$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: OeZ7It6rM5fqaqaF1S6rS1+2BiFX/kyokvXJTSjPVhI= Subject key identifier: 17:C5:8C:ED:E1:E0:B8:22:51:EA:7B:71:31:EE:A2:67:DE:7D:79:E6 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 539C52177AD36AAA49091A8F8BF3280274D3E987 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 01FF Signing time: Fri 17 Apr 2026 07:40:05 +0000 Manifest this update: Fri 17 Apr 2026 07:35:05 +0000 Manifest next update: Mon 20 Apr 2026 13:34:05 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: 80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=) 2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: NVWREV8MVll3wAtPmuejtk78R/Q9oFKT0b9tVarvRUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9c:52:17:7a:d3:6a:aa:49:09:1a:8f:8b:f3:28:02:74:d3:e9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Apr 17 07:35:05 2026 GMT Not After : Apr 20 13:34:05 2026 GMT Subject: CN=17C58CEDE1E0B82251EA7B7131EEA267DE7D79E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:b0:d2:51:85:22:99:8b:43:70:42:fc:a8: 3f:c1:9a:6d:0e:6a:8d:a9:c9:3a:41:3d:82:31:94: ee:ca:41:ca:d9:85:91:30:a0:48:37:4d:69:36:38: df:5e:d5:a5:a6:da:21:b1:83:c3:a5:f3:d9:99:92: 2b:c9:9c:85:b5:af:a0:14:15:94:20:3b:c7:39:4e: 95:a9:9f:f3:35:b0:47:e8:bc:c6:69:42:c8:42:b2: 33:2e:24:f1:4e:4d:bd:0a:8a:c7:81:87:1c:9d:dd: 35:a7:db:bd:04:84:42:10:1e:a9:25:c5:07:4d:2b: ca:a5:b2:b8:e0:11:a1:a2:9b:f1:ca:c7:de:6d:fd: 8b:01:f6:21:12:1a:15:12:60:67:41:a7:38:99:ff: 99:0f:4b:fc:9f:76:ca:cc:a7:77:1b:7e:d4:08:31: 67:b4:ac:c9:ed:67:0c:ba:8a:ca:2e:0f:6a:19:bc: 94:45:4b:ed:b1:da:59:5f:7d:0f:a5:f2:49:5b:c8: 40:85:59:65:55:15:07:8c:7c:57:5e:e5:cb:c2:36: 4e:4f:0d:e2:84:1b:07:68:20:ef:84:5e:d1:0f:fd: 20:1f:f2:fd:d0:86:09:47:dc:f4:91:02:c2:da:3f: bd:c0:fa:06:c7:6a:6a:b5:27:73:b5:09:7a:ec:c6: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:8C:ED:E1:E0:B8:22:51:EA:7B:71:31:EE:A2:67:DE:7D:79:E6 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:df:3a:ce:fe:ac:39:21:ba:9a:59:23:42:3d:8b:70:47:e7: 52:34:9f:b9:2b:2b:01:6d:02:23:e2:5f:b1:88:99:1f:21:4f: 5e:80:5b:5e:61:3b:06:a4:e8:04:30:a4:be:a1:e6:e8:94:8c: 31:3e:db:09:cc:5c:30:9a:0e:83:ba:54:aa:2b:8a:06:f3:8c: 1e:6d:eb:2b:bb:fd:fe:e2:58:e5:c8:21:42:0e:53:9e:f9:93: 69:85:00:94:3d:3a:81:2f:af:f2:c3:11:a9:b9:4b:42:f0:24: a1:89:1a:59:e6:3f:65:43:0b:b7:26:40:4a:8c:a0:cb:74:ee: f7:6b:a1:b2:35:08:6e:7b:3d:66:b2:af:89:c2:3c:d4:1b:f5: 12:96:b9:18:ae:7a:fe:90:cd:20:13:77:0e:49:12:a9:19:ba: 42:49:40:df:2d:6d:08:74:05:e9:24:dd:4d:5d:35:b4:ff:48: 2d:c4:82:6c:70:9d:b3:17:52:a9:cf:d5:72:d5:42:c3:0d:2d: 32:24:8b:36:27:32:15:09:c0:33:94:46:84:ed:52:0f:e0:c9: 34:af:86:d5:ab:79:d4:e8:90:67:08:fe:e2:54:9e:76:a2:72: 34:02:2f:e7:65:d9:10:a5:d1:66:42:d8:93:0a:d4:2a:7b:e7: 39:8b:bb:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5xSF3rTaqpJCRqPi/MoAnTT6YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNjA0MTcwNzM1MDVaFw0yNjA0MjAxMzM0MDVaMDMxMTAvBgNV BAMTKDE3QzU4Q0VERTFFMEI4MjI1MUVBN0I3MTMxRUVBMjY3REU3RDc5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSbDSUYUimYtDcEL8qD/Bmm0O ao2pyTpBPYIxlO7KQcrZhZEwoEg3TWk2ON9e1aWm2iGxg8Ol89mZkivJnIW1r6AU FZQgO8c5TpWpn/M1sEfovMZpQshCsjMuJPFOTb0KiseBhxyd3TWn270EhEIQHqkl xQdNK8qlsrjgEaGim/HKx95t/YsB9iESGhUSYGdBpziZ/5kPS/yfdsrMp3cbftQI MWe0rMntZwy6isouD2oZvJRFS+2x2llffQ+l8klbyECFWWVVFQeMfFde5cvCNk5P DeKEGwdoIO+EXtEP/SAf8v3QhglH3PSRAsLaP73A+gbHamq1J3O1CXrsxuhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8WM7eHguCJR6ntxMe6iZ959eeYwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7fOs7+rDkhuppZI0I9i3BH51I0n7krKwFt AiPiX7GImR8hT16AW15hOwak6AQwpL6h5uiUjDE+2wnMXDCaDoO6VKorigbzjB5t 6yu7/f7iWOXIIUIOU575k2mFAJQ9OoEvr/LDEam5S0LwJKGJGlnmP2VDC7cmQEqM oMt07vdrobI1CG57PWayr4nCPNQb9RKWuRiuev6QzSATdw5JEqkZukJJQN8tbQh0 Bekk3U1dNbT/SC3EgmxwnbMXUqnP1XLVQsMNLTIkizYnMhUJwDOURoTtUg/gyTSv htWredTokGcI/uJUnnaicjQCL+dl2RCl0WZC2JMK1Cp75zmLuzE= -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:29 2026 by rpki-client