$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: RHh34IwgIRSoGirEj6Eaj+vi9Q06wZdSmoxm4XHBnsQ= Subject key identifier: A0:2E:63:90:14:4C:79:EC:8D:AF:69:BD:B2:D3:B7:B9:36:14:A2:BB Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 2527CD53CD3B3CD431E500E6E2846B4746B23616 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 16:20:59 +0000 Manifest this update: Thu 16 Apr 2026 16:15:59 +0000 Manifest next update: Mon 20 Apr 2026 02:43:59 +0000 Files and hashes: 1: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 2: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) 3: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: sM2hcpWsfxRj9yf1ppEy1DCSm/kmxC+jlYo9l4eI+1I=) 4: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 5: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:27:cd:53:cd:3b:3c:d4:31:e5:00:e6:e2:84:6b:47:46:b2:36:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Apr 16 16:15:59 2026 GMT Not After : Apr 20 02:43:59 2026 GMT Subject: CN=A02E6390144C79EC8DAF69BDB2D3B7B93614A2BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:d8:86:d1:bc:d3:42:af:67:17:1b:8f:54: ed:9d:aa:45:28:f7:61:80:76:0d:ee:ce:2a:9e:61: 65:1f:53:cb:fc:86:e8:95:b4:a4:f3:af:27:a0:60: 5d:d6:88:04:62:1f:d5:ce:50:e8:9c:aa:95:05:5c: 0f:03:9b:02:a1:d0:be:a7:f1:2a:dc:60:f5:7e:95: 09:16:a7:d7:3c:72:b7:f3:75:8e:89:9e:a0:d1:ca: 37:b7:4e:6d:0a:5e:8d:2b:09:f1:ca:62:5e:2c:6f: ea:4c:8c:02:3d:a6:7d:40:0d:b1:bc:8a:c1:b7:38: 10:64:a9:79:cd:31:96:d2:a3:87:7a:31:a2:28:3a: 40:d0:54:6d:c2:88:1e:4a:5e:06:60:05:a3:e1:65: dc:ae:c8:0b:6f:d9:cd:eb:8d:c6:87:f6:95:8c:9b: 62:3b:83:02:39:ca:79:5d:22:c1:4a:2a:52:0a:de: 2c:f6:8c:f9:57:01:65:fe:71:4c:27:79:2a:7f:aa: a7:df:ec:d0:02:d8:16:33:ea:8e:73:2c:09:69:59: c7:77:d6:2f:b1:f1:2f:55:26:c0:05:d8:f9:eb:56: d2:46:64:35:3e:df:4b:07:8b:9e:fc:46:f0:0c:f5: 7c:ba:d0:e0:71:19:3f:9d:bc:30:d2:6a:99:2a:ef: cb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2E:63:90:14:4C:79:EC:8D:AF:69:BD:B2:D3:B7:B9:36:14:A2:BB X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a6:3b:21:a0:f1:29:c7:98:8b:37:43:13:3d:29:5b:dc:1f: a7:42:18:7e:ec:e9:0b:e2:0b:2a:53:b1:1f:b3:19:b0:55:2f: ec:ad:b6:b7:7a:0e:b7:f6:38:ba:b2:2d:82:71:c8:6c:70:c0: 3a:02:3e:7c:fd:c5:7a:5c:91:26:1c:20:30:b1:78:6e:f3:9f: f0:5d:a0:7a:28:97:58:60:ad:e6:84:74:23:a7:ed:7c:70:90: 9b:a2:71:5f:de:d2:2c:44:09:ad:1e:c0:db:11:53:8b:e8:37: 67:48:f4:93:f2:2f:03:63:a6:87:06:8b:85:8d:bb:88:c1:d6: b8:30:34:bb:00:d4:11:dd:68:7a:92:f6:9a:ff:84:b7:d8:ed: 2a:08:f7:f7:48:7d:fe:17:82:16:48:fd:0a:13:80:29:84:bf: e8:16:f6:8b:b8:66:52:b2:7e:34:32:82:15:77:f4:14:89:97: b6:ae:98:5f:e7:68:60:22:89:5f:02:8a:bd:e9:6a:1f:8b:45: 85:40:8b:68:c1:c0:a3:15:d1:ff:be:88:49:b0:f4:33:aa:a4: 8d:fe:22:b4:64:64:8e:a5:87:75:6a:16:a0:5c:ca:ae:17:5a: 17:f6:6f:ee:00:8b:60:d4:ac:20:3e:b3:25:25:d0:2e:34:8f: 55:2b:72:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSfNU807PNQx5QDm4oRrR0ayNhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNjA0MTYxNjE1NTlaFw0yNjA0MjAwMjQzNTlaMDMxMTAvBgNV BAMTKEEwMkU2MzkwMTQ0Qzc5RUM4REFGNjlCREIyRDNCN0I5MzYxNEEyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszdiG0bzTQq9nFxuPVO2dqkUo 92GAdg3uziqeYWUfU8v8huiVtKTzryegYF3WiARiH9XOUOicqpUFXA8DmwKh0L6n 8SrcYPV+lQkWp9c8crfzdY6JnqDRyje3Tm0KXo0rCfHKYl4sb+pMjAI9pn1ADbG8 isG3OBBkqXnNMZbSo4d6MaIoOkDQVG3CiB5KXgZgBaPhZdyuyAtv2c3rjcaH9pWM m2I7gwI5ynldIsFKKlIK3iz2jPlXAWX+cUwneSp/qqff7NAC2BYz6o5zLAlpWcd3 1i+x8S9VJsAF2PnrVtJGZDU+30sHi578RvAM9Xy60OBxGT+dvDDSapkq78sFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoC5jkBRMeeyNr2m9stO3uTYUorswHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADimOyGg8SnHmIs3QxM9KVvcH6dCGH7s6Qvi CypTsR+zGbBVL+yttrd6Drf2OLqyLYJxyGxwwDoCPnz9xXpckSYcIDCxeG7zn/Bd oHool1hgreaEdCOn7XxwkJuicV/e0ixECa0ewNsRU4voN2dI9JPyLwNjpocGi4WN u4jB1rgwNLsA1BHdaHqS9pr/hLfY7SoI9/dIff4XghZI/QoTgCmEv+gW9ou4ZlKy fjQyghV39BSJl7aumF/naGAiiV8Cir3pah+LRYVAi2jBwKMV0f++iEmw9DOqpI3+ IrRkZI6lh3VqFqBcyq4XWhf2b+4Ai2DUrCA+syUl0C40j1UrcoM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:48:36 2026 by rpki-client