$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: aHqB8b5LLnlQ/IKjhNXqkRIW2FdDxA32cPpZ56sSeNo= Subject key identifier: 4F:97:84:63:18:C0:B9:53:4C:EC:64:D4:5F:68:A9:87:8F:F6:49:E1 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 595FE8AAF45BE67214E573F6DDF412E1D1FA5205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: 0128 Signing time: Sat 28 Feb 2026 04:42:28 +0000 Manifest this update: Sat 28 Feb 2026 04:37:28 +0000 Manifest next update: Tue 03 Mar 2026 05:59:28 +0000 Files and hashes: 1: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 4: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: EG4NZNca2bP0WCBQwj4n0pfkzeDo3GMKtHNC8d4MjEw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 05:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5f:e8:aa:f4:5b:e6:72:14:e5:73:f6:dd:f4:12:e1:d1:fa:52:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Feb 28 04:37:28 2026 GMT Not After : Mar 3 05:59:28 2026 GMT Subject: CN=4F97846318C0B9534CEC64D45F68A9878FF649E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:4a:bf:65:cf:f0:8b:37:b6:00:a6:8d:e6: cf:95:3c:d9:d7:21:78:bc:df:94:7d:c7:0d:29:19: fd:49:1a:c1:bb:aa:6a:0f:f5:01:12:d4:4f:42:4c: be:5f:0c:b5:c5:c5:0c:16:30:cf:39:84:e4:b3:58: 83:d4:49:75:a6:5d:0b:77:a6:f6:1d:6e:55:17:ea: 93:a2:ee:50:86:c7:56:9f:a4:7f:3e:10:7e:6b:e4: 26:05:d6:0f:e3:42:f8:6d:c2:78:c0:f6:5e:31:a1: 44:cc:cf:2d:9a:a0:d0:c8:0e:10:d5:13:70:12:f9: 42:1a:63:5b:44:5e:fa:55:77:6c:6f:97:ad:2f:a0: 13:0b:db:fa:f1:80:01:a6:0e:81:d1:4f:a0:fe:8b: 3b:8d:b0:7d:43:95:e7:44:54:70:f0:bb:1f:3c:d1: 7e:b3:cc:49:04:d4:a3:1d:7e:a9:ae:78:94:1e:9c: 1f:3b:38:25:57:c9:8a:1e:05:5d:63:52:07:5b:5c: ee:25:ae:41:5e:13:1d:5a:77:f2:41:90:c6:70:ac: 73:b3:d9:81:84:aa:e5:70:ce:84:5b:95:d1:c1:f3: 00:5c:07:d2:57:0e:2e:a4:70:f9:2f:ac:b4:bc:fb: 4b:da:80:b0:8f:f8:4f:2c:d8:64:73:d1:69:b8:9b: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:84:63:18:C0:B9:53:4C:EC:64:D4:5F:68:A9:87:8F:F6:49:E1 X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ef:e9:26:20:0f:83:a7:f8:1d:ad:9d:a3:6f:6b:3b:ac:19: fa:60:fa:16:2d:79:24:a6:ba:37:d0:be:88:90:17:84:8b:4a: 44:31:ad:e4:95:57:6e:d9:25:eb:6a:de:9c:b7:2e:4f:1b:29: d4:a5:62:a0:26:02:36:85:fb:72:89:85:2e:d9:0b:13:0d:b8: c2:14:fa:21:ed:b8:8a:d9:0e:6a:02:0d:9b:7a:5c:14:36:04: ee:e3:6f:87:df:98:8d:63:dd:42:11:d4:78:68:61:6a:2d:f5: 2f:72:ff:22:ce:6e:94:0a:c4:b5:6e:e3:37:38:e1:2e:e2:a1: 21:e1:93:fe:f7:26:c1:06:ea:80:df:82:ba:19:c2:df:59:1d: e5:cd:78:64:b7:23:42:a1:ff:5e:22:2b:87:e1:ce:e6:36:41: a8:bb:77:4f:73:63:20:52:10:93:98:25:e3:f9:31:83:d4:84: 4c:10:18:52:41:a9:70:f5:82:98:f1:44:28:07:12:86:09:5e: 68:a4:3f:c5:c7:8d:9f:97:3d:d6:39:0f:63:45:4e:55:93:f3: 61:66:7a:82:e4:e1:1c:de:97:e9:16:af:0b:a7:a3:97:28:1a: 8b:41:d8:28:f3:3d:7b:49:09:d4:6b:51:b5:37:f2:35:4b:c8: dd:c7:4f:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWV/oqvRb5nIU5XP23fQS4dH6UgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNjAyMjgwNDM3MjhaFw0yNjAzMDMwNTU5MjhaMDMxMTAvBgNV BAMTKDRGOTc4NDYzMThDMEI5NTM0Q0VDNjRENDVGNjhBOTg3OEZGNjQ5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8kq/Zc/wize2AKaN5s+VPNnX IXi835R9xw0pGf1JGsG7qmoP9QES1E9CTL5fDLXFxQwWMM85hOSzWIPUSXWmXQt3 pvYdblUX6pOi7lCGx1afpH8+EH5r5CYF1g/jQvhtwnjA9l4xoUTMzy2aoNDIDhDV E3AS+UIaY1tEXvpVd2xvl60voBML2/rxgAGmDoHRT6D+izuNsH1DledEVHDwux88 0X6zzEkE1KMdfqmueJQenB87OCVXyYoeBV1jUgdbXO4lrkFeEx1ad/JBkMZwrHOz 2YGEquVwzoRbldHB8wBcB9JXDi6kcPkvrLS8+0vagLCP+E8s2GRz0Wm4m/NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT5eEYxjAuVNM7GTUX2iph4/2SeEwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPv6SYgD4On+B2tnaNvazusGfpg+hYteSSm ujfQvoiQF4SLSkQxreSVV27ZJetq3py3Lk8bKdSlYqAmAjaF+3KJhS7ZCxMNuMIU +iHtuIrZDmoCDZt6XBQ2BO7jb4ffmI1j3UIR1HhoYWot9S9y/yLObpQKxLVu4zc4 4S7ioSHhk/73JsEG6oDfgroZwt9ZHeXNeGS3I0Kh/14iK4fhzuY2Qai7d09zYyBS EJOYJeP5MYPUhEwQGFJBqXD1gpjxRCgHEoYJXmikP8XHjZ+XPdY5D2NFTlWT82Fm eoLk4Rzel+kWrwuno5coGotB2CjzPXtJCdRrUbU38jVLyN3HT5Y= -----END CERTIFICATE-----Generated at Mon Mar 2 00:23:38 2026 by rpki-client