$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: /UBsGGkP0Lhe/S9u5lmqOSdwNVmTXlAlycEfv52eHCk= Subject key identifier: A2:1F:5A:A0:A3:A1:8C:70:42:26:A8:EC:6D:80:58:70:52:1A:CD:BD Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 6BFD755E3FB4F4AF1F380E95A98CCC7231E5297A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: E5 Signing time: Wed 15 Apr 2026 19:41:37 +0000 Manifest this update: Wed 15 Apr 2026 19:36:37 +0000 Manifest next update: Sat 18 Apr 2026 21:52:37 +0000 Files and hashes: 1: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: pRa58vTEHB7UrRn1JGRz6kQcgRYrK7rbB5+gzBMINXc=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) 3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fd:75:5e:3f:b4:f4:af:1f:38:0e:95:a9:8c:cc:72:31:e5:29:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Apr 15 19:36:37 2026 GMT Not After : Apr 18 21:52:37 2026 GMT Subject: CN=A21F5AA0A3A18C704226A8EC6D805870521ACDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:e4:b7:e5:4f:98:5a:09:61:1d:8c:c4:3a: 94:19:36:8e:b9:e5:f0:66:95:70:53:e9:c1:6c:fc: 36:01:26:ef:a0:28:7e:de:ae:c7:91:fa:3e:fc:a9: 3a:6c:14:39:11:c4:64:cd:10:29:cf:68:49:91:0c: 3c:d4:e9:09:4d:7a:c7:39:65:d8:8d:ee:e4:48:12: c0:d0:aa:b1:d3:a3:c8:7d:ee:86:d4:00:bf:a4:11: 3f:66:0e:67:0c:34:f4:d9:f0:30:46:3f:3f:79:c5: fb:35:72:76:33:5a:b6:ed:bf:44:97:c5:b7:6a:6c: 40:1a:9e:23:54:88:85:2b:94:48:d2:68:d3:f7:28: 0e:dd:60:c9:af:57:cf:7e:a7:2e:39:6d:5f:7f:83: 0a:20:1e:86:3c:2e:a6:76:ce:d7:bf:2e:18:2a:87: 27:5d:0f:03:19:71:4d:53:07:98:a9:7a:11:d1:c8: 1f:e1:68:bd:ee:40:19:20:40:4b:f6:3d:93:42:41: a9:ee:4d:e8:96:ad:df:1d:28:eb:38:49:e2:05:65: b3:13:7a:27:33:c4:62:ea:a3:29:50:a1:ee:13:bd: 14:cc:68:76:c6:1d:d2:fc:c4:89:e0:68:ea:cc:c7: 5f:61:38:c8:c0:2a:e2:91:02:18:71:b6:b3:6f:fe: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:5A:A0:A3:A1:8C:70:42:26:A8:EC:6D:80:58:70:52:1A:CD:BD X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:83:6f:02:2f:ae:52:73:8c:ec:08:e2:8d:f5:8f:8f:2a:85: c4:55:9b:46:6e:19:c4:30:9e:d2:30:27:cf:2d:f8:09:d7:a8: ff:f4:b8:17:f7:a4:17:d6:ba:34:bd:64:d0:1c:e7:25:be:e9: b9:b1:d5:f3:c2:0b:4a:c4:0c:d2:00:26:ad:ad:f2:1e:bb:e6: cc:c7:2a:32:92:da:19:56:db:ec:60:f1:34:c0:b2:c6:c7:77: 5f:34:86:c5:6e:1d:c7:6e:e0:fa:be:7f:34:7e:0d:d9:cd:f3: 3c:d6:98:ee:d8:e5:90:03:a1:df:e4:03:2b:f2:10:e9:dd:de: bd:53:04:01:8e:19:40:c0:1b:11:af:bc:7f:15:67:39:10:37: c9:90:6d:5c:42:f0:87:43:84:bd:ec:a8:6f:e3:8e:8c:1b:d0: 61:81:b7:0f:36:24:df:95:75:65:99:75:ab:ff:ee:cb:9e:bd: c6:2a:5f:f7:90:61:01:05:17:d4:84:b9:4f:7e:6a:59:41:17: a6:28:82:89:f1:0b:90:fc:3a:5c:9f:93:56:03:6c:38:39:aa: 81:6c:d8:c1:90:f1:36:e1:ec:f5:ac:45:4c:e4:35:21:5e:fa: b0:6d:ee:dc:6d:07:35:4b:97:bd:7e:97:a3:02:00:70:d2:d1: 0f:dc:7b:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/11Xj+09K8fOA6VqYzMcjHlKXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNjA0MTUxOTM2MzdaFw0yNjA0MTgyMTUyMzdaMDMxMTAvBgNV BAMTKEEyMUY1QUEwQTNBMThDNzA0MjI2QThFQzZEODA1ODcwNTIxQUNEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/puS35U+YWglhHYzEOpQZNo65 5fBmlXBT6cFs/DYBJu+gKH7erseR+j78qTpsFDkRxGTNECnPaEmRDDzU6QlNesc5 ZdiN7uRIEsDQqrHTo8h97obUAL+kET9mDmcMNPTZ8DBGPz95xfs1cnYzWrbtv0SX xbdqbEAaniNUiIUrlEjSaNP3KA7dYMmvV89+py45bV9/gwogHoY8LqZ2zte/Lhgq hyddDwMZcU1TB5ipehHRyB/haL3uQBkgQEv2PZNCQanuTeiWrd8dKOs4SeIFZbMT eiczxGLqoylQoe4TvRTMaHbGHdL8xIngaOrMx19hOMjAKuKRAhhxtrNv/kKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoh9aoKOhjHBCJqjsbYBYcFIazb0wHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuDbwIvrlJzjOwI4o31j48qhcRVm0ZuGcQw ntIwJ88t+AnXqP/0uBf3pBfWujS9ZNAc5yW+6bmx1fPCC0rEDNIAJq2t8h675szH KjKS2hlW2+xg8TTAssbHd180hsVuHcdu4Pq+fzR+DdnN8zzWmO7Y5ZADod/kAyvy EOnd3r1TBAGOGUDAGxGvvH8VZzkQN8mQbVxC8IdDhL3sqG/jjowb0GGBtw82JN+V dWWZdav/7suevcYqX/eQYQEFF9SEuU9+allBF6YogonxC5D8Olyfk1YDbDg5qoFs 2MGQ8Tbh7PWsRUzkNSFe+rBt7txtBzVLl71+l6MCAHDS0Q/cezk= -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:55 2026 by rpki-client