$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: j/bsEXoQxb4l+ISP19y0J9zIdwwccFo18zbVhwiPXRw= Subject key identifier: 42:6F:7A:F6:29:C8:50:93:37:4E:C5:93:24:E7:56:C7:5E:BE:02:BF Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 2809E8CEE9E9D8104798D5E256BEE0969EE6B6A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 0247 Signing time: Sun 01 Mar 2026 05:00:07 +0000 Manifest this update: Sun 01 Mar 2026 04:55:07 +0000 Manifest next update: Wed 04 Mar 2026 15:29:07 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 2: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 3: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: WQ275Bs7L30VwBP4V/2NV6+sanshKt51zZ/xnhCmOhc=) 4: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 5: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:09:e8:ce:e9:e9:d8:10:47:98:d5:e2:56:be:e0:96:9e:e6:b6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Mar 1 04:55:07 2026 GMT Not After : Mar 4 15:29:07 2026 GMT Subject: CN=426F7AF629C85093374EC59324E756C75EBE02BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:1f:2f:05:d2:6a:71:d1:cf:0e:b8:e7:94: c8:38:1c:ae:9e:1d:06:e9:7d:f3:d3:dd:c8:a6:ac: 7d:19:d5:56:9c:7e:f5:51:d5:33:22:91:73:0d:63: db:53:df:59:31:22:0c:0a:3d:01:b4:82:a6:6c:f3: d4:0f:60:e4:bb:50:d3:12:84:cb:9a:32:e1:68:bc: 7c:70:b5:4d:f2:8f:d8:02:5e:97:65:d0:ee:cc:c5: ef:fb:1d:2b:87:5b:c2:a2:b6:20:7c:2b:21:4f:8c: e2:e7:33:55:55:f4:d1:17:65:ed:c8:51:b2:60:1d: 04:8e:5c:0f:02:aa:78:59:58:4f:cd:7d:1e:c2:08: 50:e7:92:ee:73:48:fc:c6:5e:4c:37:9c:6f:25:70: 54:99:ca:1a:dd:99:28:8b:0f:12:00:18:5f:9f:7e: 06:70:bc:9e:68:ee:90:e1:b7:81:14:a4:95:9e:0b: fa:0f:98:c7:77:bd:1d:3e:6f:44:b1:59:5d:b0:31: 9a:5a:af:d9:0e:63:c2:3d:e9:29:cb:e7:66:61:64: 47:df:cc:d4:31:da:5f:66:a8:c6:64:b0:85:56:26: 05:88:a8:1f:02:2c:a4:d5:d6:02:7e:72:c2:9f:a4: 78:de:99:72:9e:af:c0:f2:80:c8:65:8d:e7:1d:b5: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:7A:F6:29:C8:50:93:37:4E:C5:93:24:E7:56:C7:5E:BE:02:BF X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ac:c1:cf:29:db:dd:a0:35:12:f1:b6:25:47:88:2e:28:82: 70:4f:24:08:fc:c5:c3:c9:2f:a1:b7:9e:a7:97:3d:07:af:7c: 0c:ec:fe:47:74:c3:09:21:f9:06:cd:59:fe:38:19:42:61:6c: 2b:ba:e0:bc:49:27:63:de:93:b4:e5:e4:16:65:d3:cd:4a:76: 19:50:2c:e3:1b:82:ef:dc:0c:ba:82:25:17:0f:a0:82:4e:87: da:fe:b1:bf:bf:a4:40:43:55:4a:a4:31:53:c5:b6:b9:20:b8: c2:e9:c4:c5:57:f1:98:e0:01:64:57:be:5a:cf:ff:c8:34:8e: 10:04:43:04:1c:aa:00:95:ea:2c:71:c2:14:b6:44:42:e6:e2: 3d:43:87:75:82:a5:e6:88:93:a1:3e:d4:58:7e:34:b5:c4:76: cc:04:57:13:5e:3e:87:11:9e:af:d9:79:52:33:c3:20:a5:f1: d3:db:94:46:5a:0f:e3:f6:93:70:d3:1c:3d:e5:80:72:f2:9c: 95:e1:31:60:d1:0f:ce:49:db:ab:4b:e3:43:1e:53:41:47:1a: 78:92:b1:30:8a:ff:6f:ae:7e:f7:ee:43:0a:14:b4:52:98:75: 2e:c5:52:1d:ea:7c:96:04:02:8d:43:03:36:6f:05:61:f2:95: cb:f3:41:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAnozunp2BBHmNXiVr7glp7mtqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNjAzMDEwNDU1MDdaFw0yNjAzMDQxNTI5MDdaMDMxMTAvBgNV BAMTKDQyNkY3QUY2MjlDODUwOTMzNzRFQzU5MzI0RTc1NkM3NUVCRTAyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT3h8vBdJqcdHPDrjnlMg4HK6e HQbpffPT3cimrH0Z1VacfvVR1TMikXMNY9tT31kxIgwKPQG0gqZs89QPYOS7UNMS hMuaMuFovHxwtU3yj9gCXpdl0O7Mxe/7HSuHW8KitiB8KyFPjOLnM1VV9NEXZe3I UbJgHQSOXA8CqnhZWE/NfR7CCFDnku5zSPzGXkw3nG8lcFSZyhrdmSiLDxIAGF+f fgZwvJ5o7pDht4EUpJWeC/oPmMd3vR0+b0SxWV2wMZpar9kOY8I96SnL52ZhZEff zNQx2l9mqMZksIVWJgWIqB8CLKTV1gJ+csKfpHjemXKer8DygMhljecdtUTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQm969inIUJM3TsWTJOdWx16+Ar8wHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOswc8p292gNRLxtiVHiC4ognBPJAj8xcPJ L6G3nqeXPQevfAzs/kd0wwkh+QbNWf44GUJhbCu64LxJJ2Pek7Tl5BZl081KdhlQ LOMbgu/cDLqCJRcPoIJOh9r+sb+/pEBDVUqkMVPFtrkguMLpxMVX8ZjgAWRXvlrP /8g0jhAEQwQcqgCV6ixxwhS2RELm4j1Dh3WCpeaIk6E+1Fh+NLXEdswEVxNePocR nq/ZeVIzwyCl8dPblEZaD+P2k3DTHD3lgHLynJXhMWDRD85J26tL40MeU0FHGniS sTCK/2+ufvfuQwoUtFKYdS7FUh3qfJYEAo1DAzZvBWHylcvzQZ8= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:51 2026 by rpki-client