$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: QvekFtG7EdnkvUDqCvfcJJqjBK8GyIym+XZgljIUvUw= Subject key identifier: CC:2E:38:0B:16:D3:3B:8E:36:98:E4:3A:E1:EC:75:ED:89:D7:0E:F2 Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 308DF1770653029A6807BB5F237F817CA38DC955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: DF Signing time: Thu 16 Apr 2026 02:52:36 +0000 Manifest this update: Thu 16 Apr 2026 02:47:36 +0000 Manifest next update: Sun 19 Apr 2026 06:21:36 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: 1mlIRC2QxCvya4kGBV11nqxO8jM+kTkXz5J9IEU8FjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8d:f1:77:06:53:02:9a:68:07:bb:5f:23:7f:81:7c:a3:8d:c9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Apr 16 02:47:36 2026 GMT Not After : Apr 19 06:21:36 2026 GMT Subject: CN=CC2E380B16D33B8E3698E43AE1EC75ED89D70EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5a:35:6d:1e:09:48:81:31:71:0a:82:27:d9: 20:d6:7d:ed:e5:24:f4:bf:45:2b:53:95:1d:f5:ed: c2:4f:98:8c:9d:f9:9f:d6:ac:2c:c1:97:03:0d:74: 8e:3a:10:ac:8c:ab:17:66:ec:5d:9a:0d:80:58:f7: 25:63:a2:e0:17:4f:13:b2:09:bb:10:e7:fa:b9:22: 7b:c7:7f:61:b7:0c:e2:04:64:5a:19:0f:ed:66:05: e8:eb:c0:cf:07:a9:ef:04:b3:87:b9:c6:1d:c6:22: 0f:2c:c3:ed:84:ae:61:71:d7:c5:e6:1f:29:d0:37: fd:83:a2:7e:f6:77:9f:a7:f6:44:96:33:de:42:4e: 2e:30:df:9c:19:39:ea:da:17:74:71:ee:2c:a7:c8: 33:e3:ce:29:d5:df:27:39:52:b4:4c:09:6f:42:93: 29:3b:07:c5:ff:ca:b7:c2:0d:69:02:d6:f1:b9:d7: 24:ec:2f:c5:43:af:75:95:c4:f1:99:00:d2:9b:b4: dd:39:d2:88:f9:67:4c:a3:cb:58:08:d2:26:24:7e: e3:75:72:8e:44:62:ef:d5:46:11:4f:09:9d:3c:02: d8:4c:9d:d5:27:ba:b5:79:8a:b3:4c:33:d5:4b:10: 96:2a:15:10:74:df:ee:73:4d:58:4b:34:e7:a3:4b: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2E:38:0B:16:D3:3B:8E:36:98:E4:3A:E1:EC:75:ED:89:D7:0E:F2 X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e1:a0:f5:c3:46:72:05:30:28:07:ca:35:21:90:2d:05:79: 87:74:34:48:c0:d6:ab:02:03:5b:af:16:9b:0a:88:c6:c3:e5: b0:e2:d0:d0:92:35:77:30:e9:94:17:d1:14:5b:97:27:5c:3d: 45:45:ef:b2:02:f7:27:b3:d4:b4:75:ba:56:7d:ab:66:f3:53: 9a:98:5c:ec:7b:dd:5c:02:f3:61:7e:8f:ea:f1:ad:e6:f5:29: 3f:7b:5e:bd:0d:01:25:bf:3b:69:4e:88:92:a5:48:9e:31:7e: d1:1b:6f:0a:44:7e:f5:06:30:36:b9:ee:c1:57:46:a6:d0:f3: b9:6f:85:bf:6e:f9:a9:cd:8d:08:39:b7:4a:3f:c4:a6:09:31: 38:38:a2:1f:47:84:4f:ee:b3:6c:c4:0b:42:d2:e3:ea:a8:61: 9d:74:aa:61:3f:fa:8d:fe:0a:41:f0:41:88:ec:44:9d:4e:fd: 3a:79:a5:c7:6d:1a:a3:2d:97:1c:7d:69:ec:de:63:57:c6:66: 2d:77:af:db:e0:0e:35:ea:82:1f:1a:99:9c:ce:b8:cc:aa:aa: 5a:fe:c8:7c:44:d0:2c:ae:7f:a7:8b:20:48:be:f6:16:dc:76: 50:f0:18:f5:65:69:16:5f:5f:00:9c:17:e9:0f:d5:c8:cd:54: ac:65:6c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMI3xdwZTAppoB7tfI3+BfKONyVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNjA0MTYwMjQ3MzZaFw0yNjA0MTkwNjIxMzZaMDMxMTAvBgNV BAMTKENDMkUzODBCMTZEMzNCOEUzNjk4RTQzQUUxRUM3NUVEODlENzBFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1WjVtHglIgTFxCoIn2SDWfe3l JPS/RStTlR317cJPmIyd+Z/WrCzBlwMNdI46EKyMqxdm7F2aDYBY9yVjouAXTxOy CbsQ5/q5InvHf2G3DOIEZFoZD+1mBejrwM8Hqe8Es4e5xh3GIg8sw+2ErmFx18Xm HynQN/2Don72d5+n9kSWM95CTi4w35wZOeraF3Rx7iynyDPjzinV3yc5UrRMCW9C kyk7B8X/yrfCDWkC1vG51yTsL8VDr3WVxPGZANKbtN050oj5Z0yjy1gI0iYkfuN1 co5EYu/VRhFPCZ08AthMndUnurV5irNMM9VLEJYqFRB03+5zTVhLNOejS6ZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzC44CxbTO442mOQ64ex17YnXDvIwHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKThoPXDRnIFMCgHyjUhkC0FeYd0NEjA1qsC A1uvFpsKiMbD5bDi0NCSNXcw6ZQX0RRblydcPUVF77IC9yez1LR1ulZ9q2bzU5qY XOx73VwC82F+j+rxreb1KT97Xr0NASW/O2lOiJKlSJ4xftEbbwpEfvUGMDa57sFX RqbQ87lvhb9u+anNjQg5t0o/xKYJMTg4oh9HhE/us2zEC0LS4+qoYZ10qmE/+o3+ CkHwQYjsRJ1O/Tp5pcdtGqMtlxx9aezeY1fGZi13r9vgDjXqgh8amZzOuMyqqlr+ yHxE0Cyuf6eLIEi+9hbcdlDwGPVlaRZfXwCcF+kP1cjNVKxlbOI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:29 2026 by rpki-client