$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: Kon7ofYerhu443GyflckDI/XIag2oOOPLEmT4vLu/+0= Subject key identifier: A0:1C:9C:F1:03:83:3B:92:E7:0D:9C:A5:2A:4E:1C:EA:41:1A:DA:C1 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 434D75D1DECBDCDED87063B29D72C5B5A16F62AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 055A Signing time: Tue 17 Mar 2026 17:01:59 +0000 Manifest this update: Tue 17 Mar 2026 16:56:59 +0000 Manifest next update: Sat 21 Mar 2026 04:13:59 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: NOuYItBSsWqus7+TrXL6ma3FGMgRNJ57+gfAAQmTs/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 04:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4d:75:d1:de:cb:dc:de:d8:70:63:b2:9d:72:c5:b5:a1:6f:62:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Mar 17 16:56:59 2026 GMT Not After : Mar 21 04:13:59 2026 GMT Subject: CN=A01C9CF103833B92E70D9CA52A4E1CEA411ADAC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:02:e9:81:d8:0f:bb:44:1b:73:c1:50:a0: cf:54:eb:70:cb:b8:bf:ee:45:84:38:bd:d9:d2:bd: 00:47:c2:b1:f9:c4:ae:78:1c:51:99:67:40:de:2e: 61:de:17:c0:9d:eb:95:19:d1:b0:bf:2f:dd:38:d3: c0:62:4d:87:90:61:46:14:cf:91:28:81:42:c7:80: 12:f2:b5:eb:b7:ff:1d:86:e9:62:1c:c9:f2:94:6c: 43:a6:dd:a9:b8:dc:aa:c9:01:6d:ad:3a:04:ec:07: fc:19:f1:a8:1b:b9:91:b0:63:91:45:cd:ed:17:81: 15:04:aa:0b:22:b8:ce:8d:61:b7:87:2d:4f:3a:7f: ee:0e:7a:96:99:27:53:e2:22:ca:79:9d:58:82:5a: 52:a0:2a:45:39:40:37:2b:8c:5d:02:fc:16:b8:7c: 30:76:62:15:d0:7b:1a:b0:a5:af:08:d1:62:c8:a6: 3e:c3:21:ab:0c:f9:76:bb:f0:88:ae:c7:b6:f7:78: 0d:11:2f:85:5c:00:39:c0:61:18:52:ad:08:d0:11: 16:7c:c3:82:24:68:5d:36:00:eb:9e:95:40:aa:ed: b7:1a:f1:e4:17:19:76:eb:cf:f5:5d:7f:c8:5f:49: ac:1a:cc:81:0e:ea:57:60:56:03:b4:1f:7b:53:84: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1C:9C:F1:03:83:3B:92:E7:0D:9C:A5:2A:4E:1C:EA:41:1A:DA:C1 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:03:08:88:f7:bc:1e:a5:24:72:88:93:33:fd:d7:0c:36: 2f:99:0b:70:3b:3f:4a:7e:9a:19:93:f6:42:5a:bd:56:6e:2c: 77:dc:64:be:e7:2e:cd:d0:eb:7b:a0:45:86:c4:0d:a0:bc:1d: fc:72:c1:c1:6b:2b:71:0f:bb:41:d2:18:57:0f:ec:bd:3d:d4: e9:3d:1c:cc:c6:7d:c7:43:b1:41:00:24:80:5d:6f:9f:05:54: c9:bc:d0:41:56:d2:2f:f7:51:2f:29:c5:34:fa:a8:a4:72:1c: 62:9d:10:d2:93:a3:0b:8d:f9:e2:68:aa:ab:6c:fb:4a:f9:a4: cf:99:91:12:60:4c:ef:f3:7e:33:5a:33:08:4b:fe:4a:7d:76: a9:17:28:a2:02:6b:b2:3c:08:6f:93:74:a8:b8:31:e2:ca:22: 6a:75:df:3e:fd:47:71:4a:31:8b:de:0d:71:3e:44:4f:09:f1: 93:25:d1:08:36:b5:f6:bb:b4:b3:1d:c0:c7:ed:e3:59:f9:de: ac:d4:87:4c:d9:48:09:09:8a:b5:79:1d:48:b6:81:51:ae:35: 37:b0:86:b9:86:b3:72:62:a4:fe:23:94:08:03:2a:8f:0d:08: 68:e4:36:c5:8c:11:a1:a1:8c:a5:8b:b7:18:53:4b:99:41:d4: b2:54:f4:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0110d7L3N7YcGOynXLFtaFvYqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNjAzMTcxNjU2NTlaFw0yNjAzMjEwNDEzNTlaMDMxMTAvBgNV BAMTKEEwMUM5Q0YxMDM4MzNCOTJFNzBEOUNBNTJBNEUxQ0VBNDExQURBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs6wLpgdgPu0Qbc8FQoM9U63DL uL/uRYQ4vdnSvQBHwrH5xK54HFGZZ0DeLmHeF8Cd65UZ0bC/L90408BiTYeQYUYU z5EogULHgBLyteu3/x2G6WIcyfKUbEOm3am43KrJAW2tOgTsB/wZ8agbuZGwY5FF ze0XgRUEqgsiuM6NYbeHLU86f+4OepaZJ1PiIsp5nViCWlKgKkU5QDcrjF0C/Ba4 fDB2YhXQexqwpa8I0WLIpj7DIasM+Xa78Iiux7b3eA0RL4VcADnAYRhSrQjQERZ8 w4IkaF02AOuelUCq7bca8eQXGXbrz/Vdf8hfSawazIEO6ldgVgO0H3tThHqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoByc8QODO5LnDZylKk4c6kEa2sEwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMqAwiI97wepSRyiJMz/dcMNi+ZC3A7P0p+ mhmT9kJavVZuLHfcZL7nLs3Q63ugRYbEDaC8HfxywcFrK3EPu0HSGFcP7L091Ok9 HMzGfcdDsUEAJIBdb58FVMm80EFW0i/3US8pxTT6qKRyHGKdENKTowuN+eJoqqts +0r5pM+ZkRJgTO/zfjNaMwhL/kp9dqkXKKICa7I8CG+TdKi4MeLKImp13z79R3FK MYveDXE+RE8J8ZMl0Qg2tfa7tLMdwMft41n53qzUh0zZSAkJirV5HUi2gVGuNTew hrmGs3JipP4jlAgDKo8NCGjkNsWMEaGhjKWLtxhTS5lB1LJU9Ls= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:43 2026 by rpki-client