$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: UpU5fwbhm+rbvJNE1IWDgwPDqp+B4OSAASlzEuhQ+jw= Subject key identifier: 06:2A:D3:57:96:B8:41:C8:6B:82:FF:41:3A:B3:42:BE:07:E0:1D:19 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 736CB7096A54506092079D82D22D8C47C8FCF181 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 029A Signing time: Sun 01 Mar 2026 16:31:04 +0000 Manifest this update: Sun 01 Mar 2026 16:26:04 +0000 Manifest next update: Wed 04 Mar 2026 22:35:04 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) 2: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: PWCJ3UVk7+scIISX0hY8/DHkB6RlSPt0LXRnY30ciVI=) 3: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) 4: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6c:b7:09:6a:54:50:60:92:07:9d:82:d2:2d:8c:47:c8:fc:f1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Mar 1 16:26:04 2026 GMT Not After : Mar 4 22:35:04 2026 GMT Subject: CN=062AD35796B841C86B82FF413AB342BE07E01D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:b9:d2:5f:ce:f4:41:eb:66:b5:53:c7:ff: 42:87:27:62:b3:81:a0:48:b7:a8:23:cf:4c:75:42: ee:09:3f:eb:77:03:b1:51:a3:2d:f0:f1:df:28:dd: 0f:91:67:47:9d:c1:21:60:96:68:b5:50:81:bb:8b: 0f:47:d7:06:79:ad:96:e4:4e:9f:34:48:7a:e1:4b: 72:e3:82:ef:24:59:02:d3:d2:37:23:8e:70:1d:e4: b8:4f:ce:d7:ec:ff:98:d4:04:17:00:fa:2a:87:7b: 90:b8:dd:39:1d:33:33:55:4b:50:2d:38:35:7f:0d: 2d:30:1d:89:c1:86:c7:26:f9:b0:ab:63:2f:c9:f5: 1f:ed:d3:98:ae:f9:9f:02:96:5a:d7:8f:f1:d5:89: bb:6e:e1:7f:9b:02:33:e8:96:9d:a5:41:3c:fd:c7: ec:62:2e:3c:3e:01:ac:01:79:2d:67:4e:83:e3:ea: aa:3c:29:9f:53:8d:15:79:71:a6:68:2d:cb:0e:0d: 54:19:d9:8a:fa:f7:8b:d3:59:df:81:36:60:fe:2d: 1e:0c:e4:15:c2:4a:bc:ec:16:d1:1a:66:48:c1:28: 38:a9:67:5a:ea:21:d9:61:ae:75:25:51:64:25:99: fe:43:f0:2f:d7:55:10:b9:48:41:08:21:a1:13:d6: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2A:D3:57:96:B8:41:C8:6B:82:FF:41:3A:B3:42:BE:07:E0:1D:19 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7d:20:41:33:b1:1b:56:b1:88:c5:bc:eb:73:aa:a6:a0:7a: 67:4c:7c:c1:4d:f2:ea:12:52:d0:a9:be:05:ed:ab:21:95:25: 96:c6:aa:ef:67:e3:41:58:e3:60:db:e1:c3:ec:4e:0c:0a:93: 9d:94:41:87:e7:5c:7e:e5:2f:08:ae:f7:29:6c:2f:0e:54:72: 9d:3e:4d:47:9f:a4:f5:64:c2:70:02:72:e4:2e:f1:5e:a2:ad: b9:ef:28:44:47:34:26:75:aa:e3:3e:59:34:d9:1d:d8:2c:a2: b3:2f:12:54:7b:63:7d:d8:4f:e0:b7:e5:2f:03:84:10:67:dc: 12:79:36:f9:47:17:b6:7b:4d:25:8f:17:ab:4a:5e:c3:1e:3a: fb:1d:1d:86:c0:4a:80:ec:60:7a:50:66:f4:0d:98:99:65:27: 93:b3:87:ec:c7:0b:be:bd:bb:5b:69:15:02:9e:af:ff:98:ee: b8:06:01:8f:7c:14:18:0e:0e:b4:bf:a3:08:e7:81:7e:cc:fe: 17:13:84:c9:42:50:df:1e:a3:c4:8e:38:f0:56:31:00:37:e3: d0:3d:d3:bb:5a:aa:0b:b0:88:de:c9:74:74:66:48:94:ca:26: f3:45:f9:bc:a2:29:02:52:16:36:44:df:ca:09:cf:d4:b5:80: a5:ed:11:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2y3CWpUUGCSB52C0i2MR8j88YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNjAzMDExNjI2MDRaFw0yNjAzMDQyMjM1MDRaMDMxMTAvBgNV BAMTKDA2MkFEMzU3OTZCODQxQzg2QjgyRkY0MTNBQjM0MkJFMDdFMDFEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9abnSX870QetmtVPH/0KHJ2Kz gaBIt6gjz0x1Qu4JP+t3A7FRoy3w8d8o3Q+RZ0edwSFglmi1UIG7iw9H1wZ5rZbk Tp80SHrhS3Ljgu8kWQLT0jcjjnAd5LhPztfs/5jUBBcA+iqHe5C43TkdMzNVS1At ODV/DS0wHYnBhscm+bCrYy/J9R/t05iu+Z8CllrXj/HVibtu4X+bAjPolp2lQTz9 x+xiLjw+AawBeS1nToPj6qo8KZ9TjRV5caZoLcsODVQZ2Yr694vTWd+BNmD+LR4M 5BXCSrzsFtEaZkjBKDipZ1rqIdlhrnUlUWQlmf5D8C/XVRC5SEEIIaET1iCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBirTV5a4Qchrgv9BOrNCvgfgHRkwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ9IEEzsRtWsYjFvOtzqqagemdMfMFN8uoS UtCpvgXtqyGVJZbGqu9n40FY42Db4cPsTgwKk52UQYfnXH7lLwiu9ylsLw5Ucp0+ TUefpPVkwnACcuQu8V6irbnvKERHNCZ1quM+WTTZHdgsorMvElR7Y33YT+C35S8D hBBn3BJ5NvlHF7Z7TSWPF6tKXsMeOvsdHYbASoDsYHpQZvQNmJllJ5Ozh+zHC769 u1tpFQKer/+Y7rgGAY98FBgODrS/owjngX7M/hcThMlCUN8eo8SOOPBWMQA349A9 07taqguwiN7JdHRmSJTKJvNF+byiKQJSFjZE38oJz9S1gKXtEV4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:35 2026 by rpki-client