$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: DDSFriO12MnZ15CZqHehwe3Q5F6ZkEZ7FNpbA3JVV7M= Subject key identifier: 65:4F:49:5D:95:4C:D6:69:77:CF:E5:F7:F1:1D:FE:04:6C:77:6F:1B Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 0AC94B4CBCA748BCBFD3E5681CE812D87F20E016 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0566 Signing time: Sat 18 Apr 2026 21:31:27 +0000 Manifest this update: Sat 18 Apr 2026 21:26:27 +0000 Manifest next update: Wed 22 Apr 2026 03:28:27 +0000 Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 2: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: tkZefhYThNbWOXAXIiS+T88hoVY6dSOSV0uJ5OYBDCU=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 03:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c9:4b:4c:bc:a7:48:bc:bf:d3:e5:68:1c:e8:12:d8:7f:20:e0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Apr 18 21:26:27 2026 GMT Not After : Apr 22 03:28:27 2026 GMT Subject: CN=654F495D954CD66977CFE5F7F11DFE046C776F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:b8:25:8a:13:81:c8:13:bd:c9:86:1d:91: e8:a2:ca:5c:69:2e:51:62:6d:1f:38:e1:73:ed:5e: 79:62:73:08:77:9d:54:4b:56:a8:07:a2:9d:fe:e2: e4:14:e2:94:4a:88:27:93:66:bd:a0:53:09:30:7b: 98:5c:12:a6:d3:e3:91:bd:73:7a:fb:65:ce:7e:b9: 23:e1:57:44:54:68:62:05:4f:33:ab:b8:c9:fc:1a: 5a:38:ac:b6:cf:89:f4:51:f6:d2:0e:17:ac:77:1d: 74:6e:72:c4:fd:1e:72:ad:69:37:f5:f5:5b:87:e1: 45:43:82:49:23:df:0f:bd:f7:24:e3:f9:35:fc:3e: 4f:b8:73:44:80:94:2e:c7:13:cc:91:5c:ef:b2:7c: 44:01:ab:50:79:16:f5:8a:89:34:c3:4d:96:fc:f4: 66:0f:55:bb:aa:2d:7c:31:7d:2a:fd:f5:37:d1:9e: a7:4a:27:8e:58:7b:30:59:70:1c:9e:20:34:2e:f5: 23:ae:fb:77:48:e4:d3:b8:01:5f:d0:83:1f:47:f3: 27:e1:f3:25:6b:ad:b3:e3:66:e6:34:b3:47:31:7d: 70:99:60:38:4f:53:f4:e4:5a:b4:5a:2d:73:56:72: 94:18:a9:9e:cc:72:0f:18:0b:3a:d9:9e:12:a4:0e: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4F:49:5D:95:4C:D6:69:77:CF:E5:F7:F1:1D:FE:04:6C:77:6F:1B X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ed:89:80:e7:7c:1c:e5:f7:ec:1f:d6:7c:bb:da:63:f2:55: c9:7d:a2:80:9c:15:fb:13:df:f9:3b:62:4f:f0:5a:e9:eb:aa: a3:02:67:b5:dc:bd:bd:97:29:f8:36:5f:c6:90:7a:c6:5b:c5: ae:7d:23:a1:fc:ed:75:e6:39:33:70:db:d3:ce:a6:63:0e:b3: bf:d8:31:7d:01:f2:80:cb:92:7f:a9:c7:f2:14:b8:c4:f1:12: cf:52:64:2c:8f:80:74:af:40:1c:64:80:50:cc:70:b2:59:1f: 59:6b:71:85:55:15:ae:40:84:c1:f8:42:2b:d5:1e:bf:3b:e4: db:74:d3:7f:db:d8:6e:e7:60:d6:4b:65:d6:bd:29:bd:3e:99: f8:60:15:59:16:91:41:6e:42:41:d5:92:fc:86:57:9e:38:7b: 48:27:0d:54:f1:3e:be:93:b3:e9:20:30:3a:8a:c4:9d:cb:93: dd:7b:34:df:70:19:9a:8c:ab:a1:d0:1d:03:96:bf:7a:b9:25: 0d:c3:d1:8f:9e:62:3e:cc:c0:51:e9:eb:d4:64:0f:88:05:79: 5b:4c:85:2b:47:d0:e4:cb:93:6b:1f:0f:27:19:d0:49:d3:a7: 81:4b:85:72:98:57:cc:16:72:f1:30:39:c5:cb:ae:ba:a8:2d: 46:13:c8:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCslLTLynSLy/0+VoHOgS2H8g4BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNjA0MTgyMTI2MjdaFw0yNjA0MjIwMzI4MjdaMDMxMTAvBgNV BAMTKDY1NEY0OTVEOTU0Q0Q2Njk3N0NGRTVGN0YxMURGRTA0NkM3NzZGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLLglihOByBO9yYYdkeiiylxp LlFibR844XPtXnlicwh3nVRLVqgHop3+4uQU4pRKiCeTZr2gUwkwe5hcEqbT45G9 c3r7Zc5+uSPhV0RUaGIFTzOruMn8Glo4rLbPifRR9tIOF6x3HXRucsT9HnKtaTf1 9VuH4UVDgkkj3w+99yTj+TX8Pk+4c0SAlC7HE8yRXO+yfEQBq1B5FvWKiTTDTZb8 9GYPVbuqLXwxfSr99TfRnqdKJ45YezBZcByeIDQu9SOu+3dI5NO4AV/Qgx9H8yfh 8yVrrbPjZuY0s0cxfXCZYDhPU/TkWrRaLXNWcpQYqZ7Mcg8YCzrZnhKkDmTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZU9JXZVM1ml3z+X38R3+BGx3bxswHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbtiYDnfBzl9+wf1ny72mPyVcl9ooCcFfsT 3/k7Yk/wWunrqqMCZ7Xcvb2XKfg2X8aQesZbxa59I6H87XXmOTNw29POpmMOs7/Y MX0B8oDLkn+px/IUuMTxEs9SZCyPgHSvQBxkgFDMcLJZH1lrcYVVFa5AhMH4QivV Hr875Nt003/b2G7nYNZLZda9Kb0+mfhgFVkWkUFuQkHVkvyGV544e0gnDVTxPr6T s+kgMDqKxJ3Lk917NN9wGZqMq6HQHQOWv3q5JQ3D0Y+eYj7MwFHp69RkD4gFeVtM hStH0OTLk2sfDycZ0EnTp4FLhXKYV8wWcvEwOcXLrrqoLUYTyMI= -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:48 2026 by rpki-client