$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: yatZs/YKxczbi5UbfMczD7+bZnZnq8X+RqLEl+e7FsE= Subject key identifier: 68:F8:E8:6B:80:82:33:1D:53:7A:42:B8:0C:48:80:3F:D6:1D:27:97 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 0D8936FB366A55D4E44588C406D2FB1C45BA495E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 02A0 Signing time: Fri 17 Apr 2026 00:20:03 +0000 Manifest this update: Fri 17 Apr 2026 00:15:03 +0000 Manifest next update: Mon 20 Apr 2026 11:20:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=) 2: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: uOMuDOqb69QtMgAfa5ppGmWWx206kM/LHPcp5qU7jCE=) 3: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=) 4: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: G6q+ji3yFL/G+ROfvGqGZ4h9avpUHfcEbpzAoAOSho8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:89:36:fb:36:6a:55:d4:e4:45:88:c4:06:d2:fb:1c:45:ba:49:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Apr 17 00:15:03 2026 GMT Not After : Apr 20 11:20:03 2026 GMT Subject: CN=68F8E86B8082331D537A42B80C48803FD61D2797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:64:57:38:73:7a:1b:d1:c4:50:9b:71:be: c4:aa:10:af:3d:20:a5:86:98:bc:3d:7c:48:7b:cd: c2:23:6c:c3:11:ce:75:71:22:79:cc:82:63:88:06: 54:b5:2a:fa:3e:22:37:e0:f6:eb:2e:ec:2d:39:16: b8:5d:e5:f2:54:c9:da:06:6a:7e:44:b3:8e:d0:6b: ee:6f:69:23:be:df:ba:d9:f6:f7:2c:7e:5e:af:bf: 5b:f0:ed:e2:d0:b6:a7:ce:bd:89:9b:d6:88:ea:25: 76:da:95:53:01:6b:7e:ff:0a:62:9a:52:87:95:db: 27:94:fb:84:ce:de:42:0c:fa:97:41:51:2f:6d:6f: 4c:81:61:e0:45:1d:08:81:e6:1e:0a:fa:d5:12:f0: 26:00:c0:9d:5f:dd:9a:6c:e4:4c:56:67:4c:2e:17: 84:e4:d7:00:88:e9:e7:d7:1d:90:db:bb:62:1f:54: 39:c6:45:c8:0d:4d:c5:5f:e7:bf:92:45:91:98:d9: 23:b6:b0:b3:d7:65:fc:90:ae:ee:f9:6f:d8:bd:e7: d1:a1:15:04:c6:9e:be:a2:d4:f6:bb:fc:39:ce:0d: 8b:bc:95:dd:64:37:cd:91:fe:d9:0b:bd:2b:2b:bf: e5:ba:e1:cc:0a:0b:e1:3d:23:d6:21:b1:d4:32:8a: 25:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:E8:6B:80:82:33:1D:53:7A:42:B8:0C:48:80:3F:D6:1D:27:97 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:17:8a:77:3e:0b:78:dc:21:54:a4:ef:fb:3f:a8:50:b9:8c: 64:df:f6:0b:82:a9:79:cd:53:07:1d:8a:e6:b5:e9:cf:fe:b9: 0a:f3:5d:56:18:a9:14:e6:fa:56:b0:89:8a:6b:f4:aa:94:d4: 2e:30:1d:41:d1:46:9f:85:7d:d6:a3:4c:03:15:8c:52:6d:36: 4e:d6:58:7e:d4:f4:3d:ab:fc:ab:35:79:1e:4c:94:be:5d:0c: 10:1a:7f:a9:e4:9a:29:83:18:e5:25:10:41:10:2f:2d:04:d6: f9:8e:cf:4f:b6:22:e2:da:fd:81:68:54:c4:06:5d:e5:39:16: 39:91:4d:9a:da:c8:e9:95:df:97:b3:91:4a:00:f6:b8:c3:1b: fd:0b:9d:c8:24:2b:43:55:5a:6b:be:2d:13:48:73:d3:e3:c3: f1:b6:f1:1d:75:76:5f:f0:6f:b0:83:4a:32:77:bf:39:5d:0d: 97:65:cd:07:3d:24:f1:c6:a1:df:d9:4e:09:7d:01:0e:47:51: 11:26:1e:34:59:76:ee:44:d7:8d:4e:16:1a:83:27:71:21:bc: 27:4f:71:c4:61:cd:88:a3:36:8c:e2:13:0a:1b:a0:50:80:92: 1d:5d:ea:45:ff:fe:21:c2:a6:5c:be:09:30:c6:ae:33:a9:12: 5c:16:0e:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYk2+zZqVdTkRYjEBtL7HEW6SV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNjA0MTcwMDE1MDNaFw0yNjA0MjAxMTIwMDNaMDMxMTAvBgNV BAMTKDY4RjhFODZCODA4MjMzMUQ1MzdBNDJCODBDNDg4MDNGRDYxRDI3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5smRXOHN6G9HEUJtxvsSqEK89 IKWGmLw9fEh7zcIjbMMRznVxInnMgmOIBlS1Kvo+Ijfg9usu7C05Frhd5fJUydoG an5Es47Qa+5vaSO+37rZ9vcsfl6vv1vw7eLQtqfOvYmb1ojqJXbalVMBa37/CmKa UoeV2yeU+4TO3kIM+pdBUS9tb0yBYeBFHQiB5h4K+tUS8CYAwJ1f3Zps5ExWZ0wu F4Tk1wCI6efXHZDbu2IfVDnGRcgNTcVf57+SRZGY2SO2sLPXZfyQru75b9i959Gh FQTGnr6i1Pa7/DnODYu8ld1kN82R/tkLvSsrv+W64cwKC+E9I9YhsdQyiiUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPjoa4CCMx1TekK4DEiAP9YdJ5cwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwXinc+C3jcIVSk7/s/qFC5jGTf9guCqXnN Uwcdiua16c/+uQrzXVYYqRTm+lawiYpr9KqU1C4wHUHRRp+FfdajTAMVjFJtNk7W WH7U9D2r/Ks1eR5MlL5dDBAaf6nkmimDGOUlEEEQLy0E1vmOz0+2IuLa/YFoVMQG XeU5FjmRTZrayOmV35ezkUoA9rjDG/0LncgkK0NVWmu+LRNIc9Pjw/G28R11dl/w b7CDSjJ3vzldDZdlzQc9JPHGod/ZTgl9AQ5HUREmHjRZdu5E141OFhqDJ3EhvCdP ccRhzYijNoziEwoboFCAkh1d6kX//iHCply+CTDGrjOpElwWDkg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:53 2026 by rpki-client