$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: lqR5EcvhNkk9A3HCR1QrmYIkvqbxrb+G/ylMNdSo/cQ= Subject key identifier: D5:BF:AC:16:E1:0D:61:06:7B:E0:EE:0F:4B:65:80:98:E4:AE:FE:67 Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 6696F240CBCF7DEE90014183B596E13B6EAFBC59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 0539 Signing time: Thu 19 Mar 2026 05:10:57 +0000 Manifest this update: Thu 19 Mar 2026 05:05:57 +0000 Manifest next update: Sun 22 Mar 2026 05:15:57 +0000 Files and hashes: 1: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: 1oSAlGyCAQ5BsCDikGrzZ8Xay1TMu0rXb0E3UWwkSO0=) 2: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: W0UQhefK0L/P+Xi8+l523q5xWemYtSTspOgmc+707bw=) 3: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: XIQ/lQWer2x/1W1XBHKNLMW19qN6bWGcY/8CJlO5tmY=) 4: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: SREiQzAjfVMpOJnEfnQMUDFShy+UOiOi5qWZd3X3Wts=) 5: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: Q46pxbm+TVjkz99t2lUyFhkKtMbUjt5MtTd3GxK/1m0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:96:f2:40:cb:cf:7d:ee:90:01:41:83:b5:96:e1:3b:6e:af:bc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Mar 19 05:05:57 2026 GMT Not After : Mar 22 05:15:57 2026 GMT Subject: CN=D5BFAC16E10D61067BE0EE0F4B658098E4AEFE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:02:1c:9b:99:1b:b3:f8:07:d4:0a:21:e7: be:24:34:ca:f5:e5:8e:5c:17:73:2c:8f:2e:ef:9b: 9a:1b:c8:83:51:ea:1d:99:1b:bc:fa:a1:ac:ee:d4: 07:25:dd:2b:a2:42:25:27:a7:68:a5:01:c2:c7:1d: 09:91:fb:49:af:e6:0b:37:4e:2f:01:eb:bb:44:76: a9:de:61:5e:56:47:bc:2f:bc:a5:4a:0b:af:fb:dd: af:53:c6:4b:f1:b9:40:75:f6:8b:2f:c6:d5:b9:ca: a2:7a:d8:2e:94:31:ce:d8:e4:98:7f:55:8e:35:dc: f6:ea:38:5c:ff:19:d8:82:64:39:9d:bd:3e:66:db: c1:3f:15:dd:55:23:a7:43:21:5b:25:14:57:55:d1: ad:d8:ea:7c:4f:6e:45:6f:02:c7:12:de:aa:b5:14: c4:90:79:ab:6e:64:6f:28:97:e5:4e:70:65:38:cc: 12:dc:10:e8:8a:a7:b2:6b:7d:9e:19:f9:05:31:23: 17:cc:75:2d:7d:92:a1:90:34:33:94:3e:52:f3:03: 82:8a:c1:9c:0b:da:1c:e8:d3:0d:61:dd:33:cc:8a: c0:e4:78:1e:63:dc:18:84:8f:77:9b:2b:4e:fa:2e: 02:c7:f6:d8:0c:ec:e7:e2:1a:70:00:9e:66:6a:d0: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BF:AC:16:E1:0D:61:06:7B:E0:EE:0F:4B:65:80:98:E4:AE:FE:67 X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e4:b5:b6:69:9b:c7:76:81:e3:e0:8e:87:97:3c:1f:7a:0a: 23:eb:55:49:24:d6:51:b3:66:06:8a:c2:73:72:55:50:51:33: 02:b8:7e:97:12:52:0d:60:78:49:ad:1c:d4:ba:eb:14:82:f9: 38:b2:90:4c:95:cd:30:6a:de:60:f4:64:13:c7:b3:54:b7:53: 37:2e:64:f5:83:77:c2:a8:8e:93:f5:25:0f:eb:8d:92:ff:c6: dd:db:ea:39:c6:bd:8e:47:e4:90:5f:dd:bb:0f:b0:91:f2:e6: 7f:a9:43:19:74:54:2a:c9:cd:9c:68:2e:a0:9c:fc:16:39:a5: 1e:18:93:1d:8d:67:28:39:e5:07:f3:fc:40:b5:f1:3d:dc:4a: d1:71:6d:88:1e:4d:7f:4d:03:74:95:cb:58:c3:ea:eb:97:f6: 79:73:b9:51:43:9d:33:7a:d2:90:91:62:68:3f:2f:66:6e:89: 53:f2:20:0f:aa:cd:93:94:c2:d7:cd:50:38:8b:1a:8e:67:58: 7f:67:7b:ff:81:7f:79:b2:52:da:82:6d:94:47:f4:33:cd:eb: 1c:3d:3e:23:74:4d:fe:d5:04:c1:85:cd:58:ff:3d:95:ff:a2: 58:7f:35:cd:ec:24:d6:a3:cb:8d:0f:d1:91:87:4b:21:60:4f: 0f:b4:7b:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpbyQMvPfe6QAUGDtZbhO26vvFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNjAzMTkwNTA1NTdaFw0yNjAzMjIwNTE1NTdaMDMxMTAvBgNV BAMTKEQ1QkZBQzE2RTEwRDYxMDY3QkUwRUUwRjRCNjU4MDk4RTRBRUZFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSAIcm5kbs/gH1Aoh574kNMr1 5Y5cF3Msjy7vm5obyINR6h2ZG7z6oazu1Acl3SuiQiUnp2ilAcLHHQmR+0mv5gs3 Ti8B67tEdqneYV5WR7wvvKVKC6/73a9TxkvxuUB19osvxtW5yqJ62C6UMc7Y5Jh/ VY413PbqOFz/GdiCZDmdvT5m28E/Fd1VI6dDIVslFFdV0a3Y6nxPbkVvAscS3qq1 FMSQeatuZG8ol+VOcGU4zBLcEOiKp7JrfZ4Z+QUxIxfMdS19kqGQNDOUPlLzA4KK wZwL2hzo0w1h3TPMisDkeB5j3BiEj3ebK076LgLH9tgM7OfiGnAAnmZq0MP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1b+sFuENYQZ74O4PS2WAmOSu/mcwHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHktbZpm8d2gePgjoeXPB96CiPrVUkk1lGz ZgaKwnNyVVBRMwK4fpcSUg1geEmtHNS66xSC+TiykEyVzTBq3mD0ZBPHs1S3Uzcu ZPWDd8KojpP1JQ/rjZL/xt3b6jnGvY5H5JBf3bsPsJHy5n+pQxl0VCrJzZxoLqCc /BY5pR4Ykx2NZyg55Qfz/EC18T3cStFxbYgeTX9NA3SVy1jD6uuX9nlzuVFDnTN6 0pCRYmg/L2ZuiVPyIA+qzZOUwtfNUDiLGo5nWH9ne/+Bf3myUtqCbZRH9DPN6xw9 PiN0Tf7VBMGFzVj/PZX/olh/Nc3sJNajy40P0ZGHSyFgTw+0e0A= -----END CERTIFICATE-----Generated at Fri Mar 20 12:41:16 2026 by rpki-client