$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: WAPrZ4Re5X+5MzREzsG0YDfxI5HrbF+iKCzA9HRaV4I= Subject key identifier: FA:5C:B0:E7:18:2A:E7:E2:DE:77:BF:2A:F1:C0:8F:06:F7:A1:E9:69 Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 38ED61F82D12021E814240E220A3EFBB39BECDAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: 0163 Signing time: Wed 25 Mar 2026 12:22:21 +0000 Manifest this update: Wed 25 Mar 2026 12:17:21 +0000 Manifest next update: Sat 28 Mar 2026 17:59:21 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: g6Y/GOcssPwHL/lC5psDavBWHOdtscVa0rQ/sdKA9FY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ed:61:f8:2d:12:02:1e:81:42:40:e2:20:a3:ef:bb:39:be:cd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: Mar 25 12:17:21 2026 GMT Not After : Mar 28 17:59:21 2026 GMT Subject: CN=FA5CB0E7182AE7E2DE77BF2AF1C08F06F7A1E969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:7c:10:5b:15:93:7d:c0:f8:6c:05:70:fe: 50:63:d2:2c:61:10:62:cc:49:8f:1e:2d:6d:77:81: 4b:1b:db:7c:f7:52:75:cf:07:2a:41:43:71:33:8b: e5:62:92:c2:36:88:82:a1:16:cf:33:fa:c1:a4:b6: 87:60:de:3c:d7:b7:95:8b:f9:b9:06:c6:86:ee:91: fa:c5:02:4c:7e:ec:57:5d:c2:7b:42:61:bc:be:d1: d3:92:a5:8d:1b:2d:39:14:78:f6:38:d4:e0:10:23: 78:e5:aa:b1:05:3f:33:3d:88:22:76:25:43:96:c9: 43:49:83:fd:19:2c:c8:fc:0e:7a:64:db:25:65:4d: 14:e5:90:42:c5:4a:25:90:04:22:33:a9:51:ba:07: 40:8e:dd:6a:9e:73:c4:8f:3f:23:0a:82:be:96:87: 4a:c6:98:35:bc:dc:98:8d:31:d8:48:b7:bc:53:6e: 16:97:7e:53:ed:44:d3:15:85:d8:11:0c:e2:ca:fb: 8a:a9:50:9f:19:3f:ff:6c:5f:fa:74:56:17:d2:60: c5:59:c7:91:81:85:84:58:45:98:3f:0f:7e:f3:44: 95:d6:d8:3c:29:ba:68:c2:59:bf:f1:25:86:eb:14: 11:74:5d:d0:2b:77:99:57:3f:95:10:94:f1:af:c6: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5C:B0:E7:18:2A:E7:E2:DE:77:BF:2A:F1:C0:8F:06:F7:A1:E9:69 X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fa:31:5e:4e:6a:42:e4:cb:42:b6:94:54:61:1f:9b:78:7a: 5c:57:36:2e:0f:6e:34:28:96:2e:43:d9:94:3e:5c:ed:03:c0: d0:ed:43:66:5b:90:51:f9:e6:26:c8:3f:84:8a:58:1a:c5:2d: 94:10:46:06:08:00:d6:8e:89:e1:22:dc:30:31:07:91:42:e5: 8f:f5:ce:da:92:ba:49:3c:40:5f:87:14:06:e3:e6:e1:5d:33: 9f:9b:9b:6b:de:1b:68:16:64:c0:df:ab:29:68:de:ed:33:66: 8b:1a:25:5b:44:b8:d4:88:ee:bb:c0:4e:17:88:d2:d6:39:46: 16:4b:44:56:25:c0:a4:8e:9f:74:6a:63:c9:09:8d:95:31:33: b1:e8:7a:05:6d:88:ab:d4:ac:96:a4:84:a8:98:fc:5f:99:a9: fe:0e:ce:89:71:95:69:4b:86:55:7e:6b:00:a2:49:ac:85:f9: fe:89:cc:56:5d:a7:f2:01:11:1f:6b:d9:7e:da:c7:95:d8:ab: 48:d0:d0:0f:3d:d0:4a:7a:e7:09:34:22:7e:f9:3d:e8:da:9a: 45:17:95:32:58:56:86:60:65:b6:15:04:e5:74:7a:85:d0:cc: 65:72:1c:27:7e:36:7e:b4:94:23:46:0a:b7:2e:6d:af:4e:4b: 92:6b:5a:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOO1h+C0SAh6BQkDiIKPvuzm+za4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNjAzMjUxMjE3MjFaFw0yNjAzMjgxNzU5MjFaMDMxMTAvBgNV BAMTKEZBNUNCMEU3MTgyQUU3RTJERTc3QkYyQUYxQzA4RjA2RjdBMUU5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8a3wQWxWTfcD4bAVw/lBj0ixh EGLMSY8eLW13gUsb23z3UnXPBypBQ3Ezi+ViksI2iIKhFs8z+sGktodg3jzXt5WL +bkGxobukfrFAkx+7FddwntCYby+0dOSpY0bLTkUePY41OAQI3jlqrEFPzM9iCJ2 JUOWyUNJg/0ZLMj8Dnpk2yVlTRTlkELFSiWQBCIzqVG6B0CO3Wqec8SPPyMKgr6W h0rGmDW83JiNMdhIt7xTbhaXflPtRNMVhdgRDOLK+4qpUJ8ZP/9sX/p0VhfSYMVZ x5GBhYRYRZg/D37zRJXW2DwpumjCWb/xJYbrFBF0XdArd5lXP5UQlPGvxh73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lyw5xgq5+Led78q8cCPBveh6WkwHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP6MV5OakLky0K2lFRhH5t4elxXNi4PbjQo li5D2ZQ+XO0DwNDtQ2ZbkFH55ibIP4SKWBrFLZQQRgYIANaOieEi3DAxB5FC5Y/1 ztqSukk8QF+HFAbj5uFdM5+bm2veG2gWZMDfqylo3u0zZosaJVtEuNSI7rvATheI 0tY5RhZLRFYlwKSOn3RqY8kJjZUxM7HoegVtiKvUrJakhKiY/F+Zqf4OzolxlWlL hlV+awCiSayF+f6JzFZdp/IBER9r2X7ax5XYq0jQ0A890Ep65wk0In75PejamkUX lTJYVoZgZbYVBOV0eoXQzGVyHCd+Nn60lCNGCrcuba9OS5JrWqA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:06 2026 by rpki-client