$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: bXBVq0Bk7gOmlwPCbGeh7UqQB4e/mMeAJ5zgeXEr+0A= Subject key identifier: 6C:B2:1D:C0:1B:BB:7E:E3:9C:19:11:05:4F:11:AB:3C:80:79:BC:36 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 02087B19EBDCD9036729A50C9BD3C7E227C1DFC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: 0155 Signing time: Wed 25 Mar 2026 05:22:07 +0000 Manifest this update: Wed 25 Mar 2026 05:17:07 +0000 Manifest next update: Sat 28 Mar 2026 14:08:07 +0000 Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: I8arlV9bMVGsAQTZtHx6y++6HiyiMdDVTXwTw+QSjwU=) 2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: JdZTECA++BjmIqFmk0ufbTJJ1PfVp4PKvUt9KELEVYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:08:7b:19:eb:dc:d9:03:67:29:a5:0c:9b:d3:c7:e2:27:c1:df:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Mar 25 05:17:07 2026 GMT Not After : Mar 28 14:08:07 2026 GMT Subject: CN=6CB21DC01BBB7EE39C1911054F11AB3C8079BC36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:88:0e:39:36:f8:0c:5b:c4:7d:75:07:15: 83:39:58:28:7a:a3:e3:72:fd:0b:09:2c:77:dd:47: c6:4b:fa:80:27:00:d9:ea:8e:61:cf:67:50:63:a0: 36:ee:8a:64:6a:07:4d:d4:eb:b7:d7:c7:72:b0:33: b7:6f:e9:fa:bd:3b:e3:67:a5:ae:76:48:69:37:ae: 45:ce:be:e1:9d:4e:4a:62:49:9d:6b:ee:4f:bb:f8: bb:e8:44:e2:73:32:2a:9c:88:8e:9b:da:1a:9a:96: 7a:1a:48:d6:84:e9:ca:6f:f4:c5:d4:6d:fe:d2:f5: de:84:72:b0:50:c3:23:12:75:14:57:84:43:ef:6a: 63:0b:84:b7:5f:43:55:b8:ba:e8:ea:36:ed:d6:30: 03:3b:69:d9:06:76:b3:fb:cb:1e:53:fe:c1:fa:54: 12:e1:ad:bb:b9:48:54:cc:ac:1d:29:84:37:d5:1f: 2e:bf:02:9e:75:58:1e:ff:69:85:40:d7:fd:18:dc: cf:16:b7:4e:06:32:92:dc:31:06:15:e1:11:32:61: af:c1:d8:8a:f6:13:1d:71:60:73:24:7c:20:87:6d: 4d:63:8b:a9:8a:9d:60:17:ae:ef:66:99:49:46:69: e3:e5:29:9f:81:ed:c3:8e:c0:c5:3c:de:f5:72:dd: 31:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B2:1D:C0:1B:BB:7E:E3:9C:19:11:05:4F:11:AB:3C:80:79:BC:36 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:23:fa:a4:21:52:19:7d:47:bc:4c:68:ce:a9:66:be:34: 26:a5:f2:f9:55:21:1f:f5:e2:58:63:63:28:8a:51:ca:bf:ab: ed:77:b0:8c:3d:0f:8c:e7:53:cc:bc:3b:2f:43:65:9f:9e:88: 67:ad:20:4e:a0:9d:96:26:00:ba:cd:0f:05:57:1f:45:30:a5: 70:4a:70:31:a5:c0:45:1f:e4:49:af:84:1a:30:02:1b:1e:0d: 54:33:45:63:64:00:b7:a7:52:2c:cc:77:e0:d3:1b:56:e1:69: 08:a9:1d:4a:68:04:f3:cd:20:e5:81:30:ab:7d:f9:1d:bf:f9: 98:94:32:74:05:25:a1:23:1c:bd:12:f4:89:14:a4:e4:a4:60: 98:4a:c5:6c:4e:c5:97:63:bd:65:ed:a9:84:95:4e:eb:e7:5a: 0f:ea:01:69:8f:93:93:f8:8f:65:39:52:b5:28:4d:13:7c:1e: f7:70:1e:d2:2e:cf:13:1e:15:ff:64:37:0c:fa:9d:3c:2d:a7: 39:f1:ca:f9:fb:73:9b:47:ce:d5:d0:74:41:1d:19:22:ca:99: 15:d5:c0:c8:2b:ab:bf:ba:a1:b6:c6:a1:e5:20:86:a8:4c:c3: 07:4c:87:93:eb:27:03:c1:28:b0:39:ed:aa:52:1d:7a:e4:21: 41:c7:6a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgh7Gevc2QNnKaUMm9PH4ifB38IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNjAzMjUwNTE3MDdaFw0yNjAzMjgxNDA4MDdaMDMxMTAvBgNV BAMTKDZDQjIxREMwMUJCQjdFRTM5QzE5MTEwNTRGMTFBQjNDODA3OUJDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPt4gOOTb4DFvEfXUHFYM5WCh6 o+Ny/QsJLHfdR8ZL+oAnANnqjmHPZ1BjoDbuimRqB03U67fXx3KwM7dv6fq9O+Nn pa52SGk3rkXOvuGdTkpiSZ1r7k+7+LvoROJzMiqciI6b2hqalnoaSNaE6cpv9MXU bf7S9d6EcrBQwyMSdRRXhEPvamMLhLdfQ1W4uujqNu3WMAM7adkGdrP7yx5T/sH6 VBLhrbu5SFTMrB0phDfVHy6/Ap51WB7/aYVA1/0Y3M8Wt04GMpLcMQYV4REyYa/B 2Ir2Ex1xYHMkfCCHbU1ji6mKnWAXru9mmUlGaePlKZ+B7cOOwMU83vVy3TGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLIdwBu7fuOcGREFTxGrPIB5vDYwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbDI/qkIVIZfUe8TGjOqWa+NCal8vlVIR/1 4lhjYyiKUcq/q+13sIw9D4znU8y8Oy9DZZ+eiGetIE6gnZYmALrNDwVXH0UwpXBK cDGlwEUf5EmvhBowAhseDVQzRWNkALenUizMd+DTG1bhaQipHUpoBPPNIOWBMKt9 +R2/+ZiUMnQFJaEjHL0S9IkUpOSkYJhKxWxOxZdjvWXtqYSVTuvnWg/qAWmPk5P4 j2U5UrUoTRN8HvdwHtIuzxMeFf9kNwz6nTwtpznxyvn7c5tHztXQdEEdGSLKmRXV wMgrq7+6obbGoeUghqhMwwdMh5PrJwPBKLA57apSHXrkIUHHai0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:50 2026 by rpki-client