$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: QyB1PYzIdC1r4zmMWY0h4wqQR1eBblCE+98ulGoIOtM= Subject key identifier: 76:E3:95:05:80:C4:2F:76:F5:38:2F:7A:20:53:5C:9F:27:2B:97:C0 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 0A026ED2D499BFEEE36BC41F11381FA66ECCFF15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 0353 Signing time: Mon 16 Mar 2026 23:21:41 +0000 Manifest this update: Mon 16 Mar 2026 23:16:41 +0000 Manifest next update: Fri 20 Mar 2026 10:07:41 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: h9yGOaeGCSaGZufGDioMMlyGNQsNEVgY90YmslxMAaw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 10:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:02:6e:d2:d4:99:bf:ee:e3:6b:c4:1f:11:38:1f:a6:6e:cc:ff:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Mar 16 23:16:41 2026 GMT Not After : Mar 20 10:07:41 2026 GMT Subject: CN=76E3950580C42F76F5382F7A20535C9F272B97C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:18:11:18:a3:1c:2b:25:e1:8c:b9:4f:6d: 5e:25:48:c4:70:5c:9c:57:d8:1b:6a:93:6e:ce:b0: c2:1b:9a:54:fe:2f:ce:fc:87:17:75:9f:df:2c:e9: 54:94:75:5b:b2:b6:b8:53:c4:8a:07:bf:07:46:9c: b4:fa:3f:42:c4:71:c3:0a:aa:d7:f4:e2:8a:cb:7d: 61:f7:ae:84:82:e6:69:d1:e2:3c:b8:b2:d9:37:7b: 3c:ff:ef:8a:19:4d:3b:d1:75:ca:98:81:cc:7a:c5: b3:7d:8a:d3:11:dd:42:6b:2d:15:ad:32:81:50:7a: d1:3e:9e:c1:b0:a5:33:e5:e7:48:68:8b:d8:04:21: db:5f:b1:0a:5c:14:ab:00:e6:96:e3:63:71:a0:b5: 01:8e:e0:05:ee:bc:7c:f6:d0:c3:ae:46:9c:53:ab: 2a:29:b8:71:ff:f3:9f:e6:23:0e:36:1a:8d:b2:36: 78:01:7e:cb:2c:fd:5d:99:16:b3:be:a3:0b:9a:c2: 0e:20:3a:15:98:d9:06:10:7e:d0:ec:67:dc:da:63: 18:66:71:d1:68:e4:41:7d:b5:39:b3:01:66:ff:3d: df:70:77:81:ef:c1:a0:25:fa:ac:81:8e:ab:6b:5e: 9d:ba:91:bf:ee:de:74:e3:41:e1:01:c8:8f:a2:c5: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:95:05:80:C4:2F:76:F5:38:2F:7A:20:53:5C:9F:27:2B:97:C0 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:8e:1a:5b:5f:fc:fc:4f:41:cb:c9:15:f6:04:ce:40:c3:ba: 8a:2b:cb:60:94:b4:61:1c:5c:6b:61:d2:e0:89:c8:72:c3:cd: 1c:74:dc:aa:c2:3b:2c:a1:8c:0b:cd:0f:08:23:9a:15:ef:e0: b0:01:2a:5b:44:53:46:6c:25:53:fc:3c:52:25:31:7e:b4:a4: c9:66:10:cb:3d:74:c8:e4:41:33:66:0d:68:0b:5c:69:e4:8b: 71:0d:c2:4b:cd:fc:b6:71:57:17:c0:b8:2d:41:95:68:82:cb: 6a:7c:3c:5b:56:ee:1c:e6:2e:75:53:17:c5:12:e3:d4:2e:ff: d0:40:97:41:af:d2:cd:87:9f:45:d5:60:8f:75:c4:40:9b:f6: 9a:ad:06:0a:50:2d:95:52:97:d2:cf:cb:33:7d:e6:c4:ae:d6: a7:62:1a:f3:2b:98:0e:fa:7a:fd:b0:53:46:39:84:99:11:63: bb:96:27:ce:c3:db:09:f0:fb:8e:3b:a9:9e:2e:94:9d:ae:25: 27:65:1f:c4:d8:4b:eb:6e:aa:dc:37:9b:31:03:11:78:32:84: dd:9a:61:77:55:f4:18:2f:73:e9:72:7a:84:99:c1:a0:8c:63: 88:67:18:c3:16:ba:63:67:1c:f8:cb:a1:64:9a:2e:d8:68:b8: a1:37:b0:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgJu0tSZv+7ja8QfETgfpm7M/xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNjAzMTYyMzE2NDFaFw0yNjAzMjAxMDA3NDFaMDMxMTAvBgNV BAMTKDc2RTM5NTA1ODBDNDJGNzZGNTM4MkY3QTIwNTM1QzlGMjcyQjk3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzexgRGKMcKyXhjLlPbV4lSMRw XJxX2Btqk27OsMIbmlT+L878hxd1n98s6VSUdVuytrhTxIoHvwdGnLT6P0LEccMK qtf04orLfWH3roSC5mnR4jy4stk3ezz/74oZTTvRdcqYgcx6xbN9itMR3UJrLRWt MoFQetE+nsGwpTPl50hoi9gEIdtfsQpcFKsA5pbjY3GgtQGO4AXuvHz20MOuRpxT qyopuHH/85/mIw42Go2yNngBfsss/V2ZFrO+owuawg4gOhWY2QYQftDsZ9zaYxhm cdFo5EF9tTmzAWb/Pd9wd4HvwaAl+qyBjqtrXp26kb/u3nTjQeEByI+ixY2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUduOVBYDEL3b1OC96IFNcnycrl8AwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCOGltf/PxPQcvJFfYEzkDDuoory2CUtGEc XGth0uCJyHLDzRx03KrCOyyhjAvNDwgjmhXv4LABKltEU0ZsJVP8PFIlMX60pMlm EMs9dMjkQTNmDWgLXGnki3ENwkvN/LZxVxfAuC1BlWiCy2p8PFtW7hzmLnVTF8US 49Qu/9BAl0Gv0s2Hn0XVYI91xECb9pqtBgpQLZVSl9LPyzN95sSu1qdiGvMrmA76 ev2wU0Y5hJkRY7uWJ87D2wnw+447qZ4ulJ2uJSdlH8TYS+tuqtw3mzEDEXgyhN2a YXdV9Bgvc+lyeoSZwaCMY4hnGMMWumNnHPjLoWSaLthouKE3sNU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:27 2026 by rpki-client