$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: RvVIsGiOkJ/6nFF09YQeax6DYFt7zUfz3+R5uPgyTWs= Subject key identifier: CF:53:B7:D5:69:AC:28:F7:8E:FF:AD:94:43:07:8E:31:E8:58:24:A2 Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 511FCE2C87BD541A68A712BE7A213305E0A5B23A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: 0189 Signing time: Fri 17 Apr 2026 15:22:38 +0000 Manifest this update: Fri 17 Apr 2026 15:17:38 +0000 Manifest next update: Mon 20 Apr 2026 21:21:38 +0000 Files and hashes: 1: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=) 2: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: 04qpb/Hnr/HCcagNyGS5almvYItAzw/aU+X0bPp7nSE=) 3: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1f:ce:2c:87:bd:54:1a:68:a7:12:be:7a:21:33:05:e0:a5:b2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Apr 17 15:17:38 2026 GMT Not After : Apr 20 21:21:38 2026 GMT Subject: CN=CF53B7D569AC28F78EFFAD9443078E31E85824A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:55:6c:67:da:ef:f6:36:20:36:fb:f5:04:b1: 54:51:9b:54:1d:fc:9a:55:87:ee:6f:2c:d8:e2:26: 13:14:f3:5f:b4:b9:5a:ab:03:20:c8:3e:ce:07:42: ac:8e:19:26:d4:f0:8f:47:c1:e9:d0:17:42:fe:2b: 05:49:ca:68:19:a3:f7:09:d7:67:1b:b3:92:a6:17: 47:2b:bf:05:25:a7:5c:be:63:3b:a8:77:9b:3b:d3: 10:b0:6c:81:b2:5d:7b:2e:f9:8a:1f:26:2a:da:4a: 12:87:db:66:6e:88:46:31:d9:a5:7f:3d:dd:42:0d: d8:71:ab:34:30:34:f3:3d:1d:83:ba:24:a0:29:47: 05:b9:68:1b:38:43:38:9f:79:f1:69:b6:48:97:a8: 7e:d8:58:81:f0:33:95:fb:a9:0d:b4:e8:db:47:a4: dd:55:c0:fe:d4:b3:a3:e1:3b:b6:21:f1:c7:3c:14: 15:05:c3:05:e9:69:26:38:48:84:2a:82:12:3a:86: f3:e6:8e:f7:56:36:f6:ec:d4:93:f9:23:f2:99:11: 82:a8:44:82:b1:a4:1a:ec:b9:e3:3a:b3:8d:a0:5e: 58:eb:52:6e:09:ab:65:f9:4f:d0:08:96:9a:a3:ee: a0:00:88:bd:61:55:6c:9c:40:95:6b:f9:67:b0:2b: ec:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:B7:D5:69:AC:28:F7:8E:FF:AD:94:43:07:8E:31:E8:58:24:A2 X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:77:fc:e9:81:2d:89:d7:25:f4:f4:56:c2:2d:06:ca:64: a9:a6:92:72:cd:8f:46:81:14:c6:1b:22:c2:5c:d2:23:9c:26: 62:50:4f:4a:36:95:92:71:0a:43:5a:a7:63:71:2a:0e:f3:a2: 15:d2:ac:74:76:85:a6:d7:69:1b:60:c8:29:e1:db:ec:0e:23: 48:28:9f:c5:98:4f:0d:07:fd:9a:62:e6:68:d1:d6:66:83:a7: f6:db:aa:5b:2e:0f:0b:8b:fc:f1:95:d3:56:8c:bd:9c:44:b6: 9e:00:04:63:3c:f6:87:fc:ba:27:51:cd:83:62:26:64:75:15: 6f:78:d1:ec:fc:89:c9:ea:04:09:c2:06:7d:95:52:58:b4:21: d7:03:ce:0c:fe:29:58:79:9a:a5:73:cc:52:27:bf:b4:f2:65: b5:d7:80:69:e4:0f:d0:eb:d4:69:a2:cc:7b:54:b0:61:57:50: 07:de:80:8b:66:77:4d:f0:57:da:ca:3e:8e:c7:42:39:79:46: ca:80:74:d1:19:60:0f:98:32:41:77:fc:4e:d6:46:e1:2a:94: 0b:92:74:f2:ea:2c:cb:66:fc:22:4f:24:cf:97:93:4e:49:0c: 8f:f2:95:5d:dd:b1:01:04:4c:68:ae:1b:df:92:85:c5:68:8e: 86:0d:70:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUR/OLIe9VBpopxK+eiEzBeClsjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNjA0MTcxNTE3MzhaFw0yNjA0MjAyMTIxMzhaMDMxMTAvBgNV BAMTKENGNTNCN0Q1NjlBQzI4Rjc4RUZGQUQ5NDQzMDc4RTMxRTg1ODI0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfVWxn2u/2NiA2+/UEsVRRm1Qd /JpVh+5vLNjiJhMU81+0uVqrAyDIPs4HQqyOGSbU8I9HwenQF0L+KwVJymgZo/cJ 12cbs5KmF0crvwUlp1y+Yzuod5s70xCwbIGyXXsu+YofJiraShKH22ZuiEYx2aV/ Pd1CDdhxqzQwNPM9HYO6JKApRwW5aBs4QzifefFptkiXqH7YWIHwM5X7qQ206NtH pN1VwP7Us6PhO7Yh8cc8FBUFwwXpaSY4SIQqghI6hvPmjvdWNvbs1JP5I/KZEYKo RIKxpBrsueM6s42gXljrUm4Jq2X5T9AIlpqj7qAAiL1hVWycQJVr+WewK+zTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz1O31WmsKPeO/62UQweOMehYJKIwHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2+d/zpgS2J1yX09FbCLQbKZKmmknLNj0aB FMYbIsJc0iOcJmJQT0o2lZJxCkNap2NxKg7zohXSrHR2habXaRtgyCnh2+wOI0go n8WYTw0H/Zpi5mjR1maDp/bbqlsuDwuL/PGV01aMvZxEtp4ABGM89of8uidRzYNi JmR1FW940ez8icnqBAnCBn2VUli0IdcDzgz+KVh5mqVzzFInv7TyZbXXgGnkD9Dr 1GmizHtUsGFXUAfegItmd03wV9rKPo7HQjl5RsqAdNEZYA+YMkF3/E7WRuEqlAuS dPLqLMtm/CJPJM+Xk05JDI/ylV3dsQEETGiuG9+ShcVojoYNcGQ= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:54 2026 by rpki-client