$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: DubfdJnluLVloAfIGiei6x3e59EzdBace7CS3yenJPQ= Subject key identifier: 3E:D7:25:E8:1F:E4:73:B6:B6:C8:7D:A7:4D:71:C4:80:BB:C4:40:AD Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 281C7E8772C9BBC7DF14189A18C003420E821C40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 02AE Signing time: Thu 16 Apr 2026 07:11:05 +0000 Manifest this update: Thu 16 Apr 2026 07:06:05 +0000 Manifest next update: Sun 19 Apr 2026 10:53:05 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) 2: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) 3: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: BTMBU8hgFa8bb26hJtr0w5Xv8X5WqueWNIkLVKnxQIo=) 4: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1c:7e:87:72:c9:bb:c7:df:14:18:9a:18:c0:03:42:0e:82:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Apr 16 07:06:05 2026 GMT Not After : Apr 19 10:53:05 2026 GMT Subject: CN=3ED725E81FE473B6B6C87DA74D71C480BBC440AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:de:e9:8c:33:82:eb:06:11:5e:4a:d6:a8:b5: 86:ba:7e:61:68:6d:11:d5:21:f7:52:61:8b:65:52: 36:d8:d3:92:01:12:d4:1c:22:98:62:a7:64:94:04: 8e:db:05:5d:75:3d:c6:86:da:3c:1c:c0:76:a0:40: fc:23:ea:6f:76:ad:a9:93:4a:39:1a:b3:8e:e3:b0: d3:d5:ed:0b:2e:5b:37:e1:29:26:21:0f:02:e6:e3: e0:6e:40:1f:95:15:88:1a:0f:8a:40:bf:27:fe:4d: 62:ef:d0:22:96:40:f9:3d:37:e0:97:d3:50:71:f2: 90:31:a2:4b:30:9c:63:0d:4f:ec:3a:90:e4:c1:2d: 38:c4:07:9d:37:5c:4c:05:e8:cf:9d:2c:59:bc:f4: 0c:da:91:f9:3f:6d:4e:cd:32:c6:97:14:f3:32:14: 0f:46:19:52:78:4f:41:49:a6:ff:f6:59:bc:2a:f1: 92:a3:ab:46:15:19:68:91:50:95:3b:cf:bb:b3:a4: d3:ec:74:6b:f1:b4:e8:72:a2:90:b2:34:f8:cf:0d: 05:24:9a:7e:b2:bf:88:64:0f:32:a3:77:18:83:41: fd:7e:53:fb:9c:23:54:74:00:e9:4f:f3:97:a9:1c: b0:4c:0d:a1:6a:cd:36:cd:24:be:e1:61:34:83:dc: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:25:E8:1F:E4:73:B6:B6:C8:7D:A7:4D:71:C4:80:BB:C4:40:AD X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4a:7e:61:22:60:65:d1:48:8b:87:c8:20:4f:49:2b:6e:6c: 66:02:0c:1c:9e:f0:b3:b5:90:59:bc:19:ea:10:02:a8:29:2f: ef:75:12:e5:3a:9f:dc:04:6e:63:7a:d7:9f:d5:00:e3:8f:ef: 8b:9f:40:5c:e0:a1:33:ef:a4:c1:a5:0d:50:86:81:81:f3:4f: 3c:e5:8d:5c:af:4a:a3:3b:6d:5c:89:dc:83:ff:07:6b:b7:57: bf:23:6e:c7:45:a2:f3:69:22:61:8f:9b:17:b8:ec:83:9b:76: c8:26:fa:43:c5:59:f1:0a:d7:d5:1a:49:4c:dd:08:6b:2b:9f: 79:d5:7a:2c:b0:76:e6:68:c4:36:9f:36:e9:dc:43:2e:c8:92: 3f:0d:e9:16:c7:9e:0a:90:68:1a:97:38:53:28:4e:56:38:0d: 6e:87:1e:1c:98:3f:a0:1d:7f:d1:62:4d:23:23:39:ff:f3:f3: e0:d0:d4:ac:26:39:3f:1c:45:a8:02:3e:32:6b:49:52:b1:fe: 8f:b5:e1:46:dc:38:8d:ba:9b:a1:37:24:6f:2d:57:84:78:77: dd:32:0b:25:cf:13:d1:34:95:32:ef:bc:48:17:a1:5c:51:96: 59:db:ad:75:d8:33:66:d3:e9:a3:17:f4:c5:1d:01:fc:ae:5d: 85:db:b3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBx+h3LJu8ffFBiaGMADQg6CHEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNjA0MTYwNzA2MDVaFw0yNjA0MTkxMDUzMDVaMDMxMTAvBgNV BAMTKDNFRDcyNUU4MUZFNDczQjZCNkM4N0RBNzRENzFDNDgwQkJDNDQwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr3umMM4LrBhFeStaotYa6fmFo bRHVIfdSYYtlUjbY05IBEtQcIphip2SUBI7bBV11PcaG2jwcwHagQPwj6m92ramT Sjkas47jsNPV7QsuWzfhKSYhDwLm4+BuQB+VFYgaD4pAvyf+TWLv0CKWQPk9N+CX 01Bx8pAxokswnGMNT+w6kOTBLTjEB503XEwF6M+dLFm89Azakfk/bU7NMsaXFPMy FA9GGVJ4T0FJpv/2Wbwq8ZKjq0YVGWiRUJU7z7uzpNPsdGvxtOhyopCyNPjPDQUk mn6yv4hkDzKjdxiDQf1+U/ucI1R0AOlP85epHLBMDaFqzTbNJL7hYTSD3KGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPtcl6B/kc7a2yH2nTXHEgLvEQK0wHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9KfmEiYGXRSIuHyCBPSStubGYCDBye8LO1 kFm8GeoQAqgpL+91EuU6n9wEbmN615/VAOOP74ufQFzgoTPvpMGlDVCGgYHzTzzl jVyvSqM7bVyJ3IP/B2u3V78jbsdFovNpImGPmxe47IObdsgm+kPFWfEK19UaSUzd CGsrn3nVeiywduZoxDafNuncQy7Ikj8N6RbHngqQaBqXOFMoTlY4DW6HHhyYP6Ad f9FiTSMjOf/z8+DQ1KwmOT8cRagCPjJrSVKx/o+14UbcOI26m6E3JG8tV4R4d90y CyXPE9E0lTLvvEgXoVxRllnbrXXYM2bT6aMX9MUdAfyuXYXbs8w= -----END CERTIFICATE-----Generated at Fri Apr 17 17:33:30 2026 by rpki-client