$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: EMaxU0bwpZ9ksaDYUzAyfPTUQO07NBO0y0y2nIM0L0g= Subject key identifier: EA:95:F5:4D:B5:69:79:CF:53:DE:B7:BB:16:E3:F3:2C:BA:C5:7A:1F Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 1112D7FA2F86B029147CB498C95D63C5CFC2918F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 0233 Signing time: Fri 17 Apr 2026 21:30:46 +0000 Manifest this update: Fri 17 Apr 2026 21:25:46 +0000 Manifest next update: Tue 21 Apr 2026 09:28:46 +0000 Files and hashes: 1: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: sksB0+JpfamOk8agUpLTqgwXQckz8CSkrdrAWOtJ4OI=) 2: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs=) 3: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: CpUZKOMI10vinU1dTUT9XFU07wkdZpy66QaGtZV7bsc=) 4: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:d7:fa:2f:86:b0:29:14:7c:b4:98:c9:5d:63:c5:cf:c2:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Apr 17 21:25:46 2026 GMT Not After : Apr 21 09:28:46 2026 GMT Subject: CN=EA95F54DB56979CF53DEB7BB16E3F32CBAC57A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:5d:6d:8b:80:23:21:25:44:e6:db:0c:b9: d1:e1:f9:97:e6:b2:cb:eb:d3:6b:80:b0:2f:77:45: 90:25:d3:d3:d0:34:9c:8f:8e:04:e8:e8:ac:a3:9c: 69:d7:70:95:34:79:6c:88:b4:31:be:1a:d1:f7:c8: 81:a4:db:b0:22:a1:cf:de:c6:1d:ec:50:d9:4d:bd: 3b:63:e2:a4:1e:f1:11:d7:88:d6:d8:b5:70:3f:3b: 89:13:2b:3e:0d:1e:f5:79:23:d3:53:b2:7f:f1:1e: 01:a3:62:e6:5d:3f:f0:59:e1:2b:e1:78:17:9b:a9: b3:d0:2c:8c:77:7b:82:ac:f3:84:08:43:dd:f0:d3: e6:2c:30:de:2d:49:71:a0:28:d2:dd:0c:9e:f7:8f: 89:90:49:60:ee:5f:f3:e1:6b:0d:74:53:11:dd:b2: d8:92:14:94:ca:50:14:73:14:93:4b:8f:a6:9c:f0: 8c:e5:95:be:9e:df:d2:92:07:da:2c:8c:74:f8:61: 6a:49:86:5d:92:bd:62:41:0e:4c:c2:f2:e8:2d:75: 0d:da:c4:9a:6d:a6:65:4e:9e:8a:b5:7d:51:79:a3: ca:cf:da:9e:e3:7f:94:b1:39:91:a2:ac:08:b4:83: 61:11:20:3c:66:3c:29:d9:5a:78:ab:76:31:de:4b: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:95:F5:4D:B5:69:79:CF:53:DE:B7:BB:16:E3:F3:2C:BA:C5:7A:1F X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:71:60:84:34:1c:a1:c3:02:2c:02:76:cb:8b:25:20:c7:5d: 49:05:4d:0c:7a:6f:96:4e:77:88:4a:80:9f:5e:d5:30:4e:1c: 58:fa:c6:d0:b6:26:e5:29:3d:54:d3:3a:06:92:77:d1:1c:dd: 7d:f0:07:51:1a:9c:92:fd:80:3e:db:0e:22:36:02:3f:d5:7f: af:2d:a1:20:9e:b4:4a:1b:1a:c8:f9:ee:d1:bf:f4:a5:45:4c: 52:a5:1f:19:12:70:72:c6:c0:a8:59:2d:84:3f:df:45:d3:1c: db:4f:c5:1a:fa:30:bd:7d:70:64:e6:b3:29:0b:e4:6f:f7:61: 58:87:38:8a:68:ef:fa:e5:de:11:e7:d9:11:09:b9:fd:85:5f: 4b:e4:8e:0c:3b:29:f7:e2:61:08:8c:db:80:6b:9a:54:8c:f5: be:53:f0:8e:62:7f:41:25:63:e3:63:aa:b2:8b:48:f0:f6:74: 58:bb:bb:27:3a:a9:f0:b1:cd:22:21:b3:04:a2:f8:06:79:87: 46:a3:0d:96:aa:92:51:ac:ec:dd:b2:b5:b0:e4:60:2b:1a:50: 4e:f4:32:36:3e:fa:0b:9f:9f:c7:03:9f:0a:a8:3e:ea:96:c6: 58:2e:48:97:7d:7f:e1:85:1e:f4:8b:65:0f:83:fc:49:04:b4: 01:73:e9:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERLX+i+GsCkUfLSYyV1jxc/CkY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNjA0MTcyMTI1NDZaFw0yNjA0MjEwOTI4NDZaMDMxMTAvBgNV BAMTKEVBOTVGNTREQjU2OTc5Q0Y1M0RFQjdCQjE2RTNGMzJDQkFDNTdBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNR11ti4AjISVE5tsMudHh+Zfm ssvr02uAsC93RZAl09PQNJyPjgTo6KyjnGnXcJU0eWyItDG+GtH3yIGk27Aioc/e xh3sUNlNvTtj4qQe8RHXiNbYtXA/O4kTKz4NHvV5I9NTsn/xHgGjYuZdP/BZ4Svh eBebqbPQLIx3e4Ks84QIQ93w0+YsMN4tSXGgKNLdDJ73j4mQSWDuX/Phaw10UxHd stiSFJTKUBRzFJNLj6ac8Izllb6e39KSB9osjHT4YWpJhl2SvWJBDkzC8ugtdQ3a xJptpmVOnoq1fVF5o8rP2p7jf5SxOZGirAi0g2ERIDxmPCnZWnirdjHeS9vTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6pX1TbVpec9T3re7FuPzLLrFeh8wHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhxYIQ0HKHDAiwCdsuLJSDHXUkFTQx6b5ZO d4hKgJ9e1TBOHFj6xtC2JuUpPVTTOgaSd9Ec3X3wB1EanJL9gD7bDiI2Aj/Vf68t oSCetEobGsj57tG/9KVFTFKlHxkScHLGwKhZLYQ/30XTHNtPxRr6ML19cGTmsykL 5G/3YViHOIpo7/rl3hHn2REJuf2FX0vkjgw7KffiYQiM24BrmlSM9b5T8I5if0El Y+NjqrKLSPD2dFi7uyc6qfCxzSIhswSi+AZ5h0ajDZaqklGs7N2ytbDkYCsaUE70 MjY++gufn8cDnwqoPuqWxlguSJd9f+GFHvSLZQ+D/EkEtAFz6TE= -----END CERTIFICATE-----Generated at Sat Apr 18 02:46:48 2026 by rpki-client