$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: 8FZePM7WzP20F2Y64JxlzYr8QdnDmycR4APnApRxPas= Subject key identifier: 47:D2:A6:1E:AC:F1:E4:69:B8:BF:93:AA:CE:D0:73:51:89:1F:E2:2F Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 58AA899A28D4EC5A9FAE6BDE016828F098669F6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 021D Signing time: Sun 05 Apr 2026 10:22:36 +0000 Manifest this update: Sun 05 Apr 2026 10:17:36 +0000 Manifest next update: Wed 08 Apr 2026 11:11:36 +0000 Files and hashes: 1: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=) 2: 6886844AB176920850E0984917E9713667D0A025.crl (hash: +f+KRuneOfulOuJEkG8yv2IdPfxvwekXFJ2TPXqstn4=) 3: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=) 4: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 11:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:aa:89:9a:28:d4:ec:5a:9f:ae:6b:de:01:68:28:f0:98:66:9f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Apr 5 10:17:36 2026 GMT Not After : Apr 8 11:11:36 2026 GMT Subject: CN=47D2A61EACF1E469B8BF93AACED07351891FE22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:59:12:2c:d9:b0:56:1a:89:75:97:0d:fe: e7:ca:6c:a5:b2:63:68:92:4e:4d:55:4d:7d:84:a2: 8f:73:11:c9:8d:9f:69:72:3d:73:e3:64:45:f7:61: 4b:29:31:7a:68:75:d8:73:34:6a:20:1d:a8:f5:e0: 9d:96:ac:1a:58:79:02:75:e1:cc:37:de:ad:c8:18: f9:1d:2c:05:92:6d:02:9d:dd:74:e1:83:20:e1:8e: c5:f2:83:69:42:b9:16:a6:ad:38:6a:a8:25:02:ce: 2b:20:29:2c:03:6d:98:c9:d0:9b:29:cf:07:fd:28: 3c:33:7d:6b:9e:32:05:8b:32:64:74:f4:62:67:f0: 05:6e:08:fa:1a:fd:ce:56:61:8d:de:90:e4:bc:94: 38:f7:2e:a7:9d:b8:22:71:b5:f5:c1:8e:ed:bb:2c: ed:95:9a:d7:b1:0d:4c:ea:83:84:19:26:b1:e8:1d: 89:a9:d4:e9:31:55:bf:c0:b2:6b:d0:2a:23:ac:86: 19:06:6d:19:95:b7:f2:0d:f0:f9:a1:51:50:3e:09: f1:5e:99:bd:90:e9:6a:c7:00:f4:ec:ac:21:38:68: 62:6e:3f:1b:77:f8:85:14:b1:75:17:ce:55:80:31: f7:3e:c4:1e:73:04:fa:71:a0:7f:46:79:0c:9f:ec: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:A6:1E:AC:F1:E4:69:B8:BF:93:AA:CE:D0:73:51:89:1F:E2:2F X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4d:15:f9:dd:e0:dc:c7:8c:de:87:a8:8e:8a:d6:ec:20:8a: ed:f1:e8:19:b7:1b:33:cc:86:71:26:95:fb:b1:1e:83:da:8f: db:f6:05:08:ae:a9:d6:72:48:e2:5e:f4:48:36:65:87:2a:6d: f7:e7:82:cb:ed:db:13:a2:c8:51:32:34:f2:64:a7:28:79:de: 21:90:9a:26:03:9b:30:81:05:fb:cc:1a:e3:4d:79:e5:2a:9d: 97:87:d5:25:8b:5f:f1:34:1f:16:b4:8b:78:1d:50:de:30:b9: 97:02:e0:37:d7:42:13:1a:02:a1:15:83:4a:2e:3c:6b:94:c9: ec:ff:6f:4d:6d:6d:85:b3:9d:2e:6a:3f:62:89:51:99:e3:41: ce:fb:d6:39:04:57:06:6a:a7:d3:f6:de:53:92:c0:49:5e:d5: fe:c9:69:fb:21:81:7c:16:fe:ca:14:5a:eb:d8:b0:99:9b:f6: 92:a9:4f:96:be:7d:b8:d3:7b:db:12:9a:8b:42:10:81:c7:7f: b8:50:65:72:4c:5c:42:5d:9d:2c:69:54:fd:21:bd:a1:8b:c6: c2:d2:3e:bc:83:64:10:a8:a9:68:d6:76:0b:8e:ad:cb:57:c8: d2:ad:59:1d:5a:ac:8f:e6:99:4a:ff:1f:b6:0b:f7:fe:ed:4f: 7d:71:af:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKqJmijU7FqfrmveAWgo8Jhmn2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNjA0MDUxMDE3MzZaFw0yNjA0MDgxMTExMzZaMDMxMTAvBgNV BAMTKDQ3RDJBNjFFQUNGMUU0NjlCOEJGOTNBQUNFRDA3MzUxODkxRkUyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcFkSLNmwVhqJdZcN/ufKbKWy Y2iSTk1VTX2Eoo9zEcmNn2lyPXPjZEX3YUspMXpoddhzNGogHaj14J2WrBpYeQJ1 4cw33q3IGPkdLAWSbQKd3XThgyDhjsXyg2lCuRamrThqqCUCzisgKSwDbZjJ0Jsp zwf9KDwzfWueMgWLMmR09GJn8AVuCPoa/c5WYY3ekOS8lDj3LqeduCJxtfXBju27 LO2VmtexDUzqg4QZJrHoHYmp1OkxVb/AsmvQKiOshhkGbRmVt/IN8PmhUVA+CfFe mb2Q6WrHAPTsrCE4aGJuPxt3+IUUsXUXzlWAMfc+xB5zBPpxoH9GeQyf7PQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9KmHqzx5Gm4v5OqztBzUYkf4i8wHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9NFfnd4NzHjN6HqI6K1uwgiu3x6Bm3GzPM hnEmlfuxHoPaj9v2BQiuqdZySOJe9Eg2ZYcqbffngsvt2xOiyFEyNPJkpyh53iGQ miYDmzCBBfvMGuNNeeUqnZeH1SWLX/E0Hxa0i3gdUN4wuZcC4DfXQhMaAqEVg0ou PGuUyez/b01tbYWznS5qP2KJUZnjQc771jkEVwZqp9P23lOSwEle1f7JafshgXwW /soUWuvYsJmb9pKpT5a+fbjTe9sSmotCEIHHf7hQZXJMXEJdnSxpVP0hvaGLxsLS PryDZBCoqWjWdguOrctXyNKtWR1arI/mmUr/H7YL9/7tT31xr9c= -----END CERTIFICATE-----Generated at Mon Apr 6 15:32:34 2026 by rpki-client