$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: I4b/ORaGvpbdrzT+tkKbtWsBXBm8m4bcHDPWvJVSdX8= Subject key identifier: 19:74:60:8B:19:BA:04:BD:B1:DD:E8:BD:52:48:3E:6E:A3:D5:03:D6 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 54F25980B8598CF503E65ADA3183A0DF8D841374 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 01E4 Signing time: Thu 26 Mar 2026 10:21:47 +0000 Manifest this update: Thu 26 Mar 2026 10:16:47 +0000 Manifest next update: Sun 29 Mar 2026 21:40:47 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: FEMNoewp623AVrfI3kUAPM9nGkFvtnB7h3SulQgMddI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f2:59:80:b8:59:8c:f5:03:e6:5a:da:31:83:a0:df:8d:84:13:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Mar 26 10:16:47 2026 GMT Not After : Mar 29 21:40:47 2026 GMT Subject: CN=1974608B19BA04BDB1DDE8BD52483E6EA3D503D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:bc:9b:0c:bc:92:7e:f5:92:21:3e:13:1f: 78:ea:86:57:7b:35:38:f2:bf:4d:d6:3b:8a:48:18: 03:f3:40:8a:23:4e:25:47:3f:04:99:61:e2:9f:4e: e5:46:ac:29:9d:b8:d8:f4:3b:8f:9c:d7:16:08:8e: 9d:a3:15:c0:b6:c6:45:45:50:11:fc:86:1c:6a:a4: 46:f5:02:ff:b2:00:5f:34:80:1a:e1:d9:d9:fc:aa: 30:09:04:b3:4b:ac:7f:ba:bc:73:05:59:cb:d2:0d: af:c8:60:47:f0:77:7a:34:06:bc:3c:5c:22:96:81: 47:3c:83:99:50:21:d9:18:e1:b6:68:33:85:13:d2: 54:a9:c7:42:97:c9:43:0b:b0:2e:71:74:91:4f:d0: 69:f2:ff:4d:4f:4b:28:72:11:66:32:ca:04:7a:f7: 04:06:9e:fe:f0:be:5b:d0:72:28:56:7e:4d:aa:7f: fe:1c:9c:ac:e0:7c:0e:87:8f:2e:35:57:06:1a:6a: d4:44:b0:1b:94:66:df:a2:47:84:b2:fe:67:0e:76: 29:f0:2d:b1:50:1b:19:aa:0f:b1:30:79:15:88:e2: a2:b4:29:8b:c5:d9:eb:60:1d:d2:60:43:06:f8:0e: a5:d4:a2:04:ea:95:1e:f1:f9:63:58:93:47:61:ee: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:74:60:8B:19:BA:04:BD:B1:DD:E8:BD:52:48:3E:6E:A3:D5:03:D6 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a7:5b:83:f6:e9:56:1c:0b:55:58:67:9c:d1:05:de:76:4d: 95:28:0d:00:81:50:59:e7:72:45:c3:95:70:81:a9:44:d2:b3: 0f:52:be:5d:a1:e1:ac:db:03:7c:b8:84:29:35:6e:09:50:b0: ca:ea:83:91:5f:75:29:e4:e4:5d:3d:e5:1a:3a:d1:67:12:20: 70:d2:1d:65:fe:63:85:1d:34:c6:88:70:93:dd:76:2e:c1:35: 10:66:1c:fb:4c:aa:fc:1f:59:e9:07:92:f7:b7:fc:a5:ea:36: a6:66:db:a5:51:c6:48:83:a1:e4:e2:07:e5:8f:a1:38:c6:0c: 54:fd:92:23:a4:85:cd:3e:df:e2:d4:0e:c7:d7:92:05:14:53: 7e:06:a5:03:a1:33:73:62:d5:24:44:fd:5c:fb:ad:ba:af:83: 79:de:b0:8f:b9:67:d1:11:cd:bc:1d:45:0d:8f:68:f7:ff:e4: 02:40:dc:66:37:d5:5f:c9:dc:86:68:e2:21:9a:9b:43:e0:0e: 95:9a:83:0a:73:54:69:8c:f4:28:a8:a3:2c:e9:bc:eb:c7:77: 60:66:4e:04:41:7e:84:a3:e0:f2:8f:6a:9e:1d:ae:aa:de:37: dc:b7:dc:dd:a5:7d:34:a1:4b:22:30:b4:13:34:7f:98:d4:e4: f9:4b:fe:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPJZgLhZjPUD5lraMYOg342EE3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNjAzMjYxMDE2NDdaFw0yNjAzMjkyMTQwNDdaMDMxMTAvBgNV BAMTKDE5NzQ2MDhCMTlCQTA0QkRCMURERThCRDUyNDgzRTZFQTNENTAzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf27ybDLySfvWSIT4TH3jqhld7 NTjyv03WO4pIGAPzQIojTiVHPwSZYeKfTuVGrCmduNj0O4+c1xYIjp2jFcC2xkVF UBH8hhxqpEb1Av+yAF80gBrh2dn8qjAJBLNLrH+6vHMFWcvSDa/IYEfwd3o0Brw8 XCKWgUc8g5lQIdkY4bZoM4UT0lSpx0KXyUMLsC5xdJFP0Gny/01PSyhyEWYyygR6 9wQGnv7wvlvQcihWfk2qf/4cnKzgfA6Hjy41VwYaatREsBuUZt+iR4Sy/mcOdinw LbFQGxmqD7EweRWI4qK0KYvF2etgHdJgQwb4DqXUogTqlR7x+WNYk0dh7iabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXRgixm6BL2x3ei9Ukg+bqPVA9YwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFenW4P26VYcC1VYZ5zRBd52TZUoDQCBUFnn ckXDlXCBqUTSsw9Svl2h4azbA3y4hCk1bglQsMrqg5FfdSnk5F095Ro60WcSIHDS HWX+Y4UdNMaIcJPddi7BNRBmHPtMqvwfWekHkve3/KXqNqZm26VRxkiDoeTiB+WP oTjGDFT9kiOkhc0+3+LUDsfXkgUUU34GpQOhM3Ni1SRE/Vz7rbqvg3nesI+5Z9ER zbwdRQ2PaPf/5AJA3GY31V/J3IZo4iGam0PgDpWagwpzVGmM9CiooyzpvOvHd2Bm TgRBfoSj4PKPap4drqreN9y33N2lfTShSyIwtBM0f5jU5PlL/iI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:30 2026 by rpki-client