$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: v8SpS+j2vN66+diMVKlNOSm/U/zvgmFKRFbemKPQ5y4= Subject key identifier: 01:0A:D7:20:45:37:8F:85:4D:C4:B8:89:6B:5F:BB:82:42:01:DA:EA Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 7D869B203A1350E566AB6486A1DD3E423DFF2388 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: 013E Signing time: Fri 17 Apr 2026 16:32:29 +0000 Manifest this update: Fri 17 Apr 2026 16:27:29 +0000 Manifest next update: Mon 20 Apr 2026 18:18:29 +0000 Files and hashes: 1: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: UZ/T+qhFf1RvH88bPm2aXI+NaSWElHaEZGIEXWJekwA=) 2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: vcGZX4iuBt1A6+2sE99JWAst4OX3Kku9u32aVhGx/Cw=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: bQWsJUVOFWO1OALxa+/tLK32/KVg6IEzubWKGYNkAVw=) 4: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: /IqnhWNrPsgnuT8v2xs7EC269ADw6nH5t0+DgUzbkxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:86:9b:20:3a:13:50:e5:66:ab:64:86:a1:dd:3e:42:3d:ff:23:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Apr 17 16:27:29 2026 GMT Not After : Apr 20 18:18:29 2026 GMT Subject: CN=010AD72045378F854DC4B8896B5FBB824201DAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:1a:fc:fa:7a:ce:df:2a:0e:a0:ca:7a:42: 52:2f:59:ff:97:49:85:85:af:be:c4:7b:6f:2c:44: b5:12:e2:4d:06:8d:05:01:75:4b:42:d9:2d:58:e6: 7b:f4:09:8c:3b:b6:71:2f:fe:27:5a:6e:df:92:f8: 31:5b:30:43:21:5f:fb:57:f8:5f:1c:9b:29:b4:c6: 39:41:45:a6:3c:f6:bf:1b:1b:1f:cd:ab:c1:a2:0b: 1f:7f:0f:6e:2e:b6:bd:da:6c:d6:1e:eb:2c:bf:b9: 3d:f5:9a:46:6a:d6:ca:af:87:da:50:f7:cc:b9:8d: 49:b9:aa:ba:3a:9b:57:b0:75:09:1b:9a:0f:1e:c6: 28:fd:6e:ac:28:b3:c8:93:f4:96:1f:49:fd:7b:63: e6:c2:7b:48:b3:e2:a8:c7:27:34:c9:c3:a2:3f:e9: 19:f0:a8:04:d3:25:e2:94:58:4e:b4:aa:1a:1c:c7: 15:2a:31:df:0c:df:16:49:a6:cd:af:73:69:9e:55: 21:09:32:04:32:e6:0f:9b:4d:22:70:6e:ff:1a:e2: ba:10:05:33:3e:aa:99:21:5e:b9:cf:61:84:15:17: 38:3d:3e:78:39:2b:95:02:86:55:f7:f8:79:6c:d4: 7d:22:60:3e:ca:c2:20:59:0a:a6:66:01:29:44:b3: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:D7:20:45:37:8F:85:4D:C4:B8:89:6B:5F:BB:82:42:01:DA:EA X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:59:29:b5:aa:8a:e3:4e:fe:eb:a1:e5:f5:35:9c:66:82:b5: ab:0b:37:70:43:85:91:f1:c3:c0:96:12:51:be:fe:ec:c7:38: 99:64:7d:61:95:15:e1:03:d1:a6:7b:ac:b2:b0:c2:cc:32:68: 69:db:59:6e:ab:b8:da:15:9e:92:bd:31:4e:dd:72:d0:c8:dc: d6:b1:f9:cd:d9:00:ef:1c:06:df:f5:4e:af:11:8b:9d:e2:5e: b1:f9:7c:c8:41:7d:5d:69:da:68:b8:55:c8:7f:4a:61:0d:54: c6:a9:28:f6:c9:4a:e1:22:9a:c0:df:91:3d:aa:66:8d:a7:a1: 66:d4:0f:36:8c:be:0d:80:03:70:f5:ec:b9:b8:c3:7c:aa:0c: be:89:36:41:bb:50:e4:55:e5:8a:8f:eb:98:9a:82:63:d7:74: 3d:ce:bd:99:66:e2:f1:0d:fe:24:7d:3d:83:d5:d4:68:d3:4f: 9c:5b:15:b8:e4:97:f4:6c:6f:8a:49:2f:c8:7a:a8:77:7e:4c: aa:50:cc:89:44:b2:f7:e9:7b:82:3e:69:9e:35:07:31:5d:e7: 18:e1:38:2a:c4:cd:ae:1a:f1:5e:d2:0c:df:6c:ed:8d:b3:a2: 8b:0b:ae:a5:a5:73:c9:19:b4:c1:65:0e:aa:0a:7d:37:2a:df: d8:ab:69:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYabIDoTUOVmq2SGod0+Qj3/I4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNjA0MTcxNjI3MjlaFw0yNjA0MjAxODE4MjlaMDMxMTAvBgNV BAMTKDAxMEFENzIwNDUzNzhGODU0REM0Qjg4OTZCNUZCQjgyNDIwMURBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9Br8+nrO3yoOoMp6QlIvWf+X SYWFr77Ee28sRLUS4k0GjQUBdUtC2S1Y5nv0CYw7tnEv/idabt+S+DFbMEMhX/tX +F8cmym0xjlBRaY89r8bGx/Nq8GiCx9/D24utr3abNYe6yy/uT31mkZq1sqvh9pQ 98y5jUm5qro6m1ewdQkbmg8exij9bqwos8iT9JYfSf17Y+bCe0iz4qjHJzTJw6I/ 6RnwqATTJeKUWE60qhocxxUqMd8M3xZJps2vc2meVSEJMgQy5g+bTSJwbv8a4roQ BTM+qpkhXrnPYYQVFzg9Png5K5UChlX3+Hls1H0iYD7KwiBZCqZmASlEs1cXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQrXIEU3j4VNxLiJa1+7gkIB2uowHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJZKbWqiuNO/uuh5fU1nGaCtasLN3BDhZHx w8CWElG+/uzHOJlkfWGVFeED0aZ7rLKwwswyaGnbWW6ruNoVnpK9MU7dctDI3Nax +c3ZAO8cBt/1Tq8Ri53iXrH5fMhBfV1p2mi4Vch/SmENVMapKPbJSuEimsDfkT2q Zo2noWbUDzaMvg2AA3D17Lm4w3yqDL6JNkG7UORV5YqP65iagmPXdD3OvZlm4vEN /iR9PYPV1GjTT5xbFbjkl/Rsb4pJL8h6qHd+TKpQzIlEsvfpe4I+aZ41BzFd5xjh OCrEza4a8V7SDN9s7Y2zoosLrqWlc8kZtMFlDqoKfTcq39iraQI= -----END CERTIFICATE-----Generated at Sun Apr 19 13:42:56 2026 by rpki-client