$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: WBkKkrIjrQli7PXqsxWtTbaJW33wSbnE4+rEb6X33rY= Subject key identifier: 25:6F:B5:F5:5D:A2:4B:8F:81:50:B9:04:F8:87:C0:1A:0E:49:6A:FD Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 701F5A9F993A818F9767D95A53201A5F2575B101 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 0551 Signing time: Mon 02 Mar 2026 00:01:43 +0000 Manifest this update: Sun 01 Mar 2026 23:56:43 +0000 Manifest next update: Thu 05 Mar 2026 01:44:43 +0000 Files and hashes: 1: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: +AHxnqZzH7I5r8aTmgd4gS1t8pmuInTzQBn2rAJkkjA=) 2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1f:5a:9f:99:3a:81:8f:97:67:d9:5a:53:20:1a:5f:25:75:b1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Mar 1 23:56:43 2026 GMT Not After : Mar 5 01:44:43 2026 GMT Subject: CN=256FB5F55DA24B8F8150B904F887C01A0E496AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:8d:51:00:7c:70:3c:ff:52:ff:ee:a6:56: 3b:00:28:a2:b0:0a:ed:ac:ce:f8:53:43:9d:dc:7d: 26:76:50:ad:af:bc:b9:e9:09:ab:c3:b2:b9:f8:23: 38:63:a7:2d:62:90:80:72:21:b4:37:26:50:23:8f: 3e:8e:dc:5d:98:3b:bd:da:3c:6b:86:a9:7c:4c:66: b5:a9:7c:e5:19:ba:0f:ce:4a:80:72:f1:c6:a8:5b: 37:8c:58:58:80:a5:c8:3a:80:fc:c8:95:61:f1:a9