$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: 5Qa86EtPMWdEQ19XwQ1VfG/1ehLlJkKPgyItG1l4wwA= Subject key identifier: 9F:C6:10:F2:49:C0:C8:7D:9A:D8:B0:58:27:32:05:BF:A5:AA:61:3F Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 175ABE86A88CE127D7425E2E49BCDA4E9EAC93A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 0553 Signing time: Mon 02 Mar 2026 06:41:59 +0000 Manifest this update: Mon 02 Mar 2026 06:36:59 +0000 Manifest next update: Thu 05 Mar 2026 09:58:59 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: dDC18XFBD28c+aBLypkrPmE4d5d5e+dacBCQSTa95nI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5a:be:86:a8:8c:e1:27:d7:42:5e:2e:49:bc:da:4e:9e:ac:93:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Mar 2 06:36:59 2026 GMT Not After : Mar 5 09:58:59 2026 GMT Subject: CN=9FC610F249C0C87D9AD8B058273205BFA5AA613F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:f3:03:03:c4:23:de:f2:1e:54:b9:fd:a1: 64:5a:8a:dc:cc:d7:74:f0:d3:b7:0a:30:d3:e5:f5: e9:a0:56:c6:67:26:1a:2c:55:cf:93:d8:38:94:8b: 83:3e:14:37:99:0c:95:94:f0:a6:59:e6:f0:0a:88: 46:58:b0:00:5a:9d:a3:52:a6:fd:65:ae:08:15:84: 31:21:49:e2:04:32:e5:07:2c:87:7b:5c:07:29:63: df:ea:cb:38:46:a3:dc:bd:7a:fe:5b:14:69:27:0c: 0d:80:9f:a4:f6:0f:73:45:75:57:b7:fd:72:20:f6: 3a:db:e0:f0:ab:a4:e6:13:5a:05:59:76:50:de:c1: 7d:9c:27:d3:17:29:b4:bb:50:45:b0:58:85:26:33: f0:7f:aa:9d:6f:4e:93:5c:e0:cf:a2:e9:60:78:fa: ff:28:35:35:ae:bb:ea:80:63:f1:f7:29:19:8d:8d: bf:a0:f5:b9:06:54:30:5d:4f:7e:84:82:b0:65:8b: 54:23:1c:25:b1:ae:1d:82:4d:4e:74:86:93:8a:32: 45:ab:38:c4:45:d4:2c:36:fa:85:ab:ae:6c:0c:6f: 57:57:98:1f:6f:6a:30:47:ce:dd:6e:0a:7b:7d:6d: c2:81:4a:91:89:47:c5:5c:ff:05:7d:eb:9d:a9:4d: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C6:10:F2:49:C0:C8:7D:9A:D8:B0:58:27:32:05:BF:A5:AA:61:3F X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:ce:13:80:89:d6:5b:1e:60:7c:90:70:71:47:c5:28:dd: 35:5a:6d:83:4d:7c:88:2d:46:f8:02:46:59:f1:19:09:4b:f3: bb:93:5e:43:e2:fc:7b:62:d9:2b:3b:e7:e8:7e:61:69:2e:b7: 4c:22:9e:18:e5:58:18:4e:5c:eb:d3:13:db:83:99:7d:e4:07: ee:19:4a:04:ed:d1:fb:09:7b:42:b6:cc:2f:24:07:09:ec:ba: fb:dc:60:e0:69:75:c3:3a:ec:08:b9:9b:ee:73:74:02:a2:77: fc:7a:1f:9c:a8:11:dc:94:e3:60:18:3c:ab:c4:98:b1:5d:2e: 23:ed:a3:24:b9:e7:66:a3:db:9c:c4:c0:60:b8:a5:a2:37:bd: 41:0a:8b:39:30:8e:6f:3f:bf:f1:d1:79:db:5d:53:30:0a:94: 3a:e0:c7:a5:4a:08:6e:c3:eb:22:80:5b:f3:c8:bd:d4:62:5b: f1:c0:96:69:53:48:3c:04:6c:4a:37:9c:2f:db:25:c5:36:20: b3:78:c4:57:b2:f7:79:d3:16:18:8c:b0:dc:37:f5:b6:bb:b7: b5:09:f4:98:bc:b5:e2:64:18:ae:c2:5e:43:17:3d:1c:02:a1: af:7c:57:5f:0f:e4:ca:5c:54:b6:6a:4e:97:15:bb:4a:89:5f: fc:76:e7:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1q+hqiM4SfXQl4uSbzaTp6sk6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNjAzMDIwNjM2NTlaFw0yNjAzMDUwOTU4NTlaMDMxMTAvBgNV BAMTKDlGQzYxMEYyNDlDMEM4N0Q5QUQ4QjA1ODI3MzIwNUJGQTVBQTYxM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUvMDA8Qj3vIeVLn9oWRaitzM 13Tw07cKMNPl9emgVsZnJhosVc+T2DiUi4M+FDeZDJWU8KZZ5vAKiEZYsABanaNS pv1lrggVhDEhSeIEMuUHLId7XAcpY9/qyzhGo9y9ev5bFGknDA2An6T2D3NFdVe3 /XIg9jrb4PCrpOYTWgVZdlDewX2cJ9MXKbS7UEWwWIUmM/B/qp1vTpNc4M+i6WB4 +v8oNTWuu+qAY/H3KRmNjb+g9bkGVDBdT36EgrBli1QjHCWxrh2CTU50hpOKMkWr OMRF1Cw2+oWrrmwMb1dXmB9vajBHzt1uCnt9bcKBSpGJR8Vc/wV9652pTdljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8YQ8knAyH2a2LBYJzIFv6WqYT8wHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg8zhOAidZbHmB8kHBxR8Uo3TVabYNNfIgt RvgCRlnxGQlL87uTXkPi/Hti2Ss75+h+YWkut0winhjlWBhOXOvTE9uDmX3kB+4Z SgTt0fsJe0K2zC8kBwnsuvvcYOBpdcM67Ai5m+5zdAKid/x6H5yoEdyU42AYPKvE mLFdLiPtoyS552aj25zEwGC4paI3vUEKizkwjm8/v/HRedtdUzAKlDrgx6VKCG7D 6yKAW/PIvdRiW/HAlmlTSDwEbEo3nC/bJcU2ILN4xFey93nTFhiMsNw39ba7t7UJ 9Ji8teJkGK7CXkMXPRwCoa98V18P5MpcVLZqTpcVu0qJX/x25/o= -----END CERTIFICATE-----Generated at Mon Mar 2 13:52:08 2026 by rpki-client