$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: qgVtj020SnuUj7pyRlu6ZVdt2unz8hGYZVrkjc2fPM8= Subject key identifier: AC:50:16:79:FA:7A:7D:CD:42:F9:C1:24:AC:9E:D9:ED:1E:C5:37:1C Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 3D1DF0BB5D0119464F9C8A14C1B8C6D0FF0A2A62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 024C Signing time: Sun 01 Mar 2026 22:32:15 +0000 Manifest this update: Sun 01 Mar 2026 22:27:15 +0000 Manifest next update: Thu 05 Mar 2026 04:09:15 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) 2: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: NqW+awwwSN2jL1Ef9v7UnwLHlM+l+SQwR8VTzmK7WzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1d:f0:bb:5d:01:19:46:4f:9c:8a:14:c1:b8:c6:d0:ff:0a:2a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Mar 1 22:27:15 2026 GMT Not After : Mar 5 04:09:15 2026 GMT Subject: CN=AC501679FA7A7DCD42F9C124AC9ED9ED1EC5371C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:ce:7a:05:93:87:a2:2a:40:2d:a9:e7:78: 5b:d6:d7:c9:d3:62:30:70:8d:54:ae:34:68:8b:ab: c0:57:58:82:ce:ae:30:2c:eb:df:82:a2:82:cc:84: b2:f7:80:9d:4e:f4:8f:f5:df:a3:a4:ab:44:d8:dd: c4:f2:6c:bb:03:79:a0:65:0a:f7:b7:bb:4c:1f:9f: 3c:12:97:e9:6c:51:6d:df:9b:9a:05:c4:66:d2:d4: 92:59:a5:83:37:b0:c3:ee:95:a2:43:ae:c0:53:4b: 8b:f0:46:bd:35:ff:f6:14:bb:22:cd:a5:3f:9b:18: 22:fb:5a:20:e2:75:74:b1:43:0c:c8:f9:03:6c:f7: cc:03:5c:e4:dd:9d:19:22:aa:45:6d:d3:c5:e6:f5: 0b:f6:81:ce:35:87:d8:ba:3c:28:86:ca:94:5c:02: 6b:18:da:e3:eb:76:4f:38:d3:50:80:15:16:23:9a: 22:ee:c2:59:89:3e:1e:20:ec:f9:86:ca:80:20:6b: dc:81:c4:50:93:88:4c:24:43:dc:57:51:be:7d:d2: cc:16:c9:04:29:84:d6:22:a2:a5:f8:d2:f4:97:98: d1:ec:08:34:c4:f1:3c:1b:0a:2a:a3:5c:9f:82:2d: 5f:8f:17:2e:cd:8b:41:03:fa:e7:42:04:09:e2:63: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:50:16:79:FA:7A:7D:CD:42:F9:C1:24:AC:9E:D9:ED:1E:C5:37:1C X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b9:9d:d2:d8:6a:5e:6a:61:f4:1e:7d:9c:97:28:80:3a:a2: 2e:c7:5c:6a:e1:b0:47:b2:80:f2:60:df:5e:1e:db:3b:9d:99: 1b:94:1a:40:18:15:78:9c:b1:98:09:ab:1f:23:e0:56:d1:be: 99:66:5a:4c:6f:e0:fb:a8:10:44:ed:c2:e2:ac:29:43:b8:fa: 6a:16:5f:db:36:38:48:d3:eb:95:ed:f1:d7:12:de:64:34:d3: 63:aa:91:96:28:3b:ca:3a:8c:89:56:8c:e9:68:62:78:c0:d9: c3:0f:eb:22:72:5c:2b:90:55:ed:58:f6:0e:ab:f9:7a:ef:f2: 6f:0b:de:91:42:1c:00:28:d9:a6:d8:22:f2:49:6f:92:f1:4a: f0:d0:f1:17:43:21:1b:d7:c9:fc:b3:25:43:ac:f9:28:e0:04: ab:0e:33:3f:5b:2c:80:be:47:7d:5a:7e:06:a6:05:35:49:d6: 6e:87:04:7e:b4:08:6f:82:08:af:c3:6c:b8:cb:1a:61:cf:aa: 58:1f:7b:fe:2a:11:e3:9a:42:a4:ad:a5:87:30:3b:9e:9e:9d: 75:5a:fb:3d:e7:d4:c7:a7:93:70:c7:70:7b:a9:72:7a:63:ba: 9b:17:2d:69:ee:7b:ac:94:4f:cb:ea:d5:f9:13:ea:29:58:c3: d3:76:2d:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPR3wu10BGUZPnIoUwbjG0P8KKmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNjAzMDEyMjI3MTVaFw0yNjAzMDUwNDA5MTVaMDMxMTAvBgNV BAMTKEFDNTAxNjc5RkE3QTdEQ0Q0MkY5QzEyNEFDOUVEOUVEMUVDNTM3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9856BZOHoipALanneFvW18nT YjBwjVSuNGiLq8BXWILOrjAs69+CooLMhLL3gJ1O9I/136Okq0TY3cTybLsDeaBl Cve3u0wfnzwSl+lsUW3fm5oFxGbS1JJZpYM3sMPulaJDrsBTS4vwRr01//YUuyLN pT+bGCL7WiDidXSxQwzI+QNs98wDXOTdnRkiqkVt08Xm9Qv2gc41h9i6PCiGypRc AmsY2uPrdk8401CAFRYjmiLuwlmJPh4g7PmGyoAga9yBxFCTiEwkQ9xXUb590swW yQQphNYioqX40vSXmNHsCDTE8TwbCiqjXJ+CLV+PFy7Ni0ED+udCBAniY8qXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFAWefp6fc1C+cEkrJ7Z7R7FNxwwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm5ndLYal5qYfQefZyXKIA6oi7HXGrhsEey gPJg314e2zudmRuUGkAYFXicsZgJqx8j4FbRvplmWkxv4PuoEETtwuKsKUO4+moW X9s2OEjT65Xt8dcS3mQ002OqkZYoO8o6jIlWjOloYnjA2cMP6yJyXCuQVe1Y9g6r +Xrv8m8L3pFCHAAo2abYIvJJb5LxSvDQ8RdDIRvXyfyzJUOs+SjgBKsOMz9bLIC+ R31afgamBTVJ1m6HBH60CG+CCK/DbLjLGmHPqlgfe/4qEeOaQqStpYcwO56enXVa +z3n1Menk3DHcHupcnpjupsXLWnue6yUT8vq1fkT6ilYw9N2Ldg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:01:25 2026 by rpki-client