$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: iB1OrAMQ7W/JftPSKn0bJHzf0HXB0rip8FlIoPiCzKI= Subject key identifier: C2:70:B9:0A:82:5C:FE:EC:F0:27:50:F7:7B:86:E4:BB:12:21:D2:BA Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 527A7BCE8D4B7D47426F43E4849B76257A8AAEEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 0320 Signing time: Mon 02 Mar 2026 09:10:01 +0000 Manifest this update: Mon 02 Mar 2026 09:05:01 +0000 Manifest next update: Thu 05 Mar 2026 13:30:01 +0000 Files and hashes: 1: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: e2maHu55FP5fp6lO5LJsBGEPwnDr2gnnfc83H1faNCM=) 2: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: 4JtGCCb33vrS5kqA1cbXSk3EPFp6HTd+qPT1Q/dg38s=) 3: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: d1fVTMXux6rsxs5u7mFPK2SAxfogfDLQrrOtADDQDa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7a:7b:ce:8d:4b:7d:47:42:6f:43:e4:84:9b:76:25:7a:8a:ae:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Mar 2 09:05:01 2026 GMT Not After : Mar 5 13:30:01 2026 GMT Subject: CN=C270B90A825CFEECF02750F77B86E4BB1221D2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:1a:31:94:fd:79:98:3a:2c:a6:9c:64:7f: f9:8c:ec:6f:54:9a:2a:68:75:c9:e7:89:d9:22:71: 26:9e:00:b3:96:39:1e:0d:2c:7a:5e:8b:50:29:57: ef:9e:1d:54:b3:30:3d:a0:7c:ae:89:20:b2:1e:ef: 36:a0:8c:f5:eb:77:ec:8b:30:8b:e3:40:9a:21:4b: a6:5b:72:f1:d9:23:31:33:76:eb:d9:48:e6:3e:2c: c9:1b:67:c6:57:b4:23:bf:c4:9c:3a:65:6b:24:9b: 20:63:5f:90:b3:40:f5:19:5b:b4:5e:e9:96:a6:b7: c8:16:d2:3d:54:5a:97:e3:92:ea:5a:2e:04:02:92: 4e:18:5f:28:6f:5f:6f:e5:97:73:52:04:e4:ca:ad: 43:44:4a:ee:82:8a:20:32:de:96:97:aa:f0:ca:87: 09:e2:ae:5f:f0:19:a0:d4:6c:da:36:9a:07:e0:d1: 35:1a:fe:f0:fe:b5:8c:ae:f4:83:31:d8:e2:26:82: f7:fc:95:36:fe:8f:af:5a:57:cb:9a:e7:41:36:2a: c8:26:b4:a0:bc:2a:56:bf:c5:45:25:b2:08:9d:f1: 7b:d8:ee:7a:b3:db:36:13:03:f5:ac:41:a2:fb:27: 58:f2:db:8d:e9:40:fe:d9:d9:1b:39:81:cd:38:21: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:70:B9:0A:82:5C:FE:EC:F0:27:50:F7:7B:86:E4:BB:12:21:D2:BA X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a4:94:fa:7a:02:1c:e6:5f:73:7c:04:cf:82:d0:57:80:4b: e3:a4:b3:60:49:ea:ac:0e:26:b4:39:77:b5:94:9b:f4:61:7a: 8c:0a:b8:4d:ce:d5:62:07:a1:91:9b:da:4b:2e:7e:0d:fe:60: f6:2a:81:9c:ef:b2:54:b6:53:62:16:58:73:19:a0:05:10:14: f0:c5:5d:21:d6:89:1c:67:cc:59:f4:e0:ad:e5:21:16:97:4c: f6:ba:46:1e:23:62:a3:c5:71:11:89:a7:bf:be:fd:9a:a5:8c: 3b:6d:d8:fa:16:5f:c9:26:52:59:30:11:51:e6:bd:7e:69:1c: 92:c7:6c:08:c2:8e:e4:20:4d:55:c4:6a:22:0e:a7:b6:10:b9: 3b:bb:f9:64:d0:a0:84:31:cb:d1:94:ec:42:8e:35:86:60:1b: 9a:de:b6:99:63:f1:9e:63:75:00:f6:d2:a9:24:ec:a8:c4:21: 4a:2f:f5:8e:44:fb:88:a8:3d:6e:d8:3c:65:d2:d2:2c:8d:a4: 73:ef:39:88:47:62:3a:1e:be:f5:d1:38:d2:3b:d0:52:f0:c7: 07:49:1e:e9:44:08:11:ca:91:c3:d6:3b:ca:a5:4c:6c:df:2e: 9c:b2:23:14:da:75:fe:a4:19:e8:0a:e1:ff:8f:65:d1:ce:fe: dc:90:86:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnp7zo1LfUdCb0PkhJt2JXqKru4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNjAzMDIwOTA1MDFaFw0yNjAzMDUxMzMwMDFaMDMxMTAvBgNV BAMTKEMyNzBCOTBBODI1Q0ZFRUNGMDI3NTBGNzdCODZFNEJCMTIyMUQyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnxoxlP15mDosppxkf/mM7G9U mipodcnnidkicSaeALOWOR4NLHpei1ApV++eHVSzMD2gfK6JILIe7zagjPXrd+yL MIvjQJohS6ZbcvHZIzEzduvZSOY+LMkbZ8ZXtCO/xJw6ZWskmyBjX5CzQPUZW7Re 6Zamt8gW0j1UWpfjkupaLgQCkk4YXyhvX2/ll3NSBOTKrUNESu6CiiAy3paXqvDK hwnirl/wGaDUbNo2mgfg0TUa/vD+tYyu9IMx2OImgvf8lTb+j69aV8ua50E2Ksgm tKC8Kla/xUUlsgid8XvY7nqz2zYTA/WsQaL7J1jy243pQP7Z2Rs5gc04IRZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwnC5CoJc/uzwJ1D3e4bkuxIh0rowHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaklPp6AhzmX3N8BM+C0FeAS+Oks2BJ6qwO JrQ5d7WUm/RheowKuE3O1WIHoZGb2ksufg3+YPYqgZzvslS2U2IWWHMZoAUQFPDF XSHWiRxnzFn04K3lIRaXTPa6Rh4jYqPFcRGJp7++/ZqljDtt2PoWX8kmUlkwEVHm vX5pHJLHbAjCjuQgTVXEaiIOp7YQuTu7+WTQoIQxy9GU7EKONYZgG5retplj8Z5j dQD20qkk7KjEIUov9Y5E+4ioPW7YPGXS0iyNpHPvOYhHYjoevvXRONI70FLwxwdJ HulECBHKkcPWO8qlTGzfLpyyIxTadf6kGegK4f+PZdHO/tyQhpA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:09 2026 by rpki-client