$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: F+sCSL6aOWHs+97pI0/lII9DRFOEZrrY76z53M4E4fU= Subject key identifier: A9:C3:89:E6:F6:61:77:EA:A3:89:3A:3D:16:0C:8F:9C:84:1B:61:BA Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 3BE30122D2BDE58B0B1E5D3B490BF8696F84F5B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0382 Signing time: Thu 26 Mar 2026 06:21:45 +0000 Manifest this update: Thu 26 Mar 2026 06:16:45 +0000 Manifest next update: Sun 29 Mar 2026 06:59:45 +0000 Files and hashes: 1: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: AVUnfzqrbeXvBd5BraZJwmqr2wTn8R4ubDG+bOW20aI=) 2: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xR28xhgfPaocTNljEccnigENCimK3oapTJgJUkyM5nM=) 3: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: y1wqO59bqI2eO+ZUPgcjLupWtjaZYoHDS/00YDRfk9c=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e3:01:22:d2:bd:e5:8b:0b:1e:5d:3b:49:0b:f8:69:6f:84:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Mar 26 06:16:45 2026 GMT Not After : Mar 29 06:59:45 2026 GMT Subject: CN=A9C389E6F66177EAA3893A3D160C8F9C841B61BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:6e:e8:9a:c6:60:f9:84:b4:3d:9b:8c:8f: bf:d0:cb:17:6f:c8:11:d9:ba:a1:02:65:6f:38:9b: 1f:e3:c4:01:8b:96:fc:0f:53:30:bf:fe:f6:44:c0: 31:97:cb:9f:40:21:19:fc:a2:7c:af:e3:58:c0:c8: 7e:ab:c1:35:bf:0c:4e:36:ed:e8:c9:36:b1:ab:64: 91:52:a2:7a:46:17:6e:df:c1:4f:2a:7c:f6:15:ae: c8:b1:f4:21:c1:42:ed:5b:58:13:f1:26:be:36:59: c0:e4:5e:5d:5f:21:48:ea:cc:14:1f:2f:cd:5b:8c: d6:21:2b:8b:53:27:24:44:bd:de:7c:98:c3:5e:e6: b7:05:e5:00:48:a2:a9:8e:2e:94:ff:c9:b9:c3:49: 4d:5a:b5:34:b2:6c:40:40:8c:5c:8c:5c:59:19:3c: c8:ae:b4:6c:31:c8:3d:96:47:a5:be:b6:a3:02:18: d2:3d:c1:2f:50:1b:18:ff:10:37:4d:1b:bc:d2:d4: 2a:67:02:09:8b:0a:4d:c7:3b:d8:a1:16:88:46:78: 77:23:cc:93:f9:e8:95:0b:f4:70:b2:32:c1:3d:55: 8d:46:d4:db:cc:3b:4e:f3:62:67:f0:a6:29:09:a0: 67:86:35:ed:58:e1:48:b8:c7:26:15:e5:10:de:d7: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C3:89:E6:F6:61:77:EA:A3:89:3A:3D:16:0C:8F:9C:84:1B:61:BA X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:3a:1b:d0:24:c8:66:dc:65:9b:81:9f:fd:d9:23:eb:fc:41: 50:46:e3:70:f2:e0:d3:e3:fa:9b:86:ba:5d:59:f9:e3:42:e6: 13:9c:d7:50:40:37:04:70:84:7f:b1:77:98:80:bf:e4:42:74: cd:2b:9e:54:3f:72:8e:2f:1d:72:bb:1b:3a:81:49:30:aa:4f: 43:94:fa:7d:4a:e8:51:a7:63:25:75:d4:f8:9d:e4:2c:b3:39: 58:8f:f3:c1:ba:60:86:65:b4:33:39:34:96:35:67:a0:a8:61: 71:d6:7a:c9:12:5a:95:02:9c:27:e0:c6:ca:c6:a4:46:47:59: 8a:0d:e5:ca:bb:d2:d1:fb:41:95:5a:2d:75:2e:85:fe:ff:9a: f8:16:b4:91:af:4f:ff:fd:cb:c9:f0:0f:85:9f:f8:b3:f6:da: cc:82:c6:27:b4:a5:e3:b3:57:11:ec:a7:57:34:a0:9f:d6:c8: 41:93:9f:39:33:9e:b3:39:82:1c:f9:16:b2:0e:ea:f8:55:d3: 92:2b:96:86:ab:37:8d:76:6a:03:24:f7:44:d7:0d:a1:7a:2c: 9f:51:bd:a7:c9:16:e7:59:d0:cc:68:79:14:08:d0:92:3b:08: 67:dc:b4:7d:cd:af:b6:65:34:dd:42:49:3c:63:0a:72:eb:0f: e2:66:72:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+MBItK95YsLHl07SQv4aW+E9bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNjAzMjYwNjE2NDVaFw0yNjAzMjkwNjU5NDVaMDMxMTAvBgNV BAMTKEE5QzM4OUU2RjY2MTc3RUFBMzg5M0EzRDE2MEM4RjlDODQxQjYxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK127omsZg+YS0PZuMj7/Qyxdv yBHZuqECZW84mx/jxAGLlvwPUzC//vZEwDGXy59AIRn8onyv41jAyH6rwTW/DE42 7ejJNrGrZJFSonpGF27fwU8qfPYVrsix9CHBQu1bWBPxJr42WcDkXl1fIUjqzBQf L81bjNYhK4tTJyREvd58mMNe5rcF5QBIoqmOLpT/ybnDSU1atTSybEBAjFyMXFkZ PMiutGwxyD2WR6W+tqMCGNI9wS9QGxj/EDdNG7zS1CpnAgmLCk3HO9ihFohGeHcj zJP56JUL9HCyMsE9VY1G1NvMO07zYmfwpikJoGeGNe1Y4Ui4xyYV5RDe1wU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqcOJ5vZhd+qjiTo9FgyPnIQbYbowHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMw6G9AkyGbcZZuBn/3ZI+v8QVBG43Dy4NPj +puGul1Z+eNC5hOc11BANwRwhH+xd5iAv+RCdM0rnlQ/co4vHXK7GzqBSTCqT0OU +n1K6FGnYyV11Pid5CyzOViP88G6YIZltDM5NJY1Z6CoYXHWeskSWpUCnCfgxsrG pEZHWYoN5cq70tH7QZVaLXUuhf7/mvgWtJGvT//9y8nwD4Wf+LP22syCxie0peOz VxHsp1c0oJ/WyEGTnzkznrM5ghz5FrIO6vhV05IrloarN412agMk90TXDaF6LJ9R vafJFudZ0MxoeRQI0JI7CGfctH3Nr7ZlNN1CSTxjCnLrD+Jmcgg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:31 2026 by rpki-client