$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: 89MNor82vBQQ1Tfd+v5PN28kTnXZL8TICSOEVkTGxEE= Subject key identifier: C4:4C:4F:9E:90:53:5C:33:D6:27:8E:50:B3:4C:DE:DD:6A:E1:AB:92 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 7DDFAE431C65F6A6874F002E0A04949E0A78C355 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0293 Signing time: Wed 18 Mar 2026 18:30:03 +0000 Manifest this update: Wed 18 Mar 2026 18:25:03 +0000 Manifest next update: Sun 22 Mar 2026 03:07:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: G6q+ji3yFL/G+ROfvGqGZ4h9avpUHfcEbpzAoAOSho8=) 2: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=) 3: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: hwrf35qnd9j2Mxa1MSnGFvi9wOcdBKLbclz2T4oLZmQ=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 03:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:df:ae:43:1c:65:f6:a6:87:4f:00:2e:0a:04:94:9e:0a:78:c3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Mar 18 18:25:03 2026 GMT Not After : Mar 22 03:07:03 2026 GMT Subject: CN=C44C4F9E90535C33D6278E50B34CDEDD6AE1AB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:46:aa:ce:96:61:e4:a3:90:d6:70:c4:8b: 31:3f:16:f2:55:de:35:bc:93:23:52:19:aa:1c:87: 1b:18:29:ea:30:4b:e4:c6:bf:90:66:ae:58:ad:c1: 49:e3:35:91:c5:68:3a:d4:52:68:3d:73:62:80:3b: 48:fc:28:b2:22:b7:ec:71:68:9b:e5:03:a5:ff:0c: 5d:4d:79:51:ff:2d:c6:2f:b1:5a:9f:c9:38:c5:7e: 9c:5b:01:13:62:52:3a:b9:5f:4f:e6:38:35:8d:06: 1b:da:2c:29:7f:c5:db:59:97:f9:95:87:5c:23:86: 29:33:64:a0:ff:f1:7b:d8:99:69:62:8b:18:01:aa: 73:99:44:73:b7:11:d2:e7:f2:af:a6:9d:10:2a:46: 15:00:07:7c:c9:15:5a:b9:95:3b:c9:df:86:99:72: 57:ae:d9:96:e4:02:dc:1d:b6:d5:d2:04:cb:fc:54: da:11:55:20:d6:aa:d8:5a:19:fc:91:e0:21:63:01: 12:57:c7:6a:05:ea:0b:ae:f2:ab:f5:63:1f:06:4c: ef:ed:0e:54:06:37:3d:ec:a3:f7:fb:83:12:92:54: f9:3a:b6:aa:63:c4:ed:e6:5a:d2:45:e0:c0:df:69: 83:71:92:b0:75:e4:91:ee:8e:93:19:99:d4:29:ed: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4C:4F:9E:90:53:5C:33:D6:27:8E:50:B3:4C:DE:DD:6A:E1:AB:92 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c7:71:64:52:f3:1d:08:3e:d2:b1:d5:a9:7f:28:75:03:84: 1e:83:82:35:eb:a7:40:7b:c6:f6:61:b3:b3:25:46:4b:f0:da: 5c:aa:92:33:19:33:e2:2e:0c:ea:33:c6:9f:c8:a5:52:09:c5: 47:b8:a5:f4:17:b0:29:8c:e2:91:8a:e4:a2:8e:9c:66:cd:9b: 5a:e0:02:49:e2:0a:16:4d:f5:b1:26:4d:9d:5c:8b:3e:b7:63: 3c:d2:c3:ca:67:a3:aa:40:38:87:c1:70:46:56:1b:a4:ce:e2: 0e:04:2c:fc:d4:08:4d:54:2d:c7:5c:f4:91:7e:2c:51:7e:32: 35:4c:1d:90:37:a0:ee:12:f5:f9:d0:53:e3:8d:8c:de:7b:59: ce:f9:24:b2:17:2b:59:bd:23:ac:59:9f:d2:e3:f7:c5:bd:49: 22:a2:b9:1b:d9:d4:d6:1f:c4:a0:79:73:63:cd:53:a6:a1:a8: c9:d5:0d:a9:86:7b:83:1b:e5:1a:d2:08:45:86:b5:3b:15:f4: 21:6d:b5:b5:2e:11:28:0d:a3:47:bb:e1:b0:82:7b:17:7e:33: dd:99:ee:41:a8:92:32:75:f7:78:02:66:5a:17:9a:76:9c:70: 4d:11:04:84:fb:83:95:de:fb:ab:23:aa:db:72:5f:60:c9:ee: 0d:2d:c8:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfd+uQxxl9qaHTwAuCgSUngp4w1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNjAzMTgxODI1MDNaFw0yNjAzMjIwMzA3MDNaMDMxMTAvBgNV BAMTKEM0NEM0RjlFOTA1MzVDMzNENjI3OEU1MEIzNENERURENkFFMUFCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLkaqzpZh5KOQ1nDEizE/FvJV 3jW8kyNSGaochxsYKeowS+TGv5BmrlitwUnjNZHFaDrUUmg9c2KAO0j8KLIit+xx aJvlA6X/DF1NeVH/LcYvsVqfyTjFfpxbARNiUjq5X0/mODWNBhvaLCl/xdtZl/mV h1wjhikzZKD/8XvYmWliixgBqnOZRHO3EdLn8q+mnRAqRhUAB3zJFVq5lTvJ34aZ cleu2ZbkAtwdttXSBMv8VNoRVSDWqthaGfyR4CFjARJXx2oF6guu8qv1Yx8GTO/t DlQGNz3so/f7gxKSVPk6tqpjxO3mWtJF4MDfaYNxkrB15JHujpMZmdQp7UnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxExPnpBTXDPWJ45Qs0ze3Wrhq5IwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjHcWRS8x0IPtKx1al/KHUDhB6DgjXrp0B7 xvZhs7MlRkvw2lyqkjMZM+IuDOozxp/IpVIJxUe4pfQXsCmM4pGK5KKOnGbNm1rg AkniChZN9bEmTZ1ciz63YzzSw8pno6pAOIfBcEZWG6TO4g4ELPzUCE1ULcdc9JF+ LFF+MjVMHZA3oO4S9fnQU+ONjN57Wc75JLIXK1m9I6xZn9Lj98W9SSKiuRvZ1NYf xKB5c2PNU6ahqMnVDamGe4Mb5RrSCEWGtTsV9CFttbUuESgNo0e74bCCexd+M92Z 7kGokjJ193gCZloXmnaccE0RBIT7g5Xe+6sjqttyX2DJ7g0tyNE= -----END CERTIFICATE-----Generated at Fri Mar 20 12:38:26 2026 by rpki-client