$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: 5MwzlitgxNXMdNYxpeWAkxwwqHc3US+4UV13kBezNP4= Subject key identifier: 48:03:A6:23:18:EA:B2:88:99:11:7D:2C:9B:12:EE:63:1E:7B:9F:57 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 0B6CCB00864BDD8CAE66B6F1351E8A62A7822296 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: 0135 Signing time: Fri 17 Apr 2026 07:51:22 +0000 Manifest this update: Fri 17 Apr 2026 07:46:22 +0000 Manifest next update: Mon 20 Apr 2026 08:51:22 +0000 Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: FAVAZnWz0pyRXV8cgDYllTBAXEJp2pBUrEjPju0WLA0=) 2: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: euyRe+DNldnvQ034Y3S46/HxV0GGrJa1htj3QyWDJRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6c:cb:00:86:4b:dd:8c:ae:66:b6:f1:35:1e:8a:62:a7:82:22:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Apr 17 07:46:22 2026 GMT Not After : Apr 20 08:51:22 2026 GMT Subject: CN=4803A62318EAB28899117D2C9B12EE631E7B9F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:99:04:ee:53:f7:fc:63:f0:c0:2f:4b:26: 49:cd:44:2b:60:87:4d:ab:46:a3:cc:ea:79:4c:3a: 0f:41:09:55:80:be:46:5d:d3:d6:b2:23:22:ff:39: 75:0b:e0:db:1e:64:67:aa:06:0a:4e:46:47:6e:8c: f6:f7:8f:d7:b4:03:d1:01:db:10:c7:8c:cd:a1:46: b6:17:95:2b:54:48:47:af:e0:dd:ff:e6:5e:a6:5f: c6:8f:72:b1:f4:d3:2c:52:e9:3d:09:b6:4d:ab:4c: 03:0a:bf:09:e7:5a:34:50:68:d0:86:20:f0:e0:65: 5a:dc:e3:a7:8d:e0:36:37:04:0b:78:d4:fe:a6:48: 63:8b:a1:92:1e:3d:55:95:9e:80:ca:57:48:23:5a: b0:33:bd:03:12:3b:1a:51:31:de:6e:a6:d8:42:0c: c4:e2:bd:32:92:6a:bb:ad:50:22:6a:90:ae:c9:9b: 65:ab:60:6a:a6:1c:1f:04:d9:9d:cf:cf:5b:c2:db: a9:7a:5b:6b:33:ac:2e:e2:2e:8c:dc:ec:11:da:ec: 72:34:40:22:8c:b1:11:26:fb:19:00:c9:5e:86:ee: ab:f9:fc:dc:4e:b4:f9:cc:f8:33:fd:0a:da:c1:1e: 74:94:b8:44:5e:1b:52:a4:01:b9:4a:5b:58:87:41: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:A6:23:18:EA:B2:88:99:11:7D:2C:9B:12:EE:63:1E:7B:9F:57 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4f:ac:27:6b:05:62:5b:c1:84:de:58:b8:9c:0d:36:7d:4b: 32:0e:55:2a:73:b2:0d:fe:67:66:d7:32:16:5c:b6:47:6b:3d: 08:5e:02:50:0f:0d:f7:72:65:18:6b:72:ff:df:4c:94:ff:d7: 9c:6a:bb:13:38:58:43:4e:53:bf:4b:e6:c7:08:b4:25:43:c4: e3:c7:d9:ff:a7:0a:a8:81:f6:a8:43:1c:56:e9:75:c5:8a:f3: 3e:2c:ba:1b:dd:f8:dc:8b:ab:e9:3c:5d:1b:75:a4:a6:ec:25: ef:21:f1:7f:f3:3b:f3:c0:47:da:3f:c2:85:f2:9f:5b:51:e4: 16:16:73:9d:ed:aa:a5:7f:4b:84:f4:e1:61:29:04:d0:08:2f: 70:05:25:87:ff:23:7d:02:f3:68:58:ea:eb:be:3f:70:1f:56: 0d:fa:8f:6d:9b:1c:6e:21:5c:26:84:0e:6e:ea:6e:ad:6e:18: 6d:c8:fc:b9:df:2c:f4:18:34:0c:67:d7:bb:bc:3f:79:eb:2b: e1:5b:e1:f8:d9:bc:41:8a:db:7a:5b:0c:a5:b9:5c:7e:63:38: af:78:dd:57:0c:39:d1:1e:0b:43:8f:e2:54:f2:76:5a:c8:0e: 16:f7:92:1e:eb:54:0e:1d:43:6c:08:fe:75:f8:e2:28:71:09: 6e:3a:a3:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2zLAIZL3YyuZrbxNR6KYqeCIpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNjA0MTcwNzQ2MjJaFw0yNjA0MjAwODUxMjJaMDMxMTAvBgNV BAMTKDQ4MDNBNjIzMThFQUIyODg5OTExN0QyQzlCMTJFRTYzMUU3QjlGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CJkE7lP3/GPwwC9LJknNRCtg h02rRqPM6nlMOg9BCVWAvkZd09ayIyL/OXUL4NseZGeqBgpORkdujPb3j9e0A9EB 2xDHjM2hRrYXlStUSEev4N3/5l6mX8aPcrH00yxS6T0Jtk2rTAMKvwnnWjRQaNCG IPDgZVrc46eN4DY3BAt41P6mSGOLoZIePVWVnoDKV0gjWrAzvQMSOxpRMd5upthC DMTivTKSarutUCJqkK7Jm2WrYGqmHB8E2Z3Pz1vC26l6W2szrC7iLozc7BHa7HI0 QCKMsREm+xkAyV6G7qv5/NxOtPnM+DP9CtrBHnSUuEReG1KkAblKW1iHQUt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAOmIxjqsoiZEX0smxLuYx57n1cwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBPrCdrBWJbwYTeWLicDTZ9SzIOVSpzsg3+ Z2bXMhZctkdrPQheAlAPDfdyZRhrcv/fTJT/15xquxM4WENOU79L5scItCVDxOPH 2f+nCqiB9qhDHFbpdcWK8z4suhvd+NyLq+k8XRt1pKbsJe8h8X/zO/PAR9o/woXy n1tR5BYWc53tqqV/S4T04WEpBNAIL3AFJYf/I30C82hY6uu+P3AfVg36j22bHG4h XCaEDm7qbq1uGG3I/LnfLPQYNAxn17u8P3nrK+Fb4fjZvEGK23pbDKW5XH5jOK94 3VcMOdEeC0OP4lTydlrIDhb3kh7rVA4dQ2wI/nX44ihxCW46owY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:40 2026 by rpki-client