$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: DlvQF+vSPgv28k+mGvPhu4BgRJbTeYdQBw6LaQXWTHo= Subject key identifier: 19:7F:1A:D6:B7:71:17:1E:C4:93:65:13:D5:DB:60:7A:1D:2F:B2:25 Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 4F7D7E8184DB0A4FBA0FDF412FB7EC17AE615FD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: D6 Signing time: Thu 26 Mar 2026 11:12:32 +0000 Manifest this update: Thu 26 Mar 2026 11:07:32 +0000 Manifest next update: Sun 29 Mar 2026 21:52:32 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: 09bYJHRzJtmAV8irev9lSr+EcwduhV9ddggY8tEayXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 21:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7d:7e:81:84:db:0a:4f:ba:0f:df:41:2f:b7:ec:17:ae:61:5f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Mar 26 11:07:32 2026 GMT Not After : Mar 29 21:52:32 2026 GMT Subject: CN=197F1AD6B771171EC4936513D5DB607A1D2FB225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:01:af:98:c8:22:fc:a0:00:1f:e4:a5:c2: a2:b3:c4:9f:13:5c:b4:7c:94:e8:79:97:0e:bc:7e: d6:dd:54:0e:4e:c4:8f:49:dc:d8:4a:31:04:4d:d5: dc:dd:7d:54:da:2c:7a:b4:a3:84:f3:6b:5e:22:a8: a7:66:47:14:c9:0e:b3:0c:42:a1:1f:e7:6a:20:01: cf:38:f5:df:ef:8f:05:ac:49:76:0c:a5:d5:1c:79: e4:43:db:fe:e1:cd:d7:7e:b1:6d:34:07:94:03:9d: dc:d4:06:f5:74:0f:26:1e:42:60:56:52:ef:d8:11: c0:54:c8:f8:6a:02:9b:04:02:6d:1b:72:d7:48:5e: d8:3e:22:c6:f2:15:69:e2:1e:cc:93:d9:5a:89:72: cf:13:33:26:5a:4c:f0:6a:7b:df:ee:b7:39:cc:35: ba:bc:d8:ce:db:f5:d6:12:60:83:2c:0e:2f:3a:61: 9b:8d:93:f2:02:ee:ee:f4:18:ff:3e:79:b0:74:09: b6:d0:37:8b:be:b4:f5:90:bf:c1:1d:99:06:65:22: 94:f7:eb:3c:32:ca:d0:9a:c6:55:cb:e5:3e:30:ec: de:9c:6a:7a:c5:fb:3a:9d:a8:52:69:1b:24:8e:9c: 94:38:79:a8:c7:4a:07:28:ae:b8:27:1e:97:34:b1: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7F:1A:D6:B7:71:17:1E:C4:93:65:13:D5:DB:60:7A:1D:2F:B2:25 X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:0d:a4:8a:70:fc:d0:15:ad:42:8f:d4:02:e3:e1:8c:7b:5b: cd:e9:26:4f:cd:7e:27:9a:b4:e6:ff:27:7a:9f:c3:07:0f:20: fa:34:a0:44:9c:e5:9b:1c:f5:f3:14:ba:b1:ad:e4:3b:c6:28: 65:1e:c7:06:03:2c:3e:65:b2:68:f7:4e:00:3a:19:4f:a3:a5: 3e:1e:fb:b2:95:73:6e:e0:cb:b1:c0:a1:d4:6d:91:cc:c7:0f: d1:3f:a7:6b:51:a1:2e:8e:64:f1:91:1b:40:00:e4:ce:eb:b0: 2f:d4:b2:ae:45:98:be:47:bd:5a:86:f8:27:22:6d:a6:d6:c7: bb:52:f8:01:58:0c:87:cb:af:a6:b9:1c:9c:3b:f7:aa:87:79: ef:66:4c:00:2b:df:4d:58:80:99:fe:b6:1d:2d:1a:62:1a:68: 1e:f2:ff:96:7e:f9:bc:2f:13:3c:21:a3:c6:7b:f3:94:13:4b: 9a:58:e5:1b:a9:06:58:2a:f9:ed:31:74:e4:ba:74:68:07:b1: d4:20:15:f3:5e:8e:c7:08:86:f0:7d:c7:4e:6c:a7:bb:dc:0e: e6:69:d3:b3:34:7d:90:7a:74:1c:ca:3a:9b:f9:38:df:b6:a1: 20:3e:0d:f7:b3:e4:0c:57:aa:ae:19:7a:88:6d:b2:de:1f:9f: 74:2b:2c:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT31+gYTbCk+6D99BL7fsF65hX9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNjAzMjYxMTA3MzJaFw0yNjAzMjkyMTUyMzJaMDMxMTAvBgNV BAMTKDE5N0YxQUQ2Qjc3MTE3MUVDNDkzNjUxM0Q1REI2MDdBMUQyRkIyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIwGvmMgi/KAAH+SlwqKzxJ8T XLR8lOh5lw68ftbdVA5OxI9J3NhKMQRN1dzdfVTaLHq0o4Tza14iqKdmRxTJDrMM QqEf52ogAc849d/vjwWsSXYMpdUceeRD2/7hzdd+sW00B5QDndzUBvV0DyYeQmBW Uu/YEcBUyPhqApsEAm0bctdIXtg+IsbyFWniHsyT2VqJcs8TMyZaTPBqe9/utznM Nbq82M7b9dYSYIMsDi86YZuNk/IC7u70GP8+ebB0CbbQN4u+tPWQv8EdmQZlIpT3 6zwyytCaxlXL5T4w7N6canrF+zqdqFJpGySOnJQ4eajHSgcorrgnHpc0sUu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGX8a1rdxFx7Ek2UT1dtgeh0vsiUwHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOANpIpw/NAVrUKP1ALj4Yx7W83pJk/Nfiea tOb/J3qfwwcPIPo0oESc5Zsc9fMUurGt5DvGKGUexwYDLD5lsmj3TgA6GU+jpT4e +7KVc27gy7HAodRtkczHD9E/p2tRoS6OZPGRG0AA5M7rsC/Usq5FmL5HvVqG+Cci babWx7tS+AFYDIfLr6a5HJw796qHee9mTAAr301YgJn+th0tGmIaaB7y/5Z++bwv Ezwho8Z785QTS5pY5RupBlgq+e0xdOS6dGgHsdQgFfNejscIhvB9x05sp7vcDuZp 07M0fZB6dBzKOpv5ON+2oSA+Dfez5AxXqq4Zeohtst4fn3QrLM4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:40 2026 by rpki-client