$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: j5oswF1RCjuW+qcCHcupsBmc1XM1/abYtCzCSUGMMCo= Subject key identifier: 05:19:EE:65:EF:C2:9E:AF:4C:B2:8E:86:10:E4:91:FA:E2:5C:96:97 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 06B599150D285D057750C72742B3BD37B5D5AC44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: EE Signing time: Fri 17 Apr 2026 14:51:51 +0000 Manifest this update: Fri 17 Apr 2026 14:46:51 +0000 Manifest next update: Mon 20 Apr 2026 20:29:51 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=) 2: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=) 3: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: bGQ3XcvQ7U/cZRb9SyfTwF9hj10qEuRZQrSqzx/2DTo=) 4: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=) 5: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=) 6: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=) 7: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=) 8: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b5:99:15:0d:28:5d:05:77:50:c7:27:42:b3:bd:37:b5:d5:ac:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Apr 17 14:46:51 2026 GMT Not After : Apr 20 20:29:51 2026 GMT Subject: CN=0519EE65EFC29EAF4CB28E8610E491FAE25C9697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:a5:8d:1f:43:af:11:7e:57:1c:5e:47:51: 18:d2:ae:06:55:cc:e5:33:de:12:cf:64:7c:e7:b3: 99:e9:17:53:79:a0:ea:43:80:62:f9:50:83:39:c1: 3c:7f:64:85:e1:17:f4:d8:62:fd:22:2d:ed:32:a3: 3f:05:22:fa:e6:66:67:e9:c6:60:37:ae:40:ab:b5: 8e:48:10:50:de:9a:9e:4b:73:21:91:95:be:76:cd: 19:cb:e7:fc:a5:61:6a:ea:be:a2:46:b6:7f:92:58: 34:67:88:d1:de:8c:53:f9:01:c0:10:d3:5c:ba:d2: 5d:a9:20:17:fb:58:53:65:12:d5:54:af:34:a1:c9: c6:c8:07:19:27:95:b1:83:b5:67:fe:8e:99:d3:7b: 18:57:e8:91:18:57:6d:19:68:35:8b:e0:b3:db:8d: 69:f6:33:b4:c9:13:0e:b2:95:3d:aa:86:b6:a7:1f: cd:f9:99:c6:d0:9d:ee:30:be:12:08:7b:60:5e:11: 4f:b3:91:60:00:a7:7a:4b:b7:5e:0f:5e:57:08:60: 70:bd:15:9c:8d:db:2f:a0:a6:d2:74:e1:a8:17:26: fa:6b:40:59:25:21:49:37:55:3a:c9:25:10:d8:d6: 23:71:ed:f0:35:ef:69:21:4b:5c:35:06:cd:a3:29: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:19:EE:65:EF:C2:9E:AF:4C:B2:8E:86:10:E4:91:FA:E2:5C:96:97 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c0:b0:ae:47:2d:9f:19:11:d1:a8:75:5b:cf:34:c8:6a:79: f1:1a:07:c5:70:bb:39:98:b5:a3:93:85:fa:75:1b:ca:e0:d6: f7:27:89:28:80:b9:18:00:cd:3a:2e:8c:29:25:55:7a:1a:f2: 04:85:23:1d:63:46:65:cd:e4:eb:70:5d:31:90:ed:8b:ff:d4: da:55:57:1f:da:02:58:97:84:83:e5:8e:57:ae:ba:ad:f9:cb: 31:86:c2:1c:a2:9b:5f:e9:e8:55:85:3b:48:10:42:63:cd:5e: a3:87:b8:99:6b:75:73:c4:2c:72:39:2b:43:b9:c0:37:39:b1: f2:b3:a9:da:2f:cd:2b:cb:60:e3:6c:f0:16:82:9d:40:88:53: 2d:d6:9c:a1:1c:54:a6:be:22:3d:b2:cf:93:84:ee:89:47:a8: 7d:89:10:18:b2:10:e6:e5:5b:7b:37:56:b3:13:09:7e:80:20: 3a:63:28:42:06:82:1c:eb:b8:93:41:1f:72:44:00:a2:d8:01: 19:19:53:11:84:7b:80:25:a5:7f:fc:0d:33:64:e5:3d:f3:79: 0a:c6:64:2c:d1:0e:63:bc:c7:64:d7:de:87:f4:0a:de:da:74: 48:97:e7:02:f0:46:fd:54:7d:f2:e9:34:41:74:50:e9:01:74: 4f:e9:97:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrWZFQ0oXQV3UMcnQrO9N7XVrEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNjA0MTcxNDQ2NTFaFw0yNjA0MjAyMDI5NTFaMDMxMTAvBgNV BAMTKDA1MTlFRTY1RUZDMjlFQUY0Q0IyOEU4NjEwRTQ5MUZBRTI1Qzk2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFaWNH0OvEX5XHF5HURjSrgZV zOUz3hLPZHzns5npF1N5oOpDgGL5UIM5wTx/ZIXhF/TYYv0iLe0yoz8FIvrmZmfp xmA3rkCrtY5IEFDemp5LcyGRlb52zRnL5/ylYWrqvqJGtn+SWDRniNHejFP5AcAQ 01y60l2pIBf7WFNlEtVUrzShycbIBxknlbGDtWf+jpnTexhX6JEYV20ZaDWL4LPb jWn2M7TJEw6ylT2qhranH835mcbQne4wvhIIe2BeEU+zkWAAp3pLt14PXlcIYHC9 FZyN2y+gptJ04agXJvprQFklIUk3VTrJJRDY1iNx7fA172khS1w1Bs2jKefNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRnuZe/Cnq9Mso6GEOSR+uJclpcwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfAsK5HLZ8ZEdGodVvPNMhqefEaB8VwuzmY taOThfp1G8rg1vcniSiAuRgAzToujCklVXoa8gSFIx1jRmXN5OtwXTGQ7Yv/1NpV Vx/aAliXhIPljleuuq35yzGGwhyim1/p6FWFO0gQQmPNXqOHuJlrdXPELHI5K0O5 wDc5sfKzqdovzSvLYONs8BaCnUCIUy3WnKEcVKa+Ij2yz5OE7olHqH2JEBiyEObl W3s3VrMTCX6AIDpjKEIGghzruJNBH3JEAKLYARkZUxGEe4AlpX/8DTNk5T3zeQrG ZCzRDmO8x2TX3of0Ct7adEiX5wLwRv1UffLpNEF0UOkBdE/plzU= -----END CERTIFICATE-----Generated at Sat Apr 18 10:10:13 2026 by rpki-client