$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: pvD4dWkoGakxZpO0ZHDGd8TTv3QIw1gkWlejixOgz0Q= Subject key identifier: 65:76:30:60:F5:E1:0A:E6:91:F3:7E:01:37:27:AD:4B:A4:E9:59:0D Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 42CA430D0A40B5673F3CB97EFADCF0A73B6BC95C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 02B0 Signing time: Thu 16 Apr 2026 12:02:44 +0000 Manifest this update: Thu 16 Apr 2026 11:57:44 +0000 Manifest next update: Sun 19 Apr 2026 20:00:44 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: HofDLGmwqIsnj587taUbViIIFJnwZV6L29IBKkzVuIE=) 2: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) 3: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: n8cyrUgcYAOzR1MbHw03iiEJ6mugkbKnWfNdnMA9Dyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ca:43:0d:0a:40:b5:67:3f:3c:b9:7e:fa:dc:f0:a7:3b:6b:c9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Apr 16 11:57:44 2026 GMT Not After : Apr 19 20:00:44 2026 GMT Subject: CN=65763060F5E10AE691F37E013727AD4BA4E9590D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:a7:7e:b9:65:35:99:0d:0a:77:b3:cc:77: d8:88:fc:d5:46:a4:64:e5:d6:ba:fc:14:02:b9:b2: 50:23:3d:9d:7a:72:18:13:87:81:c9:6e:ee:22:20: 57:6d:f6:02:73:e0:4c:25:2d:18:84:51:ba:dd:b3: 84:5f:ff:78:4d:8a:51:a1:55:f4:18:17:78:5c:9c: 4a:02:4c:fa:58:ea:31:01:d1:58:b7:0e:74:03:f9: 10:63:a8:80:c8:ec:1e:04:7d:68:82:9b:0a:5f:c9: d7:e7:43:3c:36:1d:62:0c:87:da:a2:55:37:a4:85: 32:e0:32:93:cc:66:7a:fc:55:e8:48:40:d3:45:52: a9:05:fb:20:2d:27:20:eb:f7:c7:7d:f3:70:b1:a0: 73:de:45:cd:ac:19:cc:d3:7c:86:91:a0:76:f0:52: 20:b1:fc:8d:2d:88:0c:4c:7c:1f:38:5f:1a:ab:de: 59:ba:da:e8:2b:fa:15:f8:62:5c:5b:24:b5:cd:76: a2:3c:bc:77:24:bf:0b:6e:35:0f:af:41:82:0b:b7: 01:a8:55:98:32:39:38:75:53:e1:b9:91:df:20:5d: 29:3f:f2:a3:b3:23:cf:fb:b0:4b:d1:de:50:ac:a7: 51:bb:88:1b:58:85:cc:34:50:d6:39:3c:2c:58:b1: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:30:60:F5:E1:0A:E6:91:F3:7E:01:37:27:AD:4B:A4:E9:59:0D X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:25:55:2e:9d:f0:3b:67:f2:b9:52:d4:5c:c2:f1:c4:33:9a: fd:43:e7:97:df:61:a0:4c:4d:45:c5:8b:9f:36:f4:4f:99:9c: 87:e9:0c:6c:1d:24:0f:17:a8:ab:01:fc:e6:33:15:44:5d:4f: f3:f5:0b:04:fe:b3:3c:82:e4:09:97:c5:1e:2f:ee:7b:53:da: 54:3c:bb:9f:2c:37:7f:5c:e9:d2:75:31:1a:47:db:f0:8f:0f: d8:c4:fa:73:54:0e:a0:8b:a9:44:9b:69:0a:8c:0a:18:05:33: 33:92:ee:02:3b:40:0e:84:2a:05:4b:f4:e8:4a:d9:18:0f:70: 3c:db:89:88:de:22:93:ee:df:9d:6d:09:68:d2:77:5f:ae:32: a7:4a:b0:e7:64:ab:53:01:a7:2e:7a:04:a8:7f:1f:a8:53:24: 3b:51:94:f8:f6:f1:ef:bd:ba:0c:be:5c:20:11:2d:86:ee:3f: 2b:4f:e7:ae:cc:c7:0f:cd:6c:f2:f9:3e:d9:07:53:e6:37:23: 6f:3f:a2:be:a3:95:f0:43:44:c5:cc:d2:56:58:f6:5a:57:af: df:b9:83:dd:7b:b0:fb:a4:e6:2d:58:f3:2f:a5:1d:73:03:73: 28:8e:ba:b4:bc:b1:18:3d:9f:7d:14:29:93:75:05:c4:f9:bd: 4f:9d:ef:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQspDDQpAtWc/PLl++tzwpztryVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNjA0MTYxMTU3NDRaFw0yNjA0MTkyMDAwNDRaMDMxMTAvBgNV BAMTKDY1NzYzMDYwRjVFMTBBRTY5MUYzN0UwMTM3MjdBRDRCQTRFOTU5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnKd+uWU1mQ0Kd7PMd9iI/NVG pGTl1rr8FAK5slAjPZ16chgTh4HJbu4iIFdt9gJz4EwlLRiEUbrds4Rf/3hNilGh VfQYF3hcnEoCTPpY6jEB0Vi3DnQD+RBjqIDI7B4EfWiCmwpfydfnQzw2HWIMh9qi VTekhTLgMpPMZnr8VehIQNNFUqkF+yAtJyDr98d983CxoHPeRc2sGczTfIaRoHbw UiCx/I0tiAxMfB84Xxqr3lm62ugr+hX4YlxbJLXNdqI8vHckvwtuNQ+vQYILtwGo VZgyOTh1U+G5kd8gXSk/8qOzI8/7sEvR3lCsp1G7iBtYhcw0UNY5PCxYsd8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZXYwYPXhCuaR834BNyetS6TpWQ0wHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUlVS6d8Dtn8rlS1FzC8cQzmv1D55ffYaBM TUXFi5829E+ZnIfpDGwdJA8XqKsB/OYzFURdT/P1CwT+szyC5AmXxR4v7ntT2lQ8 u58sN39c6dJ1MRpH2/CPD9jE+nNUDqCLqUSbaQqMChgFMzOS7gI7QA6EKgVL9OhK 2RgPcDzbiYjeIpPu351tCWjSd1+uMqdKsOdkq1MBpy56BKh/H6hTJDtRlPj28e+9 ugy+XCARLYbuPytP567Mxw/NbPL5PtkHU+Y3I28/or6jlfBDRMXM0lZY9lpXr9+5 g917sPuk5i1Y8y+lHXMDcyiOurS8sRg9n30UKZN1BcT5vU+d7xY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:38 2026 by rpki-client