$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: vUCVYVnLHAw4mGZG23LMZwwkZXHdOQhVGgqgySweBTk= Subject key identifier: 6A:5C:96:A5:ED:41:CB:4C:34:6C:38:28:41:2C:27:9A:EF:F5:8E:6F Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 2572BB77B8D5CD3D69E0CDD10C626969E3F05FC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 025F Signing time: Wed 18 Mar 2026 09:02:51 +0000 Manifest this update: Wed 18 Mar 2026 08:57:51 +0000 Manifest next update: Sat 21 Mar 2026 13:18:51 +0000 Files and hashes: 1: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: FqhPhi/Fvy/5Qn/7iXfZyJ9VLa+ex8q4pacaS18ekGI=) 2: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: qXl6Y01U+k/Ra/QYHsyqr3b9BVCalPhgbHMkcfSQuTM=) 3: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: zwTS0I3yHyTRPMMjOlix3sPU89yfOA8bdamwt+xt3VE=) 4: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 7LVSpHD/+5SvrNtdEAOca6lFeRx3Ycxz9J1G8TF3m/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 13:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:72:bb:77:b8:d5:cd:3d:69:e0:cd:d1:0c:62:69:69:e3:f0:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Mar 18 08:57:51 2026 GMT Not After : Mar 21 13:18:51 2026 GMT Subject: CN=6A5C96A5ED41CB4C346C3828412C279AEFF58E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:44:e2:84:03:7a:c9:a9:22:cb:2f:15:b9: 72:39:28:b5:8e:a6:9b:d9:df:36:c5:6d:20:f4:92: 97:f0:e9:ce:50:47:f7:8b:33:f4:2a:35:70:7d:71: fb:7e:24:09:e8:25:25:30:2c:c5:f6:8e:1b:ff:47: 6c:c5:9b:ea:da:b5:eb:e1:e4:59:64:76:c7:2f:d9: 80:c7:cb:03:24:8f:87:34:ca:b0:68:b9:58:e7:0f: d3:f4:26:5e:7f:58:59:03:5f:3e:61:01:c8:d7:50: b0:fa:fc:1f:93:e0:40:72:9b:9a:87:33:3e:c6:71: 18:17:06:71:0d:b4:c8:7e:1c:1f:e3:8a:86:61:fd: 62:03:a2:b7:05:b8:4c:83:93:5d:f2:b4:08:0f:68: a7:39:09:fb:06:e4:41:7a:ab:d0:a7:d0:40:27:5c: 32:6a:25:1d:28:cb:1b:a8:72:a1:d1:c5:5e:96:a9: 64:eb:73:23:e0:70:26:dd:c5:cb:7b:e8:66:08:1b: 0f:10:cd:c3:33:f8:47:4b:c6:11:7a:41:b6:35:a6: 81:6c:d9:3d:be:07:f2:6a:c3:ee:0e:ec:f2:57:89: 78:2e:10:49:0e:09:4b:0b:21:f7:e8:86:cb:e5:04: bc:f6:eb:b9:1e:1c:66:2c:1f:27:39:d7:7d:c7:1d: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5C:96:A5:ED:41:CB:4C:34:6C:38:28:41:2C:27:9A:EF:F5:8E:6F X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d4:db:fd:39:85:32:e2:b2:b8:96:cf:4a:85:10:4f:45:b7: ca:17:1c:ff:c6:4e:1b:ea:c8:e9:3d:a1:c3:05:50:bc:e7:ed: c8:4e:4a:5b:0d:32:c3:3a:06:c4:36:05:f3:43:be:07:47:ce: 7e:8f:2c:f3:09:3e:6c:ad:64:8c:89:65:ad:bc:3b:16:9e:66: f3:c1:fa:ef:76:ec:00:03:32:50:58:bb:2a:fa:ad:14:52:0b: 7c:71:8d:d3:bc:17:0f:3a:94:ac:28:70:1a:22:01:61:48:b9: 79:1b:14:45:cf:44:e5:bc:5c:ea:be:31:cc:d7:05:df:6a:a3: e6:b5:63:16:62:a0:81:56:fc:30:e8:3d:25:7b:d4:0e:bf:f8: ac:64:21:0c:1e:95:09:c1:8f:fb:91:42:77:a8:58:6b:37:74: a2:1d:fa:44:3e:7e:90:7c:96:a3:d6:52:97:50:4c:62:78:3e: 16:30:9c:a1:d7:88:d6:fe:05:19:f1:eb:15:91:4e:dd:53:df: 0d:c3:4b:bb:e9:90:b0:c2:56:e4:79:72:ac:c2:55:90:44:8e: a3:a4:e1:51:c3:b5:6e:51:6f:bf:3f:a6:77:ea:64:9d:43:00: 3c:6a:6c:34:42:ac:67:7e:b5:ab:7c:a0:8e:35:37:31:ad:ad: e8:4e:c2:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXK7d7jVzT1p4M3RDGJpaePwX8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNjAzMTgwODU3NTFaFw0yNjAzMjExMzE4NTFaMDMxMTAvBgNV BAMTKDZBNUM5NkE1RUQ0MUNCNEMzNDZDMzgyODQxMkMyNzlBRUZGNThFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdiETihAN6yakiyy8VuXI5KLWO ppvZ3zbFbSD0kpfw6c5QR/eLM/QqNXB9cft+JAnoJSUwLMX2jhv/R2zFm+ratevh 5Flkdscv2YDHywMkj4c0yrBouVjnD9P0Jl5/WFkDXz5hAcjXULD6/B+T4EBym5qH Mz7GcRgXBnENtMh+HB/jioZh/WIDorcFuEyDk13ytAgPaKc5CfsG5EF6q9Cn0EAn XDJqJR0oyxuocqHRxV6WqWTrcyPgcCbdxct76GYIGw8QzcMz+EdLxhF6QbY1poFs 2T2+B/Jqw+4O7PJXiXguEEkOCUsLIffohsvlBLz267keHGYsHyc5133HHRCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUalyWpe1By0w0bDgoQSwnmu/1jm8wHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPU2/05hTLisriWz0qFEE9Ft8oXHP/GThvq yOk9ocMFULzn7chOSlsNMsM6BsQ2BfNDvgdHzn6PLPMJPmytZIyJZa28OxaeZvPB +u927AADMlBYuyr6rRRSC3xxjdO8Fw86lKwocBoiAWFIuXkbFEXPROW8XOq+MczX Bd9qo+a1YxZioIFW/DDoPSV71A6/+KxkIQwelQnBj/uRQneoWGs3dKId+kQ+fpB8 lqPWUpdQTGJ4PhYwnKHXiNb+BRnx6xWRTt1T3w3DS7vpkLDCVuR5cqzCVZBEjqOk 4VHDtW5Rb78/pnfqZJ1DADxqbDRCrGd+tat8oI41NzGtrehOwrs= -----END CERTIFICATE-----Generated at Fri Mar 20 12:38:25 2026 by rpki-client