$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: 7hFbHphqVb+b82JB1GhBPWAvNvY6Oe569Lwjl89oV9I= Subject key identifier: CA:DD:D5:77:02:A8:A5:EC:DA:52:13:8A:78:65:08:B0:5F:84:F6:18 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 43FF9E907FDD76F2EA17342269DCA60280B0FFB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 0210 Signing time: Wed 25 Mar 2026 05:21:34 +0000 Manifest this update: Wed 25 Mar 2026 05:16:34 +0000 Manifest next update: Sat 28 Mar 2026 10:20:34 +0000 Files and hashes: 1: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: jJN+a1uyK5er9vytVlfqMqFHVNtiQSwDgGPE7xDkxVU=) 2: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: S1MOWXgTOyl6XQOM891obgYh9XFtK2qUFRhWq+dusfg=) 3: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: dHvA0l4MoAsHbnDeUczCGz/tbqjQXH0AlY+9WKNokS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ff:9e:90:7f:dd:76:f2:ea:17:34:22:69:dc:a6:02:80:b0:ff:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Mar 25 05:16:34 2026 GMT Not After : Mar 28 10:20:34 2026 GMT Subject: CN=CADDD57702A8A5ECDA52138A786508B05F84F618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:67:62:c1:e3:aa:9a:77:b0:8a:bb:b3:17: f4:54:16:c4:01:fd:7c:ae:3f:2e:23:8b:86:7d:5f: f1:72:6d:97:af:ea:5e:08:bb:3f:a9:29:34:df:09: 89:f9:19:93:ed:d5:f2:22:b4:78:4d:e3:8b:ef:2d: f5:7f:1c:d5:4b:94:78:b3:0f:12:fc:9c:83:71:5d: 74:5c:e3:de:e9:45:c0:cb:ab:b3:b9:35:a2:7e:1c: b8:fc:f1:db:ad:18:f7:d9:9e:77:c9:95:2b:1e:f5: c1:b0:1d:97:b3:be:73:9b:f3:aa:bf:00:41:9d:a2: f2:b4:cd:18:b3:e6:d9:4a:9e:22:45:4e:c5:15:5d: 22:1e:ed:81:0a:f0:a7:8d:93:17:e7:7e:86:b4:56: 75:a0:df:45:d1:38:b8:d1:ce:79:18:13:36:c5:ef: 19:b5:63:ba:42:9f:ed:76:12:fb:1f:a0:e7:33:0f: 75:29:45:71:cb:c9:1b:0a:6d:9f:5d:d2:5f:4c:c1: cf:34:1f:2e:26:ff:09:ce:ae:4a:a5:49:48:7e:87: fc:89:5a:65:61:e5:83:d7:f9:7d:9c:35:6d:68:35: c9:65:5b:16:48:07:69:e4:b9:5b:7f:5d:e8:79:26: 2f:cd:8e:0b:fa:74:14:db:44:0d:a1:fc:66:51:92: fd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DD:D5:77:02:A8:A5:EC:DA:52:13:8A:78:65:08:B0:5F:84:F6:18 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:07:56:c9:9b:a1:5f:96:14:b8:88:b9:23:6c:c1:4d:5e:ca: 7b:e0:6a:da:cd:34:f4:1f:6b:19:fc:d3:04:13:00:e7:61:90: da:65:7b:27:ab:e5:a3:4d:da:c2:8b:57:c6:34:2c:d2:88:50: a7:8d:5a:77:04:c0:56:0d:14:17:12:01:d2:10:f5:85:15:44: e8:36:9d:6f:43:a4:5c:6b:a0:29:c5:b7:df:6b:16:e4:68:6a: 7b:fe:a3:16:1c:89:d3:1d:09:91:32:a5:8e:99:d0:c2:4f:36: c9:23:d2:b4:2f:cd:88:93:db:b8:8d:c9:16:50:7e:4c:4e:79: 72:78:f9:71:b3:3d:70:0f:26:da:d9:ab:5b:5c:50:44:4e:f6: fd:35:8f:b1:b6:c2:78:13:26:e0:06:4f:a5:ea:17:34:cb:ec: 4d:0a:76:72:e9:72:4f:64:ce:ac:f7:a5:99:cf:eb:64:8f:2b: 62:75:c2:89:78:95:2e:e4:18:2f:14:9f:65:ed:49:13:3d:ff: 7d:c0:f1:c6:ed:92:07:f4:37:6a:2a:cd:a2:5d:14:5f:c9:3a: cb:49:79:35:f1:1a:52:e3:4e:83:0a:1f:dd:56:5e:66:0c:19: 66:c3:5f:d6:17:55:75:de:55:80:f7:37:05:37:e1:c9:1d:ac: 1a:07:93:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/+ekH/ddvLqFzQiadymAoCw/7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNjAzMjUwNTE2MzRaFw0yNjAzMjgxMDIwMzRaMDMxMTAvBgNV BAMTKENBRERENTc3MDJBOEE1RUNEQTUyMTM4QTc4NjUwOEIwNUY4NEY2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3GdiweOqmnewiruzF/RUFsQB /XyuPy4ji4Z9X/FybZev6l4Iuz+pKTTfCYn5GZPt1fIitHhN44vvLfV/HNVLlHiz DxL8nINxXXRc497pRcDLq7O5NaJ+HLj88dutGPfZnnfJlSse9cGwHZezvnOb86q/ AEGdovK0zRiz5tlKniJFTsUVXSIe7YEK8KeNkxfnfoa0VnWg30XROLjRznkYEzbF 7xm1Y7pCn+12EvsfoOczD3UpRXHLyRsKbZ9d0l9Mwc80Hy4m/wnOrkqlSUh+h/yJ WmVh5YPX+X2cNW1oNcllWxZIB2nkuVt/Xeh5Ji/Njgv6dBTbRA2h/GZRkv0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyt3VdwKopezaUhOKeGUIsF+E9hgwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgHVsmboV+WFLiIuSNswU1eynvgatrNNPQf axn80wQTAOdhkNpleyer5aNN2sKLV8Y0LNKIUKeNWncEwFYNFBcSAdIQ9YUVROg2 nW9DpFxroCnFt99rFuRoanv+oxYcidMdCZEypY6Z0MJPNskj0rQvzYiT27iNyRZQ fkxOeXJ4+XGzPXAPJtrZq1tcUERO9v01j7G2wngTJuAGT6XqFzTL7E0KdnLpck9k zqz3pZnP62SPK2J1wol4lS7kGC8Un2XtSRM9/33A8cbtkgf0N2oqzaJdFF/JOstJ eTXxGlLjToMKH91WXmYMGWbDX9YXVXXeVYD3NwU34ckdrBoHk0g= -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:54 2026 by rpki-client