$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json) Hash identifier: UcAUdY0iCyuk8jYZYkUHrTtBAk8urHhaHGiCgsboGao= Subject key identifier: EF:31:49:EE:65:09:0F:13:E0:AE:FB:82:8A:46:93:9C:C9:95:3A:85 Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Certificate serial: 06C697D0695768CCBD35DE4073AC5E02B2B20E36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft Manifest number: 023D Signing time: Wed 18 Mar 2026 14:41:58 +0000 Manifest this update: Wed 18 Mar 2026 14:36:58 +0000 Manifest next update: Sat 21 Mar 2026 23:05:58 +0000 Files and hashes: 1: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: 7rUZU6VV/QFCNfF5JJ7QbhyYhBf4XTjtvOg6sOY6YiM=) 2: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: en7yrsRqDUaal9vRU4LRRex8mQ3pcI0rlYghVnCEE78=) 3: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: iufPrZZScnO80QkyCPvSlgZqxsE8YzjDEGRWUUoEP4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 23:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c6:97:d0:69:57:68:cc:bd:35:de:40:73:ac:5e:02:b2:b2:0e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Validity Not Before: Mar 18 14:36:58 2026 GMT Not After : Mar 21 23:05:58 2026 GMT Subject: CN=EF3149EE65090F13E0AEFB828A46939CC9953A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:45:56:59:3e:67:b6:42:22:67:56:4f:16: 52:22:8b:32:0b:66:9f:40:96:2d:13:a9:c0:50:93: 8d:be:87:fe:c6:67:6c:4f:63:7a:18:07:ab:b0:3e: f5:3b:89:64:ba:20:9e:2d:ab:14:4b:af:a0:40:57: 0c:88:ae:f7:17:9f:f3:6a:3b:64:3c:95:80:0c:44: d1:e4:af:fc:6d:20:ca:ba:5a:5f:b1:31:df:dc:c4: 97:74:97:ce:9e:62:a7:06:9e:bf:fb:35:22:d0:ae: 9b:b8:a7:4a:d7:3b:af:ef:95:28:eb:d1:eb:a9:00: c7:59:04:e5:e7:2b:b6:e7:2b:13:fd:e8:fb:f5:29: 39:76:5d:bf:e3:f9:0d:65:3f:67:0c:79:5e:97:c4: 17:ca:a1:5f:f9:7c:49:45:3d:ca:b2:51:f6:1e:6a: 55:27:71:49:41:4e:e5:dd:d3:5e:3b:95:bf:21:11: 5e:71:27:86:6d:6c:9c:a2:87:7a:fe:87:1e:7f:1f: 03:74:47:54:88:8e:a5:1c:b3:5e:35:ff:aa:28:68: 0c:07:4f:c7:4b:a3:52:e4:7a:e9:88:29:6a:30:7d: ec:a5:42:db:a2:f2:41:95:8b:e4:f8:9a:a8:4d:f7: 88:3b:ae:b8:b8:0b:8f:76:04:99:62:41:4f:71:f4: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:31:49:EE:65:09:0F:13:E0:AE:FB:82:8A:46:93:9C:C9:95:3A:85 X509v3 Authority Key Identifier: keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1a:5d:d0:7c:c8:95:a6:a7:21:0b:2b:18:cc:66:49:31:64: db:f1:9a:b7:4f:69:c2:67:cf:28:0f:13:a5:d3:bb:64:13:67: 67:8e:a5:79:14:27:49:8d:b1:1c:e3:44:d5:a0:d2:39:bb:71: 35:ca:5d:04:43:75:7f:75:2e:6f:bc:0b:60:b9:08:4b:c9:88: 6a:60:01:81:0a:a6:84:e5:61:72:4b:28:d2:c9:1f:c0:ac:1d: 13:7d:1b:b9:90:41:a4:b8:e1:ca:ef:ac:31:28:bc:0e:41:0b: 73:b1:49:fe:f0:8c:26:70:e7:cf:58:95:9d:9f:17:57:76:53: 65:38:74:41:8a:f2:90:a9:d7:6f:a4:8c:df:f5:a3:4e:3b:17: 4d:c3:18:84:b8:54:1c:2d:f9:66:1c:38:fd:b3:ba:e6:cf:ee: 7d:3c:7c:0f:d9:13:d1:b4:ed:64:b7:6e:38:9f:bf:17:ff:3a: 77:fc:b4:86:ba:a7:f1:43:06:ba:8a:04:7a:69:00:fc:3c:1b: 7c:f9:6f:b8:e0:b9:44:c7:1b:84:9f:8c:e6:bd:67:79:21:e7: 67:f3:5a:43:20:05:7c:dc:8a:3a:c4:31:37:9a:32:fa:17:13: bc:57:b8:08:60:9d:b9:78:11:64:a4:72:44:a8:80:c6:ae:db: 49:65:e0:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsaX0GlXaMy9Nd5Ac6xeArKyDjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUx MkM5Q0I5RjAeFw0yNjAzMTgxNDM2NThaFw0yNjAzMjEyMzA1NThaMDMxMTAvBgNV BAMTKEVGMzE0OUVFNjUwOTBGMTNFMEFFRkI4MjhBNDY5MzlDQzk5NTNBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qUVWWT5ntkIiZ1ZPFlIiizIL Zp9Ali0TqcBQk42+h/7GZ2xPY3oYB6uwPvU7iWS6IJ4tqxRLr6BAVwyIrvcXn/Nq O2Q8lYAMRNHkr/xtIMq6Wl+xMd/cxJd0l86eYqcGnr/7NSLQrpu4p0rXO6/vlSjr 0eupAMdZBOXnK7bnKxP96Pv1KTl2Xb/j+Q1lP2cMeV6XxBfKoV/5fElFPcqyUfYe alUncUlBTuXd0147lb8hEV5xJ4ZtbJyih3r+hx5/HwN0R1SIjqUcs141/6ooaAwH T8dLo1LkeumIKWowfeylQtui8kGVi+T4mqhN94g7rri4C492BJliQU9x9GOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7zFJ7mUJDxPgrvuCikaTnMmVOoUwHwYDVR0j BBgwFoAUZYwNhhfC0FznIEJ+Hfcv3hLJy58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjVkODhmMS1iOWMwLTQ4NWUtOTE2ZS01OWI3ZTM2OThkYTEvMC82NThDMEQ4NjE3 QzJEMDVDRTcyMDQyN0UxREY3MkZERTEyQzlDQjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUxMkM5 Q0I5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJG REUxMkM5Q0I5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8aXdB8yJWmpyELKxjMZkkxZNvxmrdPacJn zygPE6XTu2QTZ2eOpXkUJ0mNsRzjRNWg0jm7cTXKXQRDdX91Lm+8C2C5CEvJiGpg AYEKpoTlYXJLKNLJH8CsHRN9G7mQQaS44crvrDEovA5BC3OxSf7wjCZw589YlZ2f F1d2U2U4dEGK8pCp12+kjN/1o047F03DGIS4VBwt+WYcOP2zuubP7n08fA/ZE9G0 7WS3bjifvxf/Onf8tIa6p/FDBrqKBHppAPw8G3z5b7jguUTHG4SfjOa9Z3kh52fz WkMgBXzcijrEMTeaMvoXE7xXuAhgnbl4EWSkckSogMau20ll4Ew= -----END CERTIFICATE-----Generated at Thu Mar 19 09:57:59 2026 by rpki-client