$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: 3tx/4PLaQscC1v8KJe8ImTQNjXKM1FvUbrPzwSzpjOE= Subject key identifier: 69:DA:10:09:E3:40:A3:91:16:DF:94:E4:0D:0F:9B:35:03:B9:BF:4A Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 1177965A18C5F8B7D1AAD9610A0C3D86E236160B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0451 Signing time: Tue 24 Mar 2026 21:52:09 +0000 Manifest this update: Tue 24 Mar 2026 21:47:09 +0000 Manifest next update: Sat 28 Mar 2026 08:32:09 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: H7+HkBtBbZD79aQ05/LdO/8LNDhNE4B6pMfDasBWW5w=) 2: AS23693.roa (hash: FBMpHjde/6a2+x8/GdyZy4sCKWZKENmqWOlKpkPHPRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:77:96:5a:18:c5:f8:b7:d1:aa:d9:61:0a:0c:3d:86:e2:36:16:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Mar 24 21:47:09 2026 GMT Not After : Mar 28 08:32:09 2026 GMT Subject: CN=69DA1009E340A39116DF94E40D0F9B3503B9BF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:1e:00:dd:24:4e:f9:95:40:42:7a:b2:f8: 98:e6:cb:b0:46:8f:76:6c:58:7e:18:27:41:4c:4b: e6:ba:8c:41:d7:5f:b3:df:50:77:3f:26:6a:98:37: 7e:c7:15:fc:1e:7f:0a:b0:37:5b:1f:fa:30:c7:1f: 57:e8:40:17:e0:5b:9b:f8:6d:ab:48:d8:15:d0:4a: 8c:43:12:e9:b6:ce:d1:49:a9:83:fc:11:1c:c4:31: 2b:d2:b1:1b:f0:bf:a6:5e:61:fe:91:f5:c4:68:db: 60:bd:2a:7d:ac:d5:5c:7c:a2:69:e7:dd:ce:91:9d: e4:d4:e8:95:1d:d6:1a:0a:c4:f7:54:c6:69:83:f0: 64:cd:dc:71:ce:2c:0a:a6:f5:84:5a:5d:4e:4e:99: b1:3e:98:14:bb:93:c0:76:48:35:85:2f:66:ff:96: bf:32:8d:a6:00:36:9f:c5:58:78:01:07:81:1e:b1: 35:9c:26:6a:b5:93:79:0e:6f:63:d7:7a:6c:28:93: b6:d1:d6:1b:12:79:4c:ee:f7:f4:ff:e8:4e:52:4b: 72:90:da:35:98:68:2f:b0:0c:a7:a9:21:5b:bb:a1: 29:5d:09:7b:25:b3:37:c3:f5:f2:14:ce:a9:d3:6b: 8b:05:d8:68:4e:22:f6:b9:b5:0a:28:d0:ab:36:77: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DA:10:09:E3:40:A3:91:16:DF:94:E4:0D:0F:9B:35:03:B9:BF:4A X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4a:5f:7e:47:cb:1a:9a:9f:87:51:f5:c9:d1:32:57:a8:a2: 87:e8:52:a1:f6:73:02:4b:54:44:70:35:43:d4:21:1c:ee:4b: cb:66:46:3f:89:4e:5e:b2:0f:9a:2a:2e:e3:68:88:b6:34:bc: ad:2e:91:72:40:fb:f4:54:b1:f5:1b:23:13:ea:a5:6d:e1:b4: 2e:d3:c2:dc:b3:01:7f:93:36:76:ad:42:27:fd:59:38:cc:3e: a6:e5:09:b8:3d:2a:1b:f6:89:05:33:08:b5:f1:93:15:0a:95: 4c:49:9d:15:a6:40:74:78:4d:44:4d:3d:0c:5f:f1:13:0c:06: 9e:2c:71:11:b5:95:b4:20:5c:bc:be:2d:bd:3b:52:bb:2b:35: 93:91:47:da:5d:a4:b3:83:8e:5f:46:4a:4d:07:14:10:6a:94: 69:e4:d8:ba:fd:53:50:92:e9:0f:20:97:fa:e9:1b:71:12:15: 3d:ca:4e:d2:07:c1:8c:a8:d5:7c:15:60:b9:29:35:47:4b:af: b2:90:bb:09:ad:4a:98:52:4f:b9:14:75:5a:d9:b2:d0:a9:88: fa:c3:ed:ad:43:ea:8e:94:d3:c6:a3:08:c8:09:f6:b8:73:60: 26:5d:e4:13:e0:7a:3c:28:ba:31:d4:d5:03:69:bf:b7:ca:c3: 63:13:2f:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXeWWhjF+LfRqtlhCgw9huI2FgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNjAzMjQyMTQ3MDlaFw0yNjAzMjgwODMyMDlaMDMxMTAvBgNV BAMTKDY5REExMDA5RTM0MEEzOTExNkRGOTRFNDBEMEY5QjM1MDNCOUJGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dx4A3SRO+ZVAQnqy+Jjmy7BG j3ZsWH4YJ0FMS+a6jEHXX7PfUHc/JmqYN37HFfwefwqwN1sf+jDHH1foQBfgW5v4 batI2BXQSoxDEum2ztFJqYP8ERzEMSvSsRvwv6ZeYf6R9cRo22C9Kn2s1Vx8omnn 3c6RneTU6JUd1hoKxPdUxmmD8GTN3HHOLAqm9YRaXU5OmbE+mBS7k8B2SDWFL2b/ lr8yjaYANp/FWHgBB4EesTWcJmq1k3kOb2PXemwok7bR1hsSeUzu9/T/6E5SS3KQ 2jWYaC+wDKepIVu7oSldCXslszfD9fIUzqnTa4sF2GhOIva5tQoo0Ks2d7GpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadoQCeNAo5EW35TkDQ+bNQO5v0owHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRKX35Hyxqan4dR9cnRMleooofoUqH2cwJL VERwNUPUIRzuS8tmRj+JTl6yD5oqLuNoiLY0vK0ukXJA+/RUsfUbIxPqpW3htC7T wtyzAX+TNnatQif9WTjMPqblCbg9Khv2iQUzCLXxkxUKlUxJnRWmQHR4TURNPQxf 8RMMBp4scRG1lbQgXLy+Lb07UrsrNZORR9pdpLODjl9GSk0HFBBqlGnk2Lr9U1CS 6Q8gl/rpG3ESFT3KTtIHwYyo1XwVYLkpNUdLr7KQuwmtSphST7kUdVrZstCpiPrD 7a1D6o6U08ajCMgJ9rhzYCZd5BPgejwoujHU1QNpv7fKw2MTL3o= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:32 2026 by rpki-client