$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: ZDtlVHhut3VjfAnCEnPgcBt4Ggjb/IbTF7R1oLU0eXM= Subject key identifier: 18:EB:D0:AF:23:F4:9B:69:CE:2C:2F:F1:97:73:CF:6F:DF:67:2D:04 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 659BA7DC563D65B344D49DE78CC7A8BE6459FD10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 0360 Signing time: Wed 15 Apr 2026 19:01:42 +0000 Manifest this update: Wed 15 Apr 2026 18:56:42 +0000 Manifest next update: Sun 19 Apr 2026 05:45:42 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: /3z61wizN/d46dcd4eAKaT+dinSEiQkh5gv1VJ3bPgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9b:a7:dc:56:3d:65:b3:44:d4:9d:e7:8c:c7:a8:be:64:59:fd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Apr 15 18:56:42 2026 GMT Not After : Apr 19 05:45:42 2026 GMT Subject: CN=18EBD0AF23F49B69CE2C2FF19773CF6FDF672D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:73:bd:b2:75:a2:c3:17:a8:9c:70:70:fe: 00:87:f8:cb:d2:e9:05:84:4c:1f:2f:09:37:6b:87: 94:a6:c4:99:45:76:f1:ba:ed:79:68:9c:46:03:d7: fa:a6:17:3b:a1:cf:5d:2a:46:4a:71:65:f6:07:64: 88:67:c1:73:29:59:3e:3d:b1:78:d3:97:1d:91:a9: 0a:3f:13:7d:40:9c:0a:aa:dd:9c:91:be:16:8d:a3: 7f:36:38:62:ec:a8:82:b7:fe:ab:5b:24:02:bd:c9: 83:cf:20:38:dd:5b:f1:78:79:29:e2:e3:f5:c8:33: 87:b0:6a:ea:8e:1d:00:27:a7:b2:d4:45:68:14:e0: df:f4:e3:da:87:0d:39:19:ce:f8:a1:94:95:cb:ab: 30:f7:9b:ce:42:cd:49:a5:0e:6e:a3:65:87:19:46: fd:40:db:50:ff:be:fd:f5:65:51:1c:34:55:b4:55: 84:55:de:94:60:ca:ba:5b:e1:42:ac:ba:43:0a:57: 13:ae:c7:ed:cb:df:e1:dd:e0:79:f6:6f:fe:85:b0: 70:9d:97:31:39:25:06:cd:2b:ad:28:ef:a4:69:4a: fc:da:bb:84:7c:61:21:15:ae:25:37:e4:a9:26:be: 35:b9:d8:f9:10:33:5c:62:82:20:08:6d:3a:f3:0e: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EB:D0:AF:23:F4:9B:69:CE:2C:2F:F1:97:73:CF:6F:DF:67:2D:04 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a2:01:3e:26:a8:a6:5b:6b:1e:e3:24:1d:83:4f:02:ab:97: 93:d7:d0:5c:18:56:32:c3:b8:25:c0:67:5f:21:02:01:55:d3: 7f:ec:f6:a9:0c:2f:38:d6:b7:cc:58:bd:58:b7:3c:2a:a5:b7: 43:ea:c3:e8:88:57:e5:45:48:5c:bf:33:0f:c9:c3:b7:a9:05: f9:83:a9:df:dd:b5:78:53:28:7b:33:f3:0f:ee:71:fb:f2:39: 7e:e0:90:38:46:c6:4f:1f:2b:a3:86:16:73:18:4f:74:ea:37: 47:dc:61:94:2a:f4:bf:7e:4c:e5:c1:1e:75:aa:71:da:0c:2d: e2:66:9a:87:2e:cd:cb:b8:6b:18:8b:2b:4f:31:32:3e:18:34: 3a:60:03:7a:58:9b:40:79:7e:a9:9d:e5:76:f7:64:5b:8b:16: 82:0f:71:cb:69:3f:ce:5b:da:f8:a3:2e:a2:35:f5:df:5d:72: f9:07:55:b0:bd:39:d0:ee:86:11:a6:41:4a:3b:1f:60:ff:52: b4:3c:f0:58:2e:5d:5a:13:a9:ed:25:13:e6:b5:b2:46:5f:db: 3b:9e:d6:63:f8:91:19:ba:aa:84:8e:34:88:37:85:f8:dc:ef: 4c:2e:9b:ae:a8:5a:cc:69:72:58:bc:06:e1:aa:89:a4:19:04: a8:8b:9f:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZun3FY9ZbNE1J3njMeovmRZ/RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNjA0MTUxODU2NDJaFw0yNjA0MTkwNTQ1NDJaMDMxMTAvBgNV BAMTKDE4RUJEMEFGMjNGNDlCNjlDRTJDMkZGMTk3NzNDRjZGREY2NzJEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVnO9snWiwxeonHBw/gCH+MvS 6QWETB8vCTdrh5SmxJlFdvG67XlonEYD1/qmFzuhz10qRkpxZfYHZIhnwXMpWT49 sXjTlx2RqQo/E31AnAqq3ZyRvhaNo382OGLsqIK3/qtbJAK9yYPPIDjdW/F4eSni 4/XIM4ewauqOHQAnp7LURWgU4N/049qHDTkZzvihlJXLqzD3m85CzUmlDm6jZYcZ Rv1A21D/vv31ZVEcNFW0VYRV3pRgyrpb4UKsukMKVxOux+3L3+Hd4Hn2b/6FsHCd lzE5JQbNK60o76RpSvzau4R8YSEVriU35KkmvjW52PkQM1xigiAIbTrzDg9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOvQryP0m2nOLC/xl3PPb99nLQQwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCiAT4mqKZbax7jJB2DTwKrl5PX0FwYVjLD uCXAZ18hAgFV03/s9qkMLzjWt8xYvVi3PCqlt0Pqw+iIV+VFSFy/Mw/Jw7epBfmD qd/dtXhTKHsz8w/ucfvyOX7gkDhGxk8fK6OGFnMYT3TqN0fcYZQq9L9+TOXBHnWq cdoMLeJmmocuzcu4axiLK08xMj4YNDpgA3pYm0B5fqmd5Xb3ZFuLFoIPcctpP85b 2vijLqI19d9dcvkHVbC9OdDuhhGmQUo7H2D/UrQ88FguXVoTqe0lE+a1skZf2zue 1mP4kRm6qoSONIg3hfjc70wum66oWsxpcli8BuGqiaQZBKiLn8E= -----END CERTIFICATE-----Generated at Fri Apr 17 19:48:21 2026 by rpki-client