$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: a1Ue8YfHEKZJ/tFV+j2knw+N6yS7lBqw8ee6/od0sY4= Subject key identifier: 78:35:17:CD:8E:6C:8F:23:F6:0E:38:4C:FD:89:17:28:D8:1B:16:64 Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 3FA493FB2D238A1172510A054B0A69AA8362CCF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 0437 Signing time: Sat 18 Apr 2026 10:52:00 +0000 Manifest this update: Sat 18 Apr 2026 10:47:00 +0000 Manifest next update: Tue 21 Apr 2026 19:22:00 +0000 Files and hashes: 1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: jJYNTfIAyMC2NRZr4ppEtCVznm9AD64Q42L5AHJhiL4=) 2: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: 2+21cgS9YAYcOp19nxMBI5CX1Jc0yGks8hyoPNdCeDQ=) 3: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: MShJHahiO+kXtASRWiJlRlOYs5bzd7PPgS+opTwTMzA=) 4: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: bhUXyn1m9ClF/H6g61K6U8JFPr/lZN61y4GI83n7uSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 19:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a4:93:fb:2d:23:8a:11:72:51:0a:05:4b:0a:69:aa:83:62:cc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Apr 18 10:47:00 2026 GMT Not After : Apr 21 19:22:00 2026 GMT Subject: CN=783517CD8E6C8F23F60E384CFD891728D81B1664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:eb:ec:8d:02:6b:b0:19:cb:10:79:59:4d: 5b:5e:6c:e7:91:8d:28:da:ae:2a:96:78:7c:79:e1: 00:7a:4e:48:66:77:31:ce:87:20:a4:6d:55:ea:1e: bc:91:b1:38:0c:1c:98:52:c0:40:ac:d6:56:4a:42: 63:96:0a:5b:5e:35:89:06:bf:a0:2c:85:9a:f4:b8: 1c:2f:cd:ad:4b:2d:22:ae:1f:fe:8e:f5:5d:5a:74: 22:92:c8:d5:51:a8:5e:d7:77:24:8b:47:a4:6a:4b: b8:30:43:25:49:c6:d1:57:e2:70:2e:6d:90:47:99: 6e:b3:2e:bd:86:be:20:85:27:48:b0:94:63:8e:fd: 13:37:64:05:5f:51:8d:2d:d8:0d:8d:6a:e2:9f:86: 9d:f4:fe:5e:93:cc:42:b4:e1:2b:ae:be:6f:25:5d: 59:f3:56:8e:75:98:f8:ed:5d:9b:6e:cc:8d:cb:9f: 37:f6:6a:5c:53:b3:cb:f0:fb:6d:66:83:71:38:09: a9:28:3e:84:ac:f9:e9:27:e4:f9:85:3c:d2:1a:2e: 85:e2:2a:a3:68:10:81:d8:05:af:7c:9c:25:c4:d5: 47:bb:74:b5:44:37:82:6a:91:c7:95:b4:e5:67:b3: 52:b0:a2:9c:42:cf:05:a2:e0:b0:76:f4:1d:6d:ec: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:35:17:CD:8E:6C:8F:23:F6:0E:38:4C:FD:89:17:28:D8:1B:16:64 X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:8c:ba:11:23:08:1f:07:46:5b:f9:fd:24:7c:56:96:cd:ba: 2a:03:a2:52:8d:95:f3:88:98:47:b6:c7:0f:9a:8b:80:68:5a: 98:66:22:48:a0:ce:b2:9b:e1:f8:ad:43:3c:73:20:28:16:c9: 1e:ed:7a:64:22:ce:ca:27:f2:e9:84:67:39:78:b4:6d:6b:b2: 66:08:20:6b:c6:e6:b7:f5:1b:05:5d:41:3c:29:f8:78:94:37: fe:45:3b:51:4a:64:d3:dd:2c:75:d4:00:d0:48:6a:25:90:eb: e5:5f:59:13:d8:2e:2a:99:c3:aa:ce:ba:a3:0a:e2:fd:9a:c6: 22:f1:b1:a0:fc:85:06:53:79:a2:e8:5a:1a:02:73:46:1c:61: 64:61:03:9a:47:73:7b:eb:43:f7:b1:65:0a:31:d4:a0:31:bc: 1a:04:31:a5:b5:2f:08:6b:10:43:47:1f:5e:59:64:c5:81:45: b0:df:3a:2f:05:a2:ea:2a:fc:99:66:e7:60:5e:4d:ae:a6:f3: be:40:e5:0f:94:4d:51:ed:3e:88:b6:1c:e1:b0:3c:ab:1f:af: 75:65:96:fa:19:31:f6:fd:14:94:b4:e6:23:e9:49:fc:04:88: a5:d9:5c:be:cd:36:9d:32:54:c3:10:ce:ed:d4:42:50:9e:73: e4:c3:d3:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6ST+y0jihFyUQoFSwppqoNizPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNjA0MTgxMDQ3MDBaFw0yNjA0MjExOTIyMDBaMDMxMTAvBgNV BAMTKDc4MzUxN0NEOEU2QzhGMjNGNjBFMzg0Q0ZEODkxNzI4RDgxQjE2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCToevsjQJrsBnLEHlZTVtebOeR jSjariqWeHx54QB6TkhmdzHOhyCkbVXqHryRsTgMHJhSwECs1lZKQmOWClteNYkG v6AshZr0uBwvza1LLSKuH/6O9V1adCKSyNVRqF7XdySLR6RqS7gwQyVJxtFX4nAu bZBHmW6zLr2GviCFJ0iwlGOO/RM3ZAVfUY0t2A2NauKfhp30/l6TzEK04Suuvm8l XVnzVo51mPjtXZtuzI3Lnzf2alxTs8vw+21mg3E4CakoPoSs+ekn5PmFPNIaLoXi KqNoEIHYBa98nCXE1Ue7dLVEN4JqkceVtOVns1KwopxCzwWi4LB29B1t7ImFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDUXzY5sjyP2DjhM/YkXKNgbFmQwHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaMuhEjCB8HRlv5/SR8VpbNuioDolKNlfOI mEe2xw+ai4BoWphmIkigzrKb4fitQzxzICgWyR7temQizson8umEZzl4tG1rsmYI IGvG5rf1GwVdQTwp+HiUN/5FO1FKZNPdLHXUANBIaiWQ6+VfWRPYLiqZw6rOuqMK 4v2axiLxsaD8hQZTeaLoWhoCc0YcYWRhA5pHc3vrQ/exZQox1KAxvBoEMaW1Lwhr EENHH15ZZMWBRbDfOi8Fouoq/Jlm52BeTa6m875A5Q+UTVHtPoi2HOGwPKsfr3Vl lvoZMfb9FJS05iPpSfwEiKXZXL7NNp0yVMMQzu3UQlCec+TD00E= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:35 2026 by rpki-client