$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: +CLV7IaWKZeMmLVx4Q51QwGFymNKwcPPD8WAJxR+PxQ= Subject key identifier: 35:55:7C:EB:E4:9F:C8:9B:3D:75:98:E7:42:70:3D:04:02:FF:C4:F3 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 51A2E7095FFCA266B21B36128E86B94CF1DBC0EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 033D Signing time: Thu 19 Mar 2026 15:40:54 +0000 Manifest this update: Thu 19 Mar 2026 15:35:54 +0000 Manifest next update: Sun 22 Mar 2026 19:09:54 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=) 2: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: sPDEI1FQhKiAgMxKBicpNHG7SqGo8GQq0YfS2cqqRZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 19:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a2:e7:09:5f:fc:a2:66:b2:1b:36:12:8e:86:b9:4c:f1:db:c0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Mar 19 15:35:54 2026 GMT Not After : Mar 22 19:09:54 2026 GMT Subject: CN=35557CEBE49FC89B3D7598E742703D0402FFC4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:43:0a:0b:75:60:b3:3b:4b:ad:8d:43:f6: e3:49:81:8b:55:f1:42:19:ed:6d:d0:a5:74:fc:6e: 17:c4:09:ab:09:e6:9f:c2:dc:78:5d:b2:b0:5e:09: 4f:25:b5:13:57:66:bb:f1:e7:d2:14:fb:3e:f7:fc: cd:c5:43:83:e6:e6:72:43:cb:1b:f4:4a:18:72:95: ae:f2:fa:30:10:d0:d8:84:19:c0:77:a7:7a:72:db: 97:43:a3:98:d2:4e:12:aa:6b:3d:0c:e0:50:f0:eb: 16:71:53:c2:07:f6:94:4e:99:b6:98:55:e3:64:f8: 3c:f0:13:1a:d7:b0:f9:18:0c:bb:38:de:19:04:d6: 96:48:d5:cc:35:39:23:c9:8f:51:52:63:a1:04:63: 4d:a5:d7:78:09:fd:37:dc:1b:4a:a3:ca:d3:7c:43: aa:83:65:cc:2d:6f:f8:c4:ee:95:b0:cc:5b:d0:16: c9:6d:92:a7:6e:d0:23:c7:4e:e5:36:4c:0b:7c:81: 06:09:65:b2:d5:32:e4:2d:22:ff:fc:72:8c:84:f9: b4:b7:a3:89:28:b6:15:05:c8:7b:89:3c:99:3b:a4: 53:fe:c2:23:26:37:54:8a:da:8d:0d:d5:df:4f:f2: 39:09:3a:92:7f:34:f9:da:92:d0:de:71:a0:3e:e5: f7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:55:7C:EB:E4:9F:C8:9B:3D:75:98:E7:42:70:3D:04:02:FF:C4:F3 X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:1f:c6:71:a7:c0:ab:e5:76:2e:f4:1c:46:b3:5a:cf:c8:a2: 53:2b:fa:6e:33:af:25:ff:3c:a0:19:e6:1c:ed:7b:7f:92:bf: a9:55:16:17:70:5b:6d:79:6d:40:a5:99:4a:13:2a:e9:01:46: d2:47:1e:11:f2:db:b3:80:8f:39:b8:50:11:e1:c6:f8:86:5e: a3:d3:a0:07:cf:c5:43:c3:91:d0:51:22:61:fb:53:54:5d:a0: 8c:3c:5a:f1:ec:84:6c:59:52:60:6c:a0:d6:e0:66:6d:55:83: 4c:01:9c:79:a5:2c:2c:cb:6c:0b:4b:ed:72:5f:a6:4f:86:9f: 8f:0c:82:0a:37:5c:5c:54:fe:c0:24:c7:90:15:55:ac:70:e9: 45:4b:53:6d:dd:7e:ff:86:6c:29:5d:50:94:bd:31:ea:c5:ed: 9b:66:b5:27:f9:11:29:2e:ca:dd:3e:3f:06:af:ef:d5:bb:e2: d9:d5:a0:9c:21:7c:8b:8e:09:6c:b1:49:37:23:57:ce:e2:c9: ec:2f:24:d5:5f:e7:6d:76:d2:e4:8a:a3:ee:f1:af:09:d0:44: 49:5d:d8:3f:75:92:ca:af:90:50:9a:88:1b:89:af:e7:09:ab: a1:4b:2e:fc:d0:b7:8f:7b:cc:ae:81:3c:26:d4:91:37:61:f5: 06:63:ed:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUaLnCV/8omayGzYSjoa5TPHbwOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNjAzMTkxNTM1NTRaFw0yNjAzMjIxOTA5NTRaMDMxMTAvBgNV BAMTKDM1NTU3Q0VCRTQ5RkM4OUIzRDc1OThFNzQyNzAzRDA0MDJGRkM0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LkMKC3VgsztLrY1D9uNJgYtV 8UIZ7W3QpXT8bhfECasJ5p/C3HhdsrBeCU8ltRNXZrvx59IU+z73/M3FQ4Pm5nJD yxv0Shhyla7y+jAQ0NiEGcB3p3py25dDo5jSThKqaz0M4FDw6xZxU8IH9pROmbaY VeNk+DzwExrXsPkYDLs43hkE1pZI1cw1OSPJj1FSY6EEY02l13gJ/TfcG0qjytN8 Q6qDZcwtb/jE7pWwzFvQFsltkqdu0CPHTuU2TAt8gQYJZbLVMuQtIv/8coyE+bS3 o4kothUFyHuJPJk7pFP+wiMmN1SK2o0N1d9P8jkJOpJ/NPnaktDecaA+5ffjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVV86+SfyJs9dZjnQnA9BAL/xPMwHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwfxnGnwKvldi70HEazWs/IolMr+m4zryX/ PKAZ5hzte3+Sv6lVFhdwW215bUClmUoTKukBRtJHHhHy27OAjzm4UBHhxviGXqPT oAfPxUPDkdBRImH7U1RdoIw8WvHshGxZUmBsoNbgZm1Vg0wBnHmlLCzLbAtL7XJf pk+Gn48Mggo3XFxU/sAkx5AVVaxw6UVLU23dfv+GbCldUJS9MerF7ZtmtSf5ESku yt0+Pwav79W74tnVoJwhfIuOCWyxSTcjV87iyewvJNVf52120uSKo+7xrwnQREld 2D91ksqvkFCaiBuJr+cJq6FLLvzQt497zK6BPCbUkTdh9QZj7S8= -----END CERTIFICATE-----Generated at Fri Mar 20 22:00:58 2026 by rpki-client