$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: n5z1Fy2G/G5lCJHMD9u1bfGxIlnu4UEV8zRhp42kyUY= Subject key identifier: E8:E6:15:2E:39:80:F7:3C:75:B8:63:CF:D1:13:B5:E6:E7:50:17:2C Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 5CB05F59B2D1CB8EF55E62F575FB43977FE5A2D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: 0124 Signing time: Tue 21 Apr 2026 16:00:54 +0000 Manifest this update: Tue 21 Apr 2026 15:55:54 +0000 Manifest next update: Fri 24 Apr 2026 23:04:54 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: 9S29qFeJZloki9PWW9tdgsR5Hw2QfhcPZXeZtm9LI8o=) 2: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: UXDpfurGMZFRmJMjqPCyuem1mnxCLZqiHegsFwHVi/w=) 3: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: pTegOhD4z3Faaf9uEY5aINqGFpg8v+KgvZMxN268mY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b0:5f:59:b2:d1:cb:8e:f5:5e:62:f5:75:fb:43:97:7f:e5:a2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Apr 21 15:55:54 2026 GMT Not After : Apr 24 23:04:54 2026 GMT Subject: CN=E8E6152E3980F73C75B863CFD113B5E6E750172C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:ce:d9:be:86:55:41:84:ee:d8:d5:8f:15: 24:6e:c7:f6:34:86:55:b0:84:79:6b:29:20:a3:76: 69:9e:4b:29:56:ab:57:7c:69:60:36:25:28:8e:4f: dc:47:b9:52:eb:eb:a7:b5:ca:ae:19:a2:46:ad:70: 01:af:fd:27:d5:15:f4:7a:ca:98:69:43:cd:a5:55: 3e:b3:5b:ef:dd:a3:c3:7d:1e:50:94:ae:8b:23:48: 90:09:4f:ec:38:a7:e9:0a:0d:07:42:8c:f1:c0:9a: 6b:f3:02:34:16:f0:bb:dc:86:e9:3f:1a:11:71:42: 62:33:85:04:89:67:78:06:6f:0a:1a:b4:b7:a7:be: f3:df:df:e9:c1:ee:6d:da:c6:52:f3:e6:39:d9:e6: f5:00:26:99:55:b3:46:fd:7e:18:40:8e:f8:58:4a: a3:05:5b:23:7c:57:4a:a6:1c:c5:4f:39:f4:7f:d5: 8b:32:1e:cf:23:b3:9c:e5:17:50:b5:1c:a6:58:39: bf:a6:bd:a5:ec:c5:39:5f:15:b9:c1:94:bc:fd:db: 68:33:15:c5:9b:3e:7c:cd:68:d2:62:06:88:40:50: 19:4e:a2:7a:20:d2:86:15:c5:ca:5c:e2:95:cf:47: de:71:b2:45:4d:17:64:0b:9f:45:d4:77:30:61:4f: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E6:15:2E:39:80:F7:3C:75:B8:63:CF:D1:13:B5:E6:E7:50:17:2C X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d8:04:dc:96:cc:4d:1c:8f:fa:c0:23:c8:25:37:74:2c:84: 8a:37:83:9d:04:14:5d:ad:ec:88:a9:5e:93:44:e0:a2:9d:d2: 2f:ff:2f:62:1b:1d:13:65:c6:9b:a6:b8:68:23:2d:c7:22:d8: 60:64:b0:0e:15:3a:ce:71:0d:c5:46:49:77:98:05:3f:93:df: 90:f3:cd:1b:2e:0f:0a:00:0b:01:cb:01:03:75:4f:5b:95:52: aa:2c:97:bf:2d:91:67:aa:7d:5d:db:9b:47:f4:2c:22:0d:5e: be:1c:31:ef:ee:a2:b4:62:90:c8:b5:47:30:7e:f7:2b:0e:eb: 34:71:66:7d:3a:eb:d7:b2:7c:e4:7d:a1:a9:e3:73:65:35:09: 08:f9:30:9a:d6:8e:ba:a4:a2:b3:5d:9f:95:d5:58:b8:b4:8f: 78:50:fb:26:43:50:13:5c:0b:db:86:1f:31:a5:6e:b3:43:e4: f5:6a:df:0d:0c:cc:14:62:05:53:7f:f8:70:99:2b:7f:aa:b0: ad:bf:8e:8a:0d:ce:7d:7d:00:69:a9:e5:92:9a:40:3a:cb:cc: 32:b2:d6:da:eb:8b:63:66:86:ce:19:6b:78:6f:f6:59:c6:d7: ef:df:35:76:53:d4:20:56:e0:bc:54:e2:5a:06:8d:14:2c:d7: 51:58:fe:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLBfWbLRy471XmL1dftDl3/lotUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNjA0MjExNTU1NTRaFw0yNjA0MjQyMzA0NTRaMDMxMTAvBgNV BAMTKEU4RTYxNTJFMzk4MEY3M0M3NUI4NjNDRkQxMTNCNUU2RTc1MDE3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcc7ZvoZVQYTu2NWPFSRux/Y0 hlWwhHlrKSCjdmmeSylWq1d8aWA2JSiOT9xHuVLr66e1yq4ZokatcAGv/SfVFfR6 yphpQ82lVT6zW+/do8N9HlCUrosjSJAJT+w4p+kKDQdCjPHAmmvzAjQW8Lvchuk/ GhFxQmIzhQSJZ3gGbwoatLenvvPf3+nB7m3axlLz5jnZ5vUAJplVs0b9fhhAjvhY SqMFWyN8V0qmHMVPOfR/1YsyHs8js5zlF1C1HKZYOb+mvaXsxTlfFbnBlLz922gz FcWbPnzNaNJiBohAUBlOonog0oYVxcpc4pXPR95xskVNF2QLn0XUdzBhT3CHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6OYVLjmA9zx1uGPP0RO15udQFywwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErYBNyWzE0cj/rAI8glN3QshIo3g50EFF2t 7IipXpNE4KKd0i//L2IbHRNlxpumuGgjLcci2GBksA4VOs5xDcVGSXeYBT+T35Dz zRsuDwoACwHLAQN1T1uVUqosl78tkWeqfV3bm0f0LCINXr4cMe/uorRikMi1RzB+ 9ysO6zRxZn0669eyfOR9oanjc2U1CQj5MJrWjrqkorNdn5XVWLi0j3hQ+yZDUBNc C9uGHzGlbrND5PVq3w0MzBRiBVN/+HCZK3+qsK2/jooNzn19AGmp5ZKaQDrLzDKy 1trri2Nmhs4Za3hv9lnG1+/fNXZT1CBW4LxU4loGjRQs11FY/us= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:53 2026 by rpki-client