$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: 5m0TojLj3Nam8ZfEIbTr0oMtQadmquPGX+pc5pLtsPQ= Subject key identifier: F8:A6:86:3D:E4:E8:C7:CD:9A:E8:6E:DC:2C:A6:CF:7A:A9:7B:91:15 Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 779489F4C164BD382A958EDE6916363661DFBF7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: D2 Signing time: Tue 03 Mar 2026 04:01:32 +0000 Manifest this update: Tue 03 Mar 2026 03:56:32 +0000 Manifest next update: Fri 06 Mar 2026 08:36:32 +0000 Files and hashes: 1: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) 2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) 3: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: cNE7Yq1z+WyT9/VYju/Hn2yUl3Np1TXBi+SfUT00nRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 08:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:94:89:f4:c1:64:bd:38:2a:95:8e:de:69:16:36:36:61:df:bf:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Mar 3 03:56:32 2026 GMT Not After : Mar 6 08:36:32 2026 GMT Subject: CN=F8A6863DE4E8C7CD9AE86EDC2CA6CF7AA97B9115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:74:cc:a4:0a:0e:da:3c:17:63:a3:ba:cb: c4:6e:08:72:51:4e:c4:30:74:86:cd:58:8d:c4:35: 4e:64:c8:73:98:6a:62:01:de:02:c5:88:20:07:45: 38:48:a8:57:61:13:0f:41:c3:79:54:a7:8a:cb:8f: 1a:39:f8:e8:08:18:16:f7:bc:0a:29:66:c5:a2:40: c9:57:60:da:ca:17:4b:66:7e:57:4a:7c:0a:84:98: 3f:e7:06:ac:05:e4:fb:16:49:93:ee:2c:83:97:23: 03:f1:d9:98:9b:13:c6:ae:9a:4c:3d:4a:df:f3:18: c3:b2:24:51:96:b4:9c:f4:ae:86:15:5c:46:b6:24: 96:59:9b:47:da:d7:e3:2c:88:11:7e:ed:fa:43:93: 44:2d:33:ec:9b:fd:1a:7b:1e:c2:df:51:e5:a4:0e: 4d:73:88:bf:b6:c6:aa:46:c3:5d:a3:fb:48:93:e2: ca:d5:c1:1c:c9:48:54:2b:07:b1:58:80:c0:37:fe: 4f:c6:d2:fc:a8:0b:f2:a3:51:92:85:ef:02:cc:03: 90:2f:59:a6:e6:49:65:83:43:fd:26:ad:d7:f2:62: d7:ec:c7:62:f5:93:d7:08:57:59:9e:9b:2f:b8:b6: b0:7d:48:72:38:35:2f:ec:1e:63:16:52:d3:d2:95: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A6:86:3D:E4:E8:C7:CD:9A:E8:6E:DC:2C:A6:CF:7A:A9:7B:91:15 X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:19:b3:56:76:a0:f0:73:35:2c:64:a2:dd:37:58:81:2a:c1: df:1b:fb:d0:b3:0e:91:51:22:fb:9f:7a:3b:08:40:a3:bf:42: c6:92:f6:9f:c2:63:8b:5f:12:9a:1e:21:77:9b:f2:6a:24:87: 24:4b:6b:e6:a8:6a:1a:f8:17:70:6f:28:26:bf:9c:13:85:52: 7c:f0:84:b5:df:ef:83:e4:62:d8:24:98:20:4b:c7:cb:d1:9e: 5e:11:f7:bc:70:6c:9c:ee:50:22:a2:44:a3:1d:65:6a:f5:e2: f3:f2:61:03:d5:1c:d0:b6:9c:18:1f:2a:56:55:7e:b8:b5:d6: e2:5c:9f:f2:c4:de:5a:d3:4f:97:ba:cc:8e:66:8b:43:88:af: 7b:31:4b:5b:f6:52:f6:de:3a:51:56:50:e2:3c:77:65:d1:4e: 92:a3:57:d8:8f:f0:2e:6f:a4:1a:82:2c:9a:e1:05:d1:40:41: 11:60:0a:ac:93:8d:47:26:04:d4:21:57:09:a6:7b:a3:7b:fe: af:a1:60:ed:41:e4:ab:90:27:d9:59:90:31:fc:4d:b2:04:af: e2:d1:93:e9:89:34:a0:2b:1e:53:a1:86:bf:a4:70:5e:07:1b: 1b:a1:b1:51:8a:6f:3f:a2:75:48:a8:7d:b3:a0:85:af:95:89: a8:b6:a4:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5SJ9MFkvTgqlY7eaRY2NmHfv3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNjAzMDMwMzU2MzJaFw0yNjAzMDYwODM2MzJaMDMxMTAvBgNV BAMTKEY4QTY4NjNERTRFOEM3Q0Q5QUU4NkVEQzJDQTZDRjdBQTk3QjkxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmcHTMpAoO2jwXY6O6y8RuCHJR TsQwdIbNWI3ENU5kyHOYamIB3gLFiCAHRThIqFdhEw9Bw3lUp4rLjxo5+OgIGBb3 vAopZsWiQMlXYNrKF0tmfldKfAqEmD/nBqwF5PsWSZPuLIOXIwPx2ZibE8aumkw9 St/zGMOyJFGWtJz0roYVXEa2JJZZm0fa1+MsiBF+7fpDk0QtM+yb/Rp7HsLfUeWk Dk1ziL+2xqpGw12j+0iT4srVwRzJSFQrB7FYgMA3/k/G0vyoC/KjUZKF7wLMA5Av WabmSWWDQ/0mrdfyYtfsx2L1k9cIV1memy+4trB9SHI4NS/sHmMWUtPSlVdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KaGPeTox82a6G7cLKbPeql7kRUwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEZs1Z2oPBzNSxkot03WIEqwd8b+9CzDpFR IvufejsIQKO/QsaS9p/CY4tfEpoeIXeb8mokhyRLa+aoahr4F3BvKCa/nBOFUnzw hLXf74PkYtgkmCBLx8vRnl4R97xwbJzuUCKiRKMdZWr14vPyYQPVHNC2nBgfKlZV fri11uJcn/LE3lrTT5e6zI5mi0OIr3sxS1v2UvbeOlFWUOI8d2XRTpKjV9iP8C5v pBqCLJrhBdFAQRFgCqyTjUcmBNQhVwmme6N7/q+hYO1B5KuQJ9lZkDH8TbIEr+LR k+mJNKArHlOhhr+kcF4HGxuhsVGKbz+idUiofbOgha+Viai2pKo= -----END CERTIFICATE-----Generated at Wed Mar 4 17:34:14 2026 by rpki-client