$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: Q9X40RSp2VAbjCACMhApPoRjbSmtElxJgHcr2rwqhEQ= Subject key identifier: 24:37:2D:7D:89:65:5E:69:FA:5C:1E:CB:B2:05:7F:8D:AF:E7:C9:39 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 0364CDF8999D683E8A74E937B369A453F8DC6104 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 0336 Signing time: Tue 21 Apr 2026 13:10:01 +0000 Manifest this update: Tue 21 Apr 2026 13:05:01 +0000 Manifest next update: Fri 24 Apr 2026 20:19:01 +0000 Files and hashes: 1: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: e2maHu55FP5fp6lO5LJsBGEPwnDr2gnnfc83H1faNCM=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: d1fVTMXux6rsxs5u7mFPK2SAxfogfDLQrrOtADDQDa8=) 3: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: zAQlXud/V2H4bXINVjc0G7JFCAybjwb3KBROrHErKOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 20:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:64:cd:f8:99:9d:68:3e:8a:74:e9:37:b3:69:a4:53:f8:dc:61:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Apr 21 13:05:01 2026 GMT Not After : Apr 24 20:19:01 2026 GMT Subject: CN=24372D7D89655E69FA5C1ECBB2057F8DAFE7C939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:b0:59:80:d4:3b:fc:4d:ca:e4:8e:fd:9f: 45:d1:ba:75:c2:aa:5b:d4:76:66:c7:62:7a:74:8b: 8a:3c:98:91:91:07:ea:98:b6:47:a1:c4:b0:1e:39: 53:64:bd:45:ff:98:36:27:eb:c1:d3:ff:30:48:66: 12:84:d4:ff:e4:50:1c:75:9d:2f:19:f2:bc:03:17: cf:88:47:0b:b1:3f:59:4b:8c:b3:08:bd:40:75:29: e1:90:ae:50:10:eb:91:e5:16:2e:5b:23:c1:76:2a: 29:28:81:f2:81:5f:e2:98:dc:52:f4:1b:c0:8b:46: a1:e6:98:3f:e6:03:60:35:85:bd:02:80:89:d1:80: 34:93:5a:c5:a7:7d:c9:2c:26:1e:0e:62:4a:83:5e: cf:db:f0:2c:f0:fa:61:21:ff:b8:a1:3b:28:d0:ba: 39:57:dc:ab:e8:ee:75:bc:30:33:05:5b:ef:42:86: b0:02:89:85:d4:52:ec:7c:b9:8a:a4:e1:71:8f:62: 0e:24:fe:d0:27:cf:2a:9c:52:41:18:2d:f4:6e:59: 59:d2:27:65:04:4f:61:62:e8:15:50:df:79:75:41: 02:f7:fe:9f:34:6f:5f:fd:43:75:0f:e3:7c:47:e5: 41:1b:7f:b0:e7:7e:2d:f0:b3:1f:5b:77:11:91:00: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:37:2D:7D:89:65:5E:69:FA:5C:1E:CB:B2:05:7F:8D:AF:E7:C9:39 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a4:f9:10:3d:b6:7f:46:6d:8d:1e:c2:b3:82:ff:5e:e8:eb: 0a:10:61:a3:85:b3:33:11:02:d5:2d:e4:c0:da:18:c0:3b:6e: 3f:27:48:61:87:28:ae:b6:6d:76:3d:bc:97:9d:fe:71:a8:4a: f2:8b:d8:de:42:d5:8d:4b:67:2e:b3:86:46:6c:8f:23:44:55: 96:a3:85:5a:40:c8:ea:66:31:24:aa:56:25:70:8f:07:48:f7: 88:0d:af:c6:37:6d:31:d7:c6:4f:83:a8:19:fd:fc:dc:de:99: 50:32:11:d3:a5:61:75:69:ee:6f:3a:50:b1:80:58:97:34:2d: 77:da:44:4a:17:43:1a:81:09:63:ee:a5:44:5a:f4:44:b8:38: b0:11:3d:91:04:7b:10:ce:85:0b:26:53:db:5b:2e:ce:ff:6d: 24:32:1f:6f:6f:99:06:d9:60:33:6a:c7:ac:35:81:ca:00:e9: 0c:94:0d:a2:a8:b6:86:31:7e:5d:bb:f4:7a:72:7c:81:6b:5b: 9c:d7:13:30:7a:cb:91:a1:f2:dd:e5:7a:3c:1a:df:25:49:ef: a9:8a:fa:6f:7d:f9:f7:28:26:71:18:58:96:8a:50:d6:b4:7e: 76:32:3e:f5:08:9a:5e:71:30:5e:b6:aa:17:76:bd:82:48:66: 29:7f:e5:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2TN+JmdaD6KdOk3s2mkU/jcYQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNjA0MjExMzA1MDFaFw0yNjA0MjQyMDE5MDFaMDMxMTAvBgNV BAMTKDI0MzcyRDdEODk2NTVFNjlGQTVDMUVDQkIyMDU3RjhEQUZFN0M5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6f7BZgNQ7/E3K5I79n0XRunXC qlvUdmbHYnp0i4o8mJGRB+qYtkehxLAeOVNkvUX/mDYn68HT/zBIZhKE1P/kUBx1 nS8Z8rwDF8+IRwuxP1lLjLMIvUB1KeGQrlAQ65HlFi5bI8F2KikogfKBX+KY3FL0 G8CLRqHmmD/mA2A1hb0CgInRgDSTWsWnfcksJh4OYkqDXs/b8Czw+mEh/7ihOyjQ ujlX3Kvo7nW8MDMFW+9ChrACiYXUUux8uYqk4XGPYg4k/tAnzyqcUkEYLfRuWVnS J2UET2Fi6BVQ33l1QQL3/p80b1/9Q3UP43xH5UEbf7Dnfi3wsx9bdxGRAGPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJDctfYllXmn6XB7LsgV/ja/nyTkwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSk+RA9tn9GbY0ewrOC/17o6woQYaOFszMR AtUt5MDaGMA7bj8nSGGHKK62bXY9vJed/nGoSvKL2N5C1Y1LZy6zhkZsjyNEVZaj hVpAyOpmMSSqViVwjwdI94gNr8Y3bTHXxk+DqBn9/NzemVAyEdOlYXVp7m86ULGA WJc0LXfaREoXQxqBCWPupURa9ES4OLARPZEEexDOhQsmU9tbLs7/bSQyH29vmQbZ YDNqx6w1gcoA6QyUDaKotoYxfl279HpyfIFrW5zXEzB6y5Gh8t3lejwa3yVJ76mK +m99+fcoJnEYWJaKUNa0fnYyPvUIml5xMF62qhd2vYJIZil/5dY= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:50 2026 by rpki-client