$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: EOSsjlXU4vhRoOFCDXyjOS707pIsIdv8UE1Fe/5LRlQ= Subject key identifier: 42:42:A5:EC:14:2F:6D:F8:47:0F:02:01:4D:3B:77:26:2F:59:0D:35 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 75EB1B14F3EA539BF1E8F91BD49ADBCEC834680D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 013E Signing time: Sun 26 Apr 2026 09:32:34 +0000 Manifest this update: Sun 26 Apr 2026 09:27:34 +0000 Manifest next update: Wed 29 Apr 2026 19:13:34 +0000 Files and hashes: 1: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: GS37UgKoAc3KvOEONc+556OFtKgxYxE3OI9Ca5fmaDA=) 2: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: 6oheSG1phuT6HQzyP7nHi6+7BWYvc6YafB0IO/Fvzes=) 3: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: C1DugQVHSreAgPaO3qUxUKJqTe7dreglrdn7g96ChCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 19:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:eb:1b:14:f3:ea:53:9b:f1:e8:f9:1b:d4:9a:db:ce:c8:34:68:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Apr 26 09:27:34 2026 GMT Not After : Apr 29 19:13:34 2026 GMT Subject: CN=4242A5EC142F6DF8470F02014D3B77262F590D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:b4:77:3f:c6:30:64:df:8c:8f:b3:7b:c3: 26:a0:15:d5:62:bf:9c:28:b2:21:da:ff:18:f2:c3: ee:5c:67:c7:7b:54:05:60:0f:22:b0:fa:74:4a:bc: 8c:54:ee:9b:4f:da:59:1b:2f:99:49:2c:9a:94:39: 93:23:54:9a:d7:42:37:8f:2c:08:7b:32:78:88:86: 30:e3:62:eb:8f:47:f9:77:bd:43:92:40:75:47:0a: f5:af:a5:13:e6:8c:a4:e5:bf:ec:40:3c:cb:99:9a: 6a:1f:ec:cd:41:62:af:1d:44:67:a6:7c:6d:bb:87: 8f:b0:10:38:98:5a:36:e8:4a:c3:34:d1:6e:31:90: 3f:bb:cc:9e:0e:d9:d2:99:45:d6:7f:ab:7a:7d:fc: e5:af:43:2f:c5:83:2b:4b:42:2c:cb:67:2d:d3:81: 52:99:b8:e5:76:24:89:f8:0f:21:9b:14:ab:e6:2f: e7:9b:d4:9b:75:75:a5:e4:70:bd:14:96:61:95:f7: 83:20:5b:94:a0:f4:d7:a7:0e:c0:6e:dc:58:0f:b6: 3c:26:e1:98:9c:33:69:5e:ef:2e:24:ec:35:2c:06: d2:2b:88:cb:3d:8e:08:8a:bb:19:24:6e:1a:f4:2b: 23:42:fa:fa:68:0c:90:92:bf:c0:ca:d6:05:be:eb: 9e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:A5:EC:14:2F:6D:F8:47:0F:02:01:4D:3B:77:26:2F:59:0D:35 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4c:70:c2:9b:f2:97:0e:3a:9b:df:19:35:7b:51:5f:68:f9: 11:74:91:3d:73:44:20:d0:be:30:65:2d:80:29:64:c4:9d:9a: 7e:e2:4c:6c:43:c3:07:3b:0b:c4:25:ed:0b:12:83:09:dd:83: ec:63:54:48:28:b1:11:6e:cb:46:7f:12:d8:4a:36:0c:86:f6: 9f:67:d0:e2:7a:d5:e7:12:30:cc:cf:14:a6:93:ff:13:89:9c: 9c:e7:f1:02:1c:3e:71:92:9e:be:31:87:1f:8d:d5:00:df:b6: ad:62:04:53:48:d8:bb:60:f0:4d:c0:9f:1a:8e:f9:e7:62:c4: 39:88:3c:3c:f8:3e:69:c3:4e:0b:29:f3:ac:9b:08:b4:45:7c: ce:69:aa:0c:a3:89:d2:ea:15:4f:a3:3d:ba:ef:a7:4c:77:94: 02:db:ae:4a:eb:0b:94:ea:9a:61:b0:b2:62:99:66:b3:62:fe: ff:4c:0f:b6:01:2d:82:13:a4:88:31:37:75:b2:e1:cd:4d:1b: 66:02:50:6b:dc:27:c3:42:c3:10:ac:7a:ba:33:51:4f:ff:32: 2d:3f:e8:6b:6d:e7:02:9b:80:1a:95:81:3b:dd:fc:44:05:9c: ba:91:45:45:05:d3:5b:5f:28:61:5c:10:30:7c:a7:60:8a:9f: 55:c9:37:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdesbFPPqU5vx6Pkb1Jrbzsg0aA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNjA0MjYwOTI3MzRaFw0yNjA0MjkxOTEzMzRaMDMxMTAvBgNV BAMTKDQyNDJBNUVDMTQyRjZERjg0NzBGMDIwMTREM0I3NzI2MkY1OTBEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMf7R3P8YwZN+Mj7N7wyagFdVi v5wosiHa/xjyw+5cZ8d7VAVgDyKw+nRKvIxU7ptP2lkbL5lJLJqUOZMjVJrXQjeP LAh7MniIhjDjYuuPR/l3vUOSQHVHCvWvpRPmjKTlv+xAPMuZmmof7M1BYq8dRGem fG27h4+wEDiYWjboSsM00W4xkD+7zJ4O2dKZRdZ/q3p9/OWvQy/FgytLQizLZy3T gVKZuOV2JIn4DyGbFKvmL+eb1Jt1daXkcL0UlmGV94MgW5Sg9NenDsBu3FgPtjwm 4ZicM2le7y4k7DUsBtIriMs9jgiKuxkkbhr0KyNC+vpoDJCSv8DK1gW+657tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkKl7BQvbfhHDwIBTTt3Ji9ZDTUwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJMcMKb8pcOOpvfGTV7UV9o+RF0kT1zRCDQ vjBlLYApZMSdmn7iTGxDwwc7C8Ql7QsSgwndg+xjVEgosRFuy0Z/EthKNgyG9p9n 0OJ61ecSMMzPFKaT/xOJnJzn8QIcPnGSnr4xhx+N1QDftq1iBFNI2Ltg8E3AnxqO +edixDmIPDz4PmnDTgsp86ybCLRFfM5pqgyjidLqFU+jPbrvp0x3lALbrkrrC5Tq mmGwsmKZZrNi/v9MD7YBLYITpIgxN3Wy4c1NG2YCUGvcJ8NCwxCserozUU//Mi0/ 6Gtt5wKbgBqVgTvd/EQFnLqRRUUF01tfKGFcEDB8p2CKn1XJN+4= -----END CERTIFICATE-----Generated at Mon Apr 27 07:17:25 2026 by rpki-client