$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: mZUxVaQE3DQ/93f+GlmmNnnVxtJIw4Ehg26gLsXAXSI= Subject key identifier: 22:83:65:99:72:67:3D:6C:F7:72:33:2A:0A:EF:62:51:DB:31:42:D3 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 0938D68C8EA5CDE35EF3C6FE207AA54BED0730EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 0130 Signing time: Wed 25 Mar 2026 13:02:31 +0000 Manifest this update: Wed 25 Mar 2026 12:57:31 +0000 Manifest next update: Sat 28 Mar 2026 20:07:31 +0000 Files and hashes: 1: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: DAEZf484oiytuZ3YB/D566s+eMD2M6dhetvCYYmmsKY=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: C1DugQVHSreAgPaO3qUxUKJqTe7dreglrdn7g96ChCQ=) 3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: GS37UgKoAc3KvOEONc+556OFtKgxYxE3OI9Ca5fmaDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:d6:8c:8e:a5:cd:e3:5e:f3:c6:fe:20:7a:a5:4b:ed:07:30:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Mar 25 12:57:31 2026 GMT Not After : Mar 28 20:07:31 2026 GMT Subject: CN=2283659972673D6CF772332A0AEF6251DB3142D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b6:bd:29:4b:4f:c6:b7:31:f2:ec:bd:9d:fa: 93:f1:c3:9e:2a:79:a7:6d:c1:24:26:1f:df:85:6d: 42:40:2a:ae:8e:6a:73:d1:c8:dd:cf:e7:d2:ea:96: c2:5e:71:d1:35:f1:bc:fc:6e:70:4c:06:ac:b1:bb: 58:5c:a4:96:00:c8:36:cf:f5:b5:62:a8:e1:c6:cf: 09:e7:86:ce:30:a8:f8:1e:c9:a6:dd:71:5d:be:6e: b0:7c:7c:0d:00:aa:5a:57:d7:c9:cd:8c:bd:dd:c6: 02:e6:f9:79:2b:fd:a4:4e:2a:70:22:b1:6c:0f:eb: da:ea:c3:0a:d7:99:a5:ff:b8:0f:d4:c1:5b:4a:73: 7e:0c:b9:5c:ae:f9:1c:0d:d7:ab:26:dd:ff:20:de: 10:87:c4:0d:a8:8c:ff:12:e5:33:71:bd:e8:87:bd: 85:d6:58:79:79:d0:94:1a:de:c6:61:3f:49:9e:ce: 8f:d2:79:55:7e:09:01:ff:ee:5e:4b:97:1a:16:77: a5:05:6b:03:04:85:e4:9e:8d:2d:4e:87:94:32:7f: 63:01:ac:d5:4a:ba:3a:41:99:8b:17:96:95:c8:3e: 41:9e:0d:ed:87:cd:ac:42:fd:16:5e:e1:6b:c6:67: 65:13:ba:f0:ec:4b:95:8a:d8:42:71:87:e6:35:12: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:83:65:99:72:67:3D:6C:F7:72:33:2A:0A:EF:62:51:DB:31:42:D3 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9b:dc:50:1c:3a:d9:bc:67:c3:7f:af:da:8f:d5:bf:4a:03: a9:e0:d4:ac:c6:5e:7c:0d:f2:8f:6b:d6:6c:cd:ed:f2:73:7f: 66:e8:5a:e9:3d:7a:72:9b:b0:8c:49:a6:51:5e:5f:df:c0:36: 86:5b:bd:51:2d:fb:e0:94:a9:c6:32:a7:34:7b:13:bb:8c:b7: d8:5a:24:da:b5:0b:63:40:4f:92:9b:b6:29:48:5d:47:3d:26: 83:07:35:ec:0e:97:63:45:d0:27:3a:f1:37:39:8c:bd:75:20: 9f:a1:c7:ff:b0:fe:76:44:e6:06:07:62:24:8c:e8:5c:05:d2: 23:3c:be:0e:eb:8d:55:0c:5e:c7:f0:69:61:6f:cd:c6:44:9e: 1b:b8:e8:03:fa:ed:83:af:5e:16:6c:24:db:43:fb:c0:53:69: 07:54:f8:ea:b1:73:3c:d3:1a:3c:55:16:2f:f4:fa:fa:8a:fe: e9:bc:cf:99:c0:f3:70:d3:a8:18:2d:61:c5:4f:ef:db:30:da: 51:bd:5c:ec:8c:0c:ae:72:6c:3e:e1:a5:d9:48:c8:34:37:6a: 10:5a:dc:0c:d8:58:71:a6:53:c5:7f:b1:da:6e:21:4d:69:1a: ee:b5:4c:7e:e6:22:b8:d9:99:64:89:39:09:b4:71:3c:19:dc: ee:14:a9:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTjWjI6lzeNe88b+IHqlS+0HMO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNjAzMjUxMjU3MzFaFw0yNjAzMjgyMDA3MzFaMDMxMTAvBgNV BAMTKDIyODM2NTk5NzI2NzNENkNGNzcyMzMyQTBBRUY2MjUxREIzMTQyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDutr0pS0/GtzHy7L2d+pPxw54q eadtwSQmH9+FbUJAKq6OanPRyN3P59LqlsJecdE18bz8bnBMBqyxu1hcpJYAyDbP 9bViqOHGzwnnhs4wqPgeyabdcV2+brB8fA0AqlpX18nNjL3dxgLm+Xkr/aROKnAi sWwP69rqwwrXmaX/uA/UwVtKc34MuVyu+RwN16sm3f8g3hCHxA2ojP8S5TNxveiH vYXWWHl50JQa3sZhP0mezo/SeVV+CQH/7l5LlxoWd6UFawMEheSejS1Oh5Qyf2MB rNVKujpBmYsXlpXIPkGeDe2HzaxC/RZe4WvGZ2UTuvDsS5WK2EJxh+Y1Eu+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIoNlmXJnPWz3cjMqCu9iUdsxQtMwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFib3FAcOtm8Z8N/r9qP1b9KA6ng1KzGXnwN 8o9r1mzN7fJzf2boWuk9enKbsIxJplFeX9/ANoZbvVEt++CUqcYypzR7E7uMt9ha JNq1C2NAT5KbtilIXUc9JoMHNewOl2NF0Cc68Tc5jL11IJ+hx/+w/nZE5gYHYiSM 6FwF0iM8vg7rjVUMXsfwaWFvzcZEnhu46AP67YOvXhZsJNtD+8BTaQdU+OqxczzT GjxVFi/0+vqK/um8z5nA83DTqBgtYcVP79sw2lG9XOyMDK5ybD7hpdlIyDQ3ahBa 3AzYWHGmU8V/sdpuIU1pGu61TH7mIrjZmWSJOQm0cTwZ3O4UqSU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:09 2026 by rpki-client