf:8b:70:4c:37:fb:46: 9e:60:e3:c4:87:55:75:ef:bf:5b:25:06:e8:c4:42:71:a6:9f: 2d:26:ba:23:bc:06:15:7b:a2:0c:2c:da:4e:ae:8b:f9:cd:02: c3:28:c7:01:71:17:1a:f4:66:22:5b:22:78:89:5f:e7:d9:bb: 43:a3:1d:2b:0a:fa:5b:e0:b3:0f:a0:e7:32:5c:9d:f2:24:6f: 9c:70:b3:5d:ed:46:c5:d0:d1:8d:e6:79:f4:a2:69:47:b6:a7: 13:41:e7:72:2c:c9:a9:68:8a:00:ce:68:6b:cb:e4:e9:2e:b1: b7:f3:8f:87:f6:68:d1:4d:df:ae:c6:5d:bc:fe:e3:3c:82:51: fb:8b:cf:c5:22:3c:c1:2f:3f:6c:c3:fc:1d:99:d9:4d:09:ae: dd:b2:f2:0b:60:13:88:20:19:bf:f6:6c:97:4b:77:4b:31:4d: 32:56:fa:36:71:6e:11:23:d2:87:11:a9:6b:78:df:4f:db:32: 96:e9:7e:8e:b6:a8:4e:78:f9:e2:9d:4c:4d:45:63:d5:ca:ed: d8:08:d1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2SLCCpS225lUvZHErNxd0byc/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNjAzMDIwMDQ2MzJaFw0yNjAzMDUwNTExMzJaMDMxMTAvBgNV BAMTKDVBMTA3MTVGQTUwOTFBODAzOEMxMTE0MzRCQ0U2OUQ0QjJFMTExQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYOOJ+gaqRrnbrWNfwKISpguT GRO43jKsc2WLTMlGfMocB9WXBbS/SSRJ9bG7lbumPMEgWcn2rbO1pwlAtrejuAwF 1lNEAQsm9maYZBvLvgO/UpN0DB/yFzdujxD8tWIdMPbUD1safxEEZMCb+aq/6vQm qRu5KuhkEjbVkQraS24IxIXH0LORtQLUb9DjF9IuOTEN6JEDVCBEsgCHMpmS36vk T2WFis0HM3r1BEXvNf0vw8mw8zj95ZQVbiqNnd2hjUXct60WL5c+tcR/9nVKLM9l SA3xOkcnch8nrwDd+8GmupyJGe7IlVHRH8prRQb6rYpwoJQ4NhIYMrJrio3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWhBxX6UJGoA4wRFDS85p1LLhEbAwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk8rfFyDqzFnlUEd7UwfkAb/rZKTIyR9SfW CuTnWhkBZDmmeMBFCq7oblYR60Avv4twTDf7Rp5g48SHVXXvv1slBujEQnGmny0m uiO8BhV7ogws2k6ui/nNAsMoxwFxFxr0ZiJbIniJX+fZu0OjHSsK+lvgsw+g5zJc nfIkb5xws13tRsXQ0Y3mefSiaUe2pxNB53IsyaloigDOaGvL5Okusbfzj4f2aNFN 367GXbz+4zyCUfuLz8UiPMEvP2zD/B2Z2U0Jrt2y8gtgE4ggGb/2bJdLd0sxTTJW +jZxbhEj0ocRqWt430/bMpbpfo62qE54+eKdTE1FY9XK7dgI0aE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:03 2026 by rpki-client