$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: OkqG8U7GNC/22XIemn+xROd3/89O3RSNbABVy3LLw9Y= Subject key identifier: 51:53:D2:9F:42:67:7D:09:34:63:22:0D:6F:64:DB:F9:8D:08:68:A7 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 7F3DF331FFD34E0AC492E6562788D8927ED10C1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: 0120 Signing time: Sun 01 Mar 2026 00:01:19 +0000 Manifest this update: Sat 28 Feb 2026 23:56:19 +0000 Manifest next update: Wed 04 Mar 2026 07:40:19 +0000 Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=) 2: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: vEKzPnzxIOOvfRVSIUT1h/oc2Y/THAErQKOWXCtkHfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3d:f3:31:ff:d3:4e:0a:c4:92:e6:56:27:88:d8:92:7e:d1:0c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Feb 28 23:56:19 2026 GMT Not After : Mar 4 07:40:19 2026 GMT Subject: CN=5153D29F42677D093463220D6F64DBF98D0868A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:45:17:6f:ef:11:31:ea:86:3c:de:a9:21: 66:ea:ea:88:51:ba:09:40:74:5c:3a:44:59:3a:62: ab:36:11:39:93:89:df:ef:34:be:28:b7:f0:72:b0: 7d:78:57:50:89:3a:12:34:b3:68:11:5c:dd:ff:f8: 35:1e:0f:4a:11:09:c1:f2:2d:40:82:44:ec:23:aa: 2b:38:f4:d7:e0:44:fd:0a:f9:76:4b:29:5b:9e:86: bd:28:bd:bf:fe:23:23:ce:76:90:5f:1a:d7:19:fa: 3d:f6:f1:4e:2b:bc:b6:bf:a3:d8:d3:0e:65:0e:4e: 6e:39:1a:fe:e2:ef:c8:d5:0e:b1:7c:95:ab:dc:30: 69:ea:05:5f:b3:18:e7:5a:24:70:84:9e:ff:4c:f9: 1e:e2:a4:67:1e:d9:16:79:7c:cd:ac:41:f4:ec:ba: 46:8a:4d:3e:1d:ce:d3:70:86:0f:70:80:35:23:0e: b2:33:c6:de:e8:db:4e:95:be:7b:58:79:11:7c:cb: 09:f6:f6:8b:ac:b6:7e:5c:fe:ef:f9:4d:55:31:81: 30:02:1e:41:22:8f:40:ac:ca:58:01:02:66:a5:7a: 61:24:f9:11:f6:63:9d:45:b1:63:52:8d:93:1f:a7: 36:96:e3:60:cb:77:42:4d:5f:e0:16:e3:39:5a:2e: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:53:D2:9F:42:67:7D:09:34:63:22:0D:6F:64:DB:F9:8D:08:68:A7 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cd:33:99:16:5f:00:05:8a:5c:4e:f6:76:df:5b:b1:84:3b: 0d:f5:03:fe:82:45:7a:1a:59:67:28:f7:86:1d:cf:ff:6d:73: 12:07:24:b5:ec:59:53:2d:b7:d6:0f:49:7b:88:9a:c8:8f:57: b7:f3:3d:a2:5f:58:b7:79:d3:f8:da:86:74:d0:04:ea:2a:00: ab:e5:dc:69:94:2b:4b:af:fc:e2:42:52:bf:2c:31:03:36:04: e1:65:e2:23:f8:31:33:5d:c6:5a:0a:c3:6d:2f:ab:9c:71:b3: b5:b9:9f:93:51:c5:55:11:f3:c4:50:3e:1b:72:31:64:25:86: 75:89:5d:51:06:bd:12:05:a2:c6:08:5d:04:5d:2d:d6:b2:85: 7d:65:d5:52:e5:99:9b:8d:2b:47:90:64:38:a2:85:39:cc:b4: eb:9d:6b:f9:4a:e2:d4:f4:74:0d:ff:39:9a:59:9d:c9:c4:90: f0:bb:7d:08:84:d1:08:ac:fe:32:81:47:82:8a:39:7d:b6:b0: 2c:ad:f1:58:a6:05:32:ac:e8:1c:f5:17:11:41:a0:92:ad:6c: f9:af:57:2e:f7:e5:98:76:41:be:60:49:ad:76:0d:9a:29:82: 07:10:37:ea:d7:af:0c:5c:c8:ba:d0:81:35:b5:70:c4:81:2a: 22:7c:7f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfz3zMf/TTgrEkuZWJ4jYkn7RDBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNjAyMjgyMzU2MTlaFw0yNjAzMDQwNzQwMTlaMDMxMTAvBgNV BAMTKDUxNTNEMjlGNDI2NzdEMDkzNDYzMjIwRDZGNjREQkY5OEQwODY4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MEUXb+8RMeqGPN6pIWbq6ohR uglAdFw6RFk6Yqs2ETmTid/vNL4ot/BysH14V1CJOhI0s2gRXN3/+DUeD0oRCcHy LUCCROwjqis49NfgRP0K+XZLKVuehr0ovb/+IyPOdpBfGtcZ+j328U4rvLa/o9jT DmUOTm45Gv7i78jVDrF8lavcMGnqBV+zGOdaJHCEnv9M+R7ipGce2RZ5fM2sQfTs ukaKTT4dztNwhg9wgDUjDrIzxt7o206VvntYeRF8ywn29oustn5c/u/5TVUxgTAC HkEij0CsylgBAmalemEk+RH2Y51FsWNSjZMfpzaW42DLd0JNX+AW4zlaLoBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVPSn0JnfQk0YyINb2Tb+Y0IaKcwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTNM5kWXwAFilxO9nbfW7GEOw31A/6CRXoa WWco94Ydz/9tcxIHJLXsWVMtt9YPSXuImsiPV7fzPaJfWLd50/jahnTQBOoqAKvl 3GmUK0uv/OJCUr8sMQM2BOFl4iP4MTNdxloKw20vq5xxs7W5n5NRxVUR88RQPhty MWQlhnWJXVEGvRIFosYIXQRdLdayhX1l1VLlmZuNK0eQZDiihTnMtOuda/lK4tT0 dA3/OZpZncnEkPC7fQiE0Qis/jKBR4KKOX22sCyt8VimBTKs6Bz1FxFBoJKtbPmv Vy735Zh2Qb5gSa12DZopggcQN+rXrwxcyLrQgTW1cMSBKiJ8f6c= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:23 2026 by rpki-client