$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: jSWui2nFqbTlCVMosKewg5afLz4rv5wrpSJG29UCM9I= Subject key identifier: 98:AE:3C:B8:F3:D1:DD:84:C1:F0:5D:1C:29:42:8B:DA:EB:27:F3:36 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 7363501803DFF8EE24E3DBBAC0B558E9BE202750 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 0567 Signing time: Thu 16 Apr 2026 08:22:33 +0000 Manifest this update: Thu 16 Apr 2026 08:17:33 +0000 Manifest next update: Sun 19 Apr 2026 11:38:33 +0000 Files and hashes: 1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: iqTnjRiqrNjYwAxDB0xyVwvI6w/iipaIyA35zp31sI0=) 2: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) 3: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:63:50:18:03:df:f8:ee:24:e3:db:ba:c0:b5:58:e9:be:20:27:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Apr 16 08:17:33 2026 GMT Not After : Apr 19 11:38:33 2026 GMT Subject: CN=98AE3CB8F3D1DD84C1F05D1C29428BDAEB27F336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:cc:59:04:b8:44:65:a6:69:b2:9c:d5:bd: 04:89:4e:8d:e1:37:07:7c:4c:98:65:88:5b:82:cb: cb:06:47:2b:27:ee:76:e1:fd:06:79:63:f6:52:f9: de:f8:96:b0:c8:cc:f0:0f:4b:9b:56:c6:84:da:51: ce:1a:ec:24:12:81:87:d2:05:10:e3:79:97:60:cd: 97:08:80:cc:e0:00:19:9a:f8:74:6f:b8:22:97:a9: 43:cf:03:59:5f:f0:2c:8b:e1:95:a2:36:c7:22:1d: cb:82:3e:e3:78:fc:37:0d:bc:5f:fa:5c:dc:72:aa: ae:71:4f:ed:c4:ed:8a:b3:f7:cc:d0:fa:b5:eb:23: e2:83:20:1e:51:8d:32:27:7c:47:33:80:4d:57:7e: 7a:f6:c6:5e:91:46:f2:35:27:d5:22:7e:ae:dd:e1: ef:0a:d7:c2:e7:80:7b:ab:0e:b6:9d:f1:0b:a4:8d: ea:0b:9b:c5:23:f7:9d:a4:c0:46:2b:cf:aa:e4:6f: 75:f7:b2:6b:43:ce:c6:f1:0f:5f:95:54:a5:98:90: 4c:03:18:16:0a:58:dd:28:e8:16:79:5b:b3:38:9b: 59:5e:85:22:1e:0e:4f:0d:76:08:f8:46:ce:22:b0: 4b:28:55:ab:6e:3c:cc:4f:d7:dd:6d:72:03:af:09: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AE:3C:B8:F3:D1:DD:84:C1:F0:5D:1C:29:42:8B:DA:EB:27:F3:36 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b3:98:30:76:42:23:bd:b0:12:e3:1c:9c:9b:90:9a:b4:af: 18:ef:76:b6:a5:c3:bf:7d:76:5e:8d:f3:da:f9:58:f1:9a:5a: d8:b7:f5:ed:b4:28:cc:d2:73:fd:1d:53:cc:b7:b2:a2:84:00: 94:6d:7d:a7:4a:2d:80:8a:21:a6:e2:ac:72:58:cc:8c:cb:7a: 4d:b2:05:ec:a0:5b:9a:39:95:59:3f:80:29:c5:e3:f4:d3:00: f2:a4:ed:a3:df:35:34:bb:46:1d:53:0e:41:a5:fe:31:e9:0d: 13:de:1c:80:72:ab:66:c7:cf:aa:9d:75:ac:47:25:ac:c8:ad: 5e:bd:b0:ca:c2:8f:e8:0d:df:3f:0e:2b:d7:b0:2b:c3:cc:b1: d0:be:1a:b9:da:fe:f6:4d:4f:29:4a:cb:92:e9:db:5c:cc:b2: 68:ec:f8:3f:68:db:44:ae:d0:11:2f:ee:69:78:37:e2:93:b3: 01:e2:b2:43:ef:b6:48:9f:7e:89:44:09:c9:c2:fd:31:ae:5e: ee:1c:5e:1b:fa:0a:0c:b7:94:5d:31:a8:86:75:96:7a:1f:e3: 06:e5:0c:e7:b1:b6:5f:aa:8e:93:ae:2d:40:7c:ad:07:dc:f4: f0:6b:a3:86:5a:f2:03:7c:f5:64:ac:eb:ca:a7:48:b3:a8:61: c8:49:a4:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2NQGAPf+O4k49u6wLVY6b4gJ1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNjA0MTYwODE3MzNaFw0yNjA0MTkxMTM4MzNaMDMxMTAvBgNV BAMTKDk4QUUzQ0I4RjNEMUREODRDMUYwNUQxQzI5NDI4QkRBRUIyN0YzMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PMxZBLhEZaZpspzVvQSJTo3h Nwd8TJhliFuCy8sGRysn7nbh/QZ5Y/ZS+d74lrDIzPAPS5tWxoTaUc4a7CQSgYfS BRDjeZdgzZcIgMzgABma+HRvuCKXqUPPA1lf8CyL4ZWiNsciHcuCPuN4/DcNvF/6 XNxyqq5xT+3E7Yqz98zQ+rXrI+KDIB5RjTInfEczgE1Xfnr2xl6RRvI1J9Uifq7d 4e8K18LngHurDrad8QukjeoLm8Uj952kwEYrz6rkb3X3smtDzsbxD1+VVKWYkEwD GBYKWN0o6BZ5W7M4m1lehSIeDk8Ndgj4Rs4isEsoVatuPMxP191tcgOvCUMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmK48uPPR3YTB8F0cKUKL2usn8zYwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOzmDB2QiO9sBLjHJybkJq0rxjvdralw799 dl6N89r5WPGaWti39e20KMzSc/0dU8y3sqKEAJRtfadKLYCKIabirHJYzIzLek2y BeygW5o5lVk/gCnF4/TTAPKk7aPfNTS7Rh1TDkGl/jHpDRPeHIByq2bHz6qddaxH JazIrV69sMrCj+gN3z8OK9ewK8PMsdC+Grna/vZNTylKy5Lp21zMsmjs+D9o20Su 0BEv7ml4N+KTswHiskPvtkiffolECcnC/TGuXu4cXhv6Cgy3lF0xqIZ1lnof4wbl DOextl+qjpOuLUB8rQfc9PBro4Za8gN89WSs68qnSLOoYchJpIg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:06 2026 by rpki-client