$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: cG4O2lU7J9jcsU+3SzmqJex8gCJNRmXDW4XD2Fa0Pyk= Subject key identifier: 0C:33:40:D2:F4:80:22:8A:F7:5E:64:FC:A5:E4:32:AD:B9:4D:18:DF Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 0BD2C22A52469BEC1291630B65600F8A029F624B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: DF Signing time: Wed 15 Apr 2026 14:11:33 +0000 Manifest this update: Wed 15 Apr 2026 14:06:33 +0000 Manifest next update: Sat 18 Apr 2026 22:48:33 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: 5bXX3+hZavOkP/eS6R4TGUF78PyrxDa1LveCvOJ6CiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d2:c2:2a:52:46:9b:ec:12:91:63:0b:65:60:0f:8a:02:9f:62:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Apr 15 14:06:33 2026 GMT Not After : Apr 18 22:48:33 2026 GMT Subject: CN=0C3340D2F480228AF75E64FCA5E432ADB94D18DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:d3:6b:7d:17:cb:56:c6:62:ae:8f:e8:a5: 8d:1b:2e:97:18:c4:2c:d2:6d:65:3a:45:9f:21:0d: fb:6f:73:53:00:ce:f3:09:e0:03:ad:2b:58:cf:38: 33:a2:bb:fa:66:8c:84:df:6f:55:c4:4a:95:40:48: ee:20:fb:d9:53:40:0b:be:d7:99:41:8c:53:6d:25: e9:27:54:49:af:70:9a:0b:c3:ae:7f:9e:8b:cd:d8: 3c:38:ac:20:98:af:45:d5:c4:de:80:2c:1e:ec:fa: 5f:8c:86:83:c5:f6:b6:e9:b6:24:48:05:3b:e7:9e: e0:3c:4e:6f:a8:1d:59:78:3f:67:0f:50:dd:43:d2: 68:9b:24:fd:a6:62:36:7e:c2:cf:2b:42:78:bd:fe: 84:ce:ba:bb:e0:7c:ca:6b:f3:27:ac:d7:89:98:3e: b6:46:24:b8:8a:de:ca:ff:da:1b:67:0a:31:0f:23: 6c:72:0b:aa:9b:b8:82:0c:cf:29:8a:0a:6e:fb:00: 1b:9c:60:67:a7:19:04:e6:0c:c9:67:9a:84:34:e1: 9f:5f:e4:19:f5:ea:f7:01:c9:95:aa:75:35:36:0a: 2e:08:01:0e:69:92:42:28:fe:46:7f:3d:0f:18:95: b2:ff:e0:97:93:47:5b:b0:eb:9d:43:2d:c2:5b:fe: f9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:33:40:D2:F4:80:22:8A:F7:5E:64:FC:A5:E4:32:AD:B9:4D:18:DF X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:53:88:4a:3f:57:69:d7:c4:e4:30:72:95:f7:da:9e:d7:1a: ed:7a:af:f4:d6:0c:3d:07:ac:86:f7:65:27:b1:77:67:1f:5f: d6:c7:e2:9e:00:4e:68:27:fb:61:e6:09:8b:64:7b:76:42:c0: 5b:81:f1:2e:dc:b7:a1:ca:a7:fc:30:10:2c:90:74:a0:94:ba: 15:86:fd:df:b9:09:67:71:55:0e:be:45:c6:09:5f:89:d6:14: 5a:52:42:5b:75:c7:99:d8:b2:b9:93:d7:60:d9:d1:7f:dd:e6: e7:50:a6:c4:de:54:bd:99:f5:92:53:e2:a4:1d:aa:f1:88:50: 07:79:aa:f3:c6:3d:f6:31:89:03:52:f7:84:81:1a:21:b3:bf: c5:9f:b6:2a:9d:dd:f0:03:4e:2e:4a:12:d6:a1:b8:7b:8c:98: 6f:85:cf:1c:52:3c:2f:31:3f:9a:6c:e9:5a:b9:af:93:bc:c7: e1:e1:32:f1:64:03:ba:e0:b2:f4:bb:86:62:7a:34:78:d7:ab: 7c:de:3e:19:27:0e:da:51:c5:3f:17:ea:80:6c:2a:dc:bd:10: 3a:86:a2:82:4f:13:a5:1a:c0:d8:d1:3a:06:35:d1:0b:de:99: 91:02:66:d3:c9:c0:18:99:e9:e5:bf:e3:2a:b1:ec:b3:b2:2d: c2:39:65:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9LCKlJGm+wSkWMLZWAPigKfYkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNjA0MTUxNDA2MzNaFw0yNjA0MTgyMjQ4MzNaMDMxMTAvBgNV BAMTKDBDMzM0MEQyRjQ4MDIyOEFGNzVFNjRGQ0E1RTQzMkFEQjk0RDE4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSydNrfRfLVsZiro/opY0bLpcY xCzSbWU6RZ8hDftvc1MAzvMJ4AOtK1jPODOiu/pmjITfb1XESpVASO4g+9lTQAu+ 15lBjFNtJeknVEmvcJoLw65/novN2Dw4rCCYr0XVxN6ALB7s+l+MhoPF9rbptiRI BTvnnuA8Tm+oHVl4P2cPUN1D0mibJP2mYjZ+ws8rQni9/oTOurvgfMpr8yes14mY PrZGJLiK3sr/2htnCjEPI2xyC6qbuIIMzymKCm77ABucYGenGQTmDMlnmoQ04Z9f 5Bn16vcByZWqdTU2Ci4IAQ5pkkIo/kZ/PQ8YlbL/4JeTR1uw651DLcJb/vm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDNA0vSAIor3XmT8peQyrblNGN8wHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdTiEo/V2nXxOQwcpX32p7XGu16r/TWDD0H rIb3ZSexd2cfX9bH4p4ATmgn+2HmCYtke3ZCwFuB8S7ct6HKp/wwECyQdKCUuhWG /d+5CWdxVQ6+RcYJX4nWFFpSQlt1x5nYsrmT12DZ0X/d5udQpsTeVL2Z9ZJT4qQd qvGIUAd5qvPGPfYxiQNS94SBGiGzv8Wftiqd3fADTi5KEtahuHuMmG+FzxxSPC8x P5ps6Vq5r5O8x+HhMvFkA7rgsvS7hmJ6NHjXq3zePhknDtpRxT8X6oBsKty9EDqG ooJPE6UawNjROgY10QvemZECZtPJwBiZ6eW/4yqx7LOyLcI5ZVM= -----END CERTIFICATE-----Generated at Fri Apr 17 19:24:52 2026 by rpki-client