$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: YPA+VKyX3RgIHngn3xY+8vZK7SByHBViiDjY/py9EoA= Subject key identifier: A4:0C:61:D2:32:82:EC:05:78:8D:DF:60:C9:AC:15:2B:38:E7:DA:2E Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 3ABA7E1E74E1AA6C776BA34134348F1CF0275216 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 021B Signing time: Fri 17 Apr 2026 12:22:27 +0000 Manifest this update: Fri 17 Apr 2026 12:17:27 +0000 Manifest next update: Mon 20 Apr 2026 20:58:27 +0000 Files and hashes: 1: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: IbLWzBm08AS4RfKW9sTYAdOcxbZNJ6mrAM/VuC4qUdw=) 2: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: ctXrdXqwvbkfjiB/K6/2Vah4OSabN6bXpy1/ZkX3N6w=) 3: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Z9x86L9cvYXdwPWT7FHQP4GKwyxq3AVT2OalSxbymqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ba:7e:1e:74:e1:aa:6c:77:6b:a3:41:34:34:8f:1c:f0:27:52:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Apr 17 12:17:27 2026 GMT Not After : Apr 20 20:58:27 2026 GMT Subject: CN=A40C61D23282EC05788DDF60C9AC152B38E7DA2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:6b:27:cf:51:56:8f:e9:74:dd:95:39:8a: a1:c2:73:95:38:f3:1a:ef:5a:a8:0a:31:95:10:93: ac:c4:42:b7:3b:35:b6:c4:e4:43:dd:07:cd:8e:17: 9b:64:f8:c4:73:c4:10:a9:ee:8a:87:08:69:d4:7f: 1f:02:fc:23:94:f2:c7:d9:b7:0b:0c:50:ed:50:d1: 1c:e9:45:0c:bb:3d:64:9a:0c:ae:20:70:e7:c4:80: ca:0d:93:1e:96:08:0c:4e:f9:2b:9f:fc:c1:87:8e: 3f:e0:50:85:42:99:a0:5d:f1:0e:7d:a2:10:3c:d6: 64:44:55:4c:80:3f:28:37:a9:bc:dd:c1:69:1d:72: 9c:4c:7b:aa:f7:ee:f5:3b:5d:21:1f:4e:e4:96:ed: ae:17:6f:4c:65:d9:52:ec:42:81:20:e9:8a:30:91: 39:2d:3d:6f:cb:f8:c8:c8:0c:87:b6:f3:b8:65:4f: 87:30:ac:94:11:de:5e:76:b8:64:9e:74:6b:67:cd: 0a:e7:cf:d0:d7:09:96:fd:04:33:8a:23:26:66:ed: ac:81:71:06:0d:56:92:24:cc:92:44:12:29:db:dd: 2a:aa:cb:b0:99:38:b9:7b:c2:e6:bd:7d:62:b0:1b: f2:fa:6a:36:2b:7c:80:f6:30:b7:a8:5a:34:53:19: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0C:61:D2:32:82:EC:05:78:8D:DF:60:C9:AC:15:2B:38:E7:DA:2E X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b9:1c:17:11:64:2e:4b:4f:d6:db:0b:53:f9:0d:ce:13:70: 5b:ae:91:6a:9d:f9:56:e7:1f:a2:28:b1:b7:0d:03:96:a2:e5: ee:de:4f:c9:ca:5b:1d:57:80:b6:5b:3f:2d:f9:1c:f0:ec:3f: b7:e7:93:45:36:ae:f9:bc:aa:a6:d1:df:c4:86:9f:03:81:27: 09:46:28:3e:d6:b4:40:c8:60:bf:18:92:9b:fe:ed:87:7d:32: 9c:2e:74:77:6b:93:08:ae:93:63:28:a5:eb:40:ca:75:02:9f: d2:16:16:5a:73:e0:82:0d:ab:fc:9f:cb:20:84:d6:20:22:70: 3d:d7:7e:45:25:c9:78:7f:30:30:1c:78:76:4b:99:b6:01:49: ce:88:e3:35:c8:56:b3:7f:ae:1b:44:68:28:f9:41:c9:71:9d: 3d:43:8d:e2:bb:62:5c:4e:d7:74:5f:c3:25:fe:91:ce:a1:41: e1:df:0e:aa:f9:bb:ce:60:7a:65:05:5f:ea:e2:2f:0a:60:82: 4e:2a:2a:cc:df:59:3b:62:53:62:c7:b1:c5:4c:1e:4e:9a:66: fe:26:e1:e0:3a:3b:87:68:fa:f6:fd:eb:4b:24:a7:e7:71:11: b6:f9:b7:22:47:f4:df:55:b2:ad:8b:0e:74:58:ca:30:fb:d1: 65:18:e4:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrp+HnThqmx3a6NBNDSPHPAnUhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNjA0MTcxMjE3MjdaFw0yNjA0MjAyMDU4MjdaMDMxMTAvBgNV BAMTKEE0MEM2MUQyMzI4MkVDMDU3ODhEREY2MEM5QUMxNTJCMzhFN0RBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe1msnz1FWj+l03ZU5iqHCc5U4 8xrvWqgKMZUQk6zEQrc7NbbE5EPdB82OF5tk+MRzxBCp7oqHCGnUfx8C/COU8sfZ twsMUO1Q0RzpRQy7PWSaDK4gcOfEgMoNkx6WCAxO+Suf/MGHjj/gUIVCmaBd8Q59 ohA81mREVUyAPyg3qbzdwWkdcpxMe6r37vU7XSEfTuSW7a4Xb0xl2VLsQoEg6Yow kTktPW/L+MjIDIe287hlT4cwrJQR3l52uGSedGtnzQrnz9DXCZb9BDOKIyZm7ayB cQYNVpIkzJJEEinb3Sqqy7CZOLl7wua9fWKwG/L6ajYrfID2MLeoWjRTGd+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpAxh0jKC7AV4jd9gyawVKzjn2i4wHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGi5HBcRZC5LT9bbC1P5Dc4TcFuukWqd+Vbn H6IosbcNA5ai5e7eT8nKWx1XgLZbPy35HPDsP7fnk0U2rvm8qqbR38SGnwOBJwlG KD7WtEDIYL8Ykpv+7Yd9MpwudHdrkwiuk2MopetAynUCn9IWFlpz4IINq/yfyyCE 1iAicD3XfkUlyXh/MDAceHZLmbYBSc6I4zXIVrN/rhtEaCj5QclxnT1DjeK7YlxO 13RfwyX+kc6hQeHfDqr5u85gemUFX+riLwpggk4qKszfWTtiU2LHscVMHk6aZv4m 4eA6O4do+vb960skp+dxEbb5tyJH9N9Vsq2LDnRYyjD70WUY5HE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:49:09 2026 by rpki-client