$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: SRsvY/07eJ9WknWKZ1zPWCfXu4aZ3eRfdmwrYN2h28I= Subject key identifier: 05:F1:11:9B:E3:D7:E3:A8:91:3C:4E:10:6A:92:BC:99:5A:8A:4C:68 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 1BC9B0A4A119C0D1EAD42447BFE7C1A1F3D0FAEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0443 Signing time: Sun 01 Mar 2026 23:32:06 +0000 Manifest this update: Sun 01 Mar 2026 23:27:06 +0000 Manifest next update: Thu 05 Mar 2026 01:44:06 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: QDL7EZHVeNBVuGy/XYGiT8jIc7QT7tiZ1Jy0HdY7+Bk=) 2: AS23693.roa (hash: x5VXB95dtKT5OQR+S1O83x2JIqFsVpTsDEkUCu37XvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c9:b0:a4:a1:19:c0:d1:ea:d4:24:47:bf:e7:c1:a1:f3:d0:fa:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Mar 1 23:27:06 2026 GMT Not After : Mar 5 01:44:06 2026 GMT Subject: CN=05F1119BE3D7E3A8913C4E106A92BC995A8A4C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:40:a9:1e:71:4a:cb:1e:ee:43:01:7a:3e: bb:b1:37:f0:a4:87:aa:fd:71:cb:23:99:71:7d:94: 71:51:bb:27:c4:b2:63:f3:a7:3d:6c:8a:0e:8f:0c: 2c:f5:bf:4a:8a:ca:b8:0d:d3:fd:68:56:e4:6d:2b: ef:6d:2d:2c:dc:53:84:35:b2:2b:fb:18:04:27:c1: 5d:87:3c:52:77:c9:3a:3a:34:6d:d8:96:a5:8b:81: 42:b8:30:04:3e:ae:0d:8e:59:4c:1d:01:d3:3b:58: 0b:cd:3a:99:64:f3:85:f2:98:37:d3:5f:d3:eb:34: b5:e3:60:58:f0:c7:24:4f:bd:68:cb:a4:c5:cb:54: 9b:ba:fc:b5:86:6f:c1:de:d2:87:5b:95:e6:33:f3: 48:f4:00:c1:81:87:ec:33:2c:2f:21:6b:38:a8:db: c7:99:16:f2:77:d8:cd:cc:19:91:1d:1f:a2:db:4f: f5:9e:77:9a:d2:d0:ee:ce:26:ac:4f:73:0c:6a:b4: cc:1a:aa:f1:ad:59:fa:e5:92:91:a7:62:13:9f:f9: 89:38:04:e2:a9:35:22:96:6d:f7:d8:dd:4f:7d:35: 7a:0a:4c:73:c5:dd:8c:e5:31:b1:83:41:c7:d2:38: 3f:95:bd:75:78:4d:85:bc:8e:d5:3b:e1:da:67:53: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F1:11:9B:E3:D7:E3:A8:91:3C:4E:10:6A:92:BC:99:5A:8A:4C:68 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d6:d9:ff:d4:0d:65:6d:06:0c:ed:3f:7a:eb:b8:21:29:29: 7b:58:e9:e9:da:8a:0d:4d:6e:6b:22:7c:d5:8a:db:f6:29:38: 74:8c:59:c9:31:2f:2d:a1:43:49:da:21:37:d6:7d:ce:1a:7c: aa:95:52:f7:e8:25:0c:a2:b3:ef:20:82:a0:4e:30:bf:76:6d: 26:24:0d:65:6c:36:c8:eb:2a:72:8d:31:6a:6f:e5:de:a7:6a: bf:be:62:65:50:56:ff:29:ff:9d:d5:6f:ec:2e:12:9d:3e:c1: b2:af:32:7b:b8:4d:69:6d:5e:00:8b:59:b8:a3:35:c8:23:42: 50:0c:6f:c9:86:0c:ce:4f:8b:e6:fe:c5:71:52:3a:ec:27:0a: e6:ff:ee:6e:9d:84:c2:9b:9f:c0:ac:e0:b7:89:2b:17:20:b0: c6:99:bc:db:29:92:00:e2:7f:f9:27:19:01:94:23:8f:1d:d3: 60:4b:c7:fe:1e:ee:db:a7:7c:12:27:c1:ee:50:4d:28:75:5d: 0e:38:f6:92:5b:f9:2e:a4:ac:7d:8c:2b:32:e1:3c:a6:5c:be: 28:9e:8d:44:65:4d:c0:07:a7:8f:d7:7e:73:6f:44:fb:ad:64: 35:3b:bc:06:05:4a:5b:fc:b7:7f:12:f3:e9:c3:9b:aa:52:66: 4a:a9:24:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8mwpKEZwNHq1CRHv+fBofPQ+uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNjAzMDEyMzI3MDZaFw0yNjAzMDUwMTQ0MDZaMDMxMTAvBgNV BAMTKDA1RjExMTlCRTNEN0UzQTg5MTNDNEUxMDZBOTJCQzk5NUE4QTRDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVkCpHnFKyx7uQwF6PruxN/Ck h6r9ccsjmXF9lHFRuyfEsmPzpz1sig6PDCz1v0qKyrgN0/1oVuRtK+9tLSzcU4Q1 siv7GAQnwV2HPFJ3yTo6NG3YlqWLgUK4MAQ+rg2OWUwdAdM7WAvNOplk84XymDfT X9PrNLXjYFjwxyRPvWjLpMXLVJu6/LWGb8He0odbleYz80j0AMGBh+wzLC8hazio 28eZFvJ32M3MGZEdH6LbT/Wed5rS0O7OJqxPcwxqtMwaqvGtWfrlkpGnYhOf+Yk4 BOKpNSKWbffY3U99NXoKTHPF3YzlMbGDQcfSOD+VvXV4TYW8jtU74dpnU3BlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBfERm+PX46iRPE4QapK8mVqKTGgwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTW2f/UDWVtBgztP3rruCEpKXtY6enaig1N bmsifNWK2/YpOHSMWckxLy2hQ0naITfWfc4afKqVUvfoJQyis+8ggqBOML92bSYk DWVsNsjrKnKNMWpv5d6nar++YmVQVv8p/53Vb+wuEp0+wbKvMnu4TWltXgCLWbij NcgjQlAMb8mGDM5Pi+b+xXFSOuwnCub/7m6dhMKbn8Cs4LeJKxcgsMaZvNspkgDi f/knGQGUI48d02BLx/4e7tunfBInwe5QTSh1XQ449pJb+S6krH2MKzLhPKZcviie jURlTcAHp4/XfnNvRPutZDU7vAYFSlv8t38S8+nDm6pSZkqpJAk= -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:10 2026 by rpki-client