$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: UZXPAS7nBxs9pyks+mxmwTrje+Q7njRXhzi2s1TJJUE= Subject key identifier: E1:98:7C:D0:D9:AB:6C:02:E7:A8:55:DC:F3:93:A7:AD:B3:CE:0B:70 Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 67AB408E731B7D09207BFEFAE1F1E8DA3C5CF788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: DC Signing time: Sun 01 Mar 2026 23:11:35 +0000 Manifest this update: Sun 01 Mar 2026 23:06:35 +0000 Manifest next update: Thu 05 Mar 2026 11:01:35 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: 74lKUCaab4oyiYoBr76wKxEgtKLqrNjVqaNgKGgR0SU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ab:40:8e:73:1b:7d:09:20:7b:fe:fa:e1:f1:e8:da:3c:5c:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Mar 1 23:06:35 2026 GMT Not After : Mar 5 11:01:35 2026 GMT Subject: CN=E1987CD0D9AB6C02E7A855DCF393A7ADB3CE0B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:70:c1:49:98:83:dd:31:c2:83:99:0f:3f: 02:c5:ba:fa:63:6e:73:ce:cf:69:06:e9:84:59:30: 7a:62:c1:77:8a:a4:32:15:a6:f9:97:ab:1b:65:8c: 43:74:e5:d1:03:a4:34:b6:4a:19:a8:95:c0:28:b5: 51:a7:cb:54:6f:96:03:c7:e9:0f:7a:e3:a6:f0:4d: 06:ea:03:6d:36:31:89:a4:68:e3:98:aa:3a:f5:45: 25:99:c6:24:49:40:9a:37:3b:74:2f:28:8e:a2:93: 3c:41:01:c0:38:b1:9b:58:68:a0:5e:ff:ee:91:1e: d9:03:71:3d:e0:ee:d7:9d:b2:fd:fe:8e:ac:50:44: 8b:d5:8a:2e:5a:5e:f7:e1:0a:51:83:a5:96:ce:46: 03:0b:87:39:05:4c:0d:c5:40:f3:26:62:13:c1:3a: 2b:08:2f:17:22:38:c0:04:6d:bb:17:52:38:b7:e3: d2:af:ec:8c:0b:86:10:1d:ca:97:4a:95:41:8f:cd: f9:7a:f5:23:dc:cd:df:7a:e6:99:a0:18:d0:34:fe: 5f:fb:df:53:6b:1d:c7:29:2b:06:ac:c2:d5:c6:89: ca:47:90:a8:92:30:93:e3:a8:87:72:ae:54:e1:90: 19:95:a1:1d:af:06:70:8d:5a:16:cd:7e:43:68:ec: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:98:7C:D0:D9:AB:6C:02:E7:A8:55:DC:F3:93:A7:AD:B3:CE:0B:70 X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:46:d6:f1:5e:3d:28:5a:bd:64:26:0a:84:ae:25:dd:eb:e4: 48:c4:4a:ca:7f:a1:fc:09:fc:9f:df:ad:0e:47:f3:fa:cd:2e: 4c:84:10:f2:77:23:15:07:a0:e4:94:be:07:f7:b2:ad:5e:01: 5a:aa:87:46:2e:65:34:ff:37:12:73:d3:c2:d9:bf:08:1e:9d: 75:5f:c1:93:86:82:47:cc:d8:b2:48:ed:2a:a3:e1:6e:31:7b: 74:b1:6d:25:4a:c0:cc:84:25:85:35:87:e1:39:ce:3d:12:71: 12:ca:68:9a:16:06:cf:d9:e5:0e:20:20:14:de:a4:ba:94:8f: b5:88:b8:01:87:23:c1:9e:fd:02:11:5b:13:6e:03:cf:89:94: cc:e1:d0:16:87:5a:bb:ba:5c:25:33:33:a1:e3:f6:fb:be:df: 19:e4:79:3d:d6:04:7f:71:ca:a6:13:e2:32:4c:31:59:af:65: fc:7b:2d:4e:75:48:4c:e8:0e:92:42:87:d6:e5:b8:0d:80:71: eb:26:06:6a:9b:c1:6e:b1:19:ea:3f:0e:b2:15:10:e2:95:ab: 82:66:6f:1c:21:89:16:19:26:6c:db:4e:cd:c6:14:1f:a4:8c: ff:08:98:9f:64:86:84:21:37:06:b5:24:2d:98:69:4d:b1:a3: 5a:ec:2f:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6tAjnMbfQkge/764fHo2jxc94gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNjAzMDEyMzA2MzVaFw0yNjAzMDUxMTAxMzVaMDMxMTAvBgNV BAMTKEUxOTg3Q0QwRDlBQjZDMDJFN0E4NTVEQ0YzOTNBN0FEQjNDRTBCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNnDBSZiD3THCg5kPPwLFuvpj bnPOz2kG6YRZMHpiwXeKpDIVpvmXqxtljEN05dEDpDS2ShmolcAotVGny1RvlgPH 6Q9646bwTQbqA202MYmkaOOYqjr1RSWZxiRJQJo3O3QvKI6ikzxBAcA4sZtYaKBe /+6RHtkDcT3g7tedsv3+jqxQRIvVii5aXvfhClGDpZbORgMLhzkFTA3FQPMmYhPB OisILxciOMAEbbsXUji349Kv7IwLhhAdypdKlUGPzfl69SPczd965pmgGNA0/l/7 31NrHccpKwaswtXGicpHkKiSMJPjqIdyrlThkBmVoR2vBnCNWhbNfkNo7PxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Zh80NmrbALnqFXc85OnrbPOC3AwHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJG1vFePShavWQmCoSuJd3r5EjESsp/ofwJ /J/frQ5H8/rNLkyEEPJ3IxUHoOSUvgf3sq1eAVqqh0YuZTT/NxJz08LZvwgenXVf wZOGgkfM2LJI7Sqj4W4xe3SxbSVKwMyEJYU1h+E5zj0ScRLKaJoWBs/Z5Q4gIBTe pLqUj7WIuAGHI8Ge/QIRWxNuA8+JlMzh0BaHWru6XCUzM6Hj9vu+3xnkeT3WBH9x yqYT4jJMMVmvZfx7LU51SEzoDpJCh9bluA2AcesmBmqbwW6xGeo/DrIVEOKVq4Jm bxwhiRYZJmzbTs3GFB+kjP8ImJ9khoQhNwa1JC2YaU2xo1rsL2U= -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:58 2026 by rpki-client