$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: yAsdxxIwFiEXNy5QEdgRFuU5ftNa0jOzAOTvK40wprE= Subject key identifier: E7:B0:4C:52:40:11:4F:52:0E:3B:DD:DB:89:4B:04:73:4A:F1:19:32 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 264077D6286ECF2B6DB7D5EDAEC6465463B0B160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: E6 Signing time: Sat 18 Apr 2026 09:51:57 +0000 Manifest this update: Sat 18 Apr 2026 09:46:57 +0000 Manifest next update: Tue 21 Apr 2026 20:18:57 +0000 Files and hashes: 1: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (hash: PHcAVEeTYthOcGmorVA2c1r7wtqCpaWxCrN7FWMDJio=) 2: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: ZKjDIn2B9oGp4lDWjJuiVndsDHiz8qVujadLFwdcAN0=) 3: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: mxAwK/MKmBpPTXvB+y7TO9Vx/LAA3W9mHnGSKrGKpTI=) 4: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: eyKVqxooc3TAGiXmLnd8fFBCsIdu4PICiXyXT8Mjh6M=) 5: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (hash: RD/RO/ie3tKJhpXhiY1wvpRhxWsn6xjmVmvMhdZr4lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:40:77:d6:28:6e:cf:2b:6d:b7:d5:ed:ae:c6:46:54:63:b0:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Apr 18 09:46:57 2026 GMT Not After : Apr 21 20:18:57 2026 GMT Subject: CN=E7B04C5240114F520E3BDDDB894B04734AF11932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:0a:53:bb:0e:91:5f:c7:0d:b0:dd:b3:4c: d0:01:c7:16:4c:4e:15:26:a1:3c:11:1a:d0:e5:4f: 99:53:0f:a6:8c:c2:e7:5d:25:5d:63:7e:d8:a7:a1: 1f:ef:df:fb:41:5c:eb:c9:a6:4d:74:8d:85:5e:3e: c9:17:d5:ed:e1:67:1e:37:4e:ab:3b:0a:06:e0:69: 30:67:dd:2f:87:69:01:7f:80:79:02:9e:e5:52:be: a3:46:6c:e7:fa:e9:25:fd:fc:ae:ef:0e:8f:98:95: 46:5a:50:f5:3f:d0:d6:05:87:24:03:e6:e9:50:15: 04:d6:87:28:51:d2:2d:4b:95:ad:62:1a:48:dc:b8: 0b:15:94:50:6b:84:80:85:59:bb:d9:f8:68:d7:e2: 45:79:3d:a9:85:cd:77:39:66:98:d9:7d:e4:98:1a: 61:f5:11:f5:01:e2:9a:e8:b7:47:fe:e0:07:1f:0b: 06:d2:b4:a5:31:13:d6:c4:18:5f:db:85:e3:dd:f2: 40:ee:81:a4:92:82:c4:99:92:39:d4:e2:32:8c:0c: 1b:c9:f1:14:3d:6a:8a:aa:fb:eb:aa:39:bd:de:81: 7b:ab:9f:c7:73:c9:98:7e:30:d6:61:85:ce:5a:e9: 2c:62:54:83:03:a1:3a:ae:3d:c0:3d:2e:fb:e2:df: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B0:4C:52:40:11:4F:52:0E:3B:DD:DB:89:4B:04:73:4A:F1:19:32 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bd:a6:c6:85:9f:14:9c:93:63:a2:7a:f7:8d:88:0d:86:ec: 27:a3:ed:e9:82:67:4b:80:87:2d:a0:de:07:e7:02:ce:b1:75: 34:69:0a:0d:f7:be:60:00:19:dc:d5:c5:26:ff:85:46:27:c3: f6:bf:2d:28:a8:da:30:09:75:07:6d:1c:27:5e:12:55:52:c0: f8:8d:67:d9:32:2a:3c:53:6e:9c:11:27:81:98:ad:db:87:01: 60:6c:e3:08:ec:de:38:a6:83:72:18:3d:48:22:b5:bf:3e:7d: 24:ba:ee:ad:24:84:f6:f8:d5:c4:91:01:14:a0:59:cc:07:d8: 47:27:75:08:5f:f8:91:73:2e:9d:5d:e2:2f:7a:be:f2:2f:63: da:fa:af:55:55:6e:37:35:85:26:8b:70:ee:41:c0:76:3c:5d: cd:ca:ab:a5:98:82:4a:c6:9c:3b:5d:ec:2a:a0:44:44:c9:88: e3:a9:a2:b5:e3:11:11:f8:b7:16:38:19:a8:a6:af:59:a8:f3: f0:56:66:04:bf:b3:cb:86:b9:bf:a7:c6:8f:e0:84:9a:7e:f8: bd:71:f1:7c:33:bb:cd:63:c4:8f:57:e2:f1:29:7d:3f:0e:e1: a4:72:ef:c9:4c:ca:ac:d3:af:80:a6:a9:a1:bf:58:74:6e:9e: 27:c9:cf:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkB31ihuzyttt9XtrsZGVGOwsWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNjA0MTgwOTQ2NTdaFw0yNjA0MjEyMDE4NTdaMDMxMTAvBgNV BAMTKEU3QjA0QzUyNDAxMTRGNTIwRTNCREREQjg5NEIwNDczNEFGMTE5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRApTuw6RX8cNsN2zTNABxxZM ThUmoTwRGtDlT5lTD6aMwuddJV1jftinoR/v3/tBXOvJpk10jYVePskX1e3hZx43 Tqs7CgbgaTBn3S+HaQF/gHkCnuVSvqNGbOf66SX9/K7vDo+YlUZaUPU/0NYFhyQD 5ulQFQTWhyhR0i1Lla1iGkjcuAsVlFBrhICFWbvZ+GjX4kV5PamFzXc5ZpjZfeSY GmH1EfUB4prot0f+4AcfCwbStKUxE9bEGF/bhePd8kDugaSSgsSZkjnU4jKMDBvJ 8RQ9aoqq++uqOb3egXurn8dzyZh+MNZhhc5a6SxiVIMDoTquPcA9Lvvi3679AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU57BMUkART1IOO93biUsEc0rxGTIwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADO9psaFnxSck2OieveNiA2G7Cej7emCZ0uA hy2g3gfnAs6xdTRpCg33vmAAGdzVxSb/hUYnw/a/LSio2jAJdQdtHCdeElVSwPiN Z9kyKjxTbpwRJ4GYrduHAWBs4wjs3jimg3IYPUgitb8+fSS67q0khPb41cSRARSg WcwH2EcndQhf+JFzLp1d4i96vvIvY9r6r1VVbjc1hSaLcO5BwHY8Xc3Kq6WYgkrG nDtd7CqgRETJiOOporXjERH4txY4Gaimr1mo8/BWZgS/s8uGub+nxo/ghJp++L1x 8Xwzu81jxI9X4vEpfT8O4aRy78lMyqzTr4CmqaG/WHRunifJz14= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:42 2026 by rpki-client