$ rpki-client -vvf repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft File: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft (raw, json) Hash identifier: 2HCob1Uc/gE+HoG9T1IJvPXNqRdTufNjN0DFh2h5udw= Subject key identifier: 1E:78:F4:EF:C0:1F:4A:AE:78:1A:2F:8D:E8:34:B7:9F:88:E6:5D:BB Authority key identifier: 63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 Certificate issuer: /CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Certificate serial: 6212E62A7CA15830D0718D66C9195D6ED11E8CD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft Manifest number: 0554 Signing time: Sun 01 Mar 2026 03:12:10 +0000 Manifest this update: Sun 01 Mar 2026 03:07:10 +0000 Manifest next update: Wed 04 Mar 2026 09:10:10 +0000 Files and hashes: 1: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: wsoWIFyHCCxFH3XNJUeG9ugUuWzjgmc/VUDFsG2yPyg=) 2: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl (hash: wkf8+57sAc/oXKomOUP+dUiMm7zykiZFlni22LTn63I=) 3: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: wXEz476nIlWr9YPVy2btympb5pWVJFYVSK12JD1WOHw=) 4: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: SbBH9iTpUtpzzN5O4OhEDgeY5fcovsIykBLv8n0W4Zc=) 5: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: o6odkvAl/hKTp4KI63oh9m6EF8ypSkoU3xcKf1Jgr6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:12:e6:2a:7c:a1:58:30:d0:71:8d:66:c9:19:5d:6e:d1:1e:8c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Validity Not Before: Mar 1 03:07:10 2026 GMT Not After : Mar 4 09:10:10 2026 GMT Subject: CN=1E78F4EFC01F4AAE781A2F8DE834B79F88E65DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:fe:c6:74:29:1b:79:d6:a9:e8:33:b2:95: 20:65:80:2d:c7:1f:aa:65:36:5c:c0:05:a5:ab:b3: 42:09:0f:3a:cf:8d:43:7c:83:64:7d:15:5d:05:12: 3c:3b:db:6b:d4:df:38:df:77:6d:71:6d:24:69:a2: 4e:2e:b8:a5:b6:8a:a1:0a:9f:d2:eb:be:bb:40:88: 4f:99:93:fb:7b:17:38:bf:b3:38:9c:88:88:10:db: b5:49:cd:59:d7:81:02:b4:7f:8d:3f:6e:2f:07:9c: 6c:ae:f9:93:40:24:65:a7:bd:76:ae:09:07:28:0c: 1a:3d:f1:56:7b:b2:cc:bd:45:64:3d:b3:e9:c0:56: 25:4d:2c:45:f5:c1:28:b3:42:66:c1:c1:0b:c2:a1: 26:19:f3:a3:68:3c:76:8a:a5:9b:c9:ca:8c:ae:54: 82:32:ce:f6:62:44:e3:5e:d4:5b:d3:9e:0f:df:91: c2:74:70:c3:79:6b:d2:68:9e:b3:53:03:36:d5:6b: 11:d3:ae:3b:4d:e3:f2:43:02:30:90:e7:58:7a:3e: 7f:63:83:e2:95:17:9b:08:41:56:63:e5:8b:a0:1a: da:ff:b2:26:86:c2:0b:de:b5:8b:bc:e3:bf:cd:ad: 2c:96:b2:c9:86:cc:49:29:93:ec:a0:28:54:85:ca: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:78:F4:EF:C0:1F:4A:AE:78:1A:2F:8D:E8:34:B7:9F:88:E6:5D:BB