$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: +PzHC8POp+RxabsMLNvzP9TQfgwuz8YNSg+oRP+PZXE= Subject key identifier: 03:41:F1:3C:72:A2:37:48:EB:F5:0F:06:0B:B1:42:5D:C3:1B:E7:E2 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 1EE7C1E95008DAC3EEFBF5627BE23F03C08B3F97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 0220 Signing time: Fri 17 Apr 2026 05:02:36 +0000 Manifest this update: Fri 17 Apr 2026 04:57:36 +0000 Manifest next update: Mon 20 Apr 2026 05:08:36 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) 2: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: PXwwORHWTC4JIcYVKeh8eUqFNtP7SyDB8qbY7QdGmHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e7:c1:e9:50:08:da:c3:ee:fb:f5:62:7b:e2:3f:03:c0:8b:3f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Apr 17 04:57:36 2026 GMT Not After : Apr 20 05:08:36 2026 GMT Subject: CN=0341F13C72A23748EBF50F060BB1425DC31BE7E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:c4:3b:94:ef:69:be:be:a0:69:82:cd:3a: 63:46:95:1f:55:dd:21:5b:86:ff:ef:80:bd:08:b3: 5d:41:62:df:77:d2:3f:61:9c:26:66:8b:0c:41:b5: 3e:f5:55:83:15:d7:0e:bb:99:09:c8:d1:c5:bb:8a: 0c:a2:5a:4c:1e:47:4a:41:84:46:96:6e:ba:ae:78: 9e:51:bb:99:7b:85:1d:08:6c:c7:cc:93:ff:05:37: 2d:cb:c6:d7:88:c2:de:27:fc:f5:0d:8d:e1:52:7f: 5b:0b:12:73:00:38:57:00:b5:be:d4:14:d4:bc:f4: d2:91:ba:c7:3b:d9:2a:33:ea:60:47:8e:00:5e:b6: 63:58:50:4c:16:5d:29:55:74:2e:f0:27:db:a6:f7: c0:68:bf:80:6d:8a:8f:63:8d:cc:e2:71:44:75:e8: a1:02:c1:0e:84:54:bd:6c:cc:ca:45:b0:d8:17:b9: 8d:a8:cf:d5:78:72:dd:f9:cb:e0:f4:17:ea:db:ea: ba:04:21:27:2e:85:37:8a:0e:f6:e8:9e:6d:37:ed: fa:bf:a9:09:81:2b:94:46:00:38:af:5a:f7:70:d1: fb:6d:f1:02:f0:1a:c6:8d:ef:1e:1d:70:91:f6:85: 0c:77:3d:bf:cf:2c:9b:af:77:7a:73:dc:9b:37:9e: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:41:F1:3C:72:A2:37:48:EB:F5:0F:06:0B:B1:42:5D:C3:1B:E7:E2 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:79:a3:d8:48:d9:40:06:a7:38:70:3d:7a:d7:c5:f2:fb:03: 39:67:f2:6e:37:d4:5b:a8:5a:eb:cc:0f:dc:f7:19:54:97:43: 16:84:b2:66:48:24:6e:e7:40:67:6e:86:e0:56:cd:e7:65:ff: 63:3a:56:e2:72:6a:c8:32:c9:06:e4:cb:26:52:20:af:52:0d: a0:f0:84:b0:f4:32:5f:63:c9:a2:27:f0:2a:f4:d1:58:ce:3c: 8e:80:2b:e5:bb:39:17:c9:ee:7a:e3:bc:40:86:dc:3a:2d:16: 0f:22:e5:35:35:84:da:c1:89:92:e6:59:54:c3:f7:d7:67:6c: 35:c5:57:8e:2a:72:f5:6a:41:24:6c:7a:2a:a4:99:7e:f9:9b: 47:11:e5:67:57:62:48:02:1b:f0:75:e5:a6:62:39:70:18:33: 39:28:a1:e1:14:f5:34:f9:bc:43:95:52:96:93:62:c9:e4:a1: 8b:71:f4:8b:13:6a:43:f2:4a:ee:e8:38:f6:01:44:89:28:af: 86:9e:ed:61:9c:92:91:23:0e:21:2e:aa:7d:6d:7c:62:59:33: b7:c6:df:1e:26:7e:89:8f:60:1d:fb:7a:d2:b1:9d:ec:cd:ce: 45:c8:a1:2d:17:1e:82:f3:56:f7:07:71:bb:56:8e:e3:a9:de: 3e:57:50:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHufB6VAI2sPu+/Vie+I/A8CLP5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNjA0MTcwNDU3MzZaFw0yNjA0MjAwNTA4MzZaMDMxMTAvBgNV BAMTKDAzNDFGMTNDNzJBMjM3NDhFQkY1MEYwNjBCQjE0MjVEQzMxQkU3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25cQ7lO9pvr6gaYLNOmNGlR9V 3SFbhv/vgL0Is11BYt930j9hnCZmiwxBtT71VYMV1w67mQnI0cW7igyiWkweR0pB hEaWbrqueJ5Ru5l7hR0IbMfMk/8FNy3LxteIwt4n/PUNjeFSf1sLEnMAOFcAtb7U FNS89NKRusc72Soz6mBHjgBetmNYUEwWXSlVdC7wJ9um98Bov4Btio9jjczicUR1 6KECwQ6EVL1szMpFsNgXuY2oz9V4ct35y+D0F+rb6roEIScuhTeKDvbonm037fq/ qQmBK5RGADivWvdw0ftt8QLwGsaN7x4dcJH2hQx3Pb/PLJuvd3pz3Js3nl7hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0HxPHKiN0jr9Q8GC7FCXcMb5+IwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx5o9hI2UAGpzhwPXrXxfL7Azln8m431Fuo WuvMD9z3GVSXQxaEsmZIJG7nQGduhuBWzedl/2M6VuJyasgyyQbkyyZSIK9SDaDw hLD0Ml9jyaIn8Cr00VjOPI6AK+W7ORfJ7nrjvECG3DotFg8i5TU1hNrBiZLmWVTD 99dnbDXFV44qcvVqQSRseiqkmX75m0cR5WdXYkgCG/B15aZiOXAYMzkooeEU9TT5 vEOVUpaTYsnkoYtx9IsTakPySu7oOPYBRIkor4ae7WGckpEjDiEuqn1tfGJZM7fG 3x4mfomPYB37etKxnezNzkXIoS0XHoLzVvcHcbtWjuOp3j5XUNM= -----END CERTIFICATE-----Generated at Sat Apr 18 01:43:12 2026 by rpki-client