$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: dTNzFX/kqh5Mb25slnZ3CDCL8+nYeewYbyyhfE2v2BQ= Subject key identifier: 34:84:12:6E:2E:DF:16:42:BB:7B:97:0B:A8:EF:28:89:C5:F4:A5:60 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 4250160D8B4A9D69263A05AF1CE202314C029193 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 0322 Signing time: Fri 06 Mar 2026 23:30:01 +0000 Manifest this update: Fri 06 Mar 2026 23:25:01 +0000 Manifest next update: Tue 10 Mar 2026 11:22:01 +0000 Files and hashes: 1: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: e2maHu55FP5fp6lO5LJsBGEPwnDr2gnnfc83H1faNCM=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: d1fVTMXux6rsxs5u7mFPK2SAxfogfDLQrrOtADDQDa8=) 3: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: pMbo5De0DezcpUzSn7gPUQy/hseN3KuVJNw81U38pvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:50:16:0d:8b:4a:9d:69:26:3a:05:af:1c:e2:02:31:4c:02:91:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Mar 6 23:25:01 2026 GMT Not After : Mar 10 11:22:01 2026 GMT Subject: CN=3484126E2EDF1642BB7B970BA8EF2889C5F4A560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:a1:d1:77:6f:3e:04:af:f5:49:83:84:f8: 5d:ce:a7:1b:b7:7b:42:14:94:2a:18:1b:c0:95:e7: e6:36:d6:b7:d0:97:b1:b9:58:de:5d:f4:ed:70:3b: 0e:ac:ed:f6:65:83:03:99:d9:fa:9d:2b:78:8a:3f: 89:ad:e4:58:b8:ec:7f:91:2f:c2:58:35:8a:6c:4d: eb:d4:64:68:33:bf:dc:16:29:41:da:ce:3f:d7:09: 78:5c:0c:cc:6c:ec:70:cf:dc:c4:f6:28:6b:ee:fa: 26:80:57:a0:52:f5:74:96:9e:5d:31:4f:44:79:28: 66:dc:44:72:2a:2e:b2:3d:d1:5e:d9:ab:3b:98:3f: 14:8e:1f:cf:00:5b:2b:68:4f:16:59:6c:ba:08:13: 89:37:59:53:3d:b6:88:80:ec:06:5c:49:02:3f:fe: 83:35:ca:53:47:df:dc:f9:f6:7c:25:fe:d7:7d:71: 98:24:30:e7:87:71:79:81:ef:e2:7a:85:4f:f7:1d: 1a:93:80:1c:08:46:68:47:39:38:a6:3e:d8:16:4e: 9a:b3:7d:a6:61:63:62:14:2c:c6:e7:ea:72:79:48: 38:e5:f6:5b:03:e9:5e:da:b1:c6:a0:b9:fb:40:fe: f5:fd:97:88:39:b1:35:69:6d:23:72:f2:25:e7:c8: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:84:12:6E:2E:DF:16:42:BB:7B:97:0B:A8:EF:28:89:C5:F4:A5:60 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ca:fa:2b:51:58:df:ba:d9:91:7a:9a:9a:0e:eb:b1:70:01: 31:90:8e:eb:56:2c:7a:62:b9:52:32:85:c1:02:79:b6:90:fd: b7:fc:19:1f:04:08:86:38:63:4f:72:e0:c8:73:25:67:ac:5d: 8d:c9:7d:cb:7e:3f:cd:a3:f1:37:b1:f9:78:0e:8c:a0:e3:e9: 30:b5:be:f4:51:31:9e:43:88:5a:e6:04:1d:60:5b:69:2c:80: 1b:62:7e:15:52:8c:66:2b:dd:8b:72:78:35:4e:dc:d5:52:78: b3:8f:d4:04:8c:88:ce:06:b8:0d:de:09:d6:6d:a8:c1:30:22: 0a:1b:a5:25:f3:42:1a:50:91:07:75:7e:ca:d5:13:8e:cf:f9: ed:60:02:68:05:8a:56:d8:85:d8:4d:c7:cc:a7:76:54:a1:59: 24:17:c3:27:45:b2:b6:9a:d6:42:26:25:65:7d:f3:97:9b:0d: 60:56:14:e0:c0:ad:fe:ce:c4:55:d6:c5:ce:fa:7d:22:43:44: 4a:dc:cd:cc:ea:04:61:ac:70:dc:96:68:34:40:94:b7:7d:3b: cd:b5:c2:ed:d8:7b:48:4c:68:ba:9c:66:0f:0e:38:0e:fb:e9: c0:9e:bc:48:c0:1e:ba:51:a7:91:e6:06:e7:71:54:48:e5:d3: 1f:cb:d3:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlAWDYtKnWkmOgWvHOICMUwCkZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNjAzMDYyMzI1MDFaFw0yNjAzMTAxMTIyMDFaMDMxMTAvBgNV BAMTKDM0ODQxMjZFMkVERjE2NDJCQjdCOTcwQkE4RUYyODg5QzVGNEE1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6D6HRd28+BK/1SYOE+F3Opxu3 e0IUlCoYG8CV5+Y21rfQl7G5WN5d9O1wOw6s7fZlgwOZ2fqdK3iKP4mt5Fi47H+R L8JYNYpsTevUZGgzv9wWKUHazj/XCXhcDMxs7HDP3MT2KGvu+iaAV6BS9XSWnl0x T0R5KGbcRHIqLrI90V7ZqzuYPxSOH88AWytoTxZZbLoIE4k3WVM9toiA7AZcSQI/ /oM1ylNH39z59nwl/td9cZgkMOeHcXmB7+J6hU/3HRqTgBwIRmhHOTimPtgWTpqz faZhY2IULMbn6nJ5SDjl9lsD6V7ascaguftA/vX9l4g5sTVpbSNy8iXnyEnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNIQSbi7fFkK7e5cLqO8oicX0pWAwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrK+itRWN+62ZF6mpoO67FwATGQjutWLHpi uVIyhcECebaQ/bf8GR8ECIY4Y09y4MhzJWesXY3Jfct+P82j8Tex+XgOjKDj6TC1 vvRRMZ5DiFrmBB1gW2ksgBtifhVSjGYr3YtyeDVO3NVSeLOP1ASMiM4GuA3eCdZt qMEwIgobpSXzQhpQkQd1fsrVE47P+e1gAmgFilbYhdhNx8yndlShWSQXwydFsraa 1kImJWV985ebDWBWFODArf7OxFXWxc76fSJDRErczczqBGGscNyWaDRAlLd9O821 wu3Ye0hMaLqcZg8OOA776cCevEjAHrpRp5HmBudxVEjl0x/L06w= -----END CERTIFICATE-----Generated at Sat Mar 7 21:18:21 2026 by rpki-client