$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: 61fM3rXyhgynj/G9JWAh4gOQoLq0XCktE0oqaceL4Bo= Subject key identifier: B0:01:3D:3B:C9:A7:BA:2E:E2:2D:94:2A:12:9E:09:9D:E0:95:2D:FE Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 79DFCD934FBDEC7212A9FD9BDBAC2BDC40004BD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 01DF Signing time: Wed 15 Apr 2026 14:20:45 +0000 Manifest this update: Wed 15 Apr 2026 14:15:45 +0000 Manifest next update: Sun 19 Apr 2026 01:08:45 +0000 Files and hashes: 1: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: z5sUU+btUf+40K5CSieV1af2wHMTruZHbb+V3O4CGmE=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: C38vaC51NYn6qwFpCrdHp8HOvp7kWpN8voFoh3IMFxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:df:cd:93:4f:bd:ec:72:12:a9:fd:9b:db:ac:2b:dc:40:00:4b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Apr 15 14:15:45 2026 GMT Not After : Apr 19 01:08:45 2026 GMT Subject: CN=B0013D3BC9A7BA2EE22D942A129E099DE0952DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:31:36:0d:0b:3d:e8:f9:93:55:24:1e:d0: 62:ac:88:0c:48:50:f1:48:54:ba:a7:8f:6c:26:65: b8:4b:9c:d2:a3:8e:9d:80:60:ed:fc:1f:b5:a9:77: 2f:84:81:85:63:35:35:1a:13:26:04:ac:0d:96:05: a8:fc:b4:d1:3e:b5:d4:f7:4c:46:f1:89:38:df:f7: e3:d7:d1:11:93:85:32:ea:4d:37:d3:47:87:13:8f: 4b:57:59:5b:00:e8:d4:2b:99:bc:f6:14:01:76:25: d5:8e:50:bd:f3:c8:93:44:ca:01:a6:d9:4f:b9:ce: fd:6e:65:62:c1:25:f1:af:85:48:49:52:68:45:57: 0f:b4:77:c3:0a:ba:53:87:fd:02:9f:a0:b8:6a:76: 16:96:a3:a8:e5:6b:fb:96:ae:b2:2a:f2:4a:f2:e4: d0:2b:7b:80:5d:4e:2c:26:c6:43:aa:36:c6:20:32: f9:ce:34:b1:da:d1:7f:d1:d7:11:b0:78:52:69:52: ea:7b:dc:d4:24:66:40:94:44:a1:ac:a8:de:c9:26: 63:f2:0b:f5:5d:d7:cd:8e:fb:c9:28:39:7b:1f:b0: 4d:b0:0b:6e:5f:2c:ab:2e:b9:b8:c1:67:7f:11:3e: 5d:49:44:f6:ab:a0:5e:6f:4e:5c:2f:fc:33:ac:83: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:3D:3B:C9:A7:BA:2E:E2:2D:94:2A:12:9E:09:9D:E0:95:2D:FE X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:8e:69:f9:05:63:8d:05:17:6c:65:26:fb:6f:38:db:b8:4d: d0:3f:1f:31:fa:32:ed:30:34:7a:22:ba:d9:3c:d0:de:d9:b5: 9d:35:39:cd:17:13:c1:ba:d7:df:f2:70:8d:23:78:29:5e:ad: 23:52:97:97:8e:1d:a3:95:6d:1e:34:ef:52:0b:4d:29:47:c0: 8f:76:c1:43:58:9f:36:65:78:50:f1:4e:3c:e8:91:77:f0:d6: ab:e5:70:e5:d6:38:e2:10:8a:5c:b1:ce:52:c8:a1:06:4a:82: 8c:c4:82:bf:db:bb:13:ff:5b:68:7f:26:6f:c5:7f:2f:f4:cd: 23:48:59:12:ec:a7:c6:22:9a:76:77:e9:77:d1:19:94:9c:cb: 4a:82:9f:0e:3b:14:94:e3:25:51:0a:31:e8:7e:8e:9f:6f:44: 8e:24:b6:94:14:96:9e:c8:3e:17:10:17:2b:22:53:5e:94:9d: 52:36:c7:2c:95:5a:cd:b6:14:5b:b3:07:c8:30:63:7d:8c:5f: 7b:c1:71:b7:08:4c:5a:0a:d9:4f:c0:ab:b9:4a:5a:44:da:76: 03:71:0e:5b:59:b7:ee:cd:f7:05:d2:d7:3c:7e:be:94:5d:0a: 06:c1:06:cf:3b:3b:bd:d4:5b:47:45:35:cc:3e:45:0f:6f:44: 22:bb:5c:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUed/Nk0+97HISqf2b26wr3EAAS9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNjA0MTUxNDE1NDVaFw0yNjA0MTkwMTA4NDVaMDMxMTAvBgNV BAMTKEIwMDEzRDNCQzlBN0JBMkVFMjJEOTQyQTEyOUUwOTlERTA5NTJERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4zE2DQs96PmTVSQe0GKsiAxI UPFIVLqnj2wmZbhLnNKjjp2AYO38H7Wpdy+EgYVjNTUaEyYErA2WBaj8tNE+tdT3 TEbxiTjf9+PX0RGThTLqTTfTR4cTj0tXWVsA6NQrmbz2FAF2JdWOUL3zyJNEygGm 2U+5zv1uZWLBJfGvhUhJUmhFVw+0d8MKulOH/QKfoLhqdhaWo6jla/uWrrIq8kry 5NAre4BdTiwmxkOqNsYgMvnONLHa0X/R1xGweFJpUup73NQkZkCURKGsqN7JJmPy C/Vd182O+8koOXsfsE2wC25fLKsuubjBZ38RPl1JRParoF5vTlwv/DOsg8efAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsAE9O8mnui7iLZQqEp4JneCVLf4wHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSOafkFY40FF2xlJvtvONu4TdA/HzH6Mu0w NHoiutk80N7ZtZ01Oc0XE8G619/ycI0jeClerSNSl5eOHaOVbR4071ILTSlHwI92 wUNYnzZleFDxTjzokXfw1qvlcOXWOOIQilyxzlLIoQZKgozEgr/buxP/W2h/Jm/F fy/0zSNIWRLsp8YimnZ36XfRGZScy0qCnw47FJTjJVEKMeh+jp9vRI4ktpQUlp7I PhcQFysiU16UnVI2xyyVWs22FFuzB8gwY32MX3vBcbcITFoK2U/Aq7lKWkTadgNx DltZt+7N9wXS1zx+vpRdCgbBBs87O73UW0dFNcw+RQ9vRCK7XKA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:23:12 2026 by rpki-client