$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: 4zZ2PIAv2aPI/p3FHc+ADGdmuDyOsNglM+qehWzNWQ0= Subject key identifier: 87:5A:DE:9B:57:91:BF:05:ED:B8:94:D2:EC:FA:81:CE:7B:91:55:DF Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 57A6FBAF0A7EDC17E41034575F794496973C6A54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0550 Signing time: Sat 28 Feb 2026 20:31:25 +0000 Manifest this update: Sat 28 Feb 2026 20:26:25 +0000 Manifest next update: Wed 04 Mar 2026 04:08:25 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: CUztjAFb/hyuNBQ6s3bl/eC3Qeahrc+nOh/qdCZ4KpA=) 2: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a6:fb:af:0a:7e:dc:17:e4:10:34:57:5f:79:44:96:97:3c:6a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Feb 28 20:26:25 2026 GMT Not After : Mar 4 04:08:25 2026 GMT Subject: CN=875ADE9B5791BF05EDB894D2ECFA81CE7B9155DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:85:54:aa:6f:da:db:c8:db:db:53:c9:0c: b5:5f:1f:d3:6f:d6:5a:c2:cf:a4:bc:98:d1:b7:16: 3f:06:2c:0e:73:10:42:7e:60:bb:b4:f7:37:48:31: e9:a3:b7:39:ed:28:7d:54:6c:34:22:15:b1:d8:db: e9:2c:53:c0:d9:fd:4e:98:53:b2:8d:f8:b3:ac:12: e9:4d:c2:fc:3c:58:e6:b6:5b:43:c0:0a:d3:03:d8: 6d:5b:65:d8:1f:3b:7b:36:9f:0a:54:44:aa:1c:a9: ea:86:77:bb:9f:15:13:54:2d:c0:60:86:0f:6f:3f: 9b:ab:80:f5:f0:f9:1b:a0:85:48:d3:64:fc:c9:6c: a8:14:08:6d:e6:71:5a:f4:e7:89:4a:5f:ca:04:e7: 6d:88:88:be:f5:f7:fc:65:f1:ed:97:34:65:9f:9c: 3a:e8:3b:b4:2c:f2:ba:02:a7:d8:ed:8e:28:33:10: 0f:13:09:41:bd:d4:93:b6:d5:2e:6c:24:b4:f1:94: b9:a1:8a:ed:ca:41:d7:dc:48:a9:e6:b6:a1:ae:c4: 2e:c1:7f:e0:f9:95:4a:2f:76:65:7a:ca:ec:2b:99: ce:99:7e:cd:a5:04:4b:1d:02:7a:14:d9:e9:69:c1: b6:7b:1d:44:84:c7:b8:24:b7:02:3f:23:a0:e0:23: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5A:DE:9B:57:91:BF:05:ED:B8:94:D2:EC:FA:81:CE:7B:91:55:DF X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:07:f2:a5:fb:4e:83:5d:9f:76:3c:cd:84:e7:cc:29:65:32: 66:81:08:66:90:91:f0:09:db:24:3e:77:a7:27:b9:9e:8c:87: 17:5a:c2:81:34:66:23:f6:4b:de:d0:f5:6a:b3:90:04:56:17: a2:df:11:ab:65:3d:25:38:1e:dc:cd:84:36:aa:70:ec:e9:af: aa:c0:a9:08:4d:4c:7e:0f:d8:54:17:1a:46:d8:ef:d2:3a:7d: 19:72:0b:a3:02:5d:a4:d1:ed:2e:a2:fe:97:00:3d:e9:7c:d9: 4d:95:66:95:00:21:33:0a:70:1e:81:3a:c6:3e:cd:fb:d4:06: 4a:83:43:5f:ee:61:cc:a2:d9:f9:f8:bc:9f:37:eb:d7:98:8b: 37:7e:d1:c6:fe:6e:10:f4:12:b6:0a:b8:0e:df:c5:ef:a4:dd: d5:31:9b:f5:78:10:e5:84:b1:22:87:4f:3f:29:16:d6:09:c5: f3:52:7e:eb:ee:43:f0:1b:c8:4e:ca:6b:a8:34:91:96:46:41: d5:10:f6:95:a4:1a:42:96:2b:8d:dc:20:3b:d3:65:11:63:0e: b5:5d:95:c8:25:cc:4b:9c:17:97:de:52:04:b4:77:6d:e6:16: 95:08:ae:1c:fb:fb:33:06:07:48:93:b5:66:7c:5b:28:a2:35: 0b:be:bc:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6b7rwp+3BfkEDRXX3lElpc8alQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNjAyMjgyMDI2MjVaFw0yNjAzMDQwNDA4MjVaMDMxMTAvBgNV BAMTKDg3NUFERTlCNTc5MUJGMDVFREI4OTREMkVDRkE4MUNFN0I5MTU1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDoVUqm/a28jb21PJDLVfH9Nv 1lrCz6S8mNG3Fj8GLA5zEEJ+YLu09zdIMemjtzntKH1UbDQiFbHY2+ksU8DZ/U6Y U7KN+LOsEulNwvw8WOa2W0PACtMD2G1bZdgfO3s2nwpURKocqeqGd7ufFRNULcBg hg9vP5urgPXw+RughUjTZPzJbKgUCG3mcVr054lKX8oE522IiL719/xl8e2XNGWf nDroO7Qs8roCp9jtjigzEA8TCUG91JO21S5sJLTxlLmhiu3KQdfcSKnmtqGuxC7B f+D5lUovdmV6yuwrmc6Zfs2lBEsdAnoU2elpwbZ7HUSEx7gktwI/I6DgIyBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh1rem1eRvwXtuJTS7PqBznuRVd8wHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8H8qX7ToNdn3Y8zYTnzCllMmaBCGaQkfAJ 2yQ+d6cnuZ6MhxdawoE0ZiP2S97Q9WqzkARWF6LfEatlPSU4HtzNhDaqcOzpr6rA qQhNTH4P2FQXGkbY79I6fRlyC6MCXaTR7S6i/pcAPel82U2VZpUAITMKcB6BOsY+ zfvUBkqDQ1/uYcyi2fn4vJ8369eYizd+0cb+bhD0ErYKuA7fxe+k3dUxm/V4EOWE sSKHTz8pFtYJxfNSfuvuQ/AbyE7Ka6g0kZZGQdUQ9pWkGkKWK43cIDvTZRFjDrVd lcglzEucF5feUgS0d23mFpUIrhz7+zMGB0iTtWZ8WyiiNQu+vEY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:03 2026 by rpki-client