$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json) Hash identifier: kVy6nvk3J1JVKyFypL4mSbVTWTU88+WBzwsPxiGiAiU= Subject key identifier: 3A:8A:E4:99:E9:29:02:E1:88:81:BC:F4:C0:89:3E:23:62:B2:58:05 Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 76AC89BE2A197030B55B274CEA82E3E16EB28C40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft Manifest number: 04BA Signing time: Fri 17 Apr 2026 11:21:33 +0000 Manifest this update: Fri 17 Apr 2026 11:16:33 +0000 Manifest next update: Mon 20 Apr 2026 20:07:33 +0000 Files and hashes: 1: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: I+1VVYj6jtqkdnEHUu+yoBW+N9Gr17EVEw+bCbgU0gI=) 2: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: m2OZ4XMcLl0P7HlEaALJYW+kWpR85aBYZcawB+LS50Q=) 3: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: 7pHManaPZkFlhfeOFk5WWLbfjaz9rFOW48sliqyfNRA=) 4: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: BHu8Oney4nYR68hNXA+qQyiqMIdeR1zfZP3RLcek9kI=) 5: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: HwyLb5wrnXQ2TUn7JAl0tKf5RhJTtuv+1v09MJtniBE=) 6: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: Vb5cnFC6Wpj880gEVaQTtTKJLSX6B7dTQEwn1sKGOMQ=) 7: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: 2iQsY2shTRUgO13U5IiTRn4DaQNWjPojhHqwN4kzhnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ac:89:be:2a:19:70:30:b5:5b:27:4c:ea:82:e3:e1:6e:b2:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Apr 17 11:16:33 2026 GMT Not After : Apr 20 20:07:33 2026 GMT Subject: CN=3A8AE499E92902E18881BCF4C0893E2362B25805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:aa:b1:6f:7d:a0:43:53:5e:e9:be:e3:68: b8:c1:97:76:82:5a:2b:e5:f1:bb:f7:b7:3b:c5:61: b1:9a:6a:7e:dc:3c:70:7d:f4:69:4e:77:bb:5d:14: 32:26:bb:0f:18:ec:5f:5b:bb:e9:dd:c2:fa:2d:82: 2d:e5:05:9e:8c:d1:31:a2:31:55:a9:83:7e:78:f0: 89:f3:2c:a6:87:3d:30:a0:4b:51:93:24:92:f8:e5: 0b:67:a0:2b:05:63:c1:fa:1c:80:2c:f6:34:3b:ba: d6:51:5b:33:2f:92:19:e5:e7:a1:d5:4c:1a:06:47: 1e:33:99:3b:3a:9f:8c:b8:32:f5:65:3d:6e:93:df: 95:7b:78:c8:16:f7:a9:1c:d3:c4:f6:61:b0:8b:37: 45:cd:5b:94:60:f5:a0:6b:97:86:9b:59:31:39:7a: 1f:a2:b4:f4:3d:07:99:02:6a:26:d3:1e:f5:c0:b9: b2:aa:91:f3:1d:06:98:de:f6:c7:4e:bf:10:92:09: 0a:e3:16:f2:90:4c:87:6a:10:2c:16:ed:16:74:ea: b6:f5:30:fb:8c:bf:d6:91:12:a0:59:b6:54:d6:61: fa:c7:49:c8:42:95:8d:21:25:eb:a4:1c:46:7d:75: a1:b9:38:c3:52:bc:0a:9a:a2:64:67:03:a4:fb:38: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8A:E4:99:E9:29:02:E1:88:81:BC:F4:C0:89:3E:23:62:B2:58:05 X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5a:a3:0d:89:48:d0:5b:e6:dc:e2:1d:d8:64:40:63:52:20: f0:57:26:c8:35:71:59:b6:89:32:0c:3f:a9:34:6b:00:09:c3: a2:4f:92:ca:be:98:48:45:30:60:fa:61:75:1b:71:de:b0:76: 53:5a:75:31:88:f1:e2:bc:df:8b:7d:b0:5b:07:92:dc:59:ae: 30:bc:87:da:4f:8e:20:31:09:e8:7c:b7:cf:95:1b:2c:97:6c: 0b:64:fb:50:4b:0e:ac:0d:82:85:34:ab:52:a6:a6:d6:6b:0c: 26:1b:36:90:a3:54:f9:c6:ae:a0:ed:ae:7f:72:72:3c:63:80: a6:77:fa:50:ee:bb:7f:1e:6d:55:6b:4e:21:1b:42:60:e2:47: 91:7e:b3:2e:d5:bc:a7:a8:2a:9c:17:4f:02:69:4c:f3:b2:d4: 5c:40:77:f7:51:64:1e:30:c4:97:4d:38:43:34:32:fb:1b:25: af:0a:ab:9b:c7:ed:cd:e2:33:c9:43:a5:b9:b1:83:2c:82:95: 0d:ad:96:d6:7b:14:f8:7e:b1:3f:01:ee:ea:2c:73:ca:7a:e9: b5:b5:57:ea:a5:2a:20:eb:9a:70:93:54:5a:91:66:4f:dd:81: 2b:95:69:d8:9c:aa:dd:04:3c:a1:fd:68:63:72:8b:38:f3:bd: 55:43:48:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqyJvioZcDC1WydM6oLj4W6yjEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNjA0MTcxMTE2MzNaFw0yNjA0MjAyMDA3MzNaMDMxMTAvBgNV BAMTKDNBOEFFNDk5RTkyOTAyRTE4ODgxQkNGNEMwODkzRTIzNjJCMjU4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCht6qxb32gQ1Ne6b7jaLjBl3aC Wivl8bv3tzvFYbGaan7cPHB99GlOd7tdFDImuw8Y7F9bu+ndwvotgi3lBZ6M0TGi MVWpg3548InzLKaHPTCgS1GTJJL45QtnoCsFY8H6HIAs9jQ7utZRWzMvkhnl56HV TBoGRx4zmTs6n4y4MvVlPW6T35V7eMgW96kc08T2YbCLN0XNW5Rg9aBrl4abWTE5 eh+itPQ9B5kCaibTHvXAubKqkfMdBpje9sdOvxCSCQrjFvKQTIdqECwW7RZ06rb1 MPuMv9aREqBZtlTWYfrHSchClY0hJeukHEZ9daG5OMNSvAqaomRnA6T7OAjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOorkmekpAuGIgbz0wIk+I2KyWAUwHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JD REM1QjQ5OTlEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRaow2JSNBb5tziHdhkQGNSIPBXJsg1cVm2 iTIMP6k0awAJw6JPksq+mEhFMGD6YXUbcd6wdlNadTGI8eK834t9sFsHktxZrjC8 h9pPjiAxCeh8t8+VGyyXbAtk+1BLDqwNgoU0q1KmptZrDCYbNpCjVPnGrqDtrn9y cjxjgKZ3+lDuu38ebVVrTiEbQmDiR5F+sy7VvKeoKpwXTwJpTPOy1FxAd/dRZB4w xJdNOEM0MvsbJa8Kq5vH7c3iM8lDpbmxgyyClQ2tltZ7FPh+sT8B7uosc8p66bW1 V+qlKiDrmnCTVFqRZk/dgSuVadicqt0EPKH9aGNyizjzvVVDSI0= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:38 2026 by rpki-client