$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: vGR78NrgDqeuu0T3AK5xS0ArHqaGr/keVXdTdxWDIyk= Subject key identifier: E8:76:2B:6F:B0:6F:54:D1:F9:3C:79:16:0F:89:2F:09:59:06:1D:B2 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 709FBC840DF34C5BE69B28B09FA2D926F023A942 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 026C Signing time: Thu 16 Apr 2026 12:20:03 +0000 Manifest this update: Thu 16 Apr 2026 12:15:03 +0000 Manifest next update: Sun 19 Apr 2026 16:50:03 +0000 Files and hashes: 1: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 7LVSpHD/+5SvrNtdEAOca6lFeRx3Ycxz9J1G8TF3m/w=) 2: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: qXl6Y01U+k/Ra/QYHsyqr3b9BVCalPhgbHMkcfSQuTM=) 3: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: iS1KUfCIFhAgUKFa+DdN94D7nCFhODn/9InSKP5bi9M=) 4: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: zwTS0I3yHyTRPMMjOlix3sPU89yfOA8bdamwt+xt3VE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9f:bc:84:0d:f3:4c:5b:e6:9b:28:b0:9f:a2:d9:26:f0:23:a9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Apr 16 12:15:03 2026 GMT Not After : Apr 19 16:50:03 2026 GMT Subject: CN=E8762B6FB06F54D1F93C79160F892F0959061DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:2e:72:45:14:c3:20:c6:54:45:3f:f8:0c: d9:50:e3:8b:13:af:bc:ba:09:64:55:61:17:2f:29: 0f:bf:43:ff:df:b5:5c:fe:c9:51:12:5c:8e:54:42: 7e:27:a2:ba:60:ea:17:78:9e:59:43:50:2e:ca:ed: 81:23:7d:fc:83:5f:6b:1c:70:6c:a5:c6:10:6a:4f: 32:33:ec:37:4c:72:78:ec:a5:2c:87:76:67:f0:1a: 94:d2:6d:8d:5a:13:87:f7:c0:5c:82:76:51:7e:f9: 1d:7a:65:4b:9a:c6:4e:92:d2:cc:22:27:e3:62:e6: 73:c3:03:29:a1:97:57:b4:e9:a8:e9:b6:18:04:2c: f1:33:c1:ac:08:5b:88:e2:b5:02:be:d5:3e:5a:76: 4c:b4:d1:18:99:ea:dd:af:4d:bf:08:93:90:fd:8b: 6d:99:5d:37:64:49:39:d0:17:fc:7e:17:b2:99:8c: 80:ff:b8:48:24:02:0b:d4:16:a0:4a:47:c4:0d:70: e2:98:03:9b:2c:e2:42:f9:bc:76:db:20:fa:5e:8e: 2f:1b:07:74:53:2a:25:95:f3:47:9c:d3:e6:17:c9: e2:81:73:87:46:34:c7:0b:cb:d3:21:00:66:52:83: 8a:64:fb:12:58:25:2f:6d:80:1e:03:fb:2e:cd:77: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:76:2B:6F:B0:6F:54:D1:F9:3C:79:16:0F:89:2F:09:59:06:1D:B2 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7e:ae:43:d4:c1:2d:76:a9:b6:57:5e:3d:53:ea:e5:c4:9e: f7:29:12:c2:1b:26:92:3d:26:b4:10:0c:bf:74:7c:9b:3f:70: c4:00:fb:62:61:da:86:a3:5c:5a:2f:3d:1d:7e:ad:85:3f:8c: 52:16:88:f7:15:c6:7a:d9:b3:e5:26:ee:4c:17:f7:e0:b9:73: 19:eb:53:e9:ac:5a:7a:8d:fa:68:76:0b:ee:cf:f7:01:fe:39: bd:23:e6:70:32:1e:6d:49:2c:92:fb:7e:0d:eb:ed:cd:23:45: 0e:41:dd:68:c0:7f:67:0f:7f:f6:17:c2:32:8c:c9:39:ab:96: 77:72:9a:d9:0f:e1:b9:ba:94:35:cd:1a:a0:e3:1f:66:21:d5: 50:d4:ab:60:5b:d3:c8:c3:00:00:13:9e:58:a8:23:7a:c6:66: f8:bc:84:5b:12:52:e6:2c:ce:36:cb:dc:9c:3e:50:89:ef:38: c5:94:c8:09:a6:13:76:bb:a8:55:d2:7a:e8:18:84:0e:ea:64: ec:94:d7:8f:59:a6:86:aa:0f:ea:87:e4:c2:83:d4:1f:46:df: 9f:45:6e:40:c5:e2:d0:28:db:ff:ec:c7:8d:43:3a:2d:42:30: ac:81:87:5d:58:57:b8:4b:06:52:1f:a1:27:df:f0:cd:4c:7b: b8:15:fb:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJ+8hA3zTFvmmyiwn6LZJvAjqUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNjA0MTYxMjE1MDNaFw0yNjA0MTkxNjUwMDNaMDMxMTAvBgNV BAMTKEU4NzYyQjZGQjA2RjU0RDFGOTNDNzkxNjBGODkyRjA5NTkwNjFEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHi5yRRTDIMZURT/4DNlQ44sT r7y6CWRVYRcvKQ+/Q//ftVz+yVESXI5UQn4norpg6hd4nllDUC7K7YEjffyDX2sc cGylxhBqTzIz7DdMcnjspSyHdmfwGpTSbY1aE4f3wFyCdlF++R16ZUuaxk6S0swi J+Ni5nPDAymhl1e06ajpthgELPEzwawIW4jitQK+1T5adky00RiZ6t2vTb8Ik5D9 i22ZXTdkSTnQF/x+F7KZjID/uEgkAgvUFqBKR8QNcOKYA5ss4kL5vHbbIPpeji8b B3RTKiWV80ec0+YXyeKBc4dGNMcLy9MhAGZSg4pk+xJYJS9tgB4D+y7Nd+MXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6HYrb7BvVNH5PHkWD4kvCVkGHbIwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt+rkPUwS12qbZXXj1T6uXEnvcpEsIbJpI9 JrQQDL90fJs/cMQA+2Jh2oajXFovPR1+rYU/jFIWiPcVxnrZs+Um7kwX9+C5cxnr U+msWnqN+mh2C+7P9wH+Ob0j5nAyHm1JLJL7fg3r7c0jRQ5B3WjAf2cPf/YXwjKM yTmrlndymtkP4bm6lDXNGqDjH2Yh1VDUq2Bb08jDAAATnlioI3rGZvi8hFsSUuYs zjbL3Jw+UInvOMWUyAmmE3a7qFXSeugYhA7qZOyU149ZpoaqD+qH5MKD1B9G359F bkDF4tAo2//sx41DOi1CMKyBh11YV7hLBlIfoSff8M1Me7gV+40= -----END CERTIFICATE-----Generated at Fri Apr 17 11:15:17 2026 by rpki-client