$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: OYhY8CD4ltH40NaKZIuFH06iV+R84UN7b+7gaQSpI9E= Subject key identifier: 1C:74:45:2B:57:5A:B7:E0:F6:BF:2E:51:D0:D9:4D:17:4F:07:EC:52 Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 0D07F21F4EDBC6B73B8206327A2786E299534CC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 025D Signing time: Wed 25 Mar 2026 20:50:46 +0000 Manifest this update: Wed 25 Mar 2026 20:45:46 +0000 Manifest next update: Sat 28 Mar 2026 23:34:46 +0000 Files and hashes: 1: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: 2J3mu1UavR5xGWjyTl3wHR1l866VC2Xp2U5bVQeGU2Y=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: DEfILCQcOW3DvGA4WAN4WdaUEk+0PAQPVVSPnyIr0No=) 3: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: jMqK+yiOpsalmi/5CZrkpBjsc9suv+g6XbBfmb0zFRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:07:f2:1f:4e:db:c6:b7:3b:82:06:32:7a:27:86:e2:99:53:4c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Mar 25 20:45:46 2026 GMT Not After : Mar 28 23:34:46 2026 GMT Subject: CN=1C74452B575AB7E0F6BF2E51D0D94D174F07EC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:61:3e:8d:3b:41:3c:39:0f:df:7a:16:b8: 60:9e:ef:5d:e9:52:7d:65:26:50:ba:bf:65:ef:de: 72:ab:96:9a:0a:00:e8:8c:d8:63:c9:8d:e0:dc:ff: 53:b1:39:ae:ca:6f:20:26:b0:be:57:fe:82:b6:40: 96:d7:a7:a7:0c:1d:19:79:6a:81:c5:fa:56:88:17: f3:49:a2:19:63:27:db:8a:86:b6:03:7c:7f:4b:22: 4b:70:5a:bc:c0:81:ac:3b:50:70:35:d7:04:f6:ec: b8:76:4b:58:97:1a:b1:4d:77:4e:93:9e:c6:82:13: 90:34:58:c8:0f:29:c1:3d:24:84:41:97:39:dd:b4: 6f:d7:d2:16:7f:74:b4:44:ea:05:4f:46:6d:d1:0f: 88:5d:86:56:1a:d5:48:76:cb:a6:55:bd:d1:de:14: 39:af:6e:ae:79:09:60:10:ec:f3:3e:c6:72:76:5b: b4:0d:dd:82:34:48:d9:a0:43:8c:c7:30:0f:bc:74: 58:54:c6:ec:e7:0c:8e:47:cb:18:8f:6c:d7:18:d1: 7a:15:bf:81:4a:22:f4:78:8a:1e:d7:fd:2f:61:8e: a2:a8:cb:92:30:b1:78:4e:1e:e3:4e:df:e4:c5:1f: f7:b6:6d:44:41:5d:aa:96:b3:54:a4:39:bb:4c:86: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:45:2B:57:5A:B7:E0:F6:BF:2E:51:D0:D9:4D:17:4F:07:EC:52 X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:05:39:1c:54:c6:f7:9d:d2:a9:08:f1:ad:8a:c7:4c:88:7e: ff:cf:b4:bd:0e:f9:88:7d:58:51:e2:9a:1a:8f:31:79:bd:83: 53:cc:02:f1:0d:1c:be:81:a5:00:2d:7e:f2:8f:a3:89:59:44: 12:1c:be:ba:18:a4:b8:a6:b2:98:7e:ec:0d:f6:14:e4:76:73: a5:b7:57:87:ff:ba:42:43:bc:7b:a0:dd:92:a8:4d:61:e3:f9: f2:ba:ac:01:b9:df:99:1d:a8:e2:cf:13:a0:09:63:d9:6f:3a: 1b:de:5d:88:56:4e:ed:45:df:67:76:1c:82:49:25:72:0d:f8: 5c:cc:91:73:6b:e7:89:80:15:37:37:b2:36:06:c2:b6:3e:ae: b8:92:05:62:7d:7e:9d:78:f4:8b:79:36:48:38:c3:43:42:8e: 08:e3:84:b6:40:2a:9f:16:40:19:f9:a2:2c:1d:d6:c4:f2:f1: 27:2b:9c:02:a2:45:ac:4d:8f:d0:85:30:4a:f2:56:7a:41:17: 40:a2:ce:c1:0b:13:60:a4:9e:36:88:44:dd:06:3f:66:54:c9: ef:89:5e:e6:99:11:92:01:1d:ea:98:a8:85:77:13:cb:71:03: 3b:a9:e6:78:5e:43:8d:24:6b:bd:21:8c:12:8e:77:04:ff:6c: 87:e7:47:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQfyH07bxrc7ggYyeieG4plTTMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNjAzMjUyMDQ1NDZaFw0yNjAzMjgyMzM0NDZaMDMxMTAvBgNV BAMTKDFDNzQ0NTJCNTc1QUI3RTBGNkJGMkU1MUQwRDk0RDE3NEYwN0VDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gWE+jTtBPDkP33oWuGCe713p Un1lJlC6v2Xv3nKrlpoKAOiM2GPJjeDc/1OxOa7KbyAmsL5X/oK2QJbXp6cMHRl5 aoHF+laIF/NJohljJ9uKhrYDfH9LIktwWrzAgaw7UHA11wT27Lh2S1iXGrFNd06T nsaCE5A0WMgPKcE9JIRBlzndtG/X0hZ/dLRE6gVPRm3RD4hdhlYa1Uh2y6ZVvdHe FDmvbq55CWAQ7PM+xnJ2W7QN3YI0SNmgQ4zHMA+8dFhUxuznDI5HyxiPbNcY0XoV v4FKIvR4ih7X/S9hjqKoy5IwsXhOHuNO3+TFH/e2bURBXaqWs1SkObtMhhzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHHRFK1dat+D2vy5R0NlNF08H7FIwHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgFORxUxved0qkI8a2Kx0yIfv/PtL0O+Yh9 WFHimhqPMXm9g1PMAvENHL6BpQAtfvKPo4lZRBIcvroYpLimsph+7A32FOR2c6W3 V4f/ukJDvHug3ZKoTWHj+fK6rAG535kdqOLPE6AJY9lvOhveXYhWTu1F32d2HIJJ JXIN+FzMkXNr54mAFTc3sjYGwrY+rriSBWJ9fp149It5Nkg4w0NCjgjjhLZAKp8W QBn5oiwd1sTy8ScrnAKiRaxNj9CFMEryVnpBF0CizsELE2CknjaIRN0GP2ZUye+J XuaZEZIBHeqYqIV3E8txAzup5nheQ40ka70hjBKOdwT/bIfnR5A= -----END CERTIFICATE-----Generated at Thu Mar 26 12:04:29 2026 by rpki-client