$ rpki-client -vvf repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft File: 668C2397879176FD00D1A4949BAF8C1D8E764166.mft (raw, json) Hash identifier: tERZ76Z2OfOl0Q9PVGkNzUI2/ce9XazP9PS58ZtgpJM= Subject key identifier: B4:65:16:05:E1:1B:60:65:2E:4A:A5:80:7E:9E:B0:28:4D:76:DE:7A Authority key identifier: 66:8C:23:97:87:91:76:FD:00:D1:A4:94:9B:AF:8C:1D:8E:76:41:66 Certificate issuer: /CN=668C2397879176FD00D1A4949BAF8C1D8E764166 Certificate serial: 39B5B35F51A2BE91A3C943751EE7C069D666A076 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/668C2397879176FD00D1A4949BAF8C1D8E764166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft Manifest number: 0D Signing time: Thu 26 Mar 2026 07:31:14 +0000 Manifest this update: Thu 26 Mar 2026 07:26:14 +0000 Manifest next update: Sun 29 Mar 2026 09:26:14 +0000 Files and hashes: 1: 668C2397879176FD00D1A4949BAF8C1D8E764166.crl (hash: jIgQY5GKrSzM+ambPC+8djbugKH9swKVfdCt9nQuMbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.crl rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/668C2397879176FD00D1A4949BAF8C1D8E764166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b5:b3:5f:51:a2:be:91:a3:c9:43:75:1e:e7:c0:69:d6:66:a0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668C2397879176FD00D1A4949BAF8C1D8E764166 Validity Not Before: Mar 26 07:26:14 2026 GMT Not After : Mar 29 09:26:14 2026 GMT Subject: CN=B4651605E11B60652E4AA5807E9EB0284D76DE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:94:fd:ea:06:3c:f9:eb:56:f7:b5:37:b2: cf:8c:1b:1d:94:e1:75:91:58:5f:2a:e1:76:00:8c: f9:df:f7:9d:d7:3a:17:43:db:ae:e8:73:53:ea:68: ac:40:04:77:21:6d:2a:06:82:47:05:8d:e9:93:20: 1d:6c:98:4d:6e:1a:d7:bb:29:aa:3f:33:b9:08:23: c4:8d:74:90:03:ef:11:f0:93:8e:07:b0:6e:c3:45: fd:ea:ea:42:c3:60:59:12:b7:a8:35:fb:8c:14:ab: ec:19:42:68:ad:69:ad:c0:0d:0d:32:a6:ce:4c:5c: 99:5a:4e:06:e8:cc:14:18:d7:93:82:e7:45:6f:c2: 96:3e:0e:7b:e0:3d:e4:af:68:a8:e2:48:a0:de:ed: e0:2a:35:45:4e:2a:b5:6b:d6:98:cd:1b:3d:eb:a7: 5a:24:e8:c0:97:06:d4:56:3d:89:f9:32:c9:16:c2: 04:b5:93:83:61:df:25:53:7d:d3:e0:f4:69:f1:9e: 7c:4f:08:92:08:db:f6:ff:39:1a:4a:9c:d8:ae:10: e2:3e:93:19:b3:87:13:8f:16:65:1f:89:b9:1f:06: b5:63:d0:f5:62:f0:8e:c9:63:fe:d3:c0:00:07:29: 6e:f9:ed:6b:19:4c:5e:79:0a:f3:17:0e:a3:6b:32: fa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:16:05:E1:1B:60:65:2E:4A:A5:80:7E:9E:B0:28:4D:76:DE:7A X509v3 Authority Key Identifier: