$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: 0o/D/SRCLtZYPc/lD/evaS1CC3ufB0zWbOEHC9jwaoM= Subject key identifier: CC:F5:74:C9:EF:6A:B7:6A:9B:CD:EB:45:79:79:C4:94:9D:84:37:B9 Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 24FFB224DE7D756BE650E16DEA6C7CCE7AA1DBFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 02BA Signing time: Sun 01 Mar 2026 10:11:42 +0000 Manifest this update: Sun 01 Mar 2026 10:06:42 +0000 Manifest next update: Wed 04 Mar 2026 10:16:42 +0000 Files and hashes: 1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=) 2: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: 3y1Q7VCGvbOvrskXYMbmckMnzT3tF5Mp1x9DketrTfA=) 3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ff:b2:24:de:7d:75:6b:e6:50:e1:6d:ea:6c:7c:ce:7a:a1:db:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Mar 1 10:06:42 2026 GMT Not After : Mar 4 10:16:42 2026 GMT Subject: CN=CCF574C9EF6AB76A9BCDEB457979C4949D8437B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:85:75:1c:45:21:4d:19:56:b1:ff:bb:94: 8b:b8:5e:64:a4:28:5a:25:e7:3b:1a:1a:b3:0a:fd: 5c:d8:3a:e4:56:6f:38:0a:b0:02:1b:45:b5:16:3a: c1:f7:f3:29:ab:4d:cc:89:1d:a3:63:d9:c6:60:cf: d0:ec:f0:00:0c:0b:d1:da:70:92:53:77:62:cf:63: 1e:36:63:a2:57:e1:f0:91:c1:3d:90:6a:cf:09:ba: 5d:f8:e6:37:fd:0d:04:b7:58:30:0b:a3:78:ac:27: f2:48:bd:06:6a:34:b0:62:d5:63:7e:86:33:b1:23: c7:d6:09:e8:e7:54:36:2e:5f:46:36:a1:e2:41:f5: 68:c0:a1:69:36:69:72:cc:d6:d0:a9:38:7d:93:97: 50:90:e0:b4:56:9b:a8:0d:8c:a0:da:00:68:c7:54: d7:8b:88:4a:be:5b:ab:f6:c3:da:ab:18:68:a4:29: 2b:78:73:54:96:5d:a0:25:39:5d:ca:ba:07:8a:3c: 52:9d:d3:e6:af:7e:40:c5:f6:68:3f:8b:f7:f1:f5: 30:dc:4a:f4:a4:2f:13:06:b8:50:d1:58:9f:67:72: 5d:ac:51:59:1a:da:8f:b4:c2:85:1e:8c:8b:4e:ce: 9b:34:07:0e:47:ad:ad:25:6e:aa:e4:15:71:c3:70: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F5:74:C9:EF:6A:B7:6A:9B:CD:EB:45:79:79:C4:94:9D:84:37:B9 X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a8:a7:60:24:d2:cf:b6:b3:c5:8e:fb:b4:7b:78:d0:c1:a2: d9:5b:70:9f:60:aa:76:c7:f4:f6:6c:9d:b9:49:b9:c0:9a:59: b9:3e:ea:86:6a:6c:e0:ed:61:3d:77:56:30:d9:5b:d1:4c:9e: 40:79:d5:c6:9b:41:99:a0:a8:7e:1e:e2:d9:85:51:fc:90:0a: 3d:37:dd:66:66:a3:c4:80:84:cb:16:40:43:55:8f:f5:60:9f: 6f:a6:d9:87:78:19:98:1b:ee:c8:18:c6:9a:22:17:71:40:4b: da:63:e4:92:13:e2:6e:fa:9f:38:79:7f:da:5b:04:fb:c7:ad: ab:41:57:5b:ba:04:d4:1a:e3:a1:de:57:9c:13:ec:26:19:44: da:20:08:fa:ec:a5:36:30:31:54:69:20:5a:fa:3d:c6:5f:e6: 63:dc:c6:3e:09:14:12:b7:e3:37:c2:21:d8:ba:78:e6:19:ec: ad:28:1e:54:17:bc:2b:2a:3e:17:0f:62:ee:24:2d:b5:54:96: 7d:a0:82:b2:33:7e:66:ec:5e:a9:65:26:ab:87:22:fe:b0:47: e5:7f:e1:d3:d0:31:1f:0e:13:a8:16:e7:a5:e9:09:48:7e:b1: f5:24:fb:f4:9a:91:57:9b:34:59:04:ae:fd:d2:54:50:e3:3e: 8b:d6:06:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJP+yJN59dWvmUOFt6mx8znqh2/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNjAzMDExMDA2NDJaFw0yNjAzMDQxMDE2NDJaMDMxMTAvBgNV BAMTKENDRjU3NEM5RUY2QUI3NkE5QkNERUI0NTc5NzlDNDk0OUQ4NDM3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8T4V1HEUhTRlWsf+7lIu4XmSk KFol5zsaGrMK/VzYOuRWbzgKsAIbRbUWOsH38ymrTcyJHaNj2cZgz9Ds8AAMC9Ha cJJTd2LPYx42Y6JX4fCRwT2Qas8Jul345jf9DQS3WDALo3isJ/JIvQZqNLBi1WN+ hjOxI8fWCejnVDYuX0Y2oeJB9WjAoWk2aXLM1tCpOH2Tl1CQ4LRWm6gNjKDaAGjH VNeLiEq+W6v2w9qrGGikKSt4c1SWXaAlOV3KugeKPFKd0+avfkDF9mg/i/fx9TDc SvSkLxMGuFDRWJ9ncl2sUVka2o+0woUejItOzps0Bw5Hra0lbqrkFXHDcEvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzPV0ye9qt2qbzetFeXnElJ2EN7kwHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaop2Ak0s+2s8WO+7R7eNDBotlbcJ9gqnbH 9PZsnblJucCaWbk+6oZqbODtYT13VjDZW9FMnkB51cabQZmgqH4e4tmFUfyQCj03 3WZmo8SAhMsWQENVj/Vgn2+m2Yd4GZgb7sgYxpoiF3FAS9pj5JIT4m76nzh5f9pb BPvHratBV1u6BNQa46HeV5wT7CYZRNogCPrspTYwMVRpIFr6PcZf5mPcxj4JFBK3 4zfCIdi6eOYZ7K0oHlQXvCsqPhcPYu4kLbVUln2ggrIzfmbsXqllJquHIv6wR+V/ 4dPQMR8OE6gW56XpCUh+sfUk+/SakVebNFkErv3SVFDjPovWBog= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:35 2026 by rpki-client