$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: V9qDPHrbZX9wACkazHTSKXZyZVRhzItRo/ynaY8bHKU= Subject key identifier: 29:89:0D:FB:E8:33:AB:D6:9D:C6:6C:5F:08:82:1A:F9:6D:58:BC:97 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 3E448E4B4E90E3D066619160FD8FF147B7F3BC03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 13:11:15 +0000 Manifest this update: Sun 01 Mar 2026 13:06:15 +0000 Manifest next update: Wed 04 Mar 2026 14:53:15 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=) 2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: 0AU0i0Rl+wRWqNHE54iBzQNk/gfBIgwVk/g046Ci9R8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:44:8e:4b:4e:90:e3:d0:66:61:91:60:fd:8f:f1:47:b7:f3:bc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: Mar 1 13:06:15 2026 GMT Not After : Mar 4 14:53:15 2026 GMT Subject: CN=29890DFBE833ABD69DC66C5F08821AF96D58BC97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:3d:f2:4f:ba:47:9d:39:17:c6:92:59:a7: 2a:75:36:90:cb:8c:49:66:f7:dc:da:20:87:91:2c: 18:9f:e0:2a:7f:3c:f4:3a:47:a7:db:4b:9f:39:54: 16:33:7d:ab:7a:6c:41:c9:dd:79:49:0a:d5:b3:cd: e0:e3:60:41:07:cb:d9:17:97:84:72:d5:1e:6a:25: d4:b0:54:67:e5:19:8b:62:4d:21:76:3a:91:7e:df: 6e:67:ce:da:55:0c:6a:06:3c:55:b1:b1:40:b3:57: c6:5e:06:7a:18:84:3a:ad:65:5b:c4:66:a9:f5:cc: 33:50:ae:0d:ba:f9:db:b1:bd:cb:0f:25:27:64:f0: f0:5d:99:2d:00:00:e5:36:fc:0a:56:54:c1:88:b2: e6:ac:b6:1f:43:c9:1d:69:9f:9a:4a:9e:e9:f9:a9: 69:3e:02:00:60:00:06:16:80:31:e5:f4:57:12:57: 19:22:ec:ed:f4:f9:2f:2c:da:0b:a0:67:a7:d7:fc: 8c:30:1e:e1:d9:f8:a3:26:18:fc:71:00:82:84:b9: 8c:92:7c:42:25:68:4e:f5:b9:de:52:96:63:ac:df: 7d:1d:cf:c7:b6:71:bf:e1:2c:e9:a5:33:39:63:d3: 6e:f4:54:51:b6:e9:93:cf:eb:ff:1b:1e:a8:cc:2f: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:0D:FB:E8:33:AB:D6:9D:C6:6C:5F:08:82:1A:F9:6D:58:BC:97 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a5:12:62:69:00:1e:e2:c8:8d:90:93:f4:25:aa:c2:ee:8d: 63:94:11:ef:9c:fe:63:d0:8d:28:d6:8c:1e:ae:87:fb:1a:29: f9:42:17:09:fd:5b:34:17:5d:b6:8f:a0:8e:3e:e7:1b:2a:7b: 62:1d:d6:5b:15:d2:d1:05:6f:fb:29:bf:54:1f:44:86:91:d8: 12:23:8a:20:28:ea:cb:69:d9:dd:57:a0:70:3e:31:0b:60:6c: 4e:51:8b:2b:74:7a:76:ee:43:c0:08:07:dc:c0:b1:31:2a:a9: 8c:a2:af:a1:94:de:d2:d4:f0:3f:cc:d5:89:7f:35:b3:cf:0a: 03:9e:b2:5d:a8:62:1f:63:fc:f4:fe:75:1c:51:3b:6a:27:89: 7c:ae:31:94:5d:2f:af:cd:06:56:b5:e4:6e:80:a3:6c:67:3e: de:83:d8:4d:36:13:e3:f1:91:ee:3e:ad:e0:94:a2:51:08:3d: cf:ba:dd:d2:90:3d:6f:87:1a:cc:cb:ed:b1:a5:2a:7f:b8:77: 61:89:b2:41:25:64:75:40:d7:63:2d:f1:14:b6:46:fd:f5:ef: 61:ed:fe:a6:d2:ac:16:58:1f:c9:db:86:f5:69:d7:c6:e2:06: 9f:8a:7d:c5:9b:bd:e3:a2:7b:6b:7a:34:6f:59:fa:dd:ac:1c: 1d:f9:e1:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkSOS06Q49BmYZFg/Y/xR7fzvAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNjAzMDExMzA2MTVaFw0yNjAzMDQxNDUzMTVaMDMxMTAvBgNV BAMTKDI5ODkwREZCRTgzM0FCRDY5REM2NkM1RjA4ODIxQUY5NkQ1OEJDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhrT3yT7pHnTkXxpJZpyp1NpDL jElm99zaIIeRLBif4Cp/PPQ6R6fbS585VBYzfat6bEHJ3XlJCtWzzeDjYEEHy9kX l4Ry1R5qJdSwVGflGYtiTSF2OpF+325nztpVDGoGPFWxsUCzV8ZeBnoYhDqtZVvE Zqn1zDNQrg26+duxvcsPJSdk8PBdmS0AAOU2/ApWVMGIsuasth9DyR1pn5pKnun5 qWk+AgBgAAYWgDHl9FcSVxki7O30+S8s2gugZ6fX/IwwHuHZ+KMmGPxxAIKEuYyS fEIlaE71ud5SlmOs330dz8e2cb/hLOmlMzlj0270VFG26ZPP6/8bHqjML7jLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYkN++gzq9adxmxfCIIa+W1YvJcwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKelEmJpAB7iyI2Qk/QlqsLujWOUEe+c/mPQ jSjWjB6uh/saKflCFwn9WzQXXbaPoI4+5xsqe2Id1lsV0tEFb/spv1QfRIaR2BIj iiAo6stp2d1XoHA+MQtgbE5Riyt0enbuQ8AIB9zAsTEqqYyir6GU3tLU8D/M1Yl/ NbPPCgOesl2oYh9j/PT+dRxRO2oniXyuMZRdL6/NBla15G6Ao2xnPt6D2E02E+Px ke4+reCUolEIPc+63dKQPW+HGszL7bGlKn+4d2GJskElZHVA12Mt8RS2Rv3172Ht /qbSrBZYH8nbhvVp18biBp+KfcWbveOie2t6NG9Z+t2sHB354do= -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:01 2026 by rpki-client