$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: tFskEiBjeVB3A0pdMXicQa/yqg2VE5FKg3jIRCY6CFM= Subject key identifier: D1:4A:36:3C:C3:A3:FA:E0:10:92:4D:C9:6F:45:96:61:67:FC:3D:4A Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 50DEE2F4DD5FBB45A36425825977F956F6F1E6FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: E1 Signing time: Mon 20 Apr 2026 15:12:37 +0000 Manifest this update: Mon 20 Apr 2026 15:07:37 +0000 Manifest next update: Thu 23 Apr 2026 21:33:37 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: woj+0UsAl8HrjSChT8r0voJ6g3SWfbVDZa02LOcc8hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:de:e2:f4:dd:5f:bb:45:a3:64:25:82:59:77:f9:56:f6:f1:e6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Apr 20 15:07:37 2026 GMT Not After : Apr 23 21:33:37 2026 GMT Subject: CN=D14A363CC3A3FAE010924DC96F45966167FC3D4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:d2:8e:13:3f:ec:7d:04:56:40:6e:9f:90: 15:ab:ea:7c:4e:dc:d9:c9:f9:3f:b6:ef:fb:ee:8b: bf:b9:14:0c:a6:8f:aa:ff:c4:4b:7d:16:e7:fc:d6: d9:f8:16:88:45:88:b1:1f:5a:d0:63:5e:14:b1:a1: 35:d9:27:57:f9:e4:0f:57:0b:cf:90:a6:14:e1:7e: cb:f0:2c:83:dc:8c:8c:c4:a3:8f:fb:34:f7:64:c1: 8c:a4:18:74:a0:59:d1:d7:3f:58:eb:41:05:f6:43: e5:29:b0:fa:38:d6:31:16:67:86:c9:5c:e7:c1:7a: ef:05:02:87:08:14:f0:44:55:d7:db:a2:16:af:3d: 6c:38:98:d3:67:9a:0a:5b:28:c4:47:28:23:37:85: dc:94:38:c9:5f:f9:7a:1a:87:05:29:77:07:5c:0d: eb:79:7b:be:28:fa:08:00:3a:09:46:8c:95:4e:0c: d9:bb:ee:11:fa:96:2c:7f:02:3b:74:ac:0d:24:e1: f8:77:1f:8d:3c:7f:6f:7b:0a:c1:77:0c:1a:62:c5: 88:03:98:97:1f:28:9c:1d:e9:d1:bf:42:3d:2c:98: 26:e3:48:aa:43:30:83:d6:a8:c7:b8:1e:c7:d0:13: 5c:8b:7b:f1:47:2a:56:0f:2d:7a:f2:01:9c:4a:b2: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:36:3C:C3:A3:FA:E0:10:92:4D:C9:6F:45:96:61:67:FC:3D:4A X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:f1:9f:47:e1:db:11:a1:0c:fe:a6:fc:54:4e:68:52:ed: 17:2a:af:24:d9:9d:fc:0a:2f:3d:b9:b0:ac:ce:50:86:d6:38: 7c:0a:7a:ce:5e:b8:b0:bc:6d:24:1b:c0:61:d2:7b:94:19:bc: a1:46:03:c3:d1:ff:bd:c2:af:e9:53:a0:63:28:f8:ed:57:21: af:fd:ef:db:24:55:be:9c:40:ef:ee:39:9b:94:85:d4:08:2a: d1:67:74:9a:ca:e8:54:e4:dc:17:3f:fc:99:7f:55:ab:4b:3a: 53:27:2e:0b:88:4e:f9:5f:b6:2b:a4:ca:fd:16:1b:b0:e6:09: 56:d5:f0:92:5f:13:3b:04:9f:f6:1f:3d:55:e0:ce:11:7a:4a: f9:97:d8:51:a2:f8:fb:80:24:36:8c:11:c3:6a:c4:38:e4:bd: 76:68:70:70:dc:d3:44:46:1e:fe:9d:64:09:1a:e3:38:ef:f3: a5:6c:a1:03:6c:e1:55:1f:d1:4b:74:c1:53:4d:71:a3:48:8e: 6d:53:d0:75:3d:a6:51:3a:2e:ce:8e:89:35:ac:1f:35:8b:11: 68:d0:8a:c6:16:73:ef:0d:7b:9e:00:31:63:d0:c8:fe:e9:45: fd:bb:91:c5:24:ed:fd:68:0b:b0:36:a4:0e:87:31:0f:aa:67: 7c:2a:46:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUN7i9N1fu0WjZCWCWXf5Vvbx5v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNjA0MjAxNTA3MzdaFw0yNjA0MjMyMTMzMzdaMDMxMTAvBgNV BAMTKEQxNEEzNjNDQzNBM0ZBRTAxMDkyNERDOTZGNDU5NjYxNjdGQzNENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89tKOEz/sfQRWQG6fkBWr6nxO 3NnJ+T+27/vui7+5FAymj6r/xEt9Fuf81tn4FohFiLEfWtBjXhSxoTXZJ1f55A9X C8+QphThfsvwLIPcjIzEo4/7NPdkwYykGHSgWdHXP1jrQQX2Q+UpsPo41jEWZ4bJ XOfBeu8FAocIFPBEVdfbohavPWw4mNNnmgpbKMRHKCM3hdyUOMlf+XoahwUpdwdc Det5e74o+ggAOglGjJVODNm77hH6lix/Ajt0rA0k4fh3H408f297CsF3DBpixYgD mJcfKJwd6dG/Qj0smCbjSKpDMIPWqMe4HsfQE1yLe/FHKlYPLXryAZxKsmdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Uo2PMOj+uAQkk3Jb0WWYWf8PUowHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcm8Z9H4dsRoQz+pvxUTmhS7RcqryTZnfwK Lz25sKzOUIbWOHwKes5euLC8bSQbwGHSe5QZvKFGA8PR/73Cr+lToGMo+O1XIa/9 79skVb6cQO/uOZuUhdQIKtFndJrK6FTk3Bc//Jl/VatLOlMnLguITvlftiukyv0W G7DmCVbV8JJfEzsEn/YfPVXgzhF6SvmX2FGi+PuAJDaMEcNqxDjkvXZocHDc00RG Hv6dZAka4zjv86VsoQNs4VUf0Ut0wVNNcaNIjm1T0HU9plE6Ls6OiTWsHzWLEWjQ isYWc+8Ne54AMWPQyP7pRf27kcUk7f1oC7A2pA6HMQ+qZ3wqRo4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:56 2026 by rpki-client