$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: 3q5Ne28E06MV/C2hSToWt0UMXSF6d6LD3LJjm2owVms= Subject key identifier: 5E:CD:A4:1A:7C:6C:AD:E9:0C:81:3E:0E:B3:93:4E:2F:12:2D:C4:FD Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 434E8FA6629DBDE7EBF68DE2827A8DAFEDC77F92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 02D1 Signing time: Mon 20 Apr 2026 16:31:45 +0000 Manifest this update: Mon 20 Apr 2026 16:26:45 +0000 Manifest next update: Thu 23 Apr 2026 21:04:45 +0000 Files and hashes: 1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=) 2: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: GsCH9Emgd5cejg7bbB2CvtEfUQ2ToUV114cN6DFkAAI=) 3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4e:8f:a6:62:9d:bd:e7:eb:f6:8d:e2:82:7a:8d:af:ed:c7:7f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Apr 20 16:26:45 2026 GMT Not After : Apr 23 21:04:45 2026 GMT Subject: CN=5ECDA41A7C6CADE90C813E0EB3934E2F122DC4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:c0:fa:25:8a:c8:c6:ee:ad:f2:ec:5d:87: d7:9f:95:d8:d9:aa:f4:1b:03:39:75:8a:ac:20:6e: fc:16:01:6f:10:39:38:6f:63:3e:e7:8e:8d:e2:48: c8:92:4f:52:f5:20:e7:a6:f7:11:f2:04:b8:89:cf: ab:b2:cf:58:ce:28:61:be:f8:3a:de:35:c0:c4:79: d3:5d:7f:df:54:2b:91:d2:3c:d3:69:14:f2:3f:70: 14:9b:92:08:12:be:7e:cd:2e:cb:90:77:d1:15:f8: b5:78:e7:90:82:34:4c:8b:fe:80:a5:46:59:99:14: 70:26:a0:d6:2c:35:2f:66:73:47:88:c8:65:18:b8: 72:d9:a8:fa:4e:a8:96:95:71:10:e2:dd:35:1a:eb: 90:41:91:41:c8:48:86:48:31:0a:d6:3e:5f:a4:30: 83:b4:2b:ec:89:d7:64:7c:25:4c:5e:ac:7b:50:66: 58:be:85:42:b1:b9:d2:27:20:85:04:d0:b8:fd:19: 05:0b:30:b2:59:f7:e2:f8:17:39:39:b4:02:43:9b: b5:c7:b2:5b:24:b1:cf:31:b2:66:d7:26:a6:1b:68: 5a:b8:2b:c8:a7:ee:72:30:21:ca:fb:b5:f2:8c:af: 21:0e:ac:9c:0f:49:ba:18:b0:23:10:26:c8:3d:7e: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:A4:1A:7C:6C:AD:E9:0C:81:3E:0E:B3:93:4E:2F:12:2D:C4:FD X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:54:bc:c6:73:a0:f5:09:b2:da:d9:09:cc:e3:a3:1a:ab:a5: 02:e0:4d:ac:b9:be:49:b6:8b:47:94:21:c8:56:71:b1:bc:f1: 8c:9d:9d:91:e0:71:07:73:8f:a4:57:f0:06:06:9e:0c:22:c9: 32:35:0e:2d:a0:fe:90:bb:74:8f:90:af:82:d2:ff:30:2d:11: 73:ba:3a:01:3d:b3:17:1d:4f:40:de:8a:36:e2:b9:6e:bd:8f: 91:83:14:51:43:36:91:b2:1d:e8:9c:48:51:bd:74:ad:1e:65: 64:7e:b6:f9:53:87:a9:0d:ed:38:1c:70:74:ec:23:a0:b9:6e: f5:d5:8f:0f:72:f0:8c:56:05:09:c8:d0:16:e6:60:46:a0:f3: f5:e2:7b:1e:c7:f7:5b:1a:6d:be:fb:49:17:c0:6e:a7:9a:3d: a0:5b:40:16:47:5b:e3:42:c5:7d:fe:9c:33:98:ea:e5:17:7f: 91:f2:76:7c:dd:f2:ce:28:de:e2:6e:da:8e:f0:b7:60:05:4f: 40:5f:21:14:c7:3f:35:68:72:24:05:ac:36:e9:f2:07:f6:aa: d6:70:bb:65:81:47:ba:1d:6f:d4:52:09:a6:03:fe:b4:dc:d5: 09:55:29:8e:96:87:8e:0f:ca:64:ad:3e:29:a4:3c:22:85:17: 1c:e6:e5:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ06PpmKdvefr9o3ignqNr+3Hf5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNjA0MjAxNjI2NDVaFw0yNjA0MjMyMTA0NDVaMDMxMTAvBgNV BAMTKDVFQ0RBNDFBN0M2Q0FERTkwQzgxM0UwRUIzOTM0RTJGMTIyREM0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGa8D6JYrIxu6t8uxdh9efldjZ qvQbAzl1iqwgbvwWAW8QOThvYz7njo3iSMiST1L1IOem9xHyBLiJz6uyz1jOKGG+ +DreNcDEedNdf99UK5HSPNNpFPI/cBSbkggSvn7NLsuQd9EV+LV455CCNEyL/oCl RlmZFHAmoNYsNS9mc0eIyGUYuHLZqPpOqJaVcRDi3TUa65BBkUHISIZIMQrWPl+k MIO0K+yJ12R8JUxerHtQZli+hUKxudInIIUE0Lj9GQULMLJZ9+L4Fzk5tAJDm7XH slsksc8xsmbXJqYbaFq4K8in7nIwIcr7tfKMryEOrJwPSboYsCMQJsg9fmMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXs2kGnxsrekMgT4Os5NOLxItxP0wHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZUvMZzoPUJstrZCczjoxqrpQLgTay5vkm2 i0eUIchWcbG88YydnZHgcQdzj6RX8AYGngwiyTI1Di2g/pC7dI+Qr4LS/zAtEXO6 OgE9sxcdT0DeijbiuW69j5GDFFFDNpGyHeicSFG9dK0eZWR+tvlTh6kN7TgccHTs I6C5bvXVjw9y8IxWBQnI0BbmYEag8/Xiex7H91sabb77SRfAbqeaPaBbQBZHW+NC xX3+nDOY6uUXf5Hydnzd8s4o3uJu2o7wt2AFT0BfIRTHPzVociQFrDbp8gf2qtZw u2WBR7odb9RSCaYD/rTc1QlVKY6Wh44PymStPimkPCKFFxzm5d0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:14:19 2026 by rpki-client