$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: 6EvhN8a4Phnf6Di3GZWnYp55wLQV5ee4hCsE9DicTOs= Subject key identifier: 80:3B:59:9F:88:EB:29:0E:C1:E2:F7:63:DB:88:CB:02:8C:BE:6A:ED Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 1C7F11F522CAFF2FDE5997F8B63EB5D05B56CB2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: 0125 Signing time: Mon 20 Apr 2026 07:22:29 +0000 Manifest this update: Mon 20 Apr 2026 07:17:29 +0000 Manifest next update: Thu 23 Apr 2026 11:27:29 +0000 Files and hashes: 1: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: XKJZwfdxfYCFobfIXBzX0s3VaokSLuhmHCnMiXBzmAk=) 2: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 3: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 4: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 11:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7f:11:f5:22:ca:ff:2f:de:59:97:f8:b6:3e:b5:d0:5b:56:cb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Apr 20 07:17:29 2026 GMT Not After : Apr 23 11:27:29 2026 GMT Subject: CN=803B599F88EB290EC1E2F763DB88CB028CBE6AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:f6:3b:76:12:de:3d:51:3b:bb:67:60:5e: 34:fa:b3:5e:2f:5e:81:a6:7f:ab:2e:62:48:ed:a4: 70:e4:2c:3f:f6:a5:dd:9f:02:78:96:53:95:43:8a: ec:fa:76:03:77:b7:27:35:92:c2:a3:6f:60:41:a4: 3b:b5:bf:4d:0a:d5:f4:e0:37:80:98:fd:7a:5b:f2: 0b:74:f7:65:c5:5c:37:62:03:1e:aa:b9:b3:f9:23: 9d:e2:aa:6e:e7:8f:79:ac:26:8a:cd:80:df:32:46: f8:50:b1:be:e9:de:e1:9d:39:f7:08:ba:71:81:dc: a5:1a:d3:52:13:d7:fa:fb:2f:04:8d:35:e9:ff:69: 44:0e:e3:3e:ab:dd:31:96:b3:62:f6:3a:09:ae:e8: 7d:8a:18:39:cb:20:3f:e7:60:d7:4f:47:aa:29:a7: 8a:28:fc:a3:79:4b:83:03:87:e4:df:d4:4c:1e:6f: 77:ba:df:9e:4b:07:af:00:8e:ad:14:bd:f7:86:e3: cb:3e:2a:4d:60:ac:5c:e9:cc:00:30:31:c5:86:46: ac:1c:66:10:3d:93:cc:55:1c:cc:d2:f4:e0:30:02: 44:b2:f8:2a:ed:fd:5f:31:2e:20:85:af:b0:e1:47: 8e:26:f4:fc:14:a6:74:d2:3b:81:88:4d:3c:af:d2: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3B:59:9F:88:EB:29:0E:C1:E2:F7:63:DB:88:CB:02:8C:BE:6A:ED X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:69:93:a2:15:34:20:a9:3c:e9:f6:ba:cb:f9:42:a9:16:3b: 28:06:1b:a4:a4:a0:28:82:68:a5:79:27:3a:7c:e9:ce:d2:1d: 6a:09:5a:ac:31:05:09:41:58:a8:88:44:27:e1:a4:cf:2e:e5: 0b:e1:9e:3c:5c:56:05:4b:6e:25:4c:45:b9:3e:87:8f:d8:20: f8:60:46:e7:ed:bd:bd:d5:f6:65:0a:7a:86:ce:27:2e:58:d7: b9:c7:b1:48:7d:7a:68:eb:9e:24:3a:1c:8e:f5:68:30:b9:cb: f8:4d:ec:bb:5c:53:cf:b4:02:af:cb:c0:67:80:a1:b1:a4:90: 03:e4:50:76:57:36:e1:72:9b:65:4e:f6:ac:03:fc:97:71:e6: c7:b4:a5:de:c9:41:2d:76:05:0b:03:a3:7a:0a:21:76:ba:05: b9:1a:2a:ac:db:de:35:b3:46:a3:05:19:7c:1c:b9:e4:5d:24: 3d:3d:3e:bc:ea:67:45:66:52:f2:ad:f7:b2:e3:d7:f0:3e:8a: 72:f9:3e:2f:42:d3:4a:1f:bf:c0:c7:05:d4:c4:fc:3c:ca:d3: 0b:e2:67:44:08:24:4e:2a:13:71:ec:d0:71:39:4d:c8:23:ae: 26:c6:22:33:43:60:f7:d9:4f:e2:83:eb:2a:b0:9f:8a:6b:11: df:e7:bc:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHH8R9SLK/y/eWZf4tj610FtWyyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNjA0MjAwNzE3MjlaFw0yNjA0MjMxMTI3MjlaMDMxMTAvBgNV BAMTKDgwM0I1OTlGODhFQjI5MEVDMUUyRjc2M0RCODhDQjAyOENCRTZBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXfY7dhLePVE7u2dgXjT6s14v XoGmf6suYkjtpHDkLD/2pd2fAniWU5VDiuz6dgN3tyc1ksKjb2BBpDu1v00K1fTg N4CY/Xpb8gt092XFXDdiAx6qubP5I53iqm7nj3msJorNgN8yRvhQsb7p3uGdOfcI unGB3KUa01IT1/r7LwSNNen/aUQO4z6r3TGWs2L2Ogmu6H2KGDnLID/nYNdPR6op p4oo/KN5S4MDh+Tf1Eweb3e6355LB68Ajq0UvfeG48s+Kk1grFzpzAAwMcWGRqwc ZhA9k8xVHMzS9OAwAkSy+Crt/V8xLiCFr7DhR44m9PwUpnTSO4GITTyv0gVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDtZn4jrKQ7B4vdj24jLAoy+au0wHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFppk6IVNCCpPOn2usv5QqkWOygGG6SkoCiC aKV5Jzp86c7SHWoJWqwxBQlBWKiIRCfhpM8u5QvhnjxcVgVLbiVMRbk+h4/YIPhg Ruftvb3V9mUKeobOJy5Y17nHsUh9emjrniQ6HI71aDC5y/hN7LtcU8+0Aq/LwGeA obGkkAPkUHZXNuFym2VO9qwD/Jdx5se0pd7JQS12BQsDo3oKIXa6BbkaKqzb3jWz RqMFGXwcueRdJD09PrzqZ0VmUvKt97Lj1/A+inL5Pi9C00ofv8DHBdTE/DzK0wvi Z0QIJE4qE3Hs0HE5TcgjribGIjNDYPfZT+KD6yqwn4prEd/nvJs= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:22 2026 by rpki-client