$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: 9bJ9kKlK7I1s9/A7rL4lISg4CxmVX9BnN1Sedz+0dZQ= Subject key identifier: 5E:A9:2A:FB:69:35:B1:D7:0C:77:F7:38:77:D3:BD:3A:7F:05:FB:5A Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 64020867EE2BAE37775FB2A5F59BF9063C34A25B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: D9 Signing time: Sun 01 Mar 2026 11:41:49 +0000 Manifest this update: Sun 01 Mar 2026 11:36:49 +0000 Manifest next update: Wed 04 Mar 2026 14:49:49 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=) 2: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=) 3: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=) 4: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=) 5: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=) 6: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: fIRVu6zC7VX3M0mnTAa6hCQmG4rYQuG/9VKtoR4LK1w=) 7: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=) 8: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:02:08:67:ee:2b:ae:37:77:5f:b2:a5:f5:9b:f9:06:3c:34:a2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Mar 1 11:36:49 2026 GMT Not After : Mar 4 14:49:49 2026 GMT Subject: CN=5EA92AFB6935B1D70C77F73877D3BD3A7F05FB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:cf:5f:69:8f:e9:94:5c:38:ea:24:48:20: 8c:f2:13:31:2b:d1:d2:53:64:7f:a8:7a:c5:5a:84: bb:0e:03:a3:20:39:7f:f6:a6:70:45:0d:e3:68:72: 9d:60:e2:97:78:fd:bf:ee:e3:cc:60:94:05:db:0d: 80:bb:a5:94:a8:43:1b:ed:45:27:56:fd:b3:cc:b0: 6a:6c:03:9c:11:f5:76:95:9c:ac:fd:73:72:7d:d4: ed:21:3d:56:24:a2:ae:ec:1f:05:14:0f:44:6b:74: d1:6e:4f:41:d4:e6:16:6c:a3:10:0b:7e:7d:3c:f9: 34:11:d4:cb:a4:91:51:88:45:fb:3f:69:b2:c0:2d: 8f:31:6d:a9:c5:54:8a:97:a3:cc:98:71:c4:d4:dc: 41:d4:52:c7:16:f2:cc:e1:72:57:8e:89:23:33:b2: b7:a4:66:07:f8:7f:04:2c:4f:16:bf:f4:18:c9:ec: 2e:e9:08:e4:40:49:27:f7:58:b6:87:5e:ec:e1:9d: fc:34:6e:17:10:38:9c:2d:81:da:36:9f:de:7c:1c: 9c:e3:02:b9:dd:2a:ca:b1:e3:8d:90:05:f8:34:00: db:3b:e9:e7:16:80:62:e1:a5:d6:d4:b0:e0:55:6d: 58:5f:e0:43:ec:d7:1e:e9:aa:96:78:d9:8f:60:f8: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A9:2A:FB:69:35:B1:D7:0C:77:F7:38:77:D3:BD:3A:7F:05:FB:5A X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2d:5c:f1:62:8d:ed:6b:e7:32:4b:bc:60:c2:cf:06:a0:00: 04:43:a0:a9:bb:3c:f7:03:c7:ae:6f:e1:38:5e:5e:a1:24:61: 87:ea:97:8d:5d:c4:0c:88:0f:de:67:36:e3:e7:77:6e:b6:c1: 55:e5:59:7d:65:b2:bb:8e:13:7f:db:f8:64:91:8b:3a:6e:13: 00:44:9e:2c:42:58:3c:70:44:25:40:00:a4:ef:95:25:63:5d: a6:72:b3:51:3f:c5:f0:6e:fc:d0:e7:52:23:33:dc:8b:9d:b9: 21:6b:96:17:de:d3:4b:b1:4c:9c:b7:e3:e2:ce:39:c4:7b:5c: 30:5a:30:cc:83:6d:9a:38:64:3a:8a:6e:5a:24:81:ab:58:6c: 70:a3:10:7d:2a:9a:cf:fc:7f:30:df:81:4f:d0:3e:d9:bf:a8: f0:83:cb:b4:31:52:ec:ce:55:01:f7:01:67:72:99:25:35:34: 21:df:be:6f:73:39:b6:b9:14:ae:2b:76:e3:2a:c7:fb:d7:d2: 5c:ce:2e:23:26:3e:57:44:ee:09:6e:81:74:b9:cb:d8:64:ea: 1a:df:a2:0d:91:49:c7:88:80:a2:f3:c1:bc:59:b4:68:5a:19: 8f:c0:f2:96:9c:48:e5:d2:c9:c3:4d:32:c1:b3:50:77:a7:c6: 85:1a:ce:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAIIZ+4rrjd3X7Kl9Zv5Bjw0olswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNjAzMDExMTM2NDlaFw0yNjAzMDQxNDQ5NDlaMDMxMTAvBgNV BAMTKDVFQTkyQUZCNjkzNUIxRDcwQzc3RjczODc3RDNCRDNBN0YwNUZCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMns9faY/plFw46iRIIIzyEzEr 0dJTZH+oesVahLsOA6MgOX/2pnBFDeNocp1g4pd4/b/u48xglAXbDYC7pZSoQxvt RSdW/bPMsGpsA5wR9XaVnKz9c3J91O0hPVYkoq7sHwUUD0RrdNFuT0HU5hZsoxAL fn08+TQR1MukkVGIRfs/abLALY8xbanFVIqXo8yYccTU3EHUUscW8szhcleOiSMz srekZgf4fwQsTxa/9BjJ7C7pCORASSf3WLaHXuzhnfw0bhcQOJwtgdo2n958HJzj ArndKsqx442QBfg0ANs76ecWgGLhpdbUsOBVbVhf4EPs1x7pqpZ42Y9g+HjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqkq+2k1sdcMd/c4d9O9On8F+1owHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQtXPFije1r5zJLvGDCzwagAARDoKm7PPcD x65v4TheXqEkYYfql41dxAyID95nNuPnd262wVXlWX1lsruOE3/b+GSRizpuEwBE nixCWDxwRCVAAKTvlSVjXaZys1E/xfBu/NDnUiMz3IuduSFrlhfe00uxTJy34+LO OcR7XDBaMMyDbZo4ZDqKblokgatYbHCjEH0qms/8fzDfgU/QPtm/qPCDy7QxUuzO VQH3AWdymSU1NCHfvm9zOba5FK4rduMqx/vX0lzOLiMmPldE7glugXS5y9hk6hrf og2RSceIgKLzwbxZtGhaGY/A8pacSOXSycNNMsGzUHenxoUazuk= -----END CERTIFICATE-----Generated at Mon Mar 2 16:02:14 2026 by rpki-client