$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: qAB/wupIhb7Jlr6/023Ea3o5JH5yVtcngy+QBo+JfMY= Subject key identifier: EB:02:55:7F:CC:C0:3B:B9:08:BF:08:6D:34:53:03:9C:C1:F1:1F:66 Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 7D77EAB326717B092F005AA5AE3285DDC54C9B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 052D Signing time: Tue 24 Mar 2026 23:32:41 +0000 Manifest this update: Tue 24 Mar 2026 23:27:40 +0000 Manifest next update: Sat 28 Mar 2026 09:28:40 +0000 Files and hashes: 1: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: sZ7Y9HidNwNbLqaWtw5ljbRqMh/n0NpDyP/tNJF266g=) 2: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: fr5BMGMZ4/JWAtuc82Bwpon8VOaBOapImuPEr/qDXGY=) 3: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: AqVeGkcCeQqSSxTzFMHfgh7oeb2WJE9ZcEpymir7iqI=) 4: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: QmUK5t+kPBhbRYikNscX9LWrBhBp5pP7CeGdlMn53Do=) 5: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: rdX2P/62Fs2A7bSHrzzBOblACv/dlOvxDsyqbDOTmes=) 6: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: F8ud1+J+KLKpS8C7Ql14isFVnwOE5LwXWjI2N3cuDyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:77:ea:b3:26:71:7b:09:2f:00:5a:a5:ae:32:85:dd:c5:4c:9b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Mar 24 23:27:40 2026 GMT Not After : Mar 28 09:28:40 2026 GMT Subject: CN=EB02557FCCC03BB908BF086D3453039CC1F11F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:e8:84:64:0c:7b:cb:a2:31:3f:f8:eb:82: aa:9a:87:8c:20:8b:fc:48:97:46:f1:df:9f:b8:08: ed:b3:aa:fd:24:fd:b1:6f:8e:31:84:70:32:0f:48: 07:16:ca:31:ea:fc:b2:dd:a6:21:34:20:87:3f:c3: c8:22:75:04:d7:91:57:b9:09:f6:80:48:7a:e1:24: 6d:0e:8d:80:f4:68:42:55:bd:45:f0:1f:59:93:ca: d2:38:fc:a7:d5:96:c5:9a:03:7d:4d:b1:2d:8a:60: fc:55:4a:6a:b0:1d:25:bc:bb:78:0e:44:5a:9d:76: 25:68:c6:1a:12:ec:95:46:5a:f1:51:5b:ce:ad:ee: 66:16:dc:ef:e2:54:1a:60:5d:4e:0f:91:fc:c1:de: 18:e1:7d:45:53:b3:60:1a:c6:a2:61:45:dc:ea:4d: 69:b3:50:93:52:76:7e:59:5f:87:ba:45:ce:05:c1: 74:8a:e3:40:7e:c6:bd:ba:ab:21:2d:80:ac:18:33: 93:7d:db:82:cf:2e:78:7b:1e:90:14:45:60:fd:22: ce:36:1b:90:59:64:a3:6c:44:e9:64:cf:53:f7:d7: 1f:f8:a9:32:c9:7e:3b:e7:61:03:4f:ed:5b:f1:92: 0e:16:aa:c1:7d:22:8d:8a:3a:4f:e2:74:81:26:38: f2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:55:7F:CC:C0:3B:B9:08:BF:08:6D:34:53:03:9C:C1:F1:1F:66 X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:af:4c:c6:2a:b5:5d:35:62:26:77:07:e7:f6:46:93:45:ee: 08:d6:1e:16:bf:5a:83:83:80:1e:9a:60:d2:0d:ff:2f:ee:9b: b1:cf:86:68:65:b4:ee:c4:96:bb:58:31:fa:21:28:7d:3f:37: 62:d3:c1:de:ca:b9:15:25:8e:c2:7d:da:c0:79:ff:8c:73:18: 1a:a6:48:10:fe:e9:18:2f:fa:95:75:bc:1c:91:af:87:ee:c3: 06:9e:dc:f2:b2:9b:06:fb:56:40:49:a5:e2:3d:1d:e6:5c:8f: 80:08:ac:b4:0e:0d:96:93:02:66:23:35:11:bf:2b:b8:7c:39: c0:f4:2b:46:97:85:28:84:13:f4:2d:db:1d:ce:c6:68:91:a5: fa:ba:57:97:1c:d7:33:c5:01:98:76:26:b9:21:94:15:e8:d2: ef:04:1e:9a:20:4d:7d:58:7f:27:27:a1:18:a9:4f:de:22:9a: 34:64:a1:ba:a4:12:b7:a5:d8:45:85:ea:16:be:0c:e5:cf:a5: e4:70:a3:c8:d0:8f:90:30:12:f3:a2:3d:1a:4f:df:22:56:31: 5c:8e:51:86:32:0a:41:1f:ab:c7:e0:ac:70:e7:fa:82:25:db: 87:10:5a:7b:cf:d9:3a:c2:ef:45:cd:c2:be:96:5e:fa:c3:b2: 36:8e:4c:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXfqsyZxewkvAFqlrjKF3cVMm3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNjAzMjQyMzI3NDBaFw0yNjAzMjgwOTI4NDBaMDMxMTAvBgNV BAMTKEVCMDI1NTdGQ0NDMDNCQjkwOEJGMDg2RDM0NTMwMzlDQzFGMTFGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdOiEZAx7y6IxP/jrgqqah4wg i/xIl0bx35+4CO2zqv0k/bFvjjGEcDIPSAcWyjHq/LLdpiE0IIc/w8gidQTXkVe5 CfaASHrhJG0OjYD0aEJVvUXwH1mTytI4/KfVlsWaA31NsS2KYPxVSmqwHSW8u3gO RFqddiVoxhoS7JVGWvFRW86t7mYW3O/iVBpgXU4PkfzB3hjhfUVTs2AaxqJhRdzq TWmzUJNSdn5ZX4e6Rc4FwXSK40B+xr26qyEtgKwYM5N924LPLnh7HpAURWD9Is42 G5BZZKNsROlkz1P31x/4qTLJfjvnYQNP7Vvxkg4WqsF9Io2KOk/idIEmOPIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wJVf8zAO7kIvwhtNFMDnMHxH2YwHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSvTMYqtV01YiZ3B+f2RpNF7gjWHha/WoOD gB6aYNIN/y/um7HPhmhltO7ElrtYMfohKH0/N2LTwd7KuRUljsJ92sB5/4xzGBqm SBD+6Rgv+pV1vByRr4fuwwae3PKymwb7VkBJpeI9HeZcj4AIrLQODZaTAmYjNRG/ K7h8OcD0K0aXhSiEE/Qt2x3OxmiRpfq6V5cc1zPFAZh2JrkhlBXo0u8EHpogTX1Y fycnoRipT94imjRkobqkErel2EWF6ha+DOXPpeRwo8jQj5AwEvOiPRpP3yJWMVyO UYYyCkEfq8fgrHDn+oIl24cQWnvP2TrC70XNwr6WXvrDsjaOTOw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:15 2026 by rpki-client