$ rpki-client -vvf repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft File: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft (raw, json) Hash identifier: l2Sah0Il2NRajwsfMnjvSdWKt3Ohph+IjL/WTPT9hDo= Subject key identifier: 8B:47:6F:A3:E6:0B:14:88:1F:54:D1:3E:05:2C:E2:18:45:65:94:72 Authority key identifier: C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 Certificate issuer: /CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Certificate serial: 414A8BA45B9B8099AAEA1519178B229344DE7881 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft Manifest number: 04AB Signing time: Sun 01 Mar 2026 08:52:28 +0000 Manifest this update: Sun 01 Mar 2026 08:47:28 +0000 Manifest next update: Wed 04 Mar 2026 19:06:28 +0000 Files and hashes: 1: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl (hash: sz52Kn5KWnKlQmU8MPxugOjgjD0ckUzN/zwmtZ7nqxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4a:8b:a4:5b:9b:80:99:aa:ea:15:19:17:8b:22:93:44:de:78:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Validity Not Before: Mar 1 08:47:28 2026 GMT Not After : Mar 4 19:06:28 2026 GMT Subject: CN=8B476FA3E60B14881F54D13E052CE21845659472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:27:2e:4b:54:54:dc:fe:69:a2:4f:bd:41: 95:66:31:14:ca:d3:d4:78:b8:90:fc:2b:ad:b8:e0: 27:16:18:48:37:27:3a:56:4f:05:18:17:57:09:49: e2:b0:34:c8:02:a3:71:6f:4b:45:86:1d:f6:5e:55: 78:a1:d7:b7:fc:c0:30:69:53:f0:89:00:e8:fc:f0: 06:4d:d5:af:b7:71:7a:a3:af:ea:c2:07:32:09:34: c1:0b:ac:49:ab:99:5a:98:25:8f:44:9f:88:64:de: 0b:a8:4f:4c:ac:78:97:35:9d:16:7e:aa:82:0c:5f: 06:4e:01:56:1d:38:ea:a8:5a:22:0f:c0:65:f4:fd: 12:19:ff:bd:a0:02:37:c5:6e:9a:49:5d:a7:8e:f4: e9:79:a0:b9:d8:ee:06:4d:e7:bc:eb:da:fa:ce:55: b9:d9:cf:ff:a6:4b:a9:f9:d1:9d:dd:2e:ac:51:d9: a6:3d:3e:24:1e:9a:c9:96:b1:6f:00:0f:a8:10:4d: f4:fc:4f:26:a5:43:59:5e:e7:9a:80:66:4b:34:05: 15:50:c2:43:92:8e:9b:16:e2:a3:e5:96:3a:08:80: 11:eb:87:78:6e:64:44:fa:a7:6b:ad:c8:db:e0:3c: 2b:16:e1:50:b8:a9:c6:72:58:cf:73:c1:7d:e6:d3: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:6F:A3:E6:0B:14:88:1F:54:D1:3E:05:2C:E2:18:45:65:94:72 X509v3 Authority Key Identifier: keyid:C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:5c:f6:e0:fb:56:72:83:95:ea:fd:30:7b:58:74:8f:59:a7: fd:d1:14:14:56:3c:19:25:83:eb:a3:0e:9e:55:0f:f9:73:b5: 9a:92:df:2c:c5:3d:fc:3b:70:66:86:e4:f3:02:90:45:aa:4a: 2a:48:fb:a9:39:b8:09:93:11:5f:6c:8f:a3:90:d5:c5:9a:f2: ca:16:bf:c9:9f:01:70:0b:84:36:db:6e:df:0f:ef:c4:9f:e4: a3:1d:3d:fd:66:d5:7f:d5:50:ce:29:95:1a:9b:4a:7e:44:fd: ec:58:eb:84:ad:71:cd:6d:55:51:a6:06:6c:3a:f5:53:8c:84: c2:bc:ea:79:f3:5b:19:56:88:9e:ab:90:00:bd:5d:83:a0:16: 51:80:27:5f:5e:6e:11:ed:f0:e4:3b:48:fb:fb:55:c6:db:d3: f5:64:74:1c:bd:6c:dd:6a:57:80:e4:3f:f6:ce:a4:78:9b:30: 9e:d1:00:bf:8b:6c:2c:2c:89:bd:20:3c:b6:c3:43:53:c7:d7: 6e:b8:ff:ce:3f:03:14:37:fb:6a:0e:b8:76:ba:56:49:b1:bd: 7f:a9:2e:c6:f1:94:2d:4f:2c:ab:9c:6d:ba:c1:61:97:b3:b8: fa:48:e9:d4:13:da:e5:1b:88:0c:11:4a:b2:c1:7b:66:ba:e9: be:6e:e7:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUqLpFubgJmq6hUZF4sik0TeeIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMw ODlEQjZGMDAeFw0yNjAzMDEwODQ3MjhaFw0yNjAzMDQxOTA2MjhaMDMxMTAvBgNV BAMTKDhCNDc2RkEzRTYwQjE0ODgxRjU0RDEzRTA1MkNFMjE4NDU2NTk0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUScuS1RU3P5pok+9QZVmMRTK 09R4uJD8K6244CcWGEg3JzpWTwUYF1cJSeKwNMgCo3FvS0WGHfZeVXih17f8wDBp U/CJAOj88AZN1a+3cXqjr+rCBzIJNMELrEmrmVqYJY9En4hk3guoT0yseJc1nRZ+ qoIMXwZOAVYdOOqoWiIPwGX0/RIZ/72gAjfFbppJXaeO9Ol5oLnY7gZN57zr2vrO VbnZz/+mS6n50Z3dLqxR2aY9PiQemsmWsW8AD6gQTfT8TyalQ1le55qAZks0BRVQ wkOSjpsW4qPlljoIgBHrh3huZET6p2utyNvgPCsW4VC4qcZyWM9zwX3m01vDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi0dvo+YLFIgfVNE+BSziGEVllHIwHwYDVR0j BBgwFoAUxuk+qmwUPEe7bB8CK1JPnAidtvAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmE2YmNhOC0zNzQxLTQ0ZWYtOGE1Zi0wZTc2YjgwZDQxNDYvMC9DNkU5M0VBQTZD MTQzQzQ3QkI2QzFGMDIyQjUyNEY5QzA4OURCNkYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMwODlE QjZGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRG OUMwODlEQjZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5c9uD7VnKDler9MHtYdI9Zp/3RFBRWPBkl g+ujDp5VD/lztZqS3yzFPfw7cGaG5PMCkEWqSipI+6k5uAmTEV9sj6OQ1cWa8soW v8mfAXALhDbbbt8P78Sf5KMdPf1m1X/VUM4plRqbSn5E/exY64Stcc1tVVGmBmw6 9VOMhMK86nnzWxlWiJ6rkAC9XYOgFlGAJ19ebhHt8OQ7SPv7Vcbb0/VkdBy9bN1q V4DkP/bOpHibMJ7RAL+LbCwsib0gPLbDQ1PH1264/84/AxQ3+2oOuHa6VkmxvX+p LsbxlC1PLKucbbrBYZezuPpI6dQT2uUbiAwRSrLBe2a66b5u5y4= -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:34 2026 by rpki-client