keyid:66:8C:23:97:87:91:76:FD:00:D1:A4:94:9B:AF:8C:1D:8E:76:41:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/668C2397879176FD00D1A4949BAF8C1D8E764166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d8:ee:09:f6:d6:16:56:74:f9:e0:b9:f5:21:f5:19:3f:55: 50:7a:74:1c:ed:e4:0b:91:03:e9:2e:41:8f:e3:b3:44:bc:a7: c6:d1:99:0c:e3:e1:1e:bf:ac:92:8f:df:5c:9c:23:80:3f:c4: 0a:ec:11:60:11:f1:63:a5:2f:ee:b5:a1:d3:a0:ab:2f:9b:35: d7:40:a8:20:36:d1:d7:ea:be:dc:4c:a1:ae:cb:fb:38:e3:05: c8:6d:58:8d:dc:86:1a:fc:e3:74:b8:08:52:14:74:96:98:12: 92:dd:a3:3f:c7:c0:aa:27:32:e5:e4:8a:5a:1e:67:a7:55:80: 3c:34:d7:8c:0a:34:e5:bf:c3:61:3c:dc:f6:99:8f:9b:29:9f: 84:f6:9e:8a:92:4d:03:75:0b:70:b5:66:ab:49:bd:8c:08:4f: 23:58:fb:cb:95:76:1d:a1:5f:08:4b:91:53:0c:14:e3:67:a7: a9:be:d1:03:83:44:fe:c7:dc:fb:be:25:31:39:bd:9f:0b:b4: 3b:5d:68:49:d5:a5:a4:ec:65:69:f5:d3:2f:21:bd:d0:dd:c9: b7:d6:f3:f8:cb:eb:c3:eb:d9:91:a0:87:76:eb:53:c7:7d:5d: 31:0a:e6:e1:b1:47:52:d4:b0:8d:0b:59:14:7b:6f:95:8a:8e: 53:4c:23:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObWzX1GivpGjyUN1HufAadZmoHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY4QzIzOTc4NzkxNzZGRDAwRDFBNDk0OUJBRjhDMUQ4 RTc2NDE2NjAeFw0yNjAzMjYwNzI2MTRaFw0yNjAzMjkwOTI2MTRaMDMxMTAvBgNV BAMTKEI0NjUxNjA1RTExQjYwNjUyRTRBQTU4MDdFOUVCMDI4NEQ3NkRFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8ZT96gY8+etW97U3ss+MGx2U 4XWRWF8q4XYAjPnf953XOhdD267oc1PqaKxABHchbSoGgkcFjemTIB1smE1uGte7 Kao/M7kII8SNdJAD7xHwk44HsG7DRf3q6kLDYFkSt6g1+4wUq+wZQmitaa3ADQ0y ps5MXJlaTgbozBQY15OC50VvwpY+DnvgPeSvaKjiSKDe7eAqNUVOKrVr1pjNGz3r p1ok6MCXBtRWPYn5MskWwgS1k4Nh3yVTfdPg9GnxnnxPCJII2/b/ORpKnNiuEOI+ kxmzhxOPFmUfibkfBrVj0PVi8I7JY/7TwAAHKW757WsZTF55CvMXDqNrMvo1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtGUWBeEbYGUuSqWAfp6wKE123nowHwYDVR0j BBgwFoAUZowjl4eRdv0A0aSUm6+MHY52QWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YmRlM2E0Mi02MjcyLTRiNmMtYWQ4MS1jY2NmYmU5NDg4YzAvMC82NjhDMjM5Nzg3 OTE3NkZEMDBEMUE0OTQ5QkFGOEMxRDhFNzY0MTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY4QzIzOTc4NzkxNzZGRDAwRDFBNDk0OUJBRjhDMUQ4RTc2 NDE2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvNjY4QzIzOTc4NzkxNzZGRDAwRDFBNDk0OUJBRjhD MUQ4RTc2NDE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPY7gn21hZWdPngufUh9Rk/VVB6dBzt5AuR A+kuQY/js0S8p8bRmQzj4R6/rJKP31ycI4A/xArsEWAR8WOlL+61odOgqy+bNddA qCA20dfqvtxMoa7L+zjjBchtWI3chhr843S4CFIUdJaYEpLdoz/HwKonMuXkiloe Z6dVgDw014wKNOW/w2E83PaZj5spn4T2noqSTQN1C3C1ZqtJvYwITyNY+8uVdh2h XwhLkVMMFONnp6m+0QODRP7H3Pu+JTE5vZ8LtDtdaEnVpaTsZWn10y8hvdDdybfW 8/jL68Pr2ZGgh3brU8d9XTEK5uGxR1LUsI0LWRR7b5WKjlNMI50= -----END CERTIFICATE-----Generated at Thu Mar 26 17:13:23 2026 by rpki-client