$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: PkoMh7ojEmjW2gCV80eOK3+mFswY5G/RyRvlSuSlXzo= Subject key identifier: 7F:D3:AA:4D:B7:A9:CE:E2:D2:D7:5A:51:B7:7D:BC:BC:78:97:88:13 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 7C88731DEBB66BF94F0EFF896A1778E723778746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 0103 Signing time: Sun 01 Mar 2026 19:20:51 +0000 Manifest this update: Sun 01 Mar 2026 19:15:51 +0000 Manifest next update: Thu 05 Mar 2026 02:05:51 +0000 Files and hashes: 1: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: I/vEC0QnGVKamlx57OBftLpx/lC+sqATAoHw+6tPgEs=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:88:73:1d:eb:b6:6b:f9:4f:0e:ff:89:6a:17:78:e7:23:77:87:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Mar 1 19:15:51 2026 GMT Not After : Mar 5 02:05:51 2026 GMT Subject: CN=7FD3AA4DB7A9CEE2D2D75A51B77DBCBC78978813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:ce:71:0e:6c:43:d8:b4:f4:ce:4e:26:5c: a6:aa:b7:4e:45:71:c0:97:78:89:ea:03:f2:f7:fc: dc:5d:79:13:dd:a7:55:e1:ee:67:b0:12:3d:65:c7: 39:38:f1:92:1d:f6:ad:88:ef:f2:d7:4d:69:64:35: c3:61:83:01:aa:87:e5:d2:26:3f:07:d1:0f:8a:19: 89:66:60:7b:a9:94:e3:28:42:6d:8c:48:22:d7:ec: f8:14:33:e0:7f:8e:be:c8:d6:ae:1f:e9:9f:77:9e: 96:9f:00:1d:9a:4d:b9:2f:5d:8c:a6:1c:60:fb:83: 4a:b3:28:ce:36:7f:c1:86:93:60:c6:34:56:5a:50: 32:e8:41:9e:88:72:0e:49:00:25:84:ad:4b:c4:88: cf:4b:47:21:1a:9a:9b:e7:8d:92:11:be:17:da:6b: 04:60:87:46:0c:54:68:34:98:4d:a7:be:a6:e5:9c: ca:ba:b0:2f:52:c6:2a:6c:02:d9:f2:b8:63:27:74: a6:fb:be:85:f9:76:f1:22:be:6c:71:e9:05:e2:b6: cd:5c:9d:82:de:00:f4:74:a9:2b:d9:11:06:17:10: c3:d0:62:83:52:d2:4d:39:5c:61:82:a6:06:76:fb: ff:a0:68:59:b5:88:25:9e:2c:09:11:9c:08:48:82: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:AA:4D:B7:A9:CE:E2:D2:D7:5A:51:B7:7D:BC:BC:78:97:88:13 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:60:83:5c:69:3a:83:00:bb:de:a1:05:6e:ec:6e:19:86:5e: 42:ff:3c:56:45:ec:28:0e:21:76:7f:fa:66:80:07:4c:e8:13: e5:f9:b8:68:eb:34:f1:18:34:9d:6a:cd:6d:5b:b7:3f:6e:35: 1b:2f:3a:3e:a1:9c:46:21:f0:17:9a:4c:e5:14:c2:54:e0:4a: 86:45:cd:72:ef:3d:37:e7:21:38:56:a5:2f:49:91:2e:30:bc: f2:ab:ed:89:0a:42:67:28:5b:c9:b9:53:e9:30:57:16:a0:6c: 52:e3:94:21:2b:ca:13:db:37:28:14:fb:ac:e7:99:44:fd:ef: 31:eb:91:f2:ba:c2:f4:cd:51:1d:39:0b:61:34:8b:42:ae:68: 5d:3b:77:e6:84:74:f5:d0:5c:ec:4d:2c:2c:b9:7f:29:4d:18: 3f:00:d2:04:04:cb:98:85:cb:83:b8:e4:59:b0:c3:a5:b5:0d: 26:85:de:3d:de:07:a7:47:b8:3a:ac:27:dd:4f:d1:4c:7c:3c: 54:60:8b:64:47:73:be:4f:ff:df:f4:20:cc:ba:eb:b8:67:51: 09:1a:17:e4:d6:18:f6:3a:f1:da:eb:d3:6c:dd:b9:dc:3e:0b: 3d:cc:ee:50:25:76:f5:93:2b:ad:bd:4c:43:f5:a4:c0:fb:a1: fb:95:3e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIhzHeu2a/lPDv+Jahd45yN3h0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNjAzMDExOTE1NTFaFw0yNjAzMDUwMjA1NTFaMDMxMTAvBgNV BAMTKDdGRDNBQTREQjdBOUNFRTJEMkQ3NUE1MUI3N0RCQ0JDNzg5Nzg4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aM5xDmxD2LT0zk4mXKaqt05F ccCXeInqA/L3/NxdeRPdp1Xh7mewEj1lxzk48ZId9q2I7/LXTWlkNcNhgwGqh+XS Jj8H0Q+KGYlmYHuplOMoQm2MSCLX7PgUM+B/jr7I1q4f6Z93npafAB2aTbkvXYym HGD7g0qzKM42f8GGk2DGNFZaUDLoQZ6Icg5JACWErUvEiM9LRyEampvnjZIRvhfa awRgh0YMVGg0mE2nvqblnMq6sC9SxipsAtnyuGMndKb7voX5dvEivmxx6QXits1c nYLeAPR0qSvZEQYXEMPQYoNS0k05XGGCpgZ2+/+gaFm1iCWeLAkRnAhIgkvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9OqTbepzuLS11pRt328vHiXiBMwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNgg1xpOoMAu96hBW7sbhmGXkL/PFZF7CgO IXZ/+maAB0zoE+X5uGjrNPEYNJ1qzW1btz9uNRsvOj6hnEYh8BeaTOUUwlTgSoZF zXLvPTfnIThWpS9JkS4wvPKr7YkKQmcoW8m5U+kwVxagbFLjlCEryhPbNygU+6zn mUT97zHrkfK6wvTNUR05C2E0i0KuaF07d+aEdPXQXOxNLCy5fylNGD8A0gQEy5iF y4O45Fmww6W1DSaF3j3eB6dHuDqsJ91P0Ux8PFRgi2RHc75P/9/0IMy667hnUQka F+TWGPY68drr02zdudw+Cz3M7lAldvWTK629TEP1pMD7ofuVPv4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:24 2026 by rpki-client