$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: /M0UBFNylPm+khxQID/LML3DATTfCMB4mqcaf2vx3rw= Subject key identifier: 4A:98:69:D1:A1:FE:F0:6E:2C:AD:44:AF:30:DC:C4:F0:CA:77:8A:50 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 626CA41AE2291536FE78A0848B13DAF2010AE83D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 055E Signing time: Thu 26 Mar 2026 16:01:57 +0000 Manifest this update: Thu 26 Mar 2026 15:56:57 +0000 Manifest next update: Sun 29 Mar 2026 21:40:57 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: IwCuAFf97V9sNZ3aGOMpmioPcFP2/iUC4mTrZqYdpeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6c:a4:1a:e2:29:15:36:fe:78:a0:84:8b:13:da:f2:01:0a:e8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Mar 26 15:56:57 2026 GMT Not After : Mar 29 21:40:57 2026 GMT Subject: CN=4A9869D1A1FEF06E2CAD44AF30DCC4F0CA778A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:32:9e:ee:3c:3b:76:a7:85:a7:cc:87:31: 92:7c:33:5b:ac:45:3f:80:56:c1:e4:4e:89:d4:99: 53:f6:36:0a:d7:43:e9:00:a9:b1:13:d8:35:41:9b: e9:e0:e2:31:d0:f7:16:fb:7d:4f:9e:ab:50:16:d8: 15:c1:56:5d:9d:b4:70:c6:79:b3:52:24:01:4d:eb: 4d:4e:a7:9d:60:9c:f2:33:af:58:77:81:f3:83:06: ab:90:61:d4:1a:ae:13:f2:44:af:c1:d4:41:55:71: 76:f4:60:d0:69:58:82:d2:3c:3d:b1:99:3f:8b:96: 61:61:90:ba:a3:87:a4:ca:b4:2a:82:df:78:a7:38: 4d:c6:1b:ef:62:d0:03:a2:a0:16:22:df:10:7b:a9: 6c:78:35:db:d1:25:8d:fb:ab:67:1c:47:88:7d:02: 96:5d:6e:71:20:30:1c:21:45:78:69:d5:a4:af:71: 3f:78:31:f1:58:5b:36:72:cc:24:55:da:04:15:96: 1b:de:67:75:77:10:8a:20:6c:6b:c1:94:5d:87:20: 4a:30:74:64:5f:1f:a6:54:ff:41:ab:85:8f:99:6b: 6b:23:a8:04:5f:b4:43:20:cc:3b:a0:d4:75:6c:68: 4b:97:ac:91:69:0a:a3:bf:36:9b:d5:77:3b:70:21: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:98:69:D1:A1:FE:F0:6E:2C:AD:44:AF:30:DC:C4:F0:CA:77:8A:50 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:38:21:9c:1b:70:16:fd:66:6d:b0:ca:c0:bd:34:d8:10:4b: 2a:ff:01:4e:9f:fd:ab:69:1b:e3:07:1a:5d:e7:71:68:fd:1d: 9b:74:30:4d:7e:01:1c:3d:a3:16:bc:83:19:e2:14:93:05:81: af:30:c4:ab:da:b0:e5:a9:75:7e:0b:b5:b5:54:09:0b:db:9e: dd:d2:89:bb:54:c1:a5:57:b8:a6:c3:ad:02:a2:e9:18:30:73: b6:d2:2e:51:d2:33:3b:73:37:e2:8c:bd:9b:a6:e7:7b:d0:28: af:c2:3c:f6:39:d0:3d:13:3e:de:b6:29:c0:07:ee:7b:c6:0e: 47:66:62:d0:49:45:d7:9e:b7:e0:fa:6c:45:0c:0a:da:6a:09: ac:6f:73:3b:35:19:6f:7f:fa:28:7a:0f:bc:a5:40:5f:85:04: ae:60:2b:c9:64:e2:1a:55:26:75:61:08:7b:a1:29:99:09:7c: e7:b3:87:08:23:35:f3:88:5c:5a:f1:05:c6:61:b2:ee:4c:2f: 6d:64:8a:51:35:fb:78:bf:d1:7c:d1:b5:a9:92:39:6e:29:2c: 4f:01:98:e6:2a:60:29:da:bd:20:ed:65:81:5d:d4:35:7f:cc: 40:5a:66:28:95:01:f9:99:7c:f3:a0:69:85:37:74:9e:54:5f: 15:b0:bc:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmykGuIpFTb+eKCEixPa8gEK6D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNjAzMjYxNTU2NTdaFw0yNjAzMjkyMTQwNTdaMDMxMTAvBgNV BAMTKDRBOTg2OUQxQTFGRUYwNkUyQ0FENDRBRjMwRENDNEYwQ0E3NzhBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPzKe7jw7dqeFp8yHMZJ8M1us RT+AVsHkTonUmVP2NgrXQ+kAqbET2DVBm+ng4jHQ9xb7fU+eq1AW2BXBVl2dtHDG ebNSJAFN601Op51gnPIzr1h3gfODBquQYdQarhPyRK/B1EFVcXb0YNBpWILSPD2x mT+LlmFhkLqjh6TKtCqC33inOE3GG+9i0AOioBYi3xB7qWx4NdvRJY37q2ccR4h9 ApZdbnEgMBwhRXhp1aSvcT94MfFYWzZyzCRV2gQVlhveZ3V3EIogbGvBlF2HIEow dGRfH6ZU/0GrhY+Za2sjqARftEMgzDug1HVsaEuXrJFpCqO/NpvVdztwIdDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSphp0aH+8G4srUSvMNzE8Mp3ilAwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGU4IZwbcBb9Zm2wysC9NNgQSyr/AU6f/atp G+MHGl3ncWj9HZt0ME1+ARw9oxa8gxniFJMFga8wxKvasOWpdX4LtbVUCQvbnt3S ibtUwaVXuKbDrQKi6Rgwc7bSLlHSMztzN+KMvZum53vQKK/CPPY50D0TPt62KcAH 7nvGDkdmYtBJRdeet+D6bEUMCtpqCaxvczs1GW9/+ih6D7ylQF+FBK5gK8lk4hpV JnVhCHuhKZkJfOezhwgjNfOIXFrxBcZhsu5ML21kilE1+3i/0XzRtamSOW4pLE8B mOYqYCnavSDtZYFd1DV/zEBaZiiVAfmZfPOgaYU3dJ5UXxWwvMg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:43 2026 by rpki-client