$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: y1UStFYxT1UG9ezD8VdZY6OPA9yzKSzbD6D5wHd04JY= Subject key identifier: E8:77:30:0B:30:DA:73:E4:BE:8F:FD:F1:B4:6E:6E:21:A4:FB:08:58 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 388B020E0C6C0686EE91F53557D436845A039390 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 0139 Signing time: Wed 15 Apr 2026 04:52:31 +0000 Manifest this update: Wed 15 Apr 2026 04:47:31 +0000 Manifest next update: Sat 18 Apr 2026 13:46:31 +0000 Files and hashes: 1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: C1DugQVHSreAgPaO3qUxUKJqTe7dreglrdn7g96ChCQ=) 2: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: V+kDReHT5yXzCkS8Mnf+xSr94df4f3Nsmf2bUC0tUoA=) 3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: GS37UgKoAc3KvOEONc+556OFtKgxYxE3OI9Ca5fmaDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8b:02:0e:0c:6c:06:86:ee:91:f5:35:57:d4:36:84:5a:03:93:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Apr 15 04:47:31 2026 GMT Not After : Apr 18 13:46:31 2026 GMT Subject: CN=E877300B30DA73E4BE8FFDF1B46E6E21A4FB0858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d4:40:03:03:86:3d:50:d0:36:ac:a9:a0:df: 92:c5:ba:94:5c:5d:5c:c6:7a:12:ff:b4:c3:fd:31: b2:a4:4e:ca:5a:f8:f3:9c:3a:20:7f:91:51:38:a9: 7d:ec:e6:91:f3:04:0c:02:57:76:36:9a:60:ea:c4: 8a:e3:53:47:d8:11:46:aa:ed:52:95:ad:b7:23:21: 6e:cb:7a:73:b3:77:ac:c8:cc:86:8d:69:7b:1c:de: 4e:ee:43:41:b6:73:55:37:95:64:de:bf:e4:9e:ba: 26:18:da:46:45:74:ca:af:32:bc:f8:28:dd:39:d8: 8f:b3:8b:80:c7:d2:b0:9b:9a:28:f5:37:d6:44:96: 78:a3:f3:12:c8:38:52:84:e5:fb:93:c1:6b:7e:59: f5:a8:29:df:0d:ea:3c:95:43:ed:21:01:e3:95:b5: 84:e4:6b:7e:f2:f8:bf:3b:e9:49:6f:a2:18:f7:a0: 7a:a9:7b:4c:ee:dc:5c:15:35:74:2e:9f:e8:7b:5b: 85:0c:15:7c:9b:03:78:f9:34:bb:54:b3:e2:10:29: 49:60:26:ec:35:10:b8:0a:6e:af:cf:e9:2b:65:6d: bf:40:65:d6:8f:1b:e9:ac:80:1f:2c:a4:7c:c1:a1: 1a:4d:08:11:b1:52:4f:ee:bd:8e:46:4d:60:11:42: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:77:30:0B:30:DA:73:E4:BE:8F:FD:F1:B4:6E:6E:21:A4:FB:08:58 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:94:f7:89:0f:3d:f5:6d:59:2c:3b:c8:b3:bd:c1:25:20:1b: b6:b8:29:76:6a:3c:bb:34:33:bd:af:b7:6e:be:57:a8:d4:3e: a7:05:95:cf:5c:c3:db:67:c0:c1:d7:aa:75:40:5c:36:5e:d7: a1:ed:de:31:dd:fb:b4:13:ac:2d:ac:12:36:f3:43:d6:76:f3: a5:91:81:6e:34:d0:a0:b4:2f:a9:ee:f1:fa:f2:9a:5f:8d:80: bd:33:d8:c0:6a:6f:04:bc:ac:4f:f4:8b:88:ff:c8:db:47:4c: 95:b4:60:9a:6a:6a:9d:92:3c:ac:71:42:3d:79:ee:ae:6c:28: dd:24:e0:b6:14:12:11:e4:ee:08:35:3b:76:9f:b7:a2:cd:35: 15:16:48:a0:f9:c7:9f:0b:84:95:5c:d9:3b:ac:c0:30:b1:d7: 9c:a0:35:b4:8c:00:c9:d9:03:f8:81:27:e9:39:61:9b:c9:f2: 47:7d:61:e5:0b:64:d4:bb:51:8f:e1:93:d2:04:a9:e3:ac:93: 48:90:ec:08:eb:d5:9c:e0:5a:9d:d7:c4:ff:b1:46:15:50:38: dc:c6:02:01:30:f3:ec:43:6b:5f:a7:66:19:92:22:b2:97:8f: d0:87:d3:2d:db:21:9c:d7:46:53:58:68:18:13:8a:b3:3c:c2: ca:03:e4:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOIsCDgxsBobukfU1V9Q2hFoDk5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNjA0MTUwNDQ3MzFaFw0yNjA0MTgxMzQ2MzFaMDMxMTAvBgNV BAMTKEU4NzczMDBCMzBEQTczRTRCRThGRkRGMUI0NkU2RTIxQTRGQjA4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs1EADA4Y9UNA2rKmg35LFupRc XVzGehL/tMP9MbKkTspa+POcOiB/kVE4qX3s5pHzBAwCV3Y2mmDqxIrjU0fYEUaq 7VKVrbcjIW7LenOzd6zIzIaNaXsc3k7uQ0G2c1U3lWTev+SeuiYY2kZFdMqvMrz4 KN052I+zi4DH0rCbmij1N9ZElnij8xLIOFKE5fuTwWt+WfWoKd8N6jyVQ+0hAeOV tYTka37y+L876Ulvohj3oHqpe0zu3FwVNXQun+h7W4UMFXybA3j5NLtUs+IQKUlg Juw1ELgKbq/P6Stlbb9AZdaPG+msgB8spHzBoRpNCBGxUk/uvY5GTWARQjcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6HcwCzDac+S+j/3xtG5uIaT7CFgwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuU94kPPfVtWSw7yLO9wSUgG7a4KXZqPLs0 M72vt26+V6jUPqcFlc9cw9tnwMHXqnVAXDZe16Ht3jHd+7QTrC2sEjbzQ9Z286WR gW400KC0L6nu8fryml+NgL0z2MBqbwS8rE/0i4j/yNtHTJW0YJpqap2SPKxxQj15 7q5sKN0k4LYUEhHk7gg1O3aft6LNNRUWSKD5x58LhJVc2TuswDCx15ygNbSMAMnZ A/iBJ+k5YZvJ8kd9YeULZNS7UY/hk9IEqeOsk0iQ7Ajr1ZzgWp3XxP+xRhVQONzG AgEw8+xDa1+nZhmSIrKXj9CH0y3bIZzXRlNYaBgTirM8wsoD5Jw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:05:59 2026 by rpki-client