$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: v/16BruMyj/AY929k++/8e2ekac4S6lDZnp5a3QxK1I= Subject key identifier: 5E:C6:62:FD:F6:6E:5E:8F:CA:DA:B9:F1:4E:70:3E:49:D7:D4:E6:8E Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 61A237E2DB0395A97DF05D6CEFE7DA0B55745DA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: E6 Signing time: Fri 17 Apr 2026 22:01:33 +0000 Manifest this update: Fri 17 Apr 2026 21:56:33 +0000 Manifest next update: Tue 21 Apr 2026 05:22:33 +0000 Files and hashes: 1: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: DNExzA/tdrbY5S/AdgSZNei/isFhQrmVXxEowIJpf+Q=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) 3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a2:37:e2:db:03:95:a9:7d:f0:5d:6c:ef:e7:da:0b:55:74:5d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Apr 17 21:56:33 2026 GMT Not After : Apr 21 05:22:33 2026 GMT Subject: CN=5EC662FDF66E5E8FCADAB9F14E703E49D7D4E68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:46:c4:21:e2:7a:57:c1:91:7a:c8:f5:c3: 96:96:ab:01:39:78:d6:a1:ac:29:fa:38:98:89:b4: ce:0b:e7:be:50:16:8c:f3:91:8e:97:eb:a7:cf:5e: 0f:69:06:a0:34:df:7d:10:b8:8b:16:3d:83:98:38: 8a:c4:ce:ab:6d:0b:f9:ad:c7:34:df:92:fb:64:05: aa:50:09:69:39:8e:98:f2:c8:cf:ad:fe:4e:c6:97: 51:ec:ff:91:94:88:8d:92:3f:95:f5:6f:e7:b3:42: 3f:c4:36:64:eb:6d:86:cd:c8:39:be:b6:d2:9d:81: d0:6b:1b:e8:91:81:62:7d:49:d7:e1:66:11:21:eb: 13:67:e9:b9:78:3d:ac:87:9e:16:76:22:58:7c:63: 10:79:1e:33:14:8b:b3:1c:57:42:ce:8f:d7:d6:f8: 5e:70:41:09:91:84:c7:e4:ea:a9:48:3a:92:4e:cf: 09:71:89:b5:c5:56:a9:49:9b:65:d2:45:4a:a9:39: 94:c2:61:06:3c:fd:66:81:4b:3c:f9:6d:6a:03:47: 27:30:89:26:2f:c0:5f:92:87:1a:f3:37:9b:ec:3b: 02:04:f1:1e:a5:1c:ed:76:b8:7c:98:27:0e:19:5a: 82:ea:a3:23:4a:fc:bf:dd:02:45:72:85:47:03:31: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C6:62:FD:F6:6E:5E:8F:CA:DA:B9:F1:4E:70:3E:49:D7:D4:E6:8E X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:18:af:91:d8:9b:db:d9:7c:a5:d1:85:ef:27:91:cd:c5:ed: 0d:84:99:35:fb:f3:98:60:1f:d5:b0:47:8c:68:09:17:25:fe: 3f:09:c8:4d:1a:c1:42:ed:a9:27:1f:a6:1a:aa:b7:12:ff:b1: 93:81:d1:f8:8f:ba:30:18:cf:03:31:20:0f:f9:13:5f:eb:67: 28:67:81:ba:23:3f:67:9c:ad:6e:1e:06:90:78:27:5e:8b:bc: 8e:46:2e:55:25:32:25:86:f6:de:7a:25:8b:6d:db:8f:b0:b3: 3b:1b:bf:ad:c4:c4:a1:ea:44:71:df:c7:dc:ca:39:85:75:a9: 2f:7a:cc:55:04:c1:30:1b:4d:52:94:99:7e:61:cf:0e:fc:d6: 34:32:f3:74:c8:84:68:8e:d6:48:88:99:3a:98:22:d9:fb:b4: 12:85:3e:fc:e1:67:9d:ea:2a:22:49:49:06:29:4c:91:1e:67: 17:69:d0:a0:11:ad:72:48:5c:a2:70:03:c0:fd:86:1d:d0:ce: df:86:8d:9f:55:be:94:81:24:a0:66:1d:e9:72:e2:68:e1:6e: 3d:d1:20:36:af:1f:4e:c7:1e:99:d1:99:38:58:fd:27:ce:e0: ed:b3:53:80:d5:7a:53:9a:f4:9e:c6:9d:af:aa:e2:e5:0c:24: 49:e0:6f:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaI34tsDlal98F1s7+faC1V0XaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNjA0MTcyMTU2MzNaFw0yNjA0MjEwNTIyMzNaMDMxMTAvBgNV BAMTKDVFQzY2MkZERjY2RTVFOEZDQURBQjlGMTRFNzAzRTQ5RDdENEU2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ckbEIeJ6V8GResj1w5aWqwE5 eNahrCn6OJiJtM4L575QFozzkY6X66fPXg9pBqA0330QuIsWPYOYOIrEzqttC/mt xzTfkvtkBapQCWk5jpjyyM+t/k7Gl1Hs/5GUiI2SP5X1b+ezQj/ENmTrbYbNyDm+ ttKdgdBrG+iRgWJ9SdfhZhEh6xNn6bl4PayHnhZ2Ilh8YxB5HjMUi7McV0LOj9fW +F5wQQmRhMfk6qlIOpJOzwlxibXFVqlJm2XSRUqpOZTCYQY8/WaBSzz5bWoDRycw iSYvwF+ShxrzN5vsOwIE8R6lHO12uHyYJw4ZWoLqoyNK/L/dAkVyhUcDMQJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXsZi/fZuXo/K2rnxTnA+SdfU5o4wHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUYr5HYm9vZfKXRhe8nkc3F7Q2EmTX785hg H9WwR4xoCRcl/j8JyE0awULtqScfphqqtxL/sZOB0fiPujAYzwMxIA/5E1/rZyhn gbojP2ecrW4eBpB4J16LvI5GLlUlMiWG9t56JYtt24+wszsbv63ExKHqRHHfx9zK OYV1qS96zFUEwTAbTVKUmX5hzw781jQy83TIhGiO1kiImTqYItn7tBKFPvzhZ53q KiJJSQYpTJEeZxdp0KARrXJIXKJwA8D9hh3Qzt+GjZ9VvpSBJKBmHely4mjhbj3R IDavH07HHpnRmThY/SfO4O2zU4DVelOa9J7Gna+q4uUMJEngb/M= -----END CERTIFICATE-----Generated at Sat Apr 18 19:55:12 2026 by rpki-client