$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: ItodZ2uplCtS0hBtjM+W4DPyu3D8a/4F3SmHSqdRFMg= Subject key identifier: 28:67:D3:3F:57:22:3B:EB:C5:C3:90:1E:92:26:9F:98:1D:66:5A:F2 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 526DBBC79F620ECADB09A0B9AA999E2C8AD00216 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: 0137 Signing time: Sun 01 Mar 2026 04:51:14 +0000 Manifest this update: Sun 01 Mar 2026 04:46:14 +0000 Manifest next update: Wed 04 Mar 2026 13:06:14 +0000 Files and hashes: 1: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: odYW4tuHIAmBKw7Yir5Faqa6Vv8eHC6lsyyVWAOjs3U=) 2: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: 2S3AAst7IC/1a4HtbvuhV7BXzxtscFhIXxzRl+UCFAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6d:bb:c7:9f:62:0e:ca:db:09:a0:b9:aa:99:9e:2c:8a:d0:02:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Mar 1 04:46:14 2026 GMT Not After : Mar 4 13:06:14 2026 GMT Subject: CN=2867D33F57223BEBC5C3901E92269F981D665AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:c4:87:6b:58:08:ab:7a:66:03:87:95:07: a5:7f:ce:89:7c:ed:38:28:0d:87:86:29:70:08:3a: f7:b4:ed:2d:79:03:8c:c4:a1:e4:35:36:8f:58:b9: 31:dd:32:7c:6c:bf:fc:e1:ec:97:56:c5:ee:90:70: 5a:36:5c:06:8a:19:d3:e6:17:1f:95:cd:61:47:73: ec:c5:1b:be:c0:bd:3f:4a:72:c8:3c:25:c1:db:d9: f5:f9:ff:30:e8:ca:a0:2a:77:15:75:09:9b:ce:3e: 4f:6a:34:a9:7c:80:71:d2:5f:40:c8:86:8d:31:b1: b8:cb:c3:87:fb:22:79:13:f1:a3:8c:1d:19:cf:24: 0f:33:b4:dd:d5:43:cd:8e:a2:1e:ec:43:65:2d:1d: f4:95:ee:55:f0:74:1c:63:96:6d:03:db:51:02:e4: 70:50:ad:0a:32:70:a1:c1:a6:14:80:c6:d1:b1:d9: 4b:28:90:8f:1c:c1:76:da:68:e6:95:67:22:7c:42: 08:d2:cf:2a:89:3a:90:5a:da:17:ce:54:08:9d:fa: 87:b2:54:b2:8a:f2:a5:2a:0a:00:65:ab:13:ee:11: 3b:f7:3a:57:a2:9d:7a:5f:55:ca:4f:5d:0b:e7:4f: 23:16:bd:6d:d6:99:c9:25:f1:f6:92:f8:8d:1e:43: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:67:D3:3F:57:22:3B:EB:C5:C3:90:1E:92:26:9F:98:1D:66:5A:F2 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:be:08:31:7c:21:82:c3:ba:e2:d8:6c:be:53:10:42:92:a0: 32:b6:5c:5b:ef:d6:37:6a:73:8c:a2:0f:7a:41:5d:40:92:ac: e1:06:c2:c1:a4:bf:0b:23:79:a6:d7:68:7f:5b:36:16:65:69: 05:30:b2:1c:b4:91:55:66:0b:de:21:46:b6:6b:78:02:a7:c2: 2b:bb:ee:f9:fb:9d:e4:61:81:9b:e9:30:9c:88:fc:46:ea:b9: bb:6b:51:4f:49:9a:11:86:7a:1a:28:e2:03:4a:8f:70:f9:77: 93:c6:00:70:f1:dd:eb:0b:2e:b0:c1:7c:79:03:ec:5f:a0:c5: 18:e7:2b:7f:b8:55:b6:9f:21:78:b1:fd:f4:31:46:1a:9f:f8: 3c:a1:3e:b1:26:da:df:51:13:6d:46:01:91:7a:dc:14:5f:eb: 13:0c:0a:1d:7b:c9:a3:65:2b:92:dd:3d:14:fd:cc:43:81:d0: e0:a0:29:d5:de:9e:db:3a:32:eb:e7:b9:0a:56:92:ad:91:7c: 8a:ea:24:e6:aa:a8:c2:b0:84:79:80:23:a9:56:ce:e8:c5:75: ae:16:85:ff:78:a2:c5:ed:1f:83:ea:fc:01:93:53:d1:47:72: 8d:0c:e5:89:0b:f4:f9:da:88:7b:41:45:99:0a:4a:dd:e5:3e: a6:84:48:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUm27x59iDsrbCaC5qpmeLIrQAhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNjAzMDEwNDQ2MTRaFw0yNjAzMDQxMzA2MTRaMDMxMTAvBgNV BAMTKDI4NjdEMzNGNTcyMjNCRUJDNUMzOTAxRTkyMjY5Rjk4MUQ2NjVBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNcSHa1gIq3pmA4eVB6V/zol8 7TgoDYeGKXAIOve07S15A4zEoeQ1No9YuTHdMnxsv/zh7JdWxe6QcFo2XAaKGdPm Fx+VzWFHc+zFG77AvT9Kcsg8JcHb2fX5/zDoyqAqdxV1CZvOPk9qNKl8gHHSX0DI ho0xsbjLw4f7InkT8aOMHRnPJA8ztN3VQ82Ooh7sQ2UtHfSV7lXwdBxjlm0D21EC 5HBQrQoycKHBphSAxtGx2UsokI8cwXbaaOaVZyJ8QgjSzyqJOpBa2hfOVAid+oey VLKK8qUqCgBlqxPuETv3OleinXpfVcpPXQvnTyMWvW3Wmckl8faS+I0eQx7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGfTP1ciO+vFw5AekiafmB1mWvIwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHq+CDF8IYLDuuLYbL5TEEKSoDK2XFvv1jdq c4yiD3pBXUCSrOEGwsGkvwsjeabXaH9bNhZlaQUwshy0kVVmC94hRrZreAKnwiu7 7vn7neRhgZvpMJyI/EbqubtrUU9JmhGGehoo4gNKj3D5d5PGAHDx3esLLrDBfHkD 7F+gxRjnK3+4VbafIXix/fQxRhqf+DyhPrEm2t9RE21GAZF63BRf6xMMCh17yaNl K5LdPRT9zEOB0OCgKdXents6MuvnuQpWkq2RfIrqJOaqqMKwhHmAI6lWzujFda4W hf94osXtH4Pq/AGTU9FHco0M5YkL9PnaiHtBRZkKSt3lPqaESDc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:55 2026 by rpki-client