$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: KvbSJ/cIgcKSUeubMlqDnm8TbJ8/ykJpGKbT5EJN4ac= Subject key identifier: DB:9E:72:A5:9E:1C:16:93:1E:BA:59:59:41:48:BF:00:93:F5:42:DD Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 4F02AC5E5289E639AE5205C4DE3D70F7197733CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: E1 Signing time: Mon 20 Apr 2026 03:01:42 +0000 Manifest this update: Mon 20 Apr 2026 02:56:42 +0000 Manifest next update: Thu 23 Apr 2026 13:48:42 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: EgrBMkfgdJTHecJ5+cEmLZPikKFcrzt7TB2/ntoleGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:02:ac:5e:52:89:e6:39:ae:52:05:c4:de:3d:70:f7:19:77:33:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Apr 20 02:56:42 2026 GMT Not After : Apr 23 13:48:42 2026 GMT Subject: CN=DB9E72A59E1C16931EBA59594148BF0093F542DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:b8:0f:74:55:c8:32:71:a9:b1:9b:3b:b8: a3:00:b8:c4:07:e4:4f:60:c2:6e:e6:02:fd:21:3c: 44:dc:99:56:73:0a:ca:f4:e2:8c:4d:71:a2:5a:a8: 13:33:f5:64:f2:20:d2:31:dd:9f:c0:00:99:e0:47: 52:b9:26:91:36:bb:1d:97:5f:ea:a9:5b:2e:e8:65: 0d:df:da:b7:49:e5:68:8f:13:e8:fb:31:8d:6f:44: 3e:b1:40:47:7e:56:89:bb:b1:80:a0:4e:e0:e5:8e: 48:a3:3d:70:6f:d7:71:ff:da:24:69:82:7c:1a:40: ca:f5:e1:a5:f1:fc:84:02:db:44:97:fb:7c:ea:31: 8a:c5:7f:74:65:98:b0:a7:dd:34:02:31:b0:8c:c3: cb:77:df:e1:13:08:a8:e1:15:80:40:1f:3f:e5:d9: 85:9c:49:37:0b:bf:3c:8a:93:17:45:c2:04:dc:fe: 8f:a8:5b:04:3a:b7:e9:2b:4d:a9:21:cd:c8:b4:70: 0f:58:bb:74:9e:ef:cd:00:7a:af:c0:21:02:88:85: da:35:27:f4:6d:d1:f7:d8:9e:81:fa:5e:ec:2d:33: 8e:80:99:8d:9b:62:0a:11:1d:b2:69:a3:be:96:d9: 58:4d:81:4e:05:92:37:b1:b6:09:5a:40:ef:da:4b: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9E:72:A5:9E:1C:16:93:1E:BA:59:59:41:48:BF:00:93:F5:42:DD X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cf:f9:7e:9f:b5:d7:cd:13:9a:17:77:b3:59:6e:c5:02:66: f0:6b:ab:37:e3:f0:98:d5:28:ac:51:9a:6c:f9:48:cf:76:42: ab:9d:d4:31:96:bb:3d:da:52:91:09:90:8b:3c:03:2c:14:14: ba:52:27:7d:4a:b8:da:7a:18:3b:0f:cd:74:67:78:46:c4:90: 84:d4:8a:7e:66:5e:20:75:ef:1f:ee:8d:38:92:d7:6c:13:bb: fe:62:b3:20:51:75:3b:6d:0c:26:18:f5:e5:41:02:16:68:eb: 40:bd:2a:8c:ff:bd:cc:f8:cd:c9:95:da:28:59:fa:2c:2f:47: f5:89:fc:24:27:54:d0:2b:0a:ad:b2:a3:3c:65:cb:be:68:3d: 85:a4:d0:1c:fc:6b:af:2e:f4:5d:51:0c:ff:0a:74:98:3e:dc: e8:7d:7f:ce:bd:b8:17:71:46:49:53:03:68:32:f5:3d:3c:8a: d1:d2:21:7d:55:90:0f:29:bc:8b:0b:32:16:e8:95:b2:92:4a: 5d:2b:26:06:81:00:fc:1a:39:c2:52:af:f3:7a:96:81:18:7b: 9b:cc:6c:53:f9:05:58:7a:14:e1:c6:c7:0d:a8:86:a5:25:d1: ea:20:3d:5b:7e:0e:5e:61:fc:2e:78:5e:03:9b:74:1e:5b:77: 13:4b:c7:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwKsXlKJ5jmuUgXE3j1w9xl3M8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNjA0MjAwMjU2NDJaFw0yNjA0MjMxMzQ4NDJaMDMxMTAvBgNV BAMTKERCOUU3MkE1OUUxQzE2OTMxRUJBNTk1OTQxNDhCRjAwOTNGNTQyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNf7gPdFXIMnGpsZs7uKMAuMQH 5E9gwm7mAv0hPETcmVZzCsr04oxNcaJaqBMz9WTyINIx3Z/AAJngR1K5JpE2ux2X X+qpWy7oZQ3f2rdJ5WiPE+j7MY1vRD6xQEd+Vom7sYCgTuDljkijPXBv13H/2iRp gnwaQMr14aXx/IQC20SX+3zqMYrFf3RlmLCn3TQCMbCMw8t33+ETCKjhFYBAHz/l 2YWcSTcLvzyKkxdFwgTc/o+oWwQ6t+krTakhzci0cA9Yu3Se780Aeq/AIQKIhdo1 J/Rt0ffYnoH6XuwtM46AmY2bYgoRHbJpo76W2VhNgU4FkjextglaQO/aS4YNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU255ypZ4cFpMeullZQUi/AJP1Qt0wHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLP+X6ftdfNE5oXd7NZbsUCZvBrqzfj8JjV KKxRmmz5SM92Qqud1DGWuz3aUpEJkIs8AywUFLpSJ31KuNp6GDsPzXRneEbEkITU in5mXiB17x/ujTiS12wTu/5isyBRdTttDCYY9eVBAhZo60C9Koz/vcz4zcmV2ihZ +iwvR/WJ/CQnVNArCq2yozxly75oPYWk0Bz8a68u9F1RDP8KdJg+3Oh9f869uBdx RklTA2gy9T08itHSIX1VkA8pvIsLMhbolbKSSl0rJgaBAPwaOcJSr/N6loEYe5vM bFP5BVh6FOHGxw2ohqUl0eogPVt+Dl5h/C54XgObdB5bdxNLxwQ= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:55 2026 by rpki-client