$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: smmgy4I5ihuSaQwDsRUyG6geapTPr+kzjte41XMoo30= Subject key identifier: 37:4F:24:0C:51:96:B6:1B:66:32:17:1A:15:2C:57:65:B2:B0:70:B1 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 7C29890AB4B3A07526D5D578C684036545214037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 03B2 Signing time: Thu 19 Mar 2026 21:41:43 +0000 Manifest this update: Thu 19 Mar 2026 21:36:43 +0000 Manifest next update: Mon 23 Mar 2026 01:26:43 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 2: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 3: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) 4: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: 7InzCf6ksLbQsnUvcO6OinZu/4P+eQ9IHtekVJD7IBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 01:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:29:89:0a:b4:b3:a0:75:26:d5:d5:78:c6:84:03:65:45:21:40:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Mar 19 21:36:43 2026 GMT Not After : Mar 23 01:26:43 2026 GMT Subject: CN=374F240C5196B61B6632171A152C5765B2B070B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:c7:b2:87:62:9d:13:3e:4e:ac:23:c8:c1: 2d:8e:fb:9f:32:a0:96:c3:ba:6f:17:e0:ad:2b:66: dd:9f:12:81:98:91:f8:e7:2b:e0:bf:3a:a4:55:f5: d9:3e:c2:b9:48:59:7b:54:7a:fc:08:04:a7:e6:d5: 0c:0a:1c:af:fd:a0:50:4c:78:6f:b3:06:dc:4d:5e: c2:21:24:72:6f:c3:0b:d7:b3:00:34:60:b7:5e:f8: df:fd:4f:15:b6:ad:de:24:b7:d0:46:8e:fc:12:48: 4a:87:83:00:a2:1e:95:17:70:bf:a6:08:e5:34:fd: 2a:24:10:28:1d:68:90:73:89:53:62:31:b8:91:ad: 82:15:34:25:98:33:b7:35:5b:44:35:c3:80:88:df: e5:d2:77:71:23:b8:92:04:d7:ad:5d:ab:33:39:ef: c6:c5:a3:f7:5f:cd:75:bf:c7:ee:25:64:74:00:b8: 9c:96:cb:2e:b4:0b:d9:6c:fa:63:93:01:b7:d7:bb: 08:2f:c9:4f:76:3b:b5:05:d0:a0:1a:c6:9a:9f:3e: 21:f6:f2:21:85:17:c6:61:2d:9f:31:c0:1c:9f:fe: 8d:53:dd:58:ab:5d:bc:a9:e6:81:43:e2:59:e5:86: 6d:af:24:6b:63:72:89:45:37:67:4d:ad:93:5e:18: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4F:24:0C:51:96:B6:1B:66:32:17:1A:15:2C:57:65:B2:B0:70:B1 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b3:fb:ac:eb:f5:84:cd:75:68:59:d5:9b:6a:fb:86:d4:6a: 5d:78:93:da:0b:36:c1:02:c6:11:84:67:75:27:6f:72:33:e7: 0b:29:6e:71:d3:1f:f3:17:67:b8:36:0a:55:b0:56:b2:f3:03: 25:35:8a:da:9d:39:08:4d:3a:5f:c8:0d:89:f1:f5:66:c3:04: 5c:be:b2:cf:47:9e:e6:48:ae:ef:57:45:17:5c:5a:e1:17:4c: d2:78:fa:9d:a7:44:b1:da:9a:a4:05:42:aa:a1:96:f8:f1:0f: 6d:41:1f:8e:2c:d8:5b:20:91:02:af:50:b8:be:be:19:f1:d2: 5d:92:6c:ef:8b:c9:c4:6c:b7:d1:73:ce:39:69:7e:3e:59:51: e8:fb:9c:56:c2:cd:a9:ae:7b:1f:ed:82:29:b1:8c:b0:dc:4b: 6e:10:d7:f3:5b:8c:6e:83:16:b9:7f:dc:3d:34:a1:21:46:07: e0:7c:64:f2:40:f2:9b:3d:9b:9e:cb:6b:9b:ca:c3:42:df:66: 71:e2:f2:9d:48:33:6c:b5:70:0a:43:a3:87:ed:69:07:b2:25: 63:6f:72:ce:f0:bc:5b:a9:77:e9:e3:56:b0:59:24:f6:6b:f9: b2:a9:c3:b9:68:13:23:56:24:e3:22:27:5a:e9:74:50:99:81: 0d:09:5c:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCmJCrSzoHUm1dV4xoQDZUUhQDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNjAzMTkyMTM2NDNaFw0yNjAzMjMwMTI2NDNaMDMxMTAvBgNV BAMTKDM3NEYyNDBDNTE5NkI2MUI2NjMyMTcxQTE1MkM1NzY1QjJCMDcwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMMeyh2KdEz5OrCPIwS2O+58y oJbDum8X4K0rZt2fEoGYkfjnK+C/OqRV9dk+wrlIWXtUevwIBKfm1QwKHK/9oFBM eG+zBtxNXsIhJHJvwwvXswA0YLde+N/9TxW2rd4kt9BGjvwSSEqHgwCiHpUXcL+m COU0/SokECgdaJBziVNiMbiRrYIVNCWYM7c1W0Q1w4CI3+XSd3EjuJIE161dqzM5 78bFo/dfzXW/x+4lZHQAuJyWyy60C9ls+mOTAbfXuwgvyU92O7UF0KAaxpqfPiH2 8iGFF8ZhLZ8xwByf/o1T3VirXbyp5oFD4lnlhm2vJGtjcolFN2dNrZNeGOdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN08kDFGWthtmMhcaFSxXZbKwcLEwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOz+6zr9YTNdWhZ1Ztq+4bUal14k9oLNsEC xhGEZ3Unb3Iz5wspbnHTH/MXZ7g2ClWwVrLzAyU1itqdOQhNOl/IDYnx9WbDBFy+ ss9HnuZIru9XRRdcWuEXTNJ4+p2nRLHamqQFQqqhlvjxD21BH44s2FsgkQKvULi+ vhnx0l2SbO+LycRst9Fzzjlpfj5ZUej7nFbCzamuex/tgimxjLDcS24Q1/NbjG6D Frl/3D00oSFGB+B8ZPJA8ps9m57La5vKw0LfZnHi8p1IM2y1cApDo4ftaQeyJWNv cs7wvFupd+njVrBZJPZr+bKpw7loEyNWJOMiJ1rpdFCZgQ0JXMg= -----END CERTIFICATE-----Generated at Fri Mar 20 21:58:47 2026 by rpki-client