$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: E4xrL0fX37fL36oGb9IaVrcA9p+SDnDWoVy7Q1IaYXc= Subject key identifier: B1:57:CB:E5:DF:99:1D:A2:FD:B1:22:AE:C0:A6:98:A4:1E:B5:BE:60 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 5AD54FCA61226260BB724781BD6D2117059FA808 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 0125 Signing time: Sun 01 Mar 2026 22:22:28 +0000 Manifest this update: Sun 01 Mar 2026 22:17:28 +0000 Manifest next update: Wed 04 Mar 2026 23:17:28 +0000 Files and hashes: 1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) 3: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: 8fdQudduPLoKLw0v1rBf3Ug7DOzm51l+iNliFU+WlDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d5:4f:ca:61:22:62:60:bb:72:47:81:bd:6d:21:17:05:9f:a8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Mar 1 22:17:28 2026 GMT Not After : Mar 4 23:17:28 2026 GMT Subject: CN=B157CBE5DF991DA2FDB122AEC0A698A41EB5BE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:2e:c2:31:39:c4:9e:62:46:7e:c4:db:a4: 87:4a:b9:3a:63:b9:4a:89:cf:bc:2f:b6:52:7b:22: 61:26:18:3d:21:fe:f7:fd:b3:68:da:47:6b:c4:4c: cc:a7:1a:30:a9:3f:76:cb:61:a7:37:34:3f:71:28: a5:cc:e8:39:2b:5c:b3:55:57:43:a1:3a:14:69:56: 65:87:88:64:37:d3:76:dd:88:f8:d9:8d:dd:f1:60: f7:d9:3c:e2:e0:14:fc:7c:b4:53:b3:79:3f:ef:c0: fc:5f:03:07:a7:c3:d7:5b:92:d5:a5:7e:eb:f5:9d: 70:2d:c0:d5:45:d0:a8:4b:03:e0:df:e1:93:8a:52: 6a:7a:0c:17:89:21:05:7e:b1:a1:d1:a3:0f:2a:27: b5:eb:8d:99:02:95:b7:5a:34:3d:51:c1:5a:74:98: 63:f6:18:13:9e:60:60:df:a2:77:d7:6e:fb:85:33: 8f:f9:b6:11:5d:27:c2:b9:0f:d3:44:b5:38:71:40: 9f:9b:5e:25:c5:f6:d9:b1:e8:d8:31:e0:71:3c:b6: ce:53:c3:c6:9d:eb:1d:f1:a0:9a:5a:10:35:a6:57: 6d:c8:af:99:88:3d:43:3b:61:19:5e:bb:fb:f0:81: 66:34:dc:3b:f1:29:a4:b5:16:58:59:e6:61:f6:de: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:CB:E5:DF:99:1D:A2:FD:B1:22:AE:C0:A6:98:A4:1E:B5:BE:60 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d6:0c:41:7f:53:6d:fa:02:6f:4b:bc:7b:a7:ef:99:b3:2c: f9:87:6f:ae:d0:03:a3:a6:cf:7c:26:e6:91:04:03:8c:78:dd: 58:88:c0:2d:61:bd:fc:5c:a6:f9:8f:d9:fe:46:b4:13:8b:97: 21:08:1c:72:81:86:61:a2:71:9d:ed:37:cf:fe:a3:cd:75:7a: 04:95:d6:6b:be:41:1d:a5:81:6d:f6:f9:d5:c1:da:59:e1:93: e4:24:c0:5a:46:d8:b4:e5:c3:02:11:06:30:72:d8:79:38:6c: 1c:48:01:d7:78:bd:39:83:c1:3f:ad:af:2a:6d:31:6b:c8:14: 4c:ac:c2:9b:22:a5:1f:73:ac:da:5c:28:97:3a:af:91:ad:93: de:4b:c8:f0:36:62:bf:a6:66:02:0e:dc:6c:55:ef:10:74:91: d1:5c:6a:17:2d:b4:89:58:09:1d:be:88:5c:58:d2:d3:22:a4: cd:c7:e5:32:8c:26:1e:05:18:19:ac:68:0b:a3:a9:af:d6:df: 50:ee:f4:e0:8d:2e:5c:e4:17:5e:51:a5:09:91:6f:ef:16:7a: 1b:e7:1e:f8:89:b6:67:29:4d:3a:fa:d9:77:2a:5e:0a:70:bb: 27:51:bc:44:df:43:f7:d1:5a:9d:25:d3:13:2d:54:50:fd:7f: 83:a4:e5:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtVPymEiYmC7ckeBvW0hFwWfqAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNjAzMDEyMjE3MjhaFw0yNjAzMDQyMzE3MjhaMDMxMTAvBgNV BAMTKEIxNTdDQkU1REY5OTFEQTJGREIxMjJBRUMwQTY5OEE0MUVCNUJFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRIy7CMTnEnmJGfsTbpIdKuTpj uUqJz7wvtlJ7ImEmGD0h/vf9s2jaR2vETMynGjCpP3bLYac3ND9xKKXM6DkrXLNV V0OhOhRpVmWHiGQ303bdiPjZjd3xYPfZPOLgFPx8tFOzeT/vwPxfAwenw9dbktWl fuv1nXAtwNVF0KhLA+Df4ZOKUmp6DBeJIQV+saHRow8qJ7XrjZkClbdaND1RwVp0 mGP2GBOeYGDfonfXbvuFM4/5thFdJ8K5D9NEtThxQJ+bXiXF9tmx6Ngx4HE8ts5T w8ad6x3xoJpaEDWmV23Ir5mIPUM7YRleu/vwgWY03DvxKaS1FlhZ5mH23rdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsVfL5d+ZHaL9sSKuwKaYpB61vmAwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTWDEF/U236Am9LvHun75mzLPmHb67QA6Om z3wm5pEEA4x43ViIwC1hvfxcpvmP2f5GtBOLlyEIHHKBhmGicZ3tN8/+o811egSV 1mu+QR2lgW32+dXB2lnhk+QkwFpG2LTlwwIRBjBy2Hk4bBxIAdd4vTmDwT+trypt MWvIFEyswpsipR9zrNpcKJc6r5Gtk95LyPA2Yr+mZgIO3GxV7xB0kdFcahcttIlY CR2+iFxY0tMipM3H5TKMJh4FGBmsaAujqa/W31Du9OCNLlzkF15RpQmRb+8Wehvn HviJtmcpTTr62XcqXgpwuydRvETfQ/fRWp0l0xMtVFD9f4Ok5Tk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:56:37 2026 by rpki-client