$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: C2is44Puc9oghfcvl45olyzbqVxMaWkpbKKav/zewmQ= Subject key identifier: A8:4E:91:9F:4C:58:61:5E:E0:84:53:1A:75:F8:4F:DC:F7:66:14:0E Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 38F4D9D11F2C3934723295073ECFCB34315E44F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 0568 Signing time: Sat 18 Apr 2026 04:32:08 +0000 Manifest this update: Sat 18 Apr 2026 04:27:08 +0000 Manifest next update: Tue 21 Apr 2026 14:32:08 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: 80j3b/YS3qtrgEmP2fRL8KfpRg3/fAb/WwVasQ6VY/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f4:d9:d1:1f:2c:39:34:72:32:95:07:3e:cf:cb:34:31:5e:44:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Apr 18 04:27:08 2026 GMT Not After : Apr 21 14:32:08 2026 GMT Subject: CN=A84E919F4C58615EE084531A75F84FDCF766140E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:8e:b9:96:52:b4:85:29:95:b8:94:5f:de: 7c:1e:ea:3f:af:04:2a:3e:c2:65:b0:bd:20:7d:73: bb:fa:55:72:88:41:3c:94:f2:e8:f9:a1:3a:c9:3d: e5:94:e5:6f:35:c4:c4:17:a6:a5:5d:1c:8f:04:f1: 8e:2a:2f:c7:a2:3c:3b:97:79:e6:a3:76:70:a8:66: 04:8e:b2:e0:72:ae:57:41:7c:7f:3e:ca:76:af:9e: 66:d4:82:81:3c:1a:5c:c5:e7:55:40:90:67:62:4d: ac:a8:fa:55:12:dc:33:5a:80:a7:c5:03:72:e1:2a: b6:f2:73:f0:0c:32:73:56:df:05:46:c9:ab:67:77: 3e:86:59:e4:1d:1e:40:a0:18:48:dd:b2:22:66:03: 60:44:ca:2c:c2:4a:da:13:0b:dc:ef:4a:d3:6c:db: 2f:f8:68:53:21:f0:31:3e:73:d1:57:fe:9a:68:9b: cc:c7:8e:55:be:13:a2:25:14:47:de:53:19:cf:27: b9:1d:64:8a:f8:ad:70:97:15:05:17:b9:54:a3:0a: 36:e9:16:45:8c:89:f8:05:66:34:b2:e7:11:2a:d3: ed:55:0d:29:88:f3:c6:44:10:d4:21:09:a7:ba:b2: 42:f0:de:4e:2e:d7:03:df:d9:b5:56:68:d0:77:e6: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4E:91:9F:4C:58:61:5E:E0:84:53:1A:75:F8:4F:DC:F7:66:14:0E X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:38:62:95:df:ec:0f:9b:c5:ce:96:ee:5c:80:20:2f:55:b8: b7:94:d2:59:da:0c:96:ce:fc:11:b3:17:9b:d5:67:b6:9c:29: 5a:e3:5d:26:fe:93:42:44:a2:70:ad:38:53:1f:90:e4:bb:6d: e0:dd:6e:a5:88:08:c2:01:53:80:98:f4:92:6d:ff:ce:df:49: 94:11:75:4e:b0:0f:89:16:0e:0c:66:fa:02:e9:ac:43:89:7c: 28:e1:4a:06:94:ef:33:dd:dd:dd:92:59:28:53:50:b9:49:5c: ca:72:84:35:33:08:7e:23:3d:f0:74:98:47:76:a9:2c:4e:53: a0:52:92:5f:6d:aa:e9:46:b8:15:2e:5a:a4:d9:ab:cd:a1:0a: 1a:2f:c2:c6:60:0c:70:86:e6:fe:41:54:06:7d:84:48:cb:89: 91:e3:98:0a:cf:6d:33:e4:25:b6:d7:d1:64:e2:3b:7c:7b:ab: d7:c7:78:e5:f4:8a:4a:f1:e5:a4:53:9d:bd:15:57:21:ff:96: f9:e3:75:93:a9:00:e7:0a:8c:42:4e:a4:dc:54:80:5c:5d:f4: 43:1d:04:35:1f:1b:12:99:b6:28:e3:80:97:2c:f7:80:7b:af: 12:ef:bf:1b:03:9f:02:ce:55:49:42:3a:d2:16:4f:61:d3:61: b2:1e:a8:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPTZ0R8sOTRyMpUHPs/LNDFeRPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNjA0MTgwNDI3MDhaFw0yNjA0MjExNDMyMDhaMDMxMTAvBgNV BAMTKEE4NEU5MTlGNEM1ODYxNUVFMDg0NTMxQTc1Rjg0RkRDRjc2NjE0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgO465llK0hSmVuJRf3nwe6j+v BCo+wmWwvSB9c7v6VXKIQTyU8uj5oTrJPeWU5W81xMQXpqVdHI8E8Y4qL8eiPDuX eeajdnCoZgSOsuByrldBfH8+ynavnmbUgoE8GlzF51VAkGdiTayo+lUS3DNagKfF A3LhKrbyc/AMMnNW3wVGyatndz6GWeQdHkCgGEjdsiJmA2BEyizCStoTC9zvStNs 2y/4aFMh8DE+c9FX/ppom8zHjlW+E6IlFEfeUxnPJ7kdZIr4rXCXFQUXuVSjCjbp FkWMifgFZjSy5xEq0+1VDSmI88ZEENQhCae6skLw3k4u1wPf2bVWaNB35lK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqE6Rn0xYYV7ghFMadfhP3PdmFA4wHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY4YpXf7A+bxc6W7lyAIC9VuLeU0lnaDJbO /BGzF5vVZ7acKVrjXSb+k0JEonCtOFMfkOS7beDdbqWICMIBU4CY9JJt/87fSZQR dU6wD4kWDgxm+gLprEOJfCjhSgaU7zPd3d2SWShTULlJXMpyhDUzCH4jPfB0mEd2 qSxOU6BSkl9tqulGuBUuWqTZq82hChovwsZgDHCG5v5BVAZ9hEjLiZHjmArPbTPk JbbX0WTiO3x7q9fHeOX0ikrx5aRTnb0VVyH/lvnjdZOpAOcKjEJOpNxUgFxd9EMd BDUfGxKZtijjgJcs94B7rxLvvxsDnwLOVUlCOtIWT2HTYbIeqJY= -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:31 2026 by rpki-client