$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: MxRRCrlag6nswcekkNqBKfiiVf463Fi1vwsY/hPkLiA= Subject key identifier: B3:EA:4B:58:74:62:2B:CB:47:F5:0D:E6:81:C6:66:51:73:9C:BE:96 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 5C30F42275C78B95250E2CAC6A6580C26616F121 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 028B Signing time: Sun 01 Mar 2026 05:40:03 +0000 Manifest this update: Sun 01 Mar 2026 05:35:03 +0000 Manifest next update: Wed 04 Mar 2026 17:06:03 +0000 Files and hashes: 1: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: 9oYZieQWfC3S9PBxu3Zu4YilVMHKXzOSwOSF0MJbHD0=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: G6q+ji3yFL/G+ROfvGqGZ4h9avpUHfcEbpzAoAOSho8=) 3: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=) 4: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:30:f4:22:75:c7:8b:95:25:0e:2c:ac:6a:65:80:c2:66:16:f1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Mar 1 05:35:03 2026 GMT Not After : Mar 4 17:06:03 2026 GMT Subject: CN=B3EA4B5874622BCB47F50DE681C66651739CBE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:4e:6f:14:36:b5:74:2a:fd:db:2c:34:3e: b7:fe:08:43:bf:e0:7c:6e:6d:b4:18:1b:bd:7e:74: c1:a2:0e:3a:ec:0f:e2:db:de:96:97:2a:60:82:63: d8:10:4a:65:ab:dc:1f:ec:c0:14:cd:80:58:d9:ca: e3:1b:bf:fc:64:5a:81:bc:e0:2a:57:df:87:d1:23: 48:2b:b9:51:23:2e:13:8b:dc:28:41:df:9f:3f:1c: 62:1d:9f:08:e9:ec:00:fd:90:88:7e:09:04:e8:54: 37:53:12:71:66:e0:af:10:42:50:06:e7:8b:b6:a5: cb:5c:73:49:5b:3e:8f:fb:0e:63:30:ff:e5:dc:83: eb:bb:ea:eb:03:bc:a0:1f:fe:29:d1:4d:67:76:0f: ee:c7:f0:51:eb:17:49:2d:71:0f:9f:e8:7f:93:88: ba:49:f0:e0:35:56:d2:ea:bc:35:d8:71:59:fa:cd: 32:d9:b2:68:78:89:b2:42:b8:e4:fc:03:82:24:a8: 46:38:ff:41:9b:3d:94:98:da:35:db:05:73:ed:a6: 80:98:83:af:f5:83:80:c1:90:9c:50:91:aa:5e:a2: d4:e7:61:9c:ca:93:a8:97:70:9b:3e:0e:73:46:86: 39:ff:13:32:39:e4:82:88:f5:6d:1d:f9:5b:91:15: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:4B:58:74:62:2B:CB:47:F5:0D:E6:81:C6:66:51:73:9C:BE:96 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:52:2d:8b:7a:0d:c4:80:b7:a1:c3:2d:c5:8d:57:50:5d:04: 67:69:ed:f6:9c:12:8e:2f:41:23:9b:b6:03:4a:0f:b3:52:65: 62:28:30:f9:e5:1d:54:12:04:44:75:a9:6b:e3:f9:e8:4e:ba: fa:94:68:2c:aa:74:8f:40:d8:0a:87:d3:8f:e2:5a:a0:cc:27: 47:7f:3c:73:02:a0:86:7f:fe:85:fa:a8:e7:35:f4:a0:48:c2: 1e:82:17:bc:ec:33:48:c3:35:65:af:cf:a3:cc:fa:c5:34:9e: 8c:47:ee:29:c8:e5:1f:08:1c:22:18:37:ea:41:f0:4b:b6:80: 33:b7:37:4a:fd:fb:54:a2:ec:1a:3b:46:74:6a:55:16:ab:58: ca:33:e2:bd:63:91:d6:88:44:3f:ea:a7:7e:91:93:72:af:d0: f4:c8:62:67:e8:5a:64:98:fe:9c:e3:74:69:51:37:d4:08:df: d7:f9:fa:18:66:a2:5c:65:6b:ff:7a:d6:ae:52:57:bd:f8:2f: 36:8c:d3:6c:b0:3a:4c:f0:3f:00:13:33:14:00:d5:af:20:7b: 38:e7:37:ed:01:ae:3a:76:1b:42:b2:e6:ce:d8:41:a3:a5:e4: d8:e3:d6:56:ad:4e:dd:da:3d:4f:72:14:fe:37:c1:14:c1:8f: 47:d1:7d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDD0InXHi5UlDiysamWAwmYW8SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNjAzMDEwNTM1MDNaFw0yNjAzMDQxNzA2MDNaMDMxMTAvBgNV BAMTKEIzRUE0QjU4NzQ2MjJCQ0I0N0Y1MERFNjgxQzY2NjUxNzM5Q0JFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuF05vFDa1dCr92yw0Prf+CEO/ 4HxubbQYG71+dMGiDjrsD+Lb3paXKmCCY9gQSmWr3B/swBTNgFjZyuMbv/xkWoG8 4CpX34fRI0gruVEjLhOL3ChB358/HGIdnwjp7AD9kIh+CQToVDdTEnFm4K8QQlAG 54u2pctcc0lbPo/7DmMw/+Xcg+u76usDvKAf/inRTWd2D+7H8FHrF0ktcQ+f6H+T iLpJ8OA1VtLqvDXYcVn6zTLZsmh4ibJCuOT8A4IkqEY4/0GbPZSY2jXbBXPtpoCY g6/1g4DBkJxQkapeotTnYZzKk6iXcJs+DnNGhjn/EzI55IKI9W0d+VuRFU3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+pLWHRiK8tH9Q3mgcZmUXOcvpYwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJSLYt6DcSAt6HDLcWNV1BdBGdp7facEo4v QSObtgNKD7NSZWIoMPnlHVQSBER1qWvj+ehOuvqUaCyqdI9A2AqH04/iWqDMJ0d/ PHMCoIZ//oX6qOc19KBIwh6CF7zsM0jDNWWvz6PM+sU0noxH7inI5R8IHCIYN+pB 8Eu2gDO3N0r9+1Si7Bo7RnRqVRarWMoz4r1jkdaIRD/qp36Rk3Kv0PTIYmfoWmSY /pzjdGlRN9QI39f5+hhmolxla/961q5SV734LzaM02ywOkzwPwATMxQA1a8gezjn N+0Brjp2G0Ky5s7YQaOl5Njj1latTt3aPU9yFP43wRTBj0fRfcE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:04 2026 by rpki-client