$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: V+nxNKu0Eo+DRJvOz+g0hiIhD+8ggySS5mPbCMh+xaU= Subject key identifier: 07:62:16:5B:7F:E2:E3:A7:FA:CD:1A:EA:4B:77:7B:D6:9C:E4:F3:68 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 68A2B46680ABC2CEC2B3BD54B35DE82E30AE56F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 0552 Signing time: Sun 01 Mar 2026 07:21:13 +0000 Manifest this update: Sun 01 Mar 2026 07:16:13 +0000 Manifest next update: Wed 04 Mar 2026 09:11:13 +0000 Files and hashes: 1: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=) 2: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=) 3: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=) 4: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=) 5: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: n78zecFMpNY1hqy4CygzzVfxCpXn416WkHVpij7bJ90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a2:b4:66:80:ab:c2:ce:c2:b3:bd:54:b3:5d:e8:2e:30:ae:56:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Mar 1 07:16:13 2026 GMT Not After : Mar 4 09:11:13 2026 GMT Subject: CN=0762165B7FE2E3A7FACD1AEA4B777BD69CE4F368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:d1:2f:56:64:a2:18:33:70:7e:80:81:b7: 1a:e5:79:1e:57:aa:fe:ea:f3:d6:75:96:e9:26:59: 7a:85:bd:a7:5e:92:a0:39:62:b6:0a:9c:1c:83:87: b3:fa:90:97:1f:2d:dc:b5:26:e9:ea:37:d6:6e:5e: 76:e1:ff:8b:40:5d:34:34:7d:6f:a1:79:38:46:71: 94:64:27:41:30:84:cc:d1:74:39:4e:41:30:8d:e0: 0b:68:21:7d:0b:60:c9:a0:16:d3:c6:27:54:44:6c: 5c:87:8d:56:9c:24:fc:99:4a:ee:ec:aa:89:8b:1b: 24:8d:68:c7:3f:cb:01:c6:d2:61:bd:e2:31:60:85: b4:9e:c1:26:91:0e:6a:4a:72:87:14:96:29:cb:27: 25:9e:f0:fd:34:33:f7:0a:fe:80:2b:cb:52:58:74: 04:36:7a:e0:e4:c0:29:20:e4:0d:d0:4d:40:ce:85: e6:65:7c:ef:92:c3:3c:2e:ad:17:4c:8c:33:8a:c4: bc:c8:52:d0:ad:a4:5b:f1:a9:87:90:73:65:2f:25: 19:91:92:12:b9:de:e9:f0:4b:99:4c:2e:85:bc:08: 81:25:38:3d:d9:17:6c:9a:91:1a:dd:97:43:2a:b8: 27:2d:8b:f5:e6:34:cb:03:26:bc:5d:14:9f:1b:95: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:62:16:5B:7F:E2:E3:A7:FA:CD:1A:EA:4B:77:7B:D6:9C:E4:F3:68 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:be:d4:5b:2c:3c:3b:3e:31:43:3e:27:7a:2e:f9:95:50:f0: 9d:b9:d2:8b:28:1a:bd:88:d8:86:c4:15:5e:b5:76:51:f0:99: 09:b0:39:5e:e7:98:d9:8f:53:35:74:71:2c:dd:f3:9f:63:eb: 7a:44:1c:1b:89:c0:d0:b5:5b:65:2c:8a:32:2d:4f:0c:76:8b: 7e:4e:de:fc:82:67:58:7f:9d:06:0b:4f:3f:f3:61:57:6d:6a: 9e:00:ea:fa:95:46:79:15:e0:84:50:65:e4:7e:1d:48:8f:4a: 20:66:05:61:60:53:ae:85:22:64:f0:6c:06:43:5d:c2:61:2e: d8:fa:e8:f3:73:f2:80:67:84:bc:bd:e2:19:18:b1:74:ff:8c: 18:9a:fe:c8:55:f9:8e:65:cb:fa:74:cb:00:59:a5:d6:c3:1a: 56:7f:a1:12:ea:c1:1b:c6:27:2e:88:6b:e7:1a:dd:bc:fe:96: e1:74:78:9b:0a:80:29:1b:44:1b:5b:92:19:61:fc:fb:dd:a3: dc:bb:ae:00:9c:bc:9c:0e:12:b1:25:30:58:18:6f:e0:aa:83: e2:10:14:73:06:6e:24:d4:82:26:02:49:8d:27:5d:15:91:da: 16:e6:94:16:ee:6d:63:f8:05:b7:19:bd:af:eb:08:4c:c7:fd: db:47:96:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKK0ZoCrws7Cs71Us13oLjCuVvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNjAzMDEwNzE2MTNaFw0yNjAzMDQwOTExMTNaMDMxMTAvBgNV BAMTKDA3NjIxNjVCN0ZFMkUzQTdGQUNEMUFFQTRCNzc3QkQ2OUNFNEYzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNdEvVmSiGDNwfoCBtxrleR5X qv7q89Z1lukmWXqFvadekqA5YrYKnByDh7P6kJcfLdy1JunqN9ZuXnbh/4tAXTQ0 fW+heThGcZRkJ0EwhMzRdDlOQTCN4AtoIX0LYMmgFtPGJ1REbFyHjVacJPyZSu7s qomLGySNaMc/ywHG0mG94jFghbSewSaRDmpKcocUlinLJyWe8P00M/cK/oAry1JY dAQ2euDkwCkg5A3QTUDOheZlfO+SwzwurRdMjDOKxLzIUtCtpFvxqYeQc2UvJRmR khK53unwS5lMLoW8CIElOD3ZF2yakRrdl0MquCcti/XmNMsDJrxdFJ8blRVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB2IWW3/i46f6zRrqS3d71pzk82gwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG+1FssPDs+MUM+J3ou+ZVQ8J250osoGr2I 2IbEFV61dlHwmQmwOV7nmNmPUzV0cSzd859j63pEHBuJwNC1W2UsijItTwx2i35O 3vyCZ1h/nQYLTz/zYVdtap4A6vqVRnkV4IRQZeR+HUiPSiBmBWFgU66FImTwbAZD XcJhLtj66PNz8oBnhLy94hkYsXT/jBia/shV+Y5ly/p0ywBZpdbDGlZ/oRLqwRvG Jy6Ia+ca3bz+luF0eJsKgCkbRBtbkhlh/Pvdo9y7rgCcvJwOErElMFgYb+Cqg+IQ FHMGbiTUgiYCSY0nXRWR2hbmlBbubWP4BbcZva/rCEzH/dtHlv0= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:23 2026 by rpki-client