$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: brAKHfqrdwaE1sPK/N6TSrsM24hDWZW40mqS8etAjew= Subject key identifier: 1A:EE:92:0D:46:A6:67:08:3F:BC:A8:F3:CA:68:C9:93:6C:3E:70:A6 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 444ACF31B73CCC53E44621D342C7527821F76B18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 0284 Signing time: Fri 17 Apr 2026 06:41:00 +0000 Manifest this update: Fri 17 Apr 2026 06:36:00 +0000 Manifest next update: Mon 20 Apr 2026 14:32:00 +0000 Files and hashes: 1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: //+o8fHe6E0loKsGSmkgVyIWp7gWm5okCpSCAbrnfh4=) 2: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: Z/0JxVleGkNZla/CcYW1UybtMPJt/ert4E8TTlf2C1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4a:cf:31:b7:3c:cc:53:e4:46:21:d3:42:c7:52:78:21:f7:6b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Apr 17 06:36:00 2026 GMT Not After : Apr 20 14:32:00 2026 GMT Subject: CN=1AEE920D46A667083FBCA8F3CA68C9936C3E70A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:4d:86:bd:09:db:9e:af:6d:87:ca:a8:15: fb:3f:96:5f:6d:81:31:27:cb:ff:de:29:b1:c4:73: 8e:1f:c6:d3:50:81:b2:62:57:85:22:46:78:13:bf: 2c:48:29:b7:21:07:8a:c4:d0:43:e5:49:21:f7:d0: 7d:33:0d:21:f6:7b:a8:15:0e:2f:5e:79:e9:be:1c: ea:df:4a:ca:49:f7:77:6b:89:df:bb:b6:47:9d:9c: 4a:50:aa:47:37:d6:14:30:20:ae:4f:c9:26:21:d0: f6:c7:f4:8a:41:96:6f:49:d4:46:5c:b2:a4:74:7e: 38:5a:42:73:3d:92:a8:8d:cd:50:2a:30:f4:89:01: 40:56:08:71:88:47:9f:63:83:83:c7:1b:3f:47:00: 77:b9:ee:22:13:6a:ab:c7:ff:7b:37:10:be:df:c2: 31:6e:ee:a3:88:ed:0a:10:71:af:32:ad:91:0e:e6: 0a:8c:29:7e:b6:b7:e4:68:f9:47:fe:84:c7:93:a8: af:fe:86:4b:8c:aa:aa:1c:a1:4d:13:42:c2:8d:a5: e0:a0:dd:5c:a9:aa:09:16:ec:13:7d:dd:8f:17:5b: cf:fb:70:4a:d1:db:34:25:20:6d:ce:e5:9e:ea:a1: 6e:ad:27:e9:16:ca:b8:b4:7a:d2:44:57:3f:8a:0c: b0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EE:92:0D:46:A6:67:08:3F:BC:A8:F3:CA:68:C9:93:6C:3E:70:A6 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4c:91:6f:d9:95:0d:f0:e8:dc:71:49:e7:d4:ea:34:ad:62: 96:9a:b9:58:3d:a4:8b:0b:1b:b6:ba:df:b4:44:61:ca:27:42: 7f:3f:5c:08:b9:bb:b8:5c:7f:1c:b9:12:21:41:dc:db:31:76: 68:63:73:ce:56:2e:19:38:82:43:9b:2c:71:52:42:dd:6e:0f: 36:cd:9e:34:8e:0d:2d:22:ce:eb:ae:e9:d6:a5:e8:35:b3:91: d9:7e:0c:70:df:08:bc:73:8f:ee:12:97:d6:18:4f:02:bd:02: 1a:f9:d2:ff:a9:d7:b5:fc:c6:d6:64:59:cc:51:e7:1e:72:6a: 6a:ee:cc:e4:c5:1a:98:15:f9:2e:42:e1:a5:66:82:ec:d7:ec: 5e:91:3f:f0:fd:5c:80:8f:f7:15:d5:57:50:e3:5b:53:97:54: e6:f0:71:c9:80:72:fd:80:f5:d3:c7:ee:9f:17:87:a4:14:3f: 7c:a7:d1:0e:c5:bf:ed:01:c2:a1:55:2c:e1:82:60:3a:6d:98: 3f:d4:bc:85:52:80:f8:2e:32:5b:7f:4f:37:63:80:78:b2:fe: 89:99:55:4a:3a:6b:6d:ac:19:41:85:cb:c9:1a:73:cb:b5:12: 51:a6:7c:e8:d8:69:e8:cb:48:fb:3f:15:37:06:aa:76:63:4c: 9a:86:60:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURErPMbc8zFPkRiHTQsdSeCH3axgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNjA0MTcwNjM2MDBaFw0yNjA0MjAxNDMyMDBaMDMxMTAvBgNV BAMTKDFBRUU5MjBENDZBNjY3MDgzRkJDQThGM0NBNjhDOTkzNkMzRTcwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eU2GvQnbnq9th8qoFfs/ll9t gTEny//eKbHEc44fxtNQgbJiV4UiRngTvyxIKbchB4rE0EPlSSH30H0zDSH2e6gV Di9eeem+HOrfSspJ93drid+7tkednEpQqkc31hQwIK5PySYh0PbH9IpBlm9J1EZc sqR0fjhaQnM9kqiNzVAqMPSJAUBWCHGIR59jg4PHGz9HAHe57iITaqvH/3s3EL7f wjFu7qOI7QoQca8yrZEO5gqMKX62t+Ro+Uf+hMeTqK/+hkuMqqocoU0TQsKNpeCg 3VypqgkW7BN93Y8XW8/7cErR2zQlIG3O5Z7qoW6tJ+kWyri0etJEVz+KDLB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGu6SDUamZwg/vKjzymjJk2w+cKYwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9MkW/ZlQ3w6NxxSefU6jStYpaauVg9pIsL G7a637REYconQn8/XAi5u7hcfxy5EiFB3Nsxdmhjc85WLhk4gkObLHFSQt1uDzbN njSODS0izuuu6dal6DWzkdl+DHDfCLxzj+4Sl9YYTwK9Ahr50v+p17X8xtZkWcxR 5x5yamruzOTFGpgV+S5C4aVmguzX7F6RP/D9XICP9xXVV1DjW1OXVObwccmAcv2A 9dPH7p8Xh6QUP3yn0Q7Fv+0BwqFVLOGCYDptmD/UvIVSgPguMlt/TzdjgHiy/omZ VUo6a22sGUGFy8kac8u1ElGmfOjYaejLSPs/FTcGqnZjTJqGYPg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:18 2026 by rpki-client