$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: eDAXxGo1QZixjh2/XxO5VY9GoSg8aHRddE5CG154a5k= Subject key identifier: 84:BA:16:E1:3C:B8:5A:49:D7:E1:6D:7B:BD:B6:84:82:7A:20:35:9E Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 152A160D57087D56F767C9A0FCC29FF8F01F915F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 024E Signing time: Fri 06 Mar 2026 11:12:08 +0000 Manifest this update: Fri 06 Mar 2026 11:07:08 +0000 Manifest next update: Mon 09 Mar 2026 16:20:08 +0000 Files and hashes: 1: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: 9n2UPecS8U8hHLQPe/4p3mJETsJkE4j5iOjZRRCbrkI=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2a:16:0d:57:08:7d:56:f7:67:c9:a0:fc:c2:9f:f8:f0:1f:91:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Mar 6 11:07:08 2026 GMT Not After : Mar 9 16:20:08 2026 GMT Subject: CN=84BA16E13CB85A49D7E16D7BBDB684827A20359E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:59:21:f2:71:49:7c:67:57:7c:b6:b0:61: 8f:f4:73:ce:56:ac:c1:8d:d1:44:74:9a:ce:45:7a: 76:2c:b9:2c:de:9f:57:b5:d4:a5:cc:f3:be:7a:4c: 9c:05:c6:ad:4c:f5:a0:7b:79:bd:76:35:67:96:09: 5f:b4:34:a1:7d:a7:24:2d:4c:e9:57:ac:34:92:e6: 86:7f:e2:ff:67:0b:da:97:f1:a7:17:07:35:43:d6: 5e:a7:52:f1:dd:ae:7c:64:b4:cc:92:24:94:01:46: b1:5e:ce:4b:72:30:3c:fa:0d:14:9e:c7:34:5e:d7: c2:9d:d0:05:0e:a4:91:b8:93:1d:1a:65:4d:a5:68: 73:1c:ea:30:18:17:f7:52:58:60:b4:20:6e:f1:30: 6e:d4:05:de:4c:95:87:55:d4:97:87:9c:7f:90:a9: 35:78:9c:0d:39:b8:c7:28:d8:ac:c3:3d:fa:93:48: c0:75:2f:0f:73:d3:2f:fc:b3:bf:19:b9:e3:de:18: ad:76:7c:dd:f8:94:50:23:71:f3:d8:c5:09:be:35: ca:02:dc:af:14:18:51:18:43:d1:a0:6d:85:5d:21: 3b:6f:4c:da:7e:d4:57:c3:bc:ef:56:70:fe:6d:1d: d0:fb:d7:dd:5c:4f:6d:bd:c5:b1:36:0f:f5:15:c9: 4a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:16:E1:3C:B8:5A:49:D7:E1:6D:7B:BD:B6:84:82:7A:20:35:9E X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:80:c3:2f:85:db:6f:38:d7:cc:51:3b:3c:e5:24:26:f0:8c: 12:17:10:74:d8:2b:86:47:ac:d0:9d:8b:af:c6:d7:fc:e2:4f: 25:42:e7:37:33:60:9d:7b:84:ed:d6:b6:7a:19:99:3b:80:22: c8:52:e1:cb:76:3d:1d:e3:98:7b:ce:d6:1b:34:71:d8:1e:e9: aa:24:d5:3b:68:08:d3:b3:69:0c:6b:d6:70:31:61:91:ba:0a: 42:2c:51:9d:14:91:4d:d8:ed:c7:af:c9:bf:0f:ca:17:b7:73: 98:a1:54:d3:31:b2:51:44:52:24:cb:c2:7d:f1:4c:7b:90:40: e9:f4:88:26:05:66:96:84:ff:cb:9c:3d:67:1d:24:90:ad:e7: 30:29:22:d8:50:28:06:b5:43:46:48:bd:1a:b4:97:96:d2:51: e7:6b:c4:1d:8a:0f:6f:32:c1:b3:78:49:6f:5c:88:3d:06:91: da:2d:66:aa:54:35:47:e9:80:df:81:63:b4:3b:23:3e:b4:ec: cc:e2:cc:a2:32:71:f1:fb:c1:76:7e:5f:87:65:9d:33:f7:1b: 30:41:3c:f3:5c:0f:1c:e8:3f:10:3f:18:46:5f:59:d4:26:85: 20:c6:04:ad:af:84:35:74:01:38:69:e3:6d:cd:78:c7:39:de: 8d:ba:20:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSoWDVcIfVb3Z8mg/MKf+PAfkV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNjAzMDYxMTA3MDhaFw0yNjAzMDkxNjIwMDhaMDMxMTAvBgNV BAMTKDg0QkExNkUxM0NCODVBNDlEN0UxNkQ3QkJEQjY4NDgyN0EyMDM1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGlkh8nFJfGdXfLawYY/0c85W rMGN0UR0ms5FenYsuSzen1e11KXM8756TJwFxq1M9aB7eb12NWeWCV+0NKF9pyQt TOlXrDSS5oZ/4v9nC9qX8acXBzVD1l6nUvHdrnxktMySJJQBRrFezktyMDz6DRSe xzRe18Kd0AUOpJG4kx0aZU2laHMc6jAYF/dSWGC0IG7xMG7UBd5MlYdV1JeHnH+Q qTV4nA05uMco2KzDPfqTSMB1Lw9z0y/8s78ZuePeGK12fN34lFAjcfPYxQm+NcoC 3K8UGFEYQ9GgbYVdITtvTNp+1FfDvO9WcP5tHdD7191cT229xbE2D/UVyUpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLoW4Ty4WknX4W17vbaEgnogNZ4wHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWAwy+F228418xROzzlJCbwjBIXEHTYK4ZH rNCdi6/G1/ziTyVC5zczYJ17hO3WtnoZmTuAIshS4ct2PR3jmHvO1hs0cdge6aok 1TtoCNOzaQxr1nAxYZG6CkIsUZ0UkU3Y7cevyb8Pyhe3c5ihVNMxslFEUiTLwn3x THuQQOn0iCYFZpaE/8ucPWcdJJCt5zApIthQKAa1Q0ZIvRq0l5bSUedrxB2KD28y wbN4SW9ciD0GkdotZqpUNUfpgN+BY7Q7Iz607MzizKIycfH7wXZ+X4dlnTP3GzBB PPNcDxzoPxA/GEZfWdQmhSDGBK2vhDV0AThp423NeMc53o26IG0= -----END CERTIFICATE-----Generated at Sat Mar 7 21:18:31 2026 by rpki-client