$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: VFB9cDxunfuUJll3PLAidCVjra+LAMaI8jTUUKWsYl0= Subject key identifier: BA:4C:B9:26:9F:3B:68:75:DA:32:9C:C2:A4:E5:C7:B3:CD:E8:EB:5D Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 5DE307FAEEB599F0A262FFFB87A555EEA96B7ED0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 0340 Signing time: Wed 25 Mar 2026 21:50:54 +0000 Manifest this update: Wed 25 Mar 2026 21:45:54 +0000 Manifest next update: Sat 28 Mar 2026 23:14:54 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=) 2: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: 8z1JyM/G9+F9wrT9DAx2XzH3qVefm/ZH+4R/PHyqdnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e3:07:fa:ee:b5:99:f0:a2:62:ff:fb:87:a5:55:ee:a9:6b:7e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Mar 25 21:45:54 2026 GMT Not After : Mar 28 23:14:54 2026 GMT Subject: CN=BA4CB9269F3B6875DA329CC2A4E5C7B3CDE8EB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:29:b8:64:ff:7e:cd:24:03:e0:c3:53:73: fe:4b:5a:11:7d:cf:68:97:dd:70:6a:08:07:2a:cb: bd:21:25:ea:35:cd:c1:d5:ea:34:9d:a9:55:ad:d9: 41:7e:46:7c:6c:c8:ed:cf:e0:18:be:6a:cf:e8:7c: 1e:d5:0f:dc:f2:7c:69:14:8a:30:0c:4d:57:f8:8a: ce:ab:93:1b:5d:6c:db:74:5a:d8:d7:82:9d:20:d8: f4:a2:73:3c:01:db:8a:17:a0:84:ba:a4:b1:e5:a9: 2c:aa:8f:27:a8:45:ec:a2:aa:7c:4e:97:8e:9f:83: 33:99:17:01:69:78:9b:ae:48:33:9b:a5:b9:44:d5: ef:ad:03:10:79:d5:6f:e8:b1:8f:b4:7e:38:46:13: 7f:d0:c4:1f:9b:1c:be:e7:e4:6d:0b:99:0e:2c:2a: e5:02:82:76:ff:22:de:8e:b0:c0:cb:b6:5a:08:0d: 09:43:cb:a8:43:b7:5e:b0:4a:9a:88:b4:b2:19:90: 16:ba:42:52:21:d9:9a:2f:30:e0:b7:f6:5f:ae:b0: 38:e1:63:43:2b:79:e9:0e:db:45:a5:30:a4:6d:b6: 27:36:51:c7:47:b2:53:11:28:6a:84:c1:e9:8b:d8: 8f:84:63:ae:25:b8:1c:9c:d6:9e:19:e1:eb:94:ae: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4C:B9:26:9F:3B:68:75:DA:32:9C:C2:A4:E5:C7:B3:CD:E8:EB:5D X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3e:7a:56:c0:3b:17:4c:7e:4e:95:43:82:50:de:1b:d7:98: e7:bb:ad:6e:a2:0b:40:46:a5:f9:cf:c3:d3:44:4a:b1:9e:0c: cd:56:95:3d:c4:8a:ad:45:41:fd:e3:60:c2:47:fd:67:72:49: 5b:2b:72:f4:4b:a2:82:79:5d:ce:84:4a:6a:50:e1:0c:85:1a: 9b:43:d1:69:01:7b:98:30:ea:77:cf:a3:8d:59:8d:0d:83:be: 62:91:34:9a:c4:55:86:b9:42:22:4c:9e:56:58:1c:95:be:bb: e4:64:2f:ba:52:a7:d3:2e:93:43:b3:fa:85:16:24:07:a5:96: 39:37:52:b7:a0:cf:44:96:af:0f:66:51:1e:98:09:ec:65:89: 31:74:b5:53:4a:c4:c8:8f:bf:88:e7:b4:c2:07:da:12:1b:b0: 6d:d9:33:57:45:f2:d8:ec:70:34:53:cb:f0:39:fa:10:0c:e6: 3b:e1:8d:5c:96:89:e7:4d:84:d4:8b:c5:83:72:84:fc:56:f5: 24:8c:dc:ff:53:e5:e8:f4:07:a2:f4:c9:d4:16:d9:2d:8d:b4: a9:6f:4b:8c:ad:08:2b:4e:a0:09:5d:c1:a9:83:01:35:a1:4f: b9:42:d9:a6:64:3a:1e:59:e4:6a:87:85:5f:c9:67:bd:78:f7: 1a:b2:3a:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeMH+u61mfCiYv/7h6VV7qlrftAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNjAzMjUyMTQ1NTRaFw0yNjAzMjgyMzE0NTRaMDMxMTAvBgNV BAMTKEJBNENCOTI2OUYzQjY4NzVEQTMyOUNDMkE0RTVDN0IzQ0RFOEVCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzSm4ZP9+zSQD4MNTc/5LWhF9 z2iX3XBqCAcqy70hJeo1zcHV6jSdqVWt2UF+RnxsyO3P4Bi+as/ofB7VD9zyfGkU ijAMTVf4is6rkxtdbNt0WtjXgp0g2PSiczwB24oXoIS6pLHlqSyqjyeoReyiqnxO l46fgzOZFwFpeJuuSDObpblE1e+tAxB51W/osY+0fjhGE3/QxB+bHL7n5G0LmQ4s KuUCgnb/It6OsMDLtloIDQlDy6hDt16wSpqItLIZkBa6QlIh2ZovMOC39l+usDjh Y0MreekO20WlMKRttic2UcdHslMRKGqEwemL2I+EY64luByc1p4Z4euUriVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuky5Jp87aHXaMpzCpOXHs83o610wHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4+elbAOxdMfk6VQ4JQ3hvXmOe7rW6iC0BG pfnPw9NESrGeDM1WlT3Eiq1FQf3jYMJH/WdySVsrcvRLooJ5Xc6ESmpQ4QyFGptD 0WkBe5gw6nfPo41ZjQ2DvmKRNJrEVYa5QiJMnlZYHJW+u+RkL7pSp9Muk0Oz+oUW JAelljk3Uregz0SWrw9mUR6YCexliTF0tVNKxMiPv4jntMIH2hIbsG3ZM1dF8tjs cDRTy/A5+hAM5jvhjVyWiedNhNSLxYNyhPxW9SSM3P9T5ej0B6L0ydQW2S2NtKlv S4ytCCtOoAldwamDATWhT7lC2aZkOh5Z5GqHhV/JZ7149xqyOhc= -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:11 2026 by rpki-client