$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: dPoral8O7fa8TvJZEITyQeF7bQ5tj3mn+2nft92kWIw= Subject key identifier: F8:04:5C:FD:FD:0A:25:6D:E0:51:D6:3F:28:BB:CE:1E:8E:E3:09:AE Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 2AC49270F0B7CEC000851C8698D2E33B1D9BBC06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 04A7 Signing time: Sun 19 Apr 2026 02:52:07 +0000 Manifest this update: Sun 19 Apr 2026 02:47:07 +0000 Manifest next update: Wed 22 Apr 2026 06:52:07 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: erzeisLhHA0lGmpk5rqowHqOvUtbMDjTPUCLIV5KXho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c4:92:70:f0:b7:ce:c0:00:85:1c:86:98:d2:e3:3b:1d:9b:bc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Apr 19 02:47:07 2026 GMT Not After : Apr 22 06:52:07 2026 GMT Subject: CN=F8045CFDFD0A256DE051D63F28BBCE1E8EE309AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:30:65:d2:73:bf:14:a5:60:da:36:57:9a:bc: 92:51:31:69:8d:57:0e:7c:45:01:02:2c:b0:21:20: e5:fe:4d:b8:73:0d:94:99:6a:22:a0:33:5f:d5:72: 71:8f:bb:3e:57:43:ac:ad:2f:03:17:e5:d3:36:84: 7d:68:49:b0:fc:5f:a7:da:16:15:20:42:2c:b1:93: af:80:ca:10:3a:c8:26:e1:46:ae:8e:4d:f0:e3:04: 2d:40:b3:58:1b:5a:8a:e6:e6:a2:9f:dc:f7:a7:b6: 17:9f:90:6a:7e:19:f0:53:5c:56:12:b2:57:f5:0c: 4d:2e:33:11:21:f9:72:9f:b0:65:ad:db:64:86:0b: e4:a4:ae:03:d9:ea:da:c5:0f:c2:d0:5c:ec:e6:57: 04:e3:9f:cf:6b:e2:e6:58:36:30:38:47:fc:8d:22: 70:65:0d:db:41:0d:d0:1a:99:0a:ea:2a:20:27:af: 82:78:2a:d2:c4:91:40:8f:08:da:f1:7e:7d:5b:2e: a9:65:a8:f3:74:fb:8d:db:e2:00:55:78:89:35:39: 76:45:b4:ae:b4:f6:71:36:71:9b:5b:64:be:25:bd: 5e:ec:fb:36:67:b4:45:10:e1:ef:fe:98:d0:e5:75: d8:96:23:c8:f5:04:8d:c5:99:75:02:ab:b2:fd:7c: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:04:5C:FD:FD:0A:25:6D:E0:51:D6:3F:28:BB:CE:1E:8E:E3:09:AE X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6c:df:14:b8:09:0d:c0:1c:fc:52:d6:7a:cf:60:7d:8a:05: 6d:9c:98:83:82:d5:b6:85:fb:4c:9d:9d:7f:9f:d2:bb:3f:4b: 1c:6a:05:bd:51:78:b4:3b:cf:53:40:c1:97:0b:d3:ac:6d:db: 5e:81:8b:ae:38:e0:5e:d8:7f:94:e7:6a:64:69:47:9c:d1:82: bc:6d:bd:a6:21:8b:db:cc:9b:6b:b4:ac:13:99:0a:62:4c:d2: 44:21:5f:f4:8c:66:31:64:0d:f7:1a:4d:94:b0:69:fa:08:75: 40:11:64:8f:b9:94:9b:72:7c:df:ec:11:3a:0d:09:d3:3c:b1: de:69:43:69:59:83:27:87:56:40:d6:20:2a:7c:31:d0:e1:24: 1d:46:5f:b9:1f:d2:ba:5b:71:c6:99:1c:67:ac:bb:7d:2d:b1: 0b:0e:42:b0:28:12:5e:ed:64:e7:ab:92:15:bd:cd:0f:dc:33: ab:8d:01:9b:d8:8a:e1:36:01:b9:ed:03:19:36:09:2d:cb:a8: 12:8f:2f:e0:42:dd:6a:f0:65:7d:24:3f:ca:54:14:b0:e8:a0: b6:ea:12:5c:b4:12:b7:80:b7:ad:15:06:9f:ce:b3:68:a4:00: fc:b4:57:c9:4c:5e:d0:fe:0a:37:4d:87:fe:1f:a8:be:ca:0e: 1a:cd:4c:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsSScPC3zsAAhRyGmNLjOx2bvAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNjA0MTkwMjQ3MDdaFw0yNjA0MjIwNjUyMDdaMDMxMTAvBgNV BAMTKEY4MDQ1Q0ZERkQwQTI1NkRFMDUxRDYzRjI4QkJDRTFFOEVFMzA5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3MGXSc78UpWDaNleavJJRMWmN Vw58RQECLLAhIOX+TbhzDZSZaiKgM1/VcnGPuz5XQ6ytLwMX5dM2hH1oSbD8X6fa FhUgQiyxk6+AyhA6yCbhRq6OTfDjBC1As1gbWorm5qKf3PenthefkGp+GfBTXFYS slf1DE0uMxEh+XKfsGWt22SGC+SkrgPZ6trFD8LQXOzmVwTjn89r4uZYNjA4R/yN InBlDdtBDdAamQrqKiAnr4J4KtLEkUCPCNrxfn1bLqllqPN0+43b4gBVeIk1OXZF tK609nE2cZtbZL4lvV7s+zZntEUQ4e/+mNDlddiWI8j1BI3FmXUCq7L9fDk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ARc/f0KJW3gUdY/KLvOHo7jCa4wHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABts3xS4CQ3AHPxS1nrPYH2KBW2cmIOC1baF +0ydnX+f0rs/SxxqBb1ReLQ7z1NAwZcL06xt216Bi6444F7Yf5TnamRpR5zRgrxt vaYhi9vMm2u0rBOZCmJM0kQhX/SMZjFkDfcaTZSwafoIdUARZI+5lJtyfN/sEToN CdM8sd5pQ2lZgyeHVkDWICp8MdDhJB1GX7kf0rpbccaZHGesu30tsQsOQrAoEl7t ZOerkhW9zQ/cM6uNAZvYiuE2AbntAxk2CS3LqBKPL+BC3WrwZX0kP8pUFLDooLbq Ely0EreAt60VBp/Os2ikAPy0V8lMXtD+CjdNh/4fqL7KDhrNTEo= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:08 2026 by rpki-client