$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: mPgmWq3IWfocrC9tNNGVoVeX5aUee/qDsa2ua+mn0MA= Subject key identifier: D3:8F:6A:2D:9D:02:4D:59:B5:9F:4C:51:4A:79:70:97:2C:19:59:99 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 23989BD1EA73EA9652B64CC3E29A0E374864F09D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 025F Signing time: Sat 28 Mar 2026 05:10:59 +0000 Manifest this update: Sat 28 Mar 2026 05:05:59 +0000 Manifest next update: Tue 31 Mar 2026 14:12:59 +0000 Files and hashes: 1: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: vT5gw8pm3zvBLDnEnAAGWAVkbL7xMGiHjEjec10PzyA=) 2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:98:9b:d1:ea:73:ea:96:52:b6:4c:c3:e2:9a:0e:37:48:64:f0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Mar 28 05:05:59 2026 GMT Not After : Mar 31 14:12:59 2026 GMT Subject: CN=D38F6A2D9D024D59B59F4C514A7970972C195999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:16:3d:0b:94:76:ca:b7:fc:7b:10:93:21:c5: e7:bb:e8:e0:bb:86:5f:6d:33:cd:fe:bf:9d:bb:a0: 18:9a:2d:d6:99:72:78:a2:f7:f2:fa:93:cd:63:51: df:c3:d5:af:05:d5:4c:3c:a5:df:42:25:77:df:aa: 53:42:cd:11:7b:05:92:55:79:f6:70:cd:91:f7:f2: 83:64:d5:db:3c:c6:77:1e:93:ad:dc:4a:ed:31:80: 87:47:4d:91:dd:79:a9:ec:4b:d5:15:31:e1:91:fa: b4:13:a8:db:95:6d:56:9f:ca:53:94:23:e2:34:60: a3:62:d1:b8:0d:d1:0a:f1:b3:5e:cf:47:47:99:fd: 56:b6:02:c2:b8:61:33:ac:99:9e:dc:70:59:bd:b3: a6:74:08:3d:a1:af:a0:a6:4a:15:32:50:b5:4e:39: 68:34:a6:9a:f4:27:00:b6:c0:31:5f:43:ae:96:6c: 0e:a2:71:01:f2:e4:ec:89:8a:60:cc:b9:da:4b:3f: 0f:4c:e0:03:54:f5:c9:e6:f0:44:45:1b:c6:a2:5c: d8:3c:f2:12:79:49:00:57:2d:da:17:90:c0:12:26: ce:6a:20:84:1d:8b:ee:45:42:bd:20:20:0a:38:12: 5a:cf:a1:bc:58:cb:be:79:af:42:f7:08:02:64:ba: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8F:6A:2D:9D:02:4D:59:B5:9F:4C:51:4A:79:70:97:2C:19:59:99 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e1:82:67:18:59:66:f8:1a:83:0a:8d:a1:cf:28:f2:43:9a: 7b:0b:9c:93:01:06:8a:e7:39:12:fa:8c:06:68:88:56:b2:1f: 8c:5d:ba:4f:41:73:35:f2:26:a2:11:f9:16:57:cb:03:19:d6: 3a:1d:41:1e:19:11:ff:1d:5b:7f:0e:cb:86:c4:b9:0f:8f:75: 79:b3:6d:77:54:05:4c:1b:a0:88:d6:40:48:90:dc:03:c9:4b: 15:70:b7:78:75:57:66:69:b7:ee:ae:32:63:60:1b:2a:09:db: 04:f2:f8:a1:81:98:df:b0:54:99:de:8b:90:f8:f5:9f:af:89: 4f:33:81:7f:cc:89:8c:a0:db:a1:3f:ff:20:ac:46:d0:c2:9d: 5e:9e:c2:f9:fb:d1:7c:11:d6:f2:e2:a8:13:5d:62:30:b0:50: 6b:3f:83:d3:4e:3d:db:18:b1:2a:a4:9f:83:8a:7e:64:25:aa: bb:ee:3e:8c:9a:ce:ca:86:bb:ea:06:4e:b6:38:31:dc:35:a0: fb:4e:3e:b2:3d:99:b8:80:39:60:49:93:64:9b:b8:ef:10:f8: 31:c1:f8:82:23:79:e1:c0:31:c1:80:d8:0e:13:57:de:4d:56: 1f:9d:8c:87:2e:fd:cd:84:c6:dd:96:1e:3f:32:d7:82:69:8d: 0d:2f:69:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5ib0epz6pZStkzD4poON0hk8J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNjAzMjgwNTA1NTlaFw0yNjAzMzExNDEyNTlaMDMxMTAvBgNV BAMTKEQzOEY2QTJEOUQwMjRENTlCNTlGNEM1MTRBNzk3MDk3MkMxOTU5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFj0LlHbKt/x7EJMhxee76OC7 hl9tM83+v527oBiaLdaZcnii9/L6k81jUd/D1a8F1Uw8pd9CJXffqlNCzRF7BZJV efZwzZH38oNk1ds8xncek63cSu0xgIdHTZHdeansS9UVMeGR+rQTqNuVbVafylOU I+I0YKNi0bgN0Qrxs17PR0eZ/Va2AsK4YTOsmZ7ccFm9s6Z0CD2hr6CmShUyULVO OWg0ppr0JwC2wDFfQ66WbA6icQHy5OyJimDMudpLPw9M4ANU9cnm8ERFG8aiXNg8 8hJ5SQBXLdoXkMASJs5qIIQdi+5FQr0gIAo4ElrPobxYy755r0L3CAJkulQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU049qLZ0CTVm1n0xRSnlwlywZWZkwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMThgmcYWWb4GoMKjaHPKPJDmnsLnJMBBorn ORL6jAZoiFayH4xduk9BczXyJqIR+RZXywMZ1jodQR4ZEf8dW38Oy4bEuQ+PdXmz bXdUBUwboIjWQEiQ3APJSxVwt3h1V2Zpt+6uMmNgGyoJ2wTy+KGBmN+wVJnei5D4 9Z+viU8zgX/MiYyg26E//yCsRtDCnV6ewvn70XwR1vLiqBNdYjCwUGs/g9NOPdsY sSqkn4OKfmQlqrvuPoyazsqGu+oGTrY4Mdw1oPtOPrI9mbiAOWBJk2SbuO8Q+DHB +IIjeeHAMcGA2A4TV95NVh+djIcu/c2Ext2WHj8y14JpjQ0vaeM= -----END CERTIFICATE-----Generated at Sun Mar 29 08:20:15 2026 by rpki-client