$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: oaW8uRADpPqRccm8gZGI3ACJVwTrnMSiqZJoipN+9Y0= Subject key identifier: 89:E0:9C:13:48:CE:74:D4:58:70:66:A6:3D:AD:AF:A9:75:0F:A9:9E Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 60F4EAB16D6DA378DD980146C9F1E0B5EF4DB3F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 0531 Signing time: Sun 01 Mar 2026 02:30:58 +0000 Manifest this update: Sun 01 Mar 2026 02:25:58 +0000 Manifest next update: Wed 04 Mar 2026 11:55:58 +0000 Files and hashes: 1: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: XIQ/lQWer2x/1W1XBHKNLMW19qN6bWGcY/8CJlO5tmY=) 2: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: 1oSAlGyCAQ5BsCDikGrzZ8Xay1TMu0rXb0E3UWwkSO0=) 3: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: SREiQzAjfVMpOJnEfnQMUDFShy+UOiOi5qWZd3X3Wts=) 4: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: JFklXy9Gvw2Nxt2Yl+RP6eZife+jI3BoEqp9xPkf0EA=) 5: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: Q46pxbm+TVjkz99t2lUyFhkKtMbUjt5MtTd3GxK/1m0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f4:ea:b1:6d:6d:a3:78:dd:98:01:46:c9:f1:e0:b5:ef:4d:b3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Mar 1 02:25:58 2026 GMT Not After : Mar 4 11:55:58 2026 GMT Subject: CN=89E09C1348CE74D4587066A63DADAFA9750FA99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:64:f4:5b:8d:8e:59:f9:0f:c3:6a:3d:91: 36:b1:87:b9:06:00:23:95:5a:d5:d5:7e:71:18:e5: 12:fc:b4:04:3d:cb:e6:dd:22:c3:04:54:68:ec:3e: e2:ef:69:7f:aa:03:da:d0:53:bf:0d:87:51:2d:fe: 93:ad:6e:76:b5:5a:d1:27:c4:88:8f:d3:b4:a3:ce: c8:5b:aa:a4:36:ec:37:ef:71:44:43:da:9d:35:00: 40:65:f5:c5:b4:cc:61:dc:7d:a8:5c:de:60:7d:80: a3:6b:9e:ed:1e:91:4f:85:83:02:6a:7d:c2:ed:3f: d7:eb:09:a0:49:aa:87:43:e5:c7:af:b2:81:fa:d6: 7f:ad:25:fa:7f:ae:dd:ee:49:06:f8:6d:60:c4:ee: f3:4b:03:21:b4:7d:a0:10:69:88:62:70:f4:7d:1c: c1:93:e8:dc:4b:82:43:b9:d0:df:16:17:da:7c:90: 0e:02:f8:15:bb:a3:4d:a3:35:62:4b:9d:02:a1:62: 72:a8:08:b5:d0:f2:9f:c9:f5:90:ab:1a:70:a1:a6: af:59:55:ad:3f:53:fc:c9:52:10:1b:87:a6:a0:01: 21:69:17:4f:81:b3:57:71:5c:e9:c0:ce:b0:a1:75: 3f:f0:0a:0b:0d:4a:fa:1d:36:32:f3:22:8a:6f:27: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E0:9C:13:48:CE:74:D4:58:70:66:A6:3D:AD:AF:A9:75:0F:A9:9E X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b9:9c:9a:f9:b4:80:cc:7f:e2:7d:b7:7d:22:80:af:24:58: 76:b1:dc:19:46:2d:cb:48:ae:be:a4:f7:25:26:f3:38:d1:83: 73:11:35:05:8e:80:2a:4a:6a:3b:e9:7a:17:0e:e3:78:56:12: 6b:75:76:b3:a4:a7:d9:72:9f:11:81:8a:c1:ad:be:ee:ab:3d: ad:28:e8:f9:d2:54:05:d8:c4:2e:3f:a4:1b:f4:18:ea:04:3a: b4:96:92:09:7d:62:08:8f:7b:63:72:a1:7c:83:c1:79:57:58: d1:7e:2d:fa:31:14:c0:fd:56:92:c9:4f:00:de:55:e9:cf:3b: ca:3f:9f:3c:8a:a9:49:ea:ff:f8:39:1c:75:97:26:70:69:43: 56:e4:4c:23:61:6b:7a:7e:10:fa:7e:8f:3f:70:f0:cf:d3:e8: dc:a0:b8:28:d3:5c:8a:4d:31:0e:8e:a4:d6:34:4b:65:4f:a5: 8f:bf:3d:dc:d1:9b:9f:9f:50:2d:fe:0b:d0:1b:4b:fe:7b:89: f6:b9:d2:a9:78:5f:4a:2b:d9:bf:ab:23:fa:97:98:45:17:08: 3f:c7:68:ab:b1:3f:4d:d6:6c:88:07:a4:f6:71:bc:84:0c:19: 2a:ce:46:d9:6c:6e:f9:01:d8:65:48:a8:e9:f7:1e:03:f9:26: f2:5c:ff:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPTqsW1to3jdmAFGyfHgte9Ns/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNjAzMDEwMjI1NThaFw0yNjAzMDQxMTU1NThaMDMxMTAvBgNV BAMTKDg5RTA5QzEzNDhDRTc0RDQ1ODcwNjZBNjNEQURBRkE5NzUwRkE5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfGT0W42OWfkPw2o9kTaxh7kG ACOVWtXVfnEY5RL8tAQ9y+bdIsMEVGjsPuLvaX+qA9rQU78Nh1Et/pOtbna1WtEn xIiP07SjzshbqqQ27DfvcURD2p01AEBl9cW0zGHcfahc3mB9gKNrnu0ekU+FgwJq fcLtP9frCaBJqodD5cevsoH61n+tJfp/rt3uSQb4bWDE7vNLAyG0faAQaYhicPR9 HMGT6NxLgkO50N8WF9p8kA4C+BW7o02jNWJLnQKhYnKoCLXQ8p/J9ZCrGnChpq9Z Va0/U/zJUhAbh6agASFpF0+Bs1dxXOnAzrChdT/wCgsNSvodNjLzIopvJz47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUieCcE0jOdNRYcGamPa2vqXUPqZ4wHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEW5nJr5tIDMf+J9t30igK8kWHax3BlGLctI rr6k9yUm8zjRg3MRNQWOgCpKajvpehcO43hWEmt1drOkp9lynxGBisGtvu6rPa0o 6PnSVAXYxC4/pBv0GOoEOrSWkgl9YgiPe2NyoXyDwXlXWNF+LfoxFMD9VpLJTwDe VenPO8o/nzyKqUnq//g5HHWXJnBpQ1bkTCNha3p+EPp+jz9w8M/T6NyguCjTXIpN MQ6OpNY0S2VPpY+/PdzRm5+fUC3+C9AbS/57ifa50ql4X0or2b+rI/qXmEUXCD/H aKuxP03WbIgHpPZxvIQMGSrORtlsbvkB2GVIqOn3HgP5JvJc/6Y= -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:54 2026 by rpki-client