$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: /py9UdhvWpnbWgaMtb4zoavw0AH385OUcQqTN76RduU= Subject key identifier: 53:07:D3:E1:96:AB:29:85:0F:E4:44:38:69:A8:73:54:F2:59:FE:03 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 08C25ECA121F91C9EB141D2C3B4AA1E66E04243A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 16:01:27 +0000 Manifest this update: Wed 25 Mar 2026 15:56:27 +0000 Manifest next update: Sun 29 Mar 2026 00:05:27 +0000 Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: jgPIk5rIZa6xpbih5aoQEmk9HqCRSXVtSbMAiCM1zPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c2:5e:ca:12:1f:91:c9:eb:14:1d:2c:3b:4a:a1:e6:6e:04:24:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Mar 25 15:56:27 2026 GMT Not After : Mar 29 00:05:27 2026 GMT Subject: CN=5307D3E196AB29850FE4443869A87354F259FE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:20:4e:53:60:3a:b4:58:69:3f:f7:1f:19: 0a:f4:96:5c:24:1a:98:9b:52:57:50:38:cb:63:0f: 95:64:7e:05:60:b1:f5:7b:d7:67:11:5d:93:78:bc: 59:f3:44:0f:b0:31:0f:da:6b:6f:49:50:79:1c:e8: 21:d9:6a:53:d0:e1:91:87:fe:31:5d:42:f8:42:d0: 3c:ea:81:04:63:65:69:b5:ea:13:c0:8a:4a:d5:41: 57:0a:5c:94:6b:ca:3b:71:a0:c6:aa:d8:f9:50:1b: 7e:38:13:56:1a:c6:6f:4d:5d:00:fc:ca:8b:39:61: ac:f4:2d:9b:b0:bf:35:77:47:c7:4b:dd:4a:56:ac: 9c:6d:11:d2:1f:be:ea:75:6f:61:08:82:48:40:2b: 0e:81:ee:0c:8f:b1:fb:0f:52:ee:b1:b5:ea:78:b8: 7b:ba:89:35:6e:75:ba:4a:6e:2b:c4:c7:75:d4:b4: 49:ef:7e:72:c1:cd:45:3c:48:c6:87:29:56:a3:f6: 6d:94:2d:74:59:11:e3:9b:fa:e0:79:9a:f6:12:39: 94:3a:68:39:57:8f:67:eb:a6:ac:ad:a9:ec:0b:68: dd:74:48:f4:6d:a5:65:6c:0f:1e:af:8f:b6:87:bf: 7c:61:49:28:a1:62:3b:a5:a7:9c:c9:a0:53:56:8e: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:07:D3:E1:96:AB:29:85:0F:E4:44:38:69:A8:73:54:F2:59:FE:03 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e8:7a:d7:09:b7:3a:32:ae:8a:f3:4b:db:ab:5e:13:e1:23: 74:c2:c3:6d:04:cf:2d:92:dd:00:3f:2c:1a:40:62:12:16:80: db:ad:ef:3e:f0:84:d6:e6:d8:d3:85:f1:48:92:65:be:d0:72: 07:83:0c:cb:0a:0b:5b:47:52:71:c7:5f:d7:88:59:f6:95:54: c1:ea:72:b9:59:59:00:1e:77:6c:ae:3b:09:d4:51:d8:58:71: d8:a5:bd:a0:5f:8e:89:d0:ea:13:77:e6:cc:3f:88:7d:93:e7: 4b:db:b2:e9:c8:6f:af:e0:90:43:05:97:33:68:dd:fc:0d:03: 1a:01:f2:6b:b7:a5:32:19:41:92:0c:92:04:6b:0d:3a:c4:5e: c2:a1:78:9f:51:b2:dd:25:d2:68:a2:4a:df:69:61:62:4f:53: a9:a7:4b:60:d3:2e:8f:78:c4:df:87:0f:4a:55:69:f3:8a:ea: 83:85:3c:64:36:20:dc:f7:2d:49:e0:ac:56:e3:59:a2:c2:e6: 15:ce:fc:1c:b8:fe:a3:09:76:af:db:16:79:4c:69:81:4d:4e: 15:0a:d8:e4:7f:ab:4d:1d:18:57:5b:7b:70:1a:71:2b:44:da: 9e:08:86:9a:f2:73:01:40:a0:8c:e6:cf:85:12:db:a5:aa:a2: 62:b7:55:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMJeyhIfkcnrFB0sO0qh5m4EJDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNjAzMjUxNTU2MjdaFw0yNjAzMjkwMDA1MjdaMDMxMTAvBgNV BAMTKDUzMDdEM0UxOTZBQjI5ODUwRkU0NDQzODY5QTg3MzU0RjI1OUZFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMSBOU2A6tFhpP/cfGQr0llwk GpibUldQOMtjD5VkfgVgsfV712cRXZN4vFnzRA+wMQ/aa29JUHkc6CHZalPQ4ZGH /jFdQvhC0DzqgQRjZWm16hPAikrVQVcKXJRryjtxoMaq2PlQG344E1Yaxm9NXQD8 yos5Yaz0LZuwvzV3R8dL3UpWrJxtEdIfvup1b2EIgkhAKw6B7gyPsfsPUu6xtep4 uHu6iTVudbpKbivEx3XUtEnvfnLBzUU8SMaHKVaj9m2ULXRZEeOb+uB5mvYSOZQ6 aDlXj2frpqytqewLaN10SPRtpWVsDx6vj7aHv3xhSSihYjulp5zJoFNWjsGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwfT4ZarKYUP5EQ4aahzVPJZ/gMwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKToetcJtzoyrorzS9urXhPhI3TCw20Ezy2S 3QA/LBpAYhIWgNut7z7whNbm2NOF8UiSZb7QcgeDDMsKC1tHUnHHX9eIWfaVVMHq crlZWQAed2yuOwnUUdhYcdilvaBfjonQ6hN35sw/iH2T50vbsunIb6/gkEMFlzNo 3fwNAxoB8mu3pTIZQZIMkgRrDTrEXsKheJ9Rst0l0miiSt9pYWJPU6mnS2DTLo94 xN+HD0pVafOK6oOFPGQ2INz3LUngrFbjWaLC5hXO/By4/qMJdq/bFnlMaYFNThUK 2OR/q00dGFdbe3AacStE2p4IhprycwFAoIzmz4US26WqomK3VYc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:20:19 2026 by rpki-client