$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: i1n9bCchNBNep6CkzHFd3MvAjL4xS+bmD/LM3SqK+RM= Subject key identifier: 50:05:38:4F:FF:A6:A0:0E:D8:A5:6F:F0:A2:0E:52:36:C6:F4:D9:BD Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 3EFFF352E3F7D481BD43A5F163BCD33FA417FD43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0470 Signing time: Mon 20 Apr 2026 21:52:10 +0000 Manifest this update: Mon 20 Apr 2026 21:47:10 +0000 Manifest next update: Fri 24 Apr 2026 07:22:10 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: USXT9tGmZSSe/IlrX5DeXakB01XWvi+hzHICtu2Tw1A=) 2: AS23693.roa (hash: x2Y93tqP6C+1tkjkFr1Wolq+06qWQzxhxRy/kHtTafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:f3:52:e3:f7:d4:81:bd:43:a5:f1:63:bc:d3:3f:a4:17:fd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Apr 20 21:47:10 2026 GMT Not After : Apr 24 07:22:10 2026 GMT Subject: CN=5005384FFFA6A00ED8A56FF0A20E5236C6F4D9BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:bb:e6:93:56:56:13:7d:01:cd:d1:71:67: 2e:04:b6:93:66:c4:be:b0:76:df:f3:62:64:55:0e: d1:46:ac:10:36:70:47:d6:0b:98:54:2d:c3:7b:d7: a7:f8:fb:87:76:c3:1a:da:8f:d4:d7:b9:6a:31:4c: 55:de:2c:07:a5:ec:2d:34:23:d9:4f:81:aa:ee:c3: 19:e2:a6:b4:e2:95:01:ce:d6:8b:91:10:76:ab:17: 9c:50:b8:17:67:a7:9d:cf:87:1c:bc:45:77:09:87: 55:be:6f:c3:5d:ad:72:c1:d9:d8:73:da:a5:03:98: 8c:dd:21:ff:a1:38:07:0d:31:9c:5e:f3:3f:0e:5b: 08:84:1c:1a:87:93:c8:24:f7:fc:bf:43:f7:0f:55: d9:c3:87:b3:67:0a:56:4c:fc:94:86:d4:5c:f5:21: ba:99:61:40:56:2c:af:c5:ff:bc:d0:ec:6b:b2:10: 2e:01:c9:43:f4:02:ad:05:b3:a3:9c:15:08:51:24: 81:0d:14:4e:ae:f9:78:25:68:1f:3a:fd:52:0e:70: 6a:c8:76:66:ab:d7:40:9a:0e:5b:eb:bb:5f:52:70: 97:f8:cb:bb:05:51:f1:4c:f0:ae:3f:06:4b:21:03: 29:be:2f:7d:7e:e4:e5:1d:4f:f5:3d:4b:c0:7e:7c: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:05:38:4F:FF:A6:A0:0E:D8:A5:6F:F0:A2:0E:52:36:C6:F4:D9:BD X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:11:bf:6f:32:ac:c6:81:da:6e:38:6f:01:9a:59:3e:ed:85: 0f:2a:b9:24:18:1b:b2:99:c9:fa:9e:ca:41:65:fa:fe:4c:83: f9:a9:f6:0b:d8:67:b8:b6:26:f1:f0:e0:e1:db:7e:cf:f3:b2: 46:00:c1:54:2a:da:b5:76:2c:c3:b0:b6:6c:d3:25:3a:b6:a6: 7f:e6:80:8c:bd:34:54:5f:a2:63:19:bc:15:79:b7:ea:9d:3b: b8:bc:8c:a6:0b:18:0e:ea:b1:74:34:51:08:01:06:ea:43:32: 3c:c6:18:68:7b:c2:ce:94:66:c7:1b:0e:2d:fb:4c:2b:69:85: ca:11:1f:72:a9:72:6b:06:8c:de:c6:51:19:ce:b2:68:bb:77: dc:ce:7e:57:b0:a2:14:bd:33:cd:7b:c0:fd:01:64:4c:25:5a: d8:5c:52:e8:95:25:64:2d:79:2a:96:c3:e8:ed:50:fd:ec:e7: 10:39:6f:23:25:fd:94:b4:c8:85:43:1a:76:30:8c:cf:ad:56: 20:81:11:b0:0e:86:9a:40:2b:26:ee:b5:96:a5:76:53:4c:fa: 01:08:49:11:76:1c:a5:7a:f4:62:b0:aa:87:94:f6:02:0d:23: ab:c2:58:5e:b2:59:ac:04:8a:d2:a9:f1:56:6a:b0:bc:0f:14: 15:54:52:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv/zUuP31IG9Q6XxY7zTP6QX/UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNjA0MjAyMTQ3MTBaFw0yNjA0MjQwNzIyMTBaMDMxMTAvBgNV BAMTKDUwMDUzODRGRkZBNkEwMEVEOEE1NkZGMEEyMEU1MjM2QzZGNEQ5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gLvmk1ZWE30BzdFxZy4EtpNm xL6wdt/zYmRVDtFGrBA2cEfWC5hULcN716f4+4d2wxraj9TXuWoxTFXeLAel7C00 I9lPgaruwxniprTilQHO1ouREHarF5xQuBdnp53Phxy8RXcJh1W+b8NdrXLB2dhz 2qUDmIzdIf+hOAcNMZxe8z8OWwiEHBqHk8gk9/y/Q/cPVdnDh7NnClZM/JSG1Fz1 IbqZYUBWLK/F/7zQ7GuyEC4ByUP0Aq0Fs6OcFQhRJIENFE6u+XglaB86/VIOcGrI dmar10CaDlvru19ScJf4y7sFUfFM8K4/BkshAym+L31+5OUdT/U9S8B+fM0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUAU4T/+moA7YpW/wog5SNsb02b0wHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIURv28yrMaB2m44bwGaWT7thQ8quSQYG7KZ yfqeykFl+v5Mg/mp9gvYZ7i2JvHw4OHbfs/zskYAwVQq2rV2LMOwtmzTJTq2pn/m gIy9NFRfomMZvBV5t+qdO7i8jKYLGA7qsXQ0UQgBBupDMjzGGGh7ws6UZscbDi37 TCtphcoRH3KpcmsGjN7GURnOsmi7d9zOflewohS9M817wP0BZEwlWthcUuiVJWQt eSqWw+jtUP3s5xA5byMl/ZS0yIVDGnYwjM+tViCBEbAOhppAKybutZaldlNM+gEI SRF2HKV69GKwqoeU9gINI6vCWF6yWawEitKp8VZqsLwPFBVUUn0= -----END CERTIFICATE-----Generated at Wed Apr 22 03:35:25 2026 by rpki-client