$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: 2MTwTHASL9ln694A7gFWmHLIID6zTGzr3UgQbWKgSyc= Subject key identifier: 43:FD:21:97:89:65:7E:2C:D9:0B:FB:36:F5:57:EB:F7:D8:A9:49:93 Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 7DAEF2649E61C959A10587C9DB3117B907DCE4C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: F3 Signing time: Tue 21 Apr 2026 19:32:42 +0000 Manifest this update: Tue 21 Apr 2026 19:27:42 +0000 Manifest next update: Sat 25 Apr 2026 05:10:42 +0000 Files and hashes: 1: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: DIYl6D4IKsrveckTcp2pMLkpd8sy9N0ZC8L1T7iv9Sw=) 2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: culnOZ+9LI8JbiM/iJt/J//Lb5wajjvnBMY/KnuE8Q4=) 3: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: e8ZJYzkvKx8Yk6VtEAAoJxN88Qmgg4lnk8IMQAGn/JE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ae:f2:64:9e:61:c9:59:a1:05:87:c9:db:31:17:b9:07:dc:e4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Apr 21 19:27:42 2026 GMT Not After : Apr 25 05:10:42 2026 GMT Subject: CN=43FD219789657E2CD90BFB36F557EBF7D8A94993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:0a:a8:d0:ef:3c:72:eb:cd:3d:8c:dd:02: ca:53:c9:2f:83:b2:d1:f9:f8:a2:c3:8c:92:0c:9c: 2b:a6:b0:cf:5c:66:a4:03:11:a5:a0:88:ba:e3:14: d2:a6:d8:fd:a3:a3:bb:8a:14:80:49:c8:b7:6a:2a: 37:67:e3:07:e8:13:b7:c8:72:21:92:b4:5c:76:42: 5a:bf:13:46:66:63:6d:8d:d1:eb:e9:8f:ff:1e:9f: b2:4d:7f:a6:a2:35:21:87:d2:e9:a3:2e:da:1c:a9: f5:25:1a:d3:2d:30:84:95:ea:af:f1:b9:df:5f:70: 1f:36:34:94:9b:80:cf:33:71:86:e9:e0:e1:3d:4c: ec:0d:79:33:92:1b:a8:d7:f8:71:1f:1f:0b:00:d7: 6a:31:12:eb:43:76:8c:f7:b2:ba:f3:df:9e:b7:5b: 2f:d5:27:4a:3e:73:05:dc:4c:97:67:d2:ea:c1:ea: 4a:5c:83:40:aa:61:6f:50:e5:99:21:35:7f:fb:0d: 74:7f:06:26:af:a7:a0:3c:4c:b7:b5:b9:9f:93:dd: 8f:1d:3c:04:43:a1:05:b4:9e:cb:91:93:5b:bf:8e: e8:00:10:f6:03:30:2a:29:6d:99:67:1a:8e:5d:00: 84:02:a8:00:99:25:79:1b:da:f9:02:4b:f1:1d:ab: db:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:21:97:89:65:7E:2C:D9:0B:FB:36:F5:57:EB:F7:D8:A9:49:93 X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ff:7d:6c:e3:32:df:fd:74:24:d1:75:30:d6:20:86:88:6b: 85:02:9e:17:0b:35:14:d3:e0:cc:4e:2f:6b:b0:7c:4c:b4:65: ce:d6:10:ea:99:be:ae:d2:ca:71:50:fe:7f:fd:dc:0b:ef:7c: f5:47:1d:99:70:ed:af:80:bf:00:c3:8b:ae:8d:57:a7:b6:67: 51:52:cc:2a:4a:00:62:aa:ac:96:0e:0c:f4:64:1c:07:5b:71: 4a:f2:b9:3d:e8:f3:fe:61:d3:34:70:bb:9e:93:52:81:ae:46: 6f:a9:2a:d1:8b:26:ec:a4:83:07:ef:b5:81:23:d2:13:aa:5c: e2:c6:8e:d5:9d:da:3e:1d:03:25:d3:10:df:90:41:6d:ee:1f: eb:1f:b2:a5:2a:c2:98:39:d9:b9:1d:df:06:07:80:74:74:6a: 19:19:d7:50:ad:d2:26:e6:6c:2c:cd:31:c5:53:c0:bd:a6:cd: 5b:0f:73:3d:14:56:2c:c5:83:cc:a6:2f:14:cd:f3:e6:de:f7: 61:14:a7:23:f7:48:a1:13:dc:89:84:87:47:8d:d2:2a:5c:70: 99:01:e7:a0:4d:84:94:43:55:93:58:8f:66:2a:54:58:f2:33: c5:3f:0f:e5:78:e4:88:5b:f1:3b:4e:79:23:90:0c:7c:52:19: 44:d7:3e:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa7yZJ5hyVmhBYfJ2zEXuQfc5MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNjA0MjExOTI3NDJaFw0yNjA0MjUwNTEwNDJaMDMxMTAvBgNV BAMTKDQzRkQyMTk3ODk2NTdFMkNEOTBCRkIzNkY1NTdFQkY3RDhBOTQ5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoQqo0O88cuvNPYzdAspTyS+D stH5+KLDjJIMnCumsM9cZqQDEaWgiLrjFNKm2P2jo7uKFIBJyLdqKjdn4wfoE7fI ciGStFx2Qlq/E0ZmY22N0evpj/8en7JNf6aiNSGH0umjLtocqfUlGtMtMISV6q/x ud9fcB82NJSbgM8zcYbp4OE9TOwNeTOSG6jX+HEfHwsA12oxEutDdoz3srrz3563 Wy/VJ0o+cwXcTJdn0urB6kpcg0CqYW9Q5ZkhNX/7DXR/Biavp6A8TLe1uZ+T3Y8d PARDoQW0nsuRk1u/jugAEPYDMCopbZlnGo5dAIQCqACZJXkb2vkCS/Edq9utAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/0hl4llfizZC/s29Vfr99ipSZMwHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHf/fWzjMt/9dCTRdTDWIIaIa4UCnhcLNRTT 4MxOL2uwfEy0Zc7WEOqZvq7SynFQ/n/93AvvfPVHHZlw7a+AvwDDi66NV6e2Z1FS zCpKAGKqrJYODPRkHAdbcUryuT3o8/5h0zRwu56TUoGuRm+pKtGLJuykgwfvtYEj 0hOqXOLGjtWd2j4dAyXTEN+QQW3uH+sfsqUqwpg52bkd3wYHgHR0ahkZ11Ct0ibm bCzNMcVTwL2mzVsPcz0UVizFg8ymLxTN8+be92EUpyP3SKET3ImEh0eN0ipccJkB 56BNhJRDVZNYj2YqVFjyM8U/D+V45Ihb8TtOeSOQDHxSGUTXPjQ= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:46 2026 by rpki-client