$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: 62LQ+1ONefMh0P/TLeAFkW9gHLDpJP1T7vdMfcsFQy8= Subject key identifier: 43:99:D0:A3:BF:E2:05:F8:4E:5E:C0:80:EC:9E:B0:9C:FF:B8:EC:F6 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 75B4B0606E0AA92D11B6A0B03380A6E99BAB589A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 021E Signing time: Sun 01 Mar 2026 20:11:48 +0000 Manifest this update: Sun 01 Mar 2026 20:06:48 +0000 Manifest next update: Thu 05 Mar 2026 04:31:48 +0000 Files and hashes: 1: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: yiken4JBDX/8m7zKkkFXN9xAbVP966bXl4T0/wSLG0c=) 2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b4:b0:60:6e:0a:a9:2d:11:b6:a0:b0:33:80:a6:e9:9b:ab:58:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Mar 1 20:06:48 2026 GMT Not After : Mar 5 04:31:48 2026 GMT Subject: CN=4399D0A3BFE205F84E5EC080EC9EB09CFFB8ECF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:37:3a:e8:8c:65:4e:0f:7a:2f:3a:bd:94: ed:8d:be:16:29:d3:a7:b7:8d:9f:52:88:bc:ec:b5: 47:93:64:4d:ff:9b:c1:4b:6f:11:b0:01:a2:88:6b: 99:ef:4b:8a:9a:92:5d:0d:dd:be:e9:64:d6:19:36: 50:8d:83:ad:78:2c:93:7c:1e:5e:24:c8:78:e0:1d: 5e:4a:7c:27:d9:85:1d:be:a8:9f:e4:bb:e6:5e:f3: 33:ec:07:9f:75:7a:30:87:03:c0:00:a5:f4:8c:3f: 25:3f:fe:f0:bd:f0:5a:a5:64:be:26:92:36:8f:c3: f4:1a:02:81:a3:ed:f5:8f:c7:a4:3b:88:39:83:62: 5e:12:47:a3:02:3d:79:cc:76:12:ee:5f:18:a6:a7: 2f:f8:3f:dd:de:72:49:3b:fa:8f:42:17:d7:6d:7c: 65:88:54:67:9b:e5:a9:f6:2b:97:2c:db:bf:6a:22: 68:f6:90:34:44:8a:a5:6e:10:9d:fe:b8:90:41:ae: eb:8d:3c:c0:0e:ea:55:20:57:9d:f1:fa:29:a0:a4: 04:aa:53:15:15:0a:41:dc:0d:7d:bc:c0:bd:b2:d6: 99:a2:5c:bb:e3:12:64:25:3b:d5:b8:2a:79:23:70: 69:26:9e:f2:9e:63:c1:38:62:a8:3f:89:90:55:b1: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:99:D0:A3:BF:E2:05:F8:4E:5E:C0:80:EC:9E:B0:9C:FF:B8:EC:F6 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:8b:51:20:ac:d7:37:8b:18:9e:8d:97:3f:60:22:ab:eb:8b: de:52:ed:b4:2a:fb:90:e5:c4:90:a4:d8:e6:05:e1:e8:59:b6: c4:c5:0f:ab:71:06:e3:5a:aa:44:e1:4d:7c:c3:b8:4b:06:ff: 44:34:03:4c:3c:93:0a:94:7f:2a:de:43:94:0c:c7:a1:2a:5b: 32:5e:d0:71:f8:be:7a:82:ac:a6:c8:b1:08:44:b2:ca:57:aa: 78:90:3b:2a:09:7d:d5:34:06:5a:82:a5:88:39:94:3d:b1:7c: 67:10:10:8a:27:24:fc:7b:09:08:3a:d5:bd:1f:7a:a0:13:75: d4:2b:c9:b2:ba:7d:8d:85:05:f2:10:6d:0c:47:5d:37:be:96: fa:4a:5e:2c:88:73:db:e1:bf:0b:5f:35:e7:8c:84:4a:5e:44: a5:33:df:a8:3e:8f:e0:2b:ef:69:ad:dc:27:71:7e:35:6f:bf: 46:78:35:10:d3:fe:2a:e1:8f:58:61:55:10:0a:f3:18:4b:cd: 8a:b5:ec:6b:14:36:7b:e0:dd:71:3c:e2:7f:0f:43:7e:c1:56: 4f:16:0c:8c:6c:ab:93:cf:6d:04:22:d0:2c:42:6c:5f:22:fa: 33:e4:e7:f1:8e:c9:76:63:cd:cc:f7:2a:a8:cf:b1:13:c0:16: cb:ca:eb:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbSwYG4KqS0RtqCwM4Cm6ZurWJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNjAzMDEyMDA2NDhaFw0yNjAzMDUwNDMxNDhaMDMxMTAvBgNV BAMTKDQzOTlEMEEzQkZFMjA1Rjg0RTVFQzA4MEVDOUVCMDlDRkZCOEVDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/zc66IxlTg96Lzq9lO2NvhYp 06e3jZ9SiLzstUeTZE3/m8FLbxGwAaKIa5nvS4qakl0N3b7pZNYZNlCNg614LJN8 Hl4kyHjgHV5KfCfZhR2+qJ/ku+Ze8zPsB591ejCHA8AApfSMPyU//vC98FqlZL4m kjaPw/QaAoGj7fWPx6Q7iDmDYl4SR6MCPXnMdhLuXximpy/4P93eckk7+o9CF9dt fGWIVGeb5an2K5cs279qImj2kDREiqVuEJ3+uJBBruuNPMAO6lUgV53x+imgpASq UxUVCkHcDX28wL2y1pmiXLvjEmQlO9W4KnkjcGkmnvKeY8E4Yqg/iZBVsf99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5nQo7/iBfhOXsCA7J6wnP+47PYwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANaLUSCs1zeLGJ6Nlz9gIqvri95S7bQq+5Dl xJCk2OYF4ehZtsTFD6txBuNaqkThTXzDuEsG/0Q0A0w8kwqUfyreQ5QMx6EqWzJe 0HH4vnqCrKbIsQhEsspXqniQOyoJfdU0BlqCpYg5lD2xfGcQEIonJPx7CQg61b0f eqATddQrybK6fY2FBfIQbQxHXTe+lvpKXiyIc9vhvwtfNeeMhEpeRKUz36g+j+Ar 72mt3CdxfjVvv0Z4NRDT/irhj1hhVRAK8xhLzYq17GsUNnvg3XE84n8PQ37BVk8W DIxsq5PPbQQi0CxCbF8i+jPk5/GOyXZjzcz3KqjPsRPAFsvK6+M= -----END CERTIFICATE-----Generated at Mon Mar 2 19:51:39 2026 by rpki-client