$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: TLV3cMPnyFXoZ+UFrWAHycEvEom5S8+fQS7TWu/18iQ= Subject key identifier: EC:E7:08:70:57:98:45:C0:3D:E8:BA:B6:EA:90:95:79:E4:28:52:E5 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 06DBDBBDD010605DA8B02CFD39A2CC30DDFE07EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 0105 Signing time: Fri 06 Mar 2026 05:30:54 +0000 Manifest this update: Fri 06 Mar 2026 05:25:54 +0000 Manifest next update: Mon 09 Mar 2026 11:29:54 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) 2: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: bij2dZs/zEBaRttcSM53iQUl0546lJYiXNwJBbTkUqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:db:db:bd:d0:10:60:5d:a8:b0:2c:fd:39:a2:cc:30:dd:fe:07:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Mar 6 05:25:54 2026 GMT Not After : Mar 9 11:29:54 2026 GMT Subject: CN=ECE70870579845C03DE8BAB6EA909579E42852E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:19:d3:d3:9e:f1:9d:5a:38:f0:68:ac:d3: e7:fb:3e:0b:f8:25:d3:f6:cf:be:06:e9:c8:0f:d7: 86:fb:92:ce:c4:20:b8:9b:0c:2e:21:73:f5:b6:50: db:33:b7:b4:8c:a7:37:0a:08:05:1b:f8:33:fe:b8: 18:71:3e:34:be:7f:e4:62:0a:61:08:53:95:fa:91: cf:2a:41:f7:9a:d8:03:ff:0e:dd:5f:05:08:7f:0c: c6:d5:1a:c4:c6:88:22:8d:2b:79:bb:c2:7e:e5:d0: 9f:0f:5b:70:3b:66:e3:85:a4:32:69:1c:0e:a4:fe: a3:ca:ce:2d:ad:40:23:80:fd:b1:c8:5e:94:ae:80: be:f1:0a:cf:8f:ff:9e:58:e5:1f:76:cb:61:95:ec: 5c:09:39:a6:aa:ef:10:2b:f7:9f:8e:ce:63:6e:da: 39:ba:3a:64:ff:cb:9f:20:32:e2:ad:41:3f:a3:eb: ed:29:bc:f7:ce:fc:5b:52:0f:80:5e:26:90:84:48: aa:55:83:5e:1e:83:79:80:d8:d4:cc:01:b7:d1:18: af:2e:c7:53:92:1a:6d:fb:76:b6:99:72:d3:13:70: 1c:5e:22:57:5b:7b:bb:66:17:d0:54:8b:e0:53:7c: 5b:b3:14:6a:d9:5a:04:f0:9b:62:bf:59:2b:26:bb: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:08:70:57:98:45:C0:3D:E8:BA:B6:EA:90:95:79:E4:28:52:E5 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:da:6a:c5:86:54:4d:71:bd:c7:48:e6:a1:2f:18:70:29:03: 8a:e7:12:68:4b:c1:4a:6f:bf:80:5f:6f:be:3e:6b:64:6e:bb: 84:3f:ae:c3:1a:f0:35:67:64:0e:e7:c8:ab:09:db:91:e3:6f: 3b:6f:73:69:56:c3:96:7d:72:7f:ce:ca:74:5c:dd:1d:8e:c7: d8:fd:e3:00:b1:5f:a1:7a:a8:51:72:9b:7b:6f:5a:61:cd:e7: f5:f3:34:bc:86:5d:4c:ce:c1:2d:a3:bf:f3:df:ce:2e:e4:00: 1d:f7:cd:08:5b:44:35:bd:28:9b:c6:21:79:0d:53:21:4c:d7: 04:c3:ed:dd:3e:c7:ac:53:9c:6d:4f:09:97:e1:25:ef:3c:ac: 1d:f1:00:9f:51:ca:ac:52:d0:ef:df:5a:eb:5a:4f:b0:b5:f1: 19:c0:2c:92:02:ff:f1:00:6c:1e:ee:d2:62:d7:f5:76:46:a3: 09:08:fc:32:f9:3c:2e:87:c7:53:6a:7e:6f:11:b1:37:62:e0: 79:75:44:33:18:32:b5:45:6e:00:83:b8:39:d4:61:f7:7f:64: ec:34:06:51:ca:8e:e2:49:3c:40:43:5b:8f:0c:86:b8:b8:14: 12:54:72:39:46:37:1e:2a:a2:a5:cc:2a:29:b2:5f:df:bf:87: 93:61:a9:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtvbvdAQYF2osCz9OaLMMN3+B+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNjAzMDYwNTI1NTRaFw0yNjAzMDkxMTI5NTRaMDMxMTAvBgNV BAMTKEVDRTcwODcwNTc5ODQ1QzAzREU4QkFCNkVBOTA5NTc5RTQyODUyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69BnT057xnVo48Gis0+f7Pgv4 JdP2z74G6cgP14b7ks7EILibDC4hc/W2UNszt7SMpzcKCAUb+DP+uBhxPjS+f+Ri CmEIU5X6kc8qQfea2AP/Dt1fBQh/DMbVGsTGiCKNK3m7wn7l0J8PW3A7ZuOFpDJp HA6k/qPKzi2tQCOA/bHIXpSugL7xCs+P/55Y5R92y2GV7FwJOaaq7xAr95+OzmNu 2jm6OmT/y58gMuKtQT+j6+0pvPfO/FtSD4BeJpCESKpVg14eg3mA2NTMAbfRGK8u x1OSGm37draZctMTcBxeIldbe7tmF9BUi+BTfFuzFGrZWgTwm2K/WSsmu5M9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OcIcFeYRcA96Lq26pCVeeQoUuUwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfaasWGVE1xvcdI5qEvGHApA4rnEmhLwUpv v4Bfb74+a2Ruu4Q/rsMa8DVnZA7nyKsJ25Hjbztvc2lWw5Z9cn/OynRc3R2Ox9j9 4wCxX6F6qFFym3tvWmHN5/XzNLyGXUzOwS2jv/Pfzi7kAB33zQhbRDW9KJvGIXkN UyFM1wTD7d0+x6xTnG1PCZfhJe88rB3xAJ9RyqxS0O/fWutaT7C18RnALJIC//EA bB7u0mLX9XZGowkI/DL5PC6Hx1Nqfm8RsTdi4Hl1RDMYMrVFbgCDuDnUYfd/ZOw0 BlHKjuJJPEBDW48Mhri4FBJUcjlGNx4qoqXMKimyX9+/h5NhqdU= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:40 2026 by rpki-client