$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: eLfwlSCP4KALZZvZ6wFZJGBrDfFQKaiMSoglEb3SGuE= Subject key identifier: 3F:AF:FA:2A:E2:1C:20:C3:24:76:98:68:DA:20:54:59:50:41:43:E9 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 4A6A24899DF2E2F22D2385D813FA57EF2A55052E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 02C4 Signing time: Sat 28 Feb 2026 10:11:35 +0000 Manifest this update: Sat 28 Feb 2026 10:06:35 +0000 Manifest next update: Tue 03 Mar 2026 17:23:35 +0000 Files and hashes: 1: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: dXKtlNf/fOeN7qL4rBGxmj3SEa9TN+CRtCLTNT+SFTg=) 2: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=) 3: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=) 4: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=) 5: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=) 6: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=) 7: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=) 8: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=) 9: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6a:24:89:9d:f2:e2:f2:2d:23:85:d8:13:fa:57:ef:2a:55:05:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Feb 28 10:06:35 2026 GMT Not After : Mar 3 17:23:35 2026 GMT Subject: CN=3FAFFA2AE21C20C324769868DA205459504143E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:26:30:93:1c:82:84:fe:09:28:db:0d:70: ba:8a:d0:c4:e1:0a:a7:12:81:76:b0:c1:28:dc:f5: e7:c7:46:fa:d5:4a:c2:fc:35:6e:5f:b8:ea:dd:9d: 99:7d:02:be:9f:4f:26:6f:19:6f:01:1f:a2:44:68: ec:88:d8:12:9b:1a:68:d8:ab:41:14:d9:cf:6b:2d: 6a:06:61:e6:cc:38:db:ab:50:76:c7:a7:91:4e:f1: 9f:c6:36:9e:e1:73:a1:85:e9:83:75:22:b6:a5:da: 9e:54:ad:be:aa:a1:c8:7d:4d:b5:a6:ba:48:75:59: 71:d0:41:38:38:0c:4f:54:ff:31:43:4f:45:93:97: 3e:7a:63:6e:26:2d:54:0e:c0:17:14:d4:37:51:67: dd:b7:a8:fe:0c:5a:83:04:8b:52:90:2a:5f:3e:ac: ae:8f:8a:64:e9:f9:0c:a7:a8:09:aa:a5:0e:93:26: 5b:44:36:6f:ae:e3:ba:b9:13:80:05:1f:ad:76:cc: ff:c6:5f:a2:18:c0:27:5e:e6:d7:1b:43:61:e5:6c: d1:7d:7e:79:51:b1:35:03:a1:c9:ec:32:53:ae:c4: dc:61:67:73:27:56:2d:54:4a:b6:ec:05:d5:36:1a: 47:22:55:bd:ee:9d:53:45:db:2c:7b:bd:a5:e5:d2: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AF:FA:2A:E2:1C:20:C3:24:76:98:68:DA:20:54:59:50:41:43:E9 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e6:c9:92:03:4e:4f:15:c9:47:39:e0:a2:df:1c:a9:db:26: 59:90:74:af:20:9e:6e:49:25:01:ac:f0:74:7d:96:cd:62:81: 33:01:4c:12:22:87:ce:cb:5f:5b:e1:80:c9:56:4c:22:fd:7a: c1:25:36:cd:15:db:ad:21:26:c9:8b:e1:ec:00:79:50:ba:2a: 92:ba:1d:97:31:1b:2e:2a:b6:c5:25:35:87:20:75:8a:f0:0e: 34:81:ec:34:0c:d9:4b:0b:aa:83:d6:62:29:11:20:f7:00:d9: 37:5f:20:6e:dc:00:05:36:5e:6c:bc:cf:ba:fa:01:fc:d4:cb: 98:89:72:6c:6c:25:d2:02:9f:f5:c8:44:a8:55:99:a1:57:28: 0a:f6:60:89:df:b0:17:2d:de:57:68:6e:ee:ac:8e:8f:69:f2: 63:d5:7d:5f:8a:a6:a3:43:d1:13:39:e4:83:0b:81:f8:53:33: 0a:55:63:70:f1:fa:3a:e7:da:95:d9:6a:0b:80:15:4a:de:69: 55:5a:e8:b9:08:47:f4:29:c5:54:98:6b:c1:bc:52:e3:26:59: 2b:c3:27:4e:26:f2:2b:d2:a1:a7:7c:53:40:ac:72:82:37:08: 26:04:9c:40:d9:df:49:97:4d:c6:b9:10:7c:b6:bd:6b:04:f8: d4:7c:55:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSmokiZ3y4vItI4XYE/pX7ypVBS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNjAyMjgxMDA2MzVaFw0yNjAzMDMxNzIzMzVaMDMxMTAvBgNV BAMTKDNGQUZGQTJBRTIxQzIwQzMyNDc2OTg2OERBMjA1NDU5NTA0MTQzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcESYwkxyChP4JKNsNcLqK0MTh CqcSgXawwSjc9efHRvrVSsL8NW5fuOrdnZl9Ar6fTyZvGW8BH6JEaOyI2BKbGmjY q0EU2c9rLWoGYebMONurUHbHp5FO8Z/GNp7hc6GF6YN1Iral2p5Urb6qoch9TbWm ukh1WXHQQTg4DE9U/zFDT0WTlz56Y24mLVQOwBcU1DdRZ923qP4MWoMEi1KQKl8+ rK6PimTp+QynqAmqpQ6TJltENm+u47q5E4AFH612zP/GX6IYwCde5tcbQ2HlbNF9 fnlRsTUDocnsMlOuxNxhZ3MnVi1USrbsBdU2GkciVb3unVNF2yx7vaXl0tJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP6/6KuIcIMMkdpho2iBUWVBBQ+kwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzmyZIDTk8VyUc54KLfHKnbJlmQdK8gnm5J JQGs8HR9ls1igTMBTBIih87LX1vhgMlWTCL9esElNs0V260hJsmL4ewAeVC6KpK6 HZcxGy4qtsUlNYcgdYrwDjSB7DQM2UsLqoPWYikRIPcA2TdfIG7cAAU2Xmy8z7r6 AfzUy5iJcmxsJdICn/XIRKhVmaFXKAr2YInfsBct3ldobu6sjo9p8mPVfV+KpqND 0RM55IMLgfhTMwpVY3Dx+jrn2pXZaguAFUreaVVa6LkIR/QpxVSYa8G8UuMmWSvD J04m8ivSoad8U0CscoI3CCYEnEDZ30mXTca5EHy2vWsE+NR8Vdg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:55:49 2026 by rpki-client