$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: ua4Z//FLWDt7NEZ0AvDpvm2NZrC2Kq0/i9aGHorKmBE= Subject key identifier: 2B:64:B7:B5:5D:BA:12:D5:2C:BE:EA:52:96:95:77:A2:50:53:79:C8 Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 0340A54ECEECDDC71A67A17C4D539B1D61D217D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: CD Signing time: Fri 06 Mar 2026 00:02:33 +0000 Manifest this update: Thu 05 Mar 2026 23:57:33 +0000 Manifest next update: Mon 09 Mar 2026 10:40:33 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: bIMNyD9iOlUo2J/b74sYTxd8BYfXCkvJM1VUslkePFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:40:a5:4e:ce:ec:dd:c7:1a:67:a1:7c:4d:53:9b:1d:61:d2:17:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Mar 5 23:57:33 2026 GMT Not After : Mar 9 10:40:33 2026 GMT Subject: CN=2B64B7B55DBA12D52CBEEA52969577A2505379C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:b1:07:f5:03:b5:61:aa:3d:f8:aa:57:85: 28:cf:56:55:89:22:d2:e2:70:a6:8a:e8:3e:15:f2: 3e:57:10:ae:fd:eb:38:36:8d:d1:82:1e:1c:78:1e: d3:0a:99:b6:2e:e0:c7:81:9b:14:e7:a0:13:9b:2f: cc:cf:ca:af:a0:a1:8d:2a:ed:2a:10:08:97:eb:9e: a4:7a:13:d3:48:73:93:08:be:9c:ea:2b:0a:cc:fd: be:7b:31:a6:7b:13:a3:0b:5b:f0:26:66:1a:8b:b5: 7b:b9:3e:3e:d8:99:62:29:2e:21:a9:01:bc:51:b3: ef:e6:ef:a9:2d:62:71:7c:5b:45:e4:57:21:d1:f6: 08:a4:bc:19:09:a3:ce:b6:54:ef:67:41:65:f2:8e: e2:49:ab:fa:be:f7:f5:59:ba:02:93:54:3d:86:f4: d7:cc:b0:64:05:23:bf:f9:e9:21:6e:85:24:8e:60: b8:14:ac:22:eb:88:b0:75:4a:f0:11:90:f7:ad:1d: 43:7d:2f:52:ae:e6:20:44:a4:72:af:71:77:77:37: e4:86:6a:02:ee:03:75:18:d7:c0:c7:c3:20:64:f4: 61:34:a2:22:3e:26:de:6f:91:d3:a4:1a:a5:a9:ae: b3:36:f1:c5:20:6f:6b:1c:20:33:ae:5b:f9:43:d5: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:64:B7:B5:5D:BA:12:D5:2C:BE:EA:52:96:95:77:A2:50:53:79:C8 X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c4:e7:49:8a:91:be:a1:44:2e:0e:9a:7c:a6:7a:e6:02:50: 80:b7:ee:6e:81:45:0b:7c:17:e8:ac:a4:21:60:70:e3:fd:64: 08:ad:47:7b:f4:40:e3:f4:7e:45:6a:79:3b:d9:43:1b:79:7e: ef:05:13:09:9c:cb:12:14:da:be:04:d5:9c:c0:62:5b:75:81: cf:93:95:fe:11:e5:89:c5:ac:05:c1:3e:0c:d5:fa:b3:57:7a: df:22:58:1f:3e:10:bf:d4:95:09:7a:7b:c2:2e:f5:5a:53:97: c8:30:02:25:bb:2d:51:71:f9:85:9f:63:1a:f9:17:5a:7e:df: b8:80:94:7a:fc:9c:71:da:ed:ed:5b:9f:7e:ca:66:4f:07:af: 2c:d8:b1:9f:89:a9:8a:3e:9a:de:a9:04:a8:c8:08:a8:3c:1f: 76:8e:c4:a8:e3:50:4f:2f:e9:aa:6c:2b:32:04:2e:78:a1:92: e4:a2:ea:ca:45:f9:b7:19:c6:c2:8c:b5:b9:b4:51:ce:d9:f4: c3:6f:6e:f9:c2:4b:79:46:59:ac:e7:5e:1c:c8:51:a7:09:8d: 9f:3f:50:b2:22:66:0e:29:20:ec:db:67:40:f8:73:9a:5e:f5: 37:fa:30:b9:b7:e5:6c:7f:02:68:a9:d6:c6:8e:64:38:df:0c: 03:66:ac:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0ClTs7s3ccaZ6F8TVObHWHSF9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNjAzMDUyMzU3MzNaFw0yNjAzMDkxMDQwMzNaMDMxMTAvBgNV BAMTKDJCNjRCN0I1NURCQTEyRDUyQ0JFRUE1Mjk2OTU3N0EyNTA1Mzc5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom7EH9QO1Yao9+KpXhSjPVlWJ ItLicKaK6D4V8j5XEK796zg2jdGCHhx4HtMKmbYu4MeBmxTnoBObL8zPyq+goY0q 7SoQCJfrnqR6E9NIc5MIvpzqKwrM/b57MaZ7E6MLW/AmZhqLtXu5Pj7YmWIpLiGp AbxRs+/m76ktYnF8W0XkVyHR9gikvBkJo862VO9nQWXyjuJJq/q+9/VZugKTVD2G 9NfMsGQFI7/56SFuhSSOYLgUrCLriLB1SvARkPetHUN9L1Ku5iBEpHKvcXd3N+SG agLuA3UY18DHwyBk9GE0oiI+Jt5vkdOkGqWprrM28cUgb2scIDOuW/lD1TTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2S3tV26EtUsvupSlpV3olBTecgwHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArE50mKkb6hRC4OmnymeuYCUIC37m6BRQt8 F+ispCFgcOP9ZAitR3v0QOP0fkVqeTvZQxt5fu8FEwmcyxIU2r4E1ZzAYlt1gc+T lf4R5YnFrAXBPgzV+rNXet8iWB8+EL/UlQl6e8Iu9VpTl8gwAiW7LVFx+YWfYxr5 F1p+37iAlHr8nHHa7e1bn37KZk8HryzYsZ+JqYo+mt6pBKjICKg8H3aOxKjjUE8v 6apsKzIELnihkuSi6spF+bcZxsKMtbm0Uc7Z9MNvbvnCS3lGWaznXhzIUacJjZ8/ ULIiZg4pIOzbZ0D4c5pe9Tf6MLm35Wx/Amip1saOZDjfDANmrHo= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:31 2026 by rpki-client