$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: weB9v01FLjLEh/7U6XRYdNcs3Ts9FsdTLRl9DEu0zmw= Subject key identifier: CE:59:D3:51:4D:B8:3D:6B:64:A9:F6:C1:3E:06:2E:FF:75:02:59:45 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 604D0BD9D7C4AB74E786F23F576624752AA33AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: CD Signing time: Fri 06 Mar 2026 07:01:33 +0000 Manifest this update: Fri 06 Mar 2026 06:56:33 +0000 Manifest next update: Mon 09 Mar 2026 14:00:33 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: OP2IPMiScOZ98awlflfER9Tml/6YMMCGTQHzds91wXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4d:0b:d9:d7:c4:ab:74:e7:86:f2:3f:57:66:24:75:2a:a3:3a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Mar 6 06:56:33 2026 GMT Not After : Mar 9 14:00:33 2026 GMT Subject: CN=CE59D3514DB83D6B64A9F6C13E062EFF75025945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:23:71:39:c9:5e:3f:2b:a4:85:46:f0:43: 27:0c:6d:57:72:16:38:fd:35:b8:62:74:1a:39:fe: a2:9b:43:51:d1:97:2e:36:be:79:ff:a8:80:cd:e1: ae:4a:8a:a3:aa:92:05:5b:55:a1:54:3a:62:f9:b6: 93:b7:fb:5a:d4:d5:aa:6a:d9:70:39:6a:fc:15:c2: 47:a7:38:4d:f2:d0:79:c7:0f:bb:16:12:fe:c0:56: 63:3d:51:8f:89:a5:e5:2c:eb:12:0d:19:da:2e:28: 70:64:1d:96:a1:89:7f:0c:fc:6a:1d:8b:86:a9:90: ae:b5:99:e4:4c:2f:ae:85:e9:12:de:e2:b1:79:1e: 60:23:2c:1b:22:5f:1c:8f:c2:69:3b:df:13:0c:0e: c4:38:05:2e:62:2a:91:e2:55:d2:75:41:87:88:0d: 8d:c6:ac:98:d2:09:a3:1a:86:8c:2b:78:e1:e5:fa: ad:85:70:07:a3:98:03:55:06:62:a2:dd:f8:31:22: 97:13:d9:80:43:24:39:8c:9e:54:3d:a6:05:f2:65: 8e:04:18:95:15:1e:31:41:2f:39:39:83:be:8f:3f: d8:3b:cc:f4:67:47:fc:b6:44:9b:ab:6b:b1:4b:8c: 86:1e:ff:7b:06:2d:fe:5c:70:b9:19:f4:a4:ab:a8: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:59:D3:51:4D:B8:3D:6B:64:A9:F6:C1:3E:06:2E:FF:75:02:59:45 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a3:19:4d:4e:75:f6:e7:ca:54:0a:bf:26:f9:4d:c0:8d:80: 6a:f3:bf:5d:cd:a6:d6:39:45:09:a1:43:3e:2f:ec:12:b0:b0: c2:4a:58:ab:6e:9c:f2:bc:62:76:46:64:c0:51:39:c8:22:54: 60:a9:d5:d2:f5:c2:f7:32:86:77:09:98:2e:8c:f4:4b:0d:b7: f2:5b:ed:55:40:9d:30:49:bc:05:5c:36:3f:74:82:e6:7f:d3: 2c:1f:57:44:02:ec:78:7b:cc:75:f9:e3:38:1a:e7:70:7c:51: 5b:86:54:9f:aa:0d:c1:72:d7:c3:11:7a:0c:d6:81:d9:be:b2: 05:65:e4:95:0a:65:16:12:56:6c:76:ef:66:d4:ca:60:8a:c4: 9b:64:f8:d8:a7:a6:56:d8:a9:8f:a1:36:02:c1:89:f8:c7:52: b4:24:de:81:1b:95:55:90:ba:e2:76:42:58:a3:0b:21:50:ef: 5a:32:df:33:16:55:03:94:fa:65:8b:8d:25:0c:f7:32:e1:d6: e4:d0:69:5c:cd:3b:98:06:b0:ff:3d:b6:8b:d2:a8:8d:cb:93: 73:3e:f6:6d:66:e7:0f:e0:40:0f:e2:0f:4b:52:d1:1b:36:99: 00:a4:0d:a0:56:82:9e:66:e2:c2:10:e0:01:39:06:67:70:51: 0b:dd:e0:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYE0L2dfEq3TnhvI/V2YkdSqjOvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNjAzMDYwNjU2MzNaFw0yNjAzMDkxNDAwMzNaMDMxMTAvBgNV BAMTKENFNTlEMzUxNERCODNENkI2NEE5RjZDMTNFMDYyRUZGNzUwMjU5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQiNxOclePyukhUbwQycMbVdy Fjj9NbhidBo5/qKbQ1HRly42vnn/qIDN4a5KiqOqkgVbVaFUOmL5tpO3+1rU1apq 2XA5avwVwkenOE3y0HnHD7sWEv7AVmM9UY+JpeUs6xINGdouKHBkHZahiX8M/God i4apkK61meRML66F6RLe4rF5HmAjLBsiXxyPwmk73xMMDsQ4BS5iKpHiVdJ1QYeI DY3GrJjSCaMahowreOHl+q2FcAejmANVBmKi3fgxIpcT2YBDJDmMnlQ9pgXyZY4E GJUVHjFBLzk5g76PP9g7zPRnR/y2RJura7FLjIYe/3sGLf5ccLkZ9KSrqBkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzlnTUU24PWtkqfbBPgYu/3UCWUUwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKjGU1OdfbnylQKvyb5TcCNgGrzv13NptY5 RQmhQz4v7BKwsMJKWKtunPK8YnZGZMBROcgiVGCp1dL1wvcyhncJmC6M9EsNt/Jb 7VVAnTBJvAVcNj90guZ/0ywfV0QC7Hh7zHX54zga53B8UVuGVJ+qDcFy18MRegzW gdm+sgVl5JUKZRYSVmx272bUymCKxJtk+NinplbYqY+hNgLBifjHUrQk3oEblVWQ uuJ2QlijCyFQ71oy3zMWVQOU+mWLjSUM9zLh1uTQaVzNO5gGsP89tovSqI3Lk3M+ 9m1m5w/gQA/iD0tS0Rs2mQCkDaBWgp5m4sIQ4AE5BmdwUQvd4JY= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:30 2026 by rpki-client