$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: rN4Azcmpa7bgN2gUs08+/RHvde4eBJdSv6VJNZTjgeQ= Subject key identifier: D2:8A:57:91:8E:1D:38:01:40:B1:DE:D2:98:40:32:D5:7C:B9:90:D3 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 773416FC5EB3B999EC47F229C03FA6E770A81009 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 010D Signing time: Tue 24 Mar 2026 10:20:53 +0000 Manifest this update: Tue 24 Mar 2026 10:15:53 +0000 Manifest next update: Fri 27 Mar 2026 19:38:53 +0000 Files and hashes: 1: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: X+2IDiSlZtK1IIrABj/gPu3Szv9Z3NiMB7akkq4SQdU=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:34:16:fc:5e:b3:b9:99:ec:47:f2:29:c0:3f:a6:e7:70:a8:10:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Mar 24 10:15:53 2026 GMT Not After : Mar 27 19:38:53 2026 GMT Subject: CN=D28A57918E1D380140B1DED2984032D57CB990D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:57:4c:9a:07:70:a7:f3:72:96:24:df:d3: 65:5c:53:af:14:b0:bb:d9:e0:8b:b2:da:29:36:8e: 38:79:a2:ca:0a:90:18:2f:38:27:c8:31:35:a3:b3: a2:ea:a3:e9:ba:6b:4d:20:d7:de:6e:5e:3e:d4:2b: eb:ba:b8:b7:b5:2f:20:c6:9d:b0:d7:16:01:43:72: 31:7d:5a:2b:19:eb:f0:24:ef:c9:f8:ec:6b:9c:1a: 2a:da:0b:0c:a5:29:36:f4:90:ba:8a:4b:3b:56:48: 44:7e:55:45:7b:38:f3:e3:e4:13:4f:98:a9:b4:a6: 77:99:e2:1e:90:f1:e3:90:dd:4e:99:7c:f1:1d:3b: 38:9d:d2:a3:f0:b7:87:0d:bd:34:c4:8b:78:35:e5: ad:c1:7f:f6:b6:8f:95:3a:da:35:d6:c9:db:92:b2: 1c:15:d8:29:6e:fb:f5:26:a3:82:63:69:7d:bd:c9: 47:f2:a4:6f:80:51:72:5f:c1:81:5a:58:49:0a:d3: d3:ef:e3:b1:8b:91:3a:03:76:27:bd:10:f1:9a:7b: 70:be:e1:83:93:a7:60:99:65:a2:64:7c:f0:28:76: 0b:f0:4a:dc:4d:e8:f2:cb:46:33:66:94:b2:a5:b2: 99:c0:7a:92:8e:c8:e1:f2:7f:cb:3c:98:47:99:27: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8A:57:91:8E:1D:38:01:40:B1:DE:D2:98:40:32:D5:7C:B9:90:D3 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7f:70:68:45:f5:40:e0:36:d3:6b:25:5e:4a:14:2e:0c:d4: 2c:17:d1:07:b0:18:83:32:dc:76:f9:33:3c:48:17:13:6c:96: e8:45:e0:28:c1:81:f8:08:93:23:97:a7:4b:5a:25:60:00:1e: d6:e5:11:e5:d2:3d:6b:e7:9a:51:50:c9:16:79:46:df:6a:3f: 70:1a:b5:86:37:96:38:b9:1a:ee:b4:5d:51:24:c0:1f:66:07: f7:61:11:c7:81:20:de:79:1b:fb:b6:2c:85:31:0e:be:96:fe: 3a:fc:ef:4a:cc:30:02:33:e7:6c:8b:ff:b8:b9:16:04:71:94: 73:08:7c:fa:5c:7f:5c:1d:8e:ac:20:db:8f:89:94:38:d3:58: f7:ab:9c:41:e2:6b:84:2e:4b:35:4e:a1:39:35:88:09:f1:85: 26:3c:16:03:d0:3f:da:23:80:5c:fa:64:e3:17:8a:92:da:9b: a0:ee:aa:ed:22:9f:22:e8:97:e1:6f:4f:f7:31:54:98:b0:4e: 9b:76:4d:54:85:c9:c4:b8:38:7b:49:69:25:10:33:10:3c:d4: ee:3d:5a:d4:3a:bb:8e:cf:01:92:b1:b4:1b:c2:c6:45:97:46: 8a:2b:53:e8:6c:17:81:59:25:eb:32:f7:20:dd:aa:2e:35:d4: 6c:38:80:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzQW/F6zuZnsR/IpwD+m53CoEAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNjAzMjQxMDE1NTNaFw0yNjAzMjcxOTM4NTNaMDMxMTAvBgNV BAMTKEQyOEE1NzkxOEUxRDM4MDE0MEIxREVEMjk4NDAzMkQ1N0NCOTkwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zFdMmgdwp/NyliTf02VcU68U sLvZ4Iuy2ik2jjh5osoKkBgvOCfIMTWjs6Lqo+m6a00g195uXj7UK+u6uLe1LyDG nbDXFgFDcjF9WisZ6/Ak78n47GucGiraCwylKTb0kLqKSztWSER+VUV7OPPj5BNP mKm0pneZ4h6Q8eOQ3U6ZfPEdOzid0qPwt4cNvTTEi3g15a3Bf/a2j5U62jXWyduS shwV2Clu+/Umo4JjaX29yUfypG+AUXJfwYFaWEkK09Pv47GLkToDdie9EPGae3C+ 4YOTp2CZZaJkfPAodgvwStxN6PLLRjNmlLKlspnAepKOyOHyf8s8mEeZJyalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0opXkY4dOAFAsd7SmEAy1Xy5kNMwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ/cGhF9UDgNtNrJV5KFC4M1CwX0QewGIMy 3Hb5MzxIFxNsluhF4CjBgfgIkyOXp0taJWAAHtblEeXSPWvnmlFQyRZ5Rt9qP3Aa tYY3lji5Gu60XVEkwB9mB/dhEceBIN55G/u2LIUxDr6W/jr870rMMAIz52yL/7i5 FgRxlHMIfPpcf1wdjqwg24+JlDjTWPernEHia4QuSzVOoTk1iAnxhSY8FgPQP9oj gFz6ZOMXipLam6Duqu0inyLol+FvT/cxVJiwTpt2TVSFycS4OHtJaSUQMxA81O49 WtQ6u47PAZKxtBvCxkWXRoorU+hsF4FZJesy9yDdqi411Gw4gPM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:14 2026 by rpki-client