$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: eEzZySEISqKEZL1/Y17QpnrlKL0FmQchebyuVFuoicw= Subject key identifier: 9E:C0:F9:D1:B5:A8:15:BD:D8:9E:2B:40:8A:69:8A:DA:0E:D0:53:4E Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 15D37914573C698301334FC984736E4FC97D4CB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: 0137 Signing time: Tue 21 Apr 2026 17:21:29 +0000 Manifest this update: Tue 21 Apr 2026 17:16:29 +0000 Manifest next update: Sat 25 Apr 2026 04:24:29 +0000 Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: FAVAZnWz0pyRXV8cgDYllTBAXEJp2pBUrEjPju0WLA0=) 2: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: 3lF/5J2jBMW+wjOIzMX3/OlzuZGttUREXs2KBhI5+H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 04:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d3:79:14:57:3c:69:83:01:33:4f:c9:84:73:6e:4f:c9:7d:4c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Apr 21 17:16:29 2026 GMT Not After : Apr 25 04:24:29 2026 GMT Subject: CN=9EC0F9D1B5A815BDD89E2B408A698ADA0ED0534E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:eb:8a:1f:5e:da:a0:8e:3a:01:ac:ed:84: 6e:ef:b1:70:29:4a:bb:d3:51:ea:2c:cb:2e:b2:16: 31:cb:02:1c:be:42:9b:09:e5:08:d0:c1:74:d7:07: 10:3a:3e:ae:4f:05:38:3d:81:69:8d:f2:e7:07:7b: 5e:8d:b2:ae:c7:b1:f0:60:10:4a:bd:42:4f:2f:a6: 6e:83:d7:22:88:7c:32:d7:4a:8c:f4:29:47:41:24: f5:13:ec:a1:8c:6c:10:8b:18:d5:65:9d:a1:a9:f1: 4b:2d:91:fd:13:63:3a:0f:08:54:a4:53:b8:ae:42: b2:69:84:4f:f9:0b:d9:2c:df:8e:05:03:24:6a:a4: 6a:b0:1e:19:08:79:43:d3:62:4a:56:27:6c:a7:90: dd:7b:f3:1d:bd:32:b4:b9:54:19:71:69:31:c4:26: 67:c4:c9:66:b7:c7:f3:7b:6b:f4:fd:b2:b0:2b:f6: 96:b1:34:c6:31:9c:65:1e:6f:f3:81:be:c6:44:b1: e0:7e:0a:6e:d0:56:3a:1e:04:6a:1c:d8:f6:38:93: b1:22:6e:87:98:8b:b8:62:4d:ce:f6:c9:d8:cb:6a: c8:d7:80:6e:ef:13:00:fe:2f:71:77:34:ef:7b:50: 94:5f:8c:41:74:0f:6b:a7:bf:9b:22:ef:d0:63:23: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C0:F9:D1:B5:A8:15:BD:D8:9E:2B:40:8A:69:8A:DA:0E:D0:53:4E X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c2:55:43:d2:45:02:4f:a6:6f:33:8c:a8:f6:f2:f7:ad:c4: f1:18:54:48:eb:06:38:a9:81:88:5b:2d:4c:79:c4:3d:10:5d: eb:96:ca:0b:64:b6:8a:15:6e:02:ed:3a:5d:ad:b1:56:c4:65: 7c:30:35:25:8f:ac:9b:c3:0c:9f:c5:94:9e:96:53:93:c2:48: 56:ad:77:01:77:60:53:9b:57:4f:4d:2b:b7:90:69:af:4e:69: c2:bb:4b:4a:fa:cc:cc:7e:ed:7b:c6:d0:de:ce:af:2b:9b:05: e8:88:a3:e5:ed:47:ed:60:69:a7:3c:b3:35:40:6c:b3:66:42: 43:54:c2:fc:9b:ab:62:42:8c:b4:6e:fe:ef:68:7d:0a:c8:92: 1d:a6:08:9b:31:61:53:9f:28:46:bf:68:dd:c6:2f:ed:a7:19: c3:03:4b:92:50:d2:8e:40:0a:4d:ad:d1:de:0f:93:b2:56:94: 20:61:89:5f:09:9a:60:cc:8b:ee:ff:3e:4d:c8:25:c3:31:31: ed:1b:d7:e0:ae:31:9b:52:cc:c2:8a:a1:20:b9:38:d7:50:bd: c6:59:3a:3c:89:75:c7:c0:29:d8:a1:c8:a0:fd:b3:59:fe:31: 8c:b6:cf:1b:cc:5a:71:ce:6a:74:3c:4d:20:01:0b:de:a7:ce: 9f:81:a4:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdN5FFc8aYMBM0/JhHNuT8l9TLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNjA0MjExNzE2MjlaFw0yNjA0MjUwNDI0MjlaMDMxMTAvBgNV BAMTKDlFQzBGOUQxQjVBODE1QkREODlFMkI0MDhBNjk4QURBMEVEMDUzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ceuKH17aoI46AazthG7vsXAp SrvTUeosyy6yFjHLAhy+QpsJ5QjQwXTXBxA6Pq5PBTg9gWmN8ucHe16Nsq7HsfBg EEq9Qk8vpm6D1yKIfDLXSoz0KUdBJPUT7KGMbBCLGNVlnaGp8Ustkf0TYzoPCFSk U7iuQrJphE/5C9ks344FAyRqpGqwHhkIeUPTYkpWJ2ynkN178x29MrS5VBlxaTHE JmfEyWa3x/N7a/T9srAr9paxNMYxnGUeb/OBvsZEseB+Cm7QVjoeBGoc2PY4k7Ei boeYi7hiTc72ydjLasjXgG7vEwD+L3F3NO97UJRfjEF0D2unv5si79BjI6b7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnsD50bWoFb3YnitAimmK2g7QU04wHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDCVUPSRQJPpm8zjKj28vetxPEYVEjrBjip gYhbLUx5xD0QXeuWygtktooVbgLtOl2tsVbEZXwwNSWPrJvDDJ/FlJ6WU5PCSFat dwF3YFObV09NK7eQaa9OacK7S0r6zMx+7XvG0N7OryubBeiIo+XtR+1gaac8szVA bLNmQkNUwvybq2JCjLRu/u9ofQrIkh2mCJsxYVOfKEa/aN3GL+2nGcMDS5JQ0o5A Ck2t0d4Pk7JWlCBhiV8JmmDMi+7/Pk3IJcMxMe0b1+CuMZtSzMKKoSC5ONdQvcZZ OjyJdcfAKdihyKD9s1n+MYy2zxvMWnHOanQ8TSABC96nzp+BpA0= -----END CERTIFICATE-----Generated at Wed Apr 22 09:52:49 2026 by rpki-client