$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: Unjo+gtZWTTcoawHwlBeFITYE+dgT4DZWuoWs6X/zkQ= Subject key identifier: 67:5E:69:17:7D:7A:E3:86:C3:3A:70:1D:CD:29:F5:78:6E:7B:67:73 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 6065EDA282EBE4A9EFDD0217EB4932CDD9306491 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 01EF Signing time: Sun 19 Apr 2026 07:11:47 +0000 Manifest this update: Sun 19 Apr 2026 07:06:47 +0000 Manifest next update: Wed 22 Apr 2026 13:14:47 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: U78EL143ssHBBOHy9C7VFAuQDRO9Ws1M6P57IlizaIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:65:ed:a2:82:eb:e4:a9:ef:dd:02:17:eb:49:32:cd:d9:30:64:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Apr 19 07:06:47 2026 GMT Not After : Apr 22 13:14:47 2026 GMT Subject: CN=675E69177D7AE386C33A701DCD29F5786E7B6773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:7b:15:bf:aa:ed:15:c4:79:bb:eb:c5:d5: 78:71:2b:a6:73:7a:ff:9f:6c:ae:da:8a:23:c6:c9: ab:44:0d:67:d5:02:e7:05:7e:bc:ba:6d:82:84:c2: 45:c7:35:31:e4:fe:5d:58:63:2d:ec:9e:33:89:a3: b8:b4:45:2c:39:31:2a:9f:23:e4:86:20:8c:66:38: b7:c6:eb:8e:a0:40:1f:19:f8:c0:47:85:d4:03:02: 52:b0:e0:84:45:6d:1a:67:42:c5:c9:69:0c:a5:e9: bd:62:a6:fc:39:66:53:74:d2:a6:02:eb:69:52:a3: 37:c8:c6:2b:d2:0a:17:22:55:7a:b4:45:78:62:e3: f8:f1:a0:4c:d8:6b:d6:a2:5b:11:0d:2f:ab:77:5a: b0:e3:6c:b9:f4:85:74:ef:d5:c4:fb:d6:61:c6:e3: 4d:95:4d:0e:f3:3f:e1:a7:71:10:9e:a2:8c:5a:85: 71:62:8d:3b:e6:e3:b3:ec:e7:d4:e2:1d:70:6c:c0: 0d:3c:bf:8f:0d:05:30:dc:54:75:54:4a:97:a2:70: 03:b2:ab:f1:74:23:66:74:bd:b0:89:84:1b:69:df: 13:71:41:93:9f:cf:f2:99:fc:4d:6c:fa:f6:52:b2: ec:f8:c2:fe:4e:3b:78:f8:fd:80:d6:d7:a3:dd:51: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:69:17:7D:7A:E3:86:C3:3A:70:1D:CD:29:F5:78:6E:7B:67:73 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:17:8c:a3:eb:5d:b9:88:6d:5a:31:80:df:e4:b3:c8:40:b3: 33:13:a0:ad:87:24:91:05:fe:cf:a8:e0:d2:f5:b6:de:0c:79: 0a:d2:11:22:4a:9e:76:ad:86:7f:93:dd:1a:f7:9c:98:54:d7: f8:80:be:d2:04:f6:dc:60:bd:ef:59:16:15:d9:c6:58:d9:b3: df:61:4e:7f:69:5c:98:b0:d5:24:ff:00:5f:ef:a0:ef:29:23: 30:02:9f:9a:e4:53:62:1d:3d:24:ae:23:73:52:f0:9f:48:8b: 0a:f3:32:27:0f:61:d7:3c:83:9e:6d:a7:64:13:3e:8f:12:a2: 1a:42:ce:d2:e1:8b:29:54:8f:88:72:3d:31:4e:03:04:0b:e6: d7:7a:7b:65:c1:95:d6:0e:71:ac:a6:6d:0d:2a:a5:dc:b5:7e: b7:21:e3:10:f3:d1:d1:ee:43:b5:f2:11:10:62:e6:1d:7d:8c: c8:a6:0b:f5:3e:7c:bd:7d:d8:25:c9:af:17:1a:58:8e:4c:f5: 0b:7b:70:43:02:46:26:4e:9f:ed:9a:2d:b0:c1:98:44:e0:0b: 26:e1:cc:27:ba:20:74:c6:46:36:bd:45:5e:7e:50:78:09:ab: ea:a2:f5:ec:49:d0:d3:6c:b3:d0:d1:fa:94:f3:04:84:b5:1d: 5a:08:90:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGXtooLr5Knv3QIX60kyzdkwZJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNjA0MTkwNzA2NDdaFw0yNjA0MjIxMzE0NDdaMDMxMTAvBgNV BAMTKDY3NUU2OTE3N0Q3QUUzODZDMzNBNzAxRENEMjlGNTc4NkU3QjY3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhHsVv6rtFcR5u+vF1XhxK6Zz ev+fbK7aiiPGyatEDWfVAucFfry6bYKEwkXHNTHk/l1YYy3snjOJo7i0RSw5MSqf I+SGIIxmOLfG646gQB8Z+MBHhdQDAlKw4IRFbRpnQsXJaQyl6b1ipvw5ZlN00qYC 62lSozfIxivSChciVXq0RXhi4/jxoEzYa9aiWxENL6t3WrDjbLn0hXTv1cT71mHG 402VTQ7zP+GncRCeooxahXFijTvm47Ps59TiHXBswA08v48NBTDcVHVUSpeicAOy q/F0I2Z0vbCJhBtp3xNxQZOfz/KZ/E1s+vZSsuz4wv5OO3j4/YDW16PdUdtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ15pF31644bDOnAdzSn1eG57Z3MwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcXjKPrXbmIbVoxgN/ks8hAszMToK2HJJEF /s+o4NL1tt4MeQrSESJKnnathn+T3Rr3nJhU1/iAvtIE9txgve9ZFhXZxljZs99h Tn9pXJiw1ST/AF/voO8pIzACn5rkU2IdPSSuI3NS8J9IiwrzMicPYdc8g55tp2QT Po8SohpCztLhiylUj4hyPTFOAwQL5td6e2XBldYOcaymbQ0qpdy1frch4xDz0dHu Q7XyERBi5h19jMimC/U+fL192CXJrxcaWI5M9Qt7cEMCRiZOn+2aLbDBmETgCybh zCe6IHTGRja9RV5+UHgJq+qi9exJ0NNss9DR+pTzBIS1HVoIkKQ= -----END CERTIFICATE-----Generated at Sun Apr 19 11:00:08 2026 by rpki-client