$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: e3gXK4cZ0kzAV+oiCV4hLu5I6WaC1hTj/K2daNqq9P4= Subject key identifier: F4:D1:C0:D4:12:6B:52:9B:C2:C0:6E:7B:1C:6F:20:B0:B7:8A:F1:68 Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 1E4FC70A46BA86DBA1D9D5AEA279BA5FEAAD66FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 0263 Signing time: Mon 20 Apr 2026 14:02:09 +0000 Manifest this update: Mon 20 Apr 2026 13:57:09 +0000 Manifest next update: Thu 23 Apr 2026 23:22:09 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: 4qcYxQTY9VuRejt5Jb7vZf7bI3pnQeFmZvBsUNqccdo=) 2: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: cNfSjefI8Ypmn5XZaa0bgUB4T62s46CxJFYT0njNfuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4f:c7:0a:46:ba:86:db:a1:d9:d5:ae:a2:79:ba:5f:ea:ad:66:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Apr 20 13:57:09 2026 GMT Not After : Apr 23 23:22:09 2026 GMT Subject: CN=F4D1C0D4126B529BC2C06E7B1C6F20B0B78AF168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:09:0f:35:8b:8e:fa:11:fa:3c:09:b5:a6: a3:b3:a4:68:30:26:4a:da:f3:76:45:04:7e:ee:a8: 94:f6:bc:7f:a9:3e:f4:b7:95:02:a2:d0:8d:64:7e: 63:c4:1e:e5:4d:0c:f4:fb:99:20:3c:79:15:75:f2: 08:69:0e:bd:bc:7c:c6:05:3a:21:a1:3e:ff:a9:c3: 87:cc:3d:ed:39:be:f6:fe:e7:36:d7:c1:26:11:3a: 13:09:8a:7f:36:f0:74:d9:11:55:8e:d9:f2:9e:6a: 53:08:00:74:a3:4d:75:71:05:a0:a6:52:4f:ca:6d: 30:8f:af:d5:2b:9f:da:a4:46:31:c5:a2:7e:d4:8e: c6:13:37:75:7f:1c:32:a3:9a:1f:8a:5d:22:71:90: c5:42:82:61:31:da:72:58:ee:f6:76:e0:40:31:6a: b4:7b:e8:44:62:04:28:73:21:dc:31:bb:39:44:7e: 4e:ac:ac:97:ab:28:97:c5:8c:9e:54:70:0a:df:1a: 5a:2c:04:bd:f8:f1:bf:4d:67:c9:44:41:61:6d:bf: e5:61:59:e8:96:30:8f:79:a3:7b:39:45:57:97:55: fc:ac:e9:0f:e8:e7:b5:c8:07:9f:44:68:6a:cd:2a: 3e:d6:82:5f:38:c9:28:33:44:ef:ea:37:d3:27:95: 01:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D1:C0:D4:12:6B:52:9B:C2:C0:6E:7B:1C:6F:20:B0:B7:8A:F1:68 X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ac:f6:9b:a7:fd:19:87:ac:b9:df:c8:fd:1a:d3:91:86:d2: 1c:cc:fb:e4:64:7d:20:19:76:c7:1b:e4:f4:bb:64:f7:dc:31: 39:3c:1b:f4:e4:58:7d:5e:7f:5f:d8:61:11:16:dc:23:b9:0e: 1f:98:ec:c1:07:03:a8:98:6f:48:b9:01:8c:84:82:1f:a3:55: 8f:19:df:e6:68:23:a3:1f:3b:96:bb:ae:d3:8d:7a:9c:13:27: 5d:be:78:c7:d2:17:49:cf:e9:83:0d:92:44:58:95:54:8c:ec: c2:8b:aa:33:38:26:bc:2f:f1:78:b6:44:c3:5a:2b:33:60:0d: 25:f0:e5:77:cc:b7:bb:52:2c:6e:89:b3:45:0d:d5:f0:96:a8: 80:11:7f:a7:f0:99:12:33:4b:a5:c4:05:94:ec:3f:8f:f5:40: 3a:eb:c9:1c:ec:8f:43:ab:0c:09:5d:e8:86:ef:45:0b:cc:e5: a8:f5:e0:3a:f0:13:b0:a8:c2:c6:fc:bf:e6:42:0b:c1:3d:5a: 91:bf:41:1e:5c:5f:d6:ed:18:38:83:5a:5a:92:6b:ec:1a:01: 4b:e4:87:d6:0a:91:55:48:2e:dd:4f:61:ab:dd:30:c3:de:97: 50:05:d9:30:c7:05:f5:a7:d4:27:ea:3c:cd:bb:eb:f5:f4:af: ff:b8:01:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHk/HCka6htuh2dWuonm6X+qtZvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNjA0MjAxMzU3MDlaFw0yNjA0MjMyMzIyMDlaMDMxMTAvBgNV BAMTKEY0RDFDMEQ0MTI2QjUyOUJDMkMwNkU3QjFDNkYyMEIwQjc4QUYxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGAkPNYuO+hH6PAm1pqOzpGgw Jkra83ZFBH7uqJT2vH+pPvS3lQKi0I1kfmPEHuVNDPT7mSA8eRV18ghpDr28fMYF OiGhPv+pw4fMPe05vvb+5zbXwSYROhMJin828HTZEVWO2fKealMIAHSjTXVxBaCm Uk/KbTCPr9Urn9qkRjHFon7UjsYTN3V/HDKjmh+KXSJxkMVCgmEx2nJY7vZ24EAx arR76ERiBChzIdwxuzlEfk6srJerKJfFjJ5UcArfGlosBL348b9NZ8lEQWFtv+Vh WeiWMI95o3s5RVeXVfys6Q/o57XIB59EaGrNKj7Wgl84ySgzRO/qN9MnlQFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9NHA1BJrUpvCwG57HG8gsLeK8WgwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADes9pun/RmHrLnfyP0a05GG0hzM++RkfSAZ dscb5PS7ZPfcMTk8G/TkWH1ef1/YYREW3CO5Dh+Y7MEHA6iYb0i5AYyEgh+jVY8Z 3+ZoI6MfO5a7rtONepwTJ12+eMfSF0nP6YMNkkRYlVSM7MKLqjM4Jrwv8Xi2RMNa KzNgDSXw5XfMt7tSLG6Js0UN1fCWqIARf6fwmRIzS6XEBZTsP4/1QDrryRzsj0Or DAld6IbvRQvM5aj14DrwE7Cowsb8v+ZCC8E9WpG/QR5cX9btGDiDWlqSa+waAUvk h9YKkVVILt1PYavdMMPel1AF2TDHBfWn1CfqPM276/X0r/+4ARw= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:54 2026 by rpki-client