$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json) Hash identifier: j0Szy8kPPBCK95CHzpTBuuG6v/trpLJ145Y2Ol3zF2g= Subject key identifier: 56:B8:65:3F:E5:A3:08:BD:1D:21:B1:6A:1B:A8:B6:70:0E:67:19:05 Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Certificate serial: 68F4DB67E639B6C8D5DC23049AC16DBC51948AC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft Manifest number: 0420 Signing time: Thu 26 Feb 2026 01:22:20 +0000 Manifest this update: Thu 26 Feb 2026 01:17:20 +0000 Manifest next update: Sun 01 Mar 2026 03:03:20 +0000 Files and hashes: 1: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: /QE3JbQC9fGdo5sebo5tYuWfdXhEXpRAxCPxewOPZfY=) 2: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: DGfL7EnTCBLGR5t5de08yaTLeytqdvvZBNASjK651PI=) 3: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: RtKaOt0QVcUfg/opcNyngIYtGMAYjqUtlrzDiVJb3H0=) 4: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: urXrJr87j5ESWIdZUyyvVpbnNMIBrCPErU0W2IQsIAY=) 5: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: xc/83gc+FBU0xbiGAZua0yG6URQbasVkyKt0kN1IjoE=) 6: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: qU8RTkvPo3iqRGCD9LWcjtrQELpG4pQ8Ybiv4OTKWyg=) 7: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: pCJYjvXonKex+skSqmImkbu4oPl5fBK9Q5SIxdeC0qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Mar 2026 03:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f4:db:67:e6:39:b6:c8:d5:dc:23:04:9a:c1:6d:bc:51:94:8a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Validity Not Before: Feb 26 01:17:20 2026 GMT Not After : Mar 1 03:03:20 2026 GMT Subject: CN=56B8653FE5A308BD1D21B16A1BA8B6700E671905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:74:18:27:87:96:d3:e8:bf:19:10:57:e0: 92:84:47:94:09:02:dc:54:3d:33:48:5a:8c:e5:a1: 8f:d4:79:66:15:ec:f3:0a:a5:0a:d4:1d:14:76:0a: 3f:6f:02:6b:c3:57:57:49:9e:1b:80:e3:72:60:31: 4c:67:91:88:df:96:8d:c4:1e:7e:ae:68:51:c4:c5: 5a:dd:59:a6:ef:62:43:f7:15:fc:0f:93:67:a0:85: a7:c5:b8:56:8d:b2:9d:91:ef:c8:9c:07:1d:51:8c: a5:de:8c:10:49:6f:bd:71:f8:a9:0b:f8:53:2b:9e: a8:b5:c9:39:d8:91:d5:5a:f7:c2:db:c0:9b:29:b9: 2e:53:e2:58:f3:5e:00:d3:b2:c5:6a:fb:77:a8:1b: 7e:60:ae:36:73:35:fb:7b:0c:85:2f:64:af:45:e7: cf:d4:8c:c8:a3:22:8b:66:66:56:83:30:ea:f5:01: 7d:ce:2a:ac:64:7e:35:9a:2f:2d:84:c2:8e:96:4b: 71:bb:2f:1e:d0:ba:53:2a:c9:5d:c8:a9:8c:32:1b: a6:a1:87:c4:47:ca:9a:00:de:dd:88:14:79:b5:2a: 28:6a:6d:88:a2:c2:a1:c7:c8:d6:47:38:dd:db:a5: 73:17:84:29:2e:87:1e:ca:45:bd:dd:a0:f1:02:b1: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B8:65:3F:E5:A3:08:BD:1D:21:B1:6A:1B:A8:B6:70:0E:67:19:05 X509v3 Authority Key Identifier: keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:71:50:05:0b:bb:5b:23:6e:82:d1:4e:76:22:bf:c6:90:5b: 33:ab:46:a3:5b:06:d5:63:2b:f7:ad:7c:8b:31:09:76:c4:07: 21:38:8d:b2:a1:33:54:5b:47:c1:8d:df:3d:d6:de:ed:13:5e: 4c:a2:f1:3e:a8:6f:21:05:62:29:d4:19:1d:0c:58:87:34:89: 2c:40:50:cc:26:24:8d:d6:4c:57:4f:35:15:f8:61:cc:8e:ec: d3:b8:6c:93:d7:77:71:47:70:dc:fd:d9:74:2d:d0:c2:b7:2f: 27:7c:ff:19:c7:9d:d0:84:33:54:d5:c8:4a:be:03:2c:9c:be: 65:1b:80:71:1b:26:95:aa:2d:38:a1:24:3e:b1:bf:1b:7a:2a: ba:70:6f:86:a7:79:8e:32:b9:86:77:56:d6:fb:47:74:c8:bd: 40:6f:6e:af:80:d2:9c:c4:27:d3:5f:35:34:e3:a2:c0:e6:88: 24:7d:f5:88:f2:c4:da:ee:c3:a9:91:1b:f0:42:b2:af:73:59: ca:eb:aa:04:df:ac:0f:ad:41:59:e3:9d:17:95:68:9e:48:cf: ef:a1:b9:d2:ae:9c:66:ab:2a:ff:be:52:39:c9:2e:b8:c1:cb: 4f:72:e5:a8:41:2e:94:62:a4:51:ba:de:8b:b4:1f:18:86:f0: 7d:5c:55:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPTbZ+Y5tsjV3CMEmsFtvFGUisEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF NTY2Rjk0RTAeFw0yNjAyMjYwMTE3MjBaFw0yNjAzMDEwMzAzMjBaMDMxMTAvBgNV BAMTKDU2Qjg2NTNGRTVBMzA4QkQxRDIxQjE2QTFCQThCNjcwMEU2NzE5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElHQYJ4eW0+i/GRBX4JKER5QJ AtxUPTNIWozloY/UeWYV7PMKpQrUHRR2Cj9vAmvDV1dJnhuA43JgMUxnkYjflo3E Hn6uaFHExVrdWabvYkP3FfwPk2eghafFuFaNsp2R78icBx1RjKXejBBJb71x+KkL +FMrnqi1yTnYkdVa98LbwJspuS5T4ljzXgDTssVq+3eoG35grjZzNft7DIUvZK9F 58/UjMijIotmZlaDMOr1AX3OKqxkfjWaLy2Ewo6WS3G7Lx7QulMqyV3IqYwyG6ah h8RHypoA3t2IFHm1KihqbYiiwqHHyNZHON3bpXMXhCkuhx7KRb3doPECsWxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVrhlP+WjCL0dIbFqG6i2cA5nGQUwHwYDVR0j BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2 Rjk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEz MGUtMTBiMmM2ODhjMmZjLzAvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYx QkVFNTY2Rjk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVxUAULu1sjboLRTnYiv8aQWzOrRqNbBtVj K/etfIsxCXbEByE4jbKhM1RbR8GN3z3W3u0TXkyi8T6obyEFYinUGR0MWIc0iSxA UMwmJI3WTFdPNRX4YcyO7NO4bJPXd3FHcNz92XQt0MK3Lyd8/xnHndCEM1TVyEq+ AyycvmUbgHEbJpWqLTihJD6xvxt6Krpwb4aneY4yuYZ3Vtb7R3TIvUBvbq+A0pzE J9NfNTTjosDmiCR99YjyxNruw6mRG/BCsq9zWcrrqgTfrA+tQVnjnReVaJ5Iz++h udKunGarKv++UjnJLrjBy09y5ahBLpRipFG63ou0HxiG8H1cVc8= -----END CERTIFICATE-----Generated at Thu Feb 26 17:16:23 2026 by rpki-client