$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: OgLw7Rl8eajICcNOJcCK3xy1e+FYgMlVvhqZVl6nHNg= Subject key identifier: 7D:4E:3F:E3:87:D3:B6:D3:36:66:37:70:50:0F:A4:00:8D:1C:31:B1 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 211C146810D7CD204FD66D5B05704735C48095DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 055B Signing time: Wed 18 Mar 2026 05:31:00 +0000 Manifest this update: Wed 18 Mar 2026 05:26:00 +0000 Manifest next update: Sat 21 Mar 2026 15:42:00 +0000 Files and hashes: 1: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 2: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) 4: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: tdYxFcEeMOEqllG/nV4xHsgOiqXSAkAPSkOhYFq6j4o=) 5: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 15:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1c:14:68:10:d7:cd:20:4f:d6:6d:5b:05:70:47:35:c4:80:95:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Mar 18 05:26:00 2026 GMT Not After : Mar 21 15:42:00 2026 GMT Subject: CN=7D4E3FE387D3B6D336663770500FA4008D1C31B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:79:b6:5a:41:92:c0:67:7d:eb:d5:db:34: 23:ed:bd:67:b6:6c:3f:46:06:4c:3f:3d:c8:7f:a4: af:b0:a2:68:96:74:65:e6:f1:9d:3f:47:a8:e8:0a: b2:6e:01:27:9f:f1:11:87:cc:86:40:e5:59:81:d3: 68:01:e4:01:7b:0c:96:a4:8e:88:6d:4b:26:b7:01: 5c:91:10:e3:cf:dd:85:a6:b9:93:4b:05:43:87:25: b7:af:8a:4c:0b:21:96:39:02:c2:16:ce:05:9b:e1: 0f:6f:5f:ab:04:82:e1:f5:fa:64:f2:ce:b8:d0:5c: ae:09:5b:ec:7e:72:cd:ee:de:9a:df:42:7c:67:00: f2:64:53:a6:32:29:29:09:d5:bb:7e:65:04:94:74: ae:33:dc:c5:9c:47:3f:c9:ef:f9:78:1f:85:4c:a3: 79:31:33:8f:e6:99:99:05:a7:31:f7:f6:3c:52:da: 4c:8d:8e:34:0c:5b:6b:0d:df:9b:55:a6:dd:09:c4: 03:1b:ae:4a:bf:59:7c:d2:72:62:88:90:2f:10:91: 20:e0:28:ec:72:07:44:16:d2:a2:8c:df:68:87:e0: 1d:26:ef:5e:df:f9:1c:10:1d:a2:f3:21:69:ec:fd: ac:c5:7e:40:a7:13:1b:ab:b3:6b:2c:96:d5:37:d5: e7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:3F:E3:87:D3:B6:D3:36:66:37:70:50:0F:A4:00:8D:1C:31:B1 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:28:16:70:23:a7:2d:22:e2:a6:9c:07:17:be:1d:b3:b1:e0: c3:90:0a:2f:57:ad:1d:d3:9e:a0:0a:4a:bd:ba:4f:d9:5b:42: f7:d9:3b:03:11:34:49:d3:d6:14:ab:da:06:a8:03:1b:03:57: 1e:26:7b:cd:54:2a:1d:76:27:7d:68:ce:e1:00:39:9a:1c:88: 04:5e:cf:53:6f:f6:8b:7c:cd:22:88:4f:fe:3b:20:7c:a8:f8: bf:16:9f:0e:5a:bd:59:27:d4:b6:ba:65:4f:4c:72:a3:34:d3: ba:c1:71:94:34:0e:65:61:20:cf:14:3b:a7:82:37:19:13:7c: 00:c8:61:ed:c4:b5:b4:c4:52:4a:63:4e:4b:72:51:cb:bc:e1: 64:b2:6d:8c:41:00:27:15:d6:5f:36:5c:23:cc:52:02:f8:80: ad:73:5e:70:93:97:33:ab:04:b8:9f:0c:28:ed:cf:38:18:d3: b7:a1:15:10:a6:67:96:82:d0:33:5b:14:7b:95:77:8c:df:27: 1e:bd:1e:84:23:c7:86:b9:35:5e:7d:5b:0d:7a:88:e0:5e:7c: c7:11:ef:f7:12:5b:43:17:fd:4a:91:60:ea:75:67:56:db:0c: fb:e0:4c:16:90:75:33:63:46:9a:e3:d5:81:04:1a:24:4f:71: a1:c1:2f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRwUaBDXzSBP1m1bBXBHNcSAld8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNjAzMTgwNTI2MDBaFw0yNjAzMjExNTQyMDBaMDMxMTAvBgNV BAMTKDdENEUzRkUzODdEM0I2RDMzNjY2Mzc3MDUwMEZBNDAwOEQxQzMxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3i3m2WkGSwGd969XbNCPtvWe2 bD9GBkw/Pch/pK+womiWdGXm8Z0/R6joCrJuASef8RGHzIZA5VmB02gB5AF7DJak johtSya3AVyREOPP3YWmuZNLBUOHJbevikwLIZY5AsIWzgWb4Q9vX6sEguH1+mTy zrjQXK4JW+x+cs3u3prfQnxnAPJkU6YyKSkJ1bt+ZQSUdK4z3MWcRz/J7/l4H4VM o3kxM4/mmZkFpzH39jxS2kyNjjQMW2sN35tVpt0JxAMbrkq/WXzScmKIkC8QkSDg KOxyB0QW0qKM32iH4B0m717f+RwQHaLzIWns/azFfkCnExurs2ssltU31edzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfU4/44fTttM2ZjdwUA+kAI0cMbEwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUoFnAjpy0i4qacBxe+HbOx4MOQCi9XrR3T nqAKSr26T9lbQvfZOwMRNEnT1hSr2gaoAxsDVx4me81UKh12J31ozuEAOZociARe z1Nv9ot8zSKIT/47IHyo+L8Wnw5avVkn1La6ZU9McqM007rBcZQ0DmVhIM8UO6eC NxkTfADIYe3EtbTEUkpjTktyUcu84WSybYxBACcV1l82XCPMUgL4gK1zXnCTlzOr BLifDCjtzzgY07ehFRCmZ5aC0DNbFHuVd4zfJx69HoQjx4a5NV59Ww16iOBefMcR 7/cSW0MX/UqRYOp1Z1bbDPvgTBaQdTNjRprj1YEEGiRPcaHBLzs= -----END CERTIFICATE-----Generated at Thu Mar 19 12:10:02 2026 by rpki-client