$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: Ar9p+48zMOPKQcieqyRhjcFWyRDOUFp20vxNmiNilh0= Subject key identifier: AB:85:FB:0F:EF:F0:14:BC:91:6B:0A:9C:73:C6:A8:5C:3B:03:50:4C Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 75A7618B9872615D59BE1276BD68440D18FBD7D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 024F Signing time: Wed 18 Mar 2026 17:50:07 +0000 Manifest this update: Wed 18 Mar 2026 17:45:07 +0000 Manifest next update: Sun 22 Mar 2026 04:03:07 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 2: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) 3: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 5: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 6: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: lZ0OpMUtA2A0q0Eoeb2c6p/ZMtdzmrUZwNoX8HO3Eys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 04:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a7:61:8b:98:72:61:5d:59:be:12:76:bd:68:44:0d:18:fb:d7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Mar 18 17:45:07 2026 GMT Not After : Mar 22 04:03:07 2026 GMT Subject: CN=AB85FB0FEFF014BC916B0A9C73C6A85C3B03504C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:e3:ca:7d:9b:9d:3b:52:ca:3f:df:73:e6: 3b:61:45:8c:44:df:8b:d4:31:9f:1c:c4:2d:fe:d7: d5:12:4d:30:1a:36:f1:c6:81:7d:9a:f5:bb:e2:dc: 12:a6:53:cf:80:51:0f:8b:fc:3b:62:0a:7e:ea:f0: ca:6a:ed:15:d4:07:41:2e:51:3d:b1:f6:4b:00:94: 17:3d:34:ac:dc:e4:1b:c1:cb:54:b4:5c:96:76:f5: 8d:15:cf:35:15:68:bd:ad:b9:e1:7f:7e:10:ea:3d: fb:df:eb:ef:46:30:95:da:a3:ee:34:ff:ed:e7:e4: d7:d7:fc:16:30:c8:89:c5:5e:9e:7f:95:98:8b:66: c7:c9:27:08:1d:25:0f:d6:3b:30:03:97:9b:33:17: 99:25:3b:51:12:6a:b1:5e:71:f8:cb:6c:a8:16:1f: 3e:b9:4a:75:20:69:7b:67:9c:ee:77:f9:4e:d8:02: 02:c5:d4:6f:2d:a8:35:b7:8b:4f:35:3f:b7:d2:ce: d7:e1:fe:9b:38:a5:3c:fe:5c:2c:ad:23:ce:46:93: 61:14:18:93:b4:38:6d:72:c6:0d:ce:10:62:3f:f2: d3:e1:d3:40:f8:db:d7:e2:41:64:99:d9:16:7c:98: 43:b7:4d:0a:ec:2c:11:8e:49:8e:46:f3:62:a9:46: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:85:FB:0F:EF:F0:14:BC:91:6B:0A:9C:73:C6:A8:5C:3B:03:50:4C X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:e4:5b:6e:da:2a:fc:fa:8f:6b:ed:92:a5:f2:a6:e0:df:e0: fe:63:2b:66:91:b9:20:af:21:87:62:65:fb:9d:f4:49:1a:ca: c2:c2:d8:18:df:b7:74:28:f0:f1:5b:e9:a9:e8:40:a2:85:73: d0:81:e3:1d:3b:64:9a:df:82:2b:e2:27:53:97:c6:92:cf:14: ab:68:a1:ee:8a:e2:df:79:69:0a:a4:ea:67:a2:3b:4c:c1:8b: 44:7e:e6:64:e5:ca:a4:3b:be:84:51:fb:5a:fd:49:eb:83:31: 93:ec:42:c1:57:f5:e5:3a:fb:af:58:31:96:3e:76:fa:98:25: 81:18:d5:dd:a0:d4:a3:8a:4f:60:1e:8f:46:ee:27:ef:3a:58: 4f:3d:14:4d:41:a7:60:9b:52:22:70:55:58:96:de:0d:fa:02: 6e:1d:82:59:1d:bf:70:77:59:05:63:09:15:7b:46:e2:3b:9d: 37:f6:8f:72:bf:bc:0a:d4:de:16:96:c1:47:e3:0b:16:f4:74: d7:d3:68:9a:85:d4:dc:d2:b6:2c:85:f1:ca:00:69:3f:45:86: 0e:f4:92:ca:ea:4f:da:89:41:51:c3:4a:e1:de:ab:9d:3b:c0: 81:e2:03:2e:32:a6:16:e6:19:fd:6e:e5:e0:51:e3:73:01:30: fc:ac:01:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdadhi5hyYV1ZvhJ2vWhEDRj719gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNjAzMTgxNzQ1MDdaFw0yNjAzMjIwNDAzMDdaMDMxMTAvBgNV BAMTKEFCODVGQjBGRUZGMDE0QkM5MTZCMEE5QzczQzZBODVDM0IwMzUwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6t+PKfZudO1LKP99z5jthRYxE 34vUMZ8cxC3+19USTTAaNvHGgX2a9bvi3BKmU8+AUQ+L/DtiCn7q8Mpq7RXUB0Eu UT2x9ksAlBc9NKzc5BvBy1S0XJZ29Y0VzzUVaL2tueF/fhDqPfvf6+9GMJXao+40 /+3n5NfX/BYwyInFXp5/lZiLZsfJJwgdJQ/WOzADl5szF5klO1ESarFecfjLbKgW Hz65SnUgaXtnnO53+U7YAgLF1G8tqDW3i081P7fSztfh/ps4pTz+XCytI85Gk2EU GJO0OG1yxg3OEGI/8tPh00D429fiQWSZ2RZ8mEO3TQrsLBGOSY5G82KpRixLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4X7D+/wFLyRawqcc8aoXDsDUEwwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfkW27aKvz6j2vtkqXypuDf4P5jK2aRuSCv IYdiZfud9EkaysLC2Bjft3Qo8PFb6anoQKKFc9CB4x07ZJrfgiviJ1OXxpLPFKto oe6K4t95aQqk6meiO0zBi0R+5mTlyqQ7voRR+1r9SeuDMZPsQsFX9eU6+69YMZY+ dvqYJYEY1d2g1KOKT2Aej0buJ+86WE89FE1Bp2CbUiJwVViW3g36Am4dglkdv3B3 WQVjCRV7RuI7nTf2j3K/vArU3haWwUfjCxb0dNfTaJqF1NzStiyF8coAaT9Fhg70 ksrqT9qJQVHDSuHeq507wIHiAy4yphbmGf1u5eBR43MBMPysAUI= -----END CERTIFICATE-----Generated at Sat Mar 21 01:32:09 2026 by rpki-client