X509v3 Authority Key Identifier: keyid:63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:cf:d1:f8:4e:d1:23:43:bc:48:57:40:3d:47:08:04:07:4c: 10:06:e1:8e:b4:0a:fd:03:66:db:30:53:87:4b:ae:b5:bb:fb: 20:bf:2b:7c:18:68:61:d4:ed:4c:0a:d0:de:a7:3f:17:3f:f0: ec:07:1c:cd:3d:5e:1a:ff:fe:94:3a:eb:80:29:e7:b7:75:55: 55:78:e3:47:06:ef:1e:8c:72:04:0b:56:1f:1d:9b:4b:c2:12: 78:db:74:98:0f:a6:9f:29:d1:ae:4d:a5:c7:42:f2:2d:c8:d2: 2d:0e:d0:f1:c8:36:65:e8:af:93:ee:74:62:8d:14:83:f5:c6: e6:a4:5b:fa:d4:e3:49:e1:75:d9:ec:30:d3:e6:4e:ac:f0:e2: 91:06:80:39:fa:69:78:72:24:ca:b8:04:bb:a8:7f:ce:4a:6a: 52:ee:cc:17:69:ff:e3:35:3d:45:51:f8:cf:16:3b:c2:fc:cb: 84:13:26:fe:35:a1:35:c8:c6:3e:ec:e2:cf:30:01:bf:6f:d0: 75:d8:04:dd:43:86:34:35:50:28:9b:18:82:17:79:5e:06:7a: d1:7a:cd:0b:6c:8f:a1:9f:40:f1:70:6e:97:ec:85:48:b7:08: 64:dd:2e:cf:d7:b6:98:b5:e4:47:22:2c:b9:6f:e6:c1:ce:dd: 27:cd:b3:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhLmKnyhWDDQcY1myRldbtEejNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4 NzlBNzRFNTAeFw0yNjAzMDEwMzA3MTBaFw0yNjAzMDQwOTEwMTBaMDMxMTAvBgNV BAMTKDFFNzhGNEVGQzAxRjRBQUU3ODFBMkY4REU4MzRCNzlGODhFNjVEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPf7GdCkbedap6DOylSBlgC3H H6plNlzABaWrs0IJDzrPjUN8g2R9FV0FEjw722vU3zjfd21xbSRpok4uuKW2iqEK n9LrvrtAiE+Zk/t7Fzi/sziciIgQ27VJzVnXgQK0f40/bi8HnGyu+ZNAJGWnvXau CQcoDBo98VZ7ssy9RWQ9s+nAViVNLEX1wSizQmbBwQvCoSYZ86NoPHaKpZvJyoyu VIIyzvZiRONe1FvTng/fkcJ0cMN5a9JonrNTAzbVaxHTrjtN4/JDAjCQ51h6Pn9j g+KVF5sIQVZj5YugGtr/siaGwgvetYu847/NrSyWssmGzEkpk+ygKFSFysH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnj078AfSq54Gi+N6DS3n4jmXbswHwYDVR0j BBgwFoAUYxm3f9jrfslo3Vn+lK4UaoeadOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjU0MmJjNC03NGRjLTQ1ZGQtYjY1OS03NDVjYTJhY2EzMzMvMC82MzE5Qjc3RkQ4 RUI3RUM5NjhERDU5RkU5NEFFMTQ2QTg3OUE3NEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4NzlB NzRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0 NkE4NzlBNzRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXP0fhO0SNDvEhXQD1HCAQHTBAG4Y60Cv0D ZtswU4dLrrW7+yC/K3wYaGHU7UwK0N6nPxc/8OwHHM09Xhr//pQ664Ap57d1VVV4 40cG7x6McgQLVh8dm0vCEnjbdJgPpp8p0a5NpcdC8i3I0i0O0PHINmXor5PudGKN FIP1xuakW/rU40nhddnsMNPmTqzw4pEGgDn6aXhyJMq4BLuof85KalLuzBdp/+M1 PUVR+M8WO8L8y4QTJv41oTXIxj7s4s8wAb9v0HXYBN1DhjQ1UCibGIIXeV4GetF6 zQtsj6GfQPFwbpfshUi3CGTdLs/Xtpi15EciLLlv5sHO3SfNs0w= -----END CERTIFICATE-----Generated at Mon Mar 2 00:29:42 2026 by rpki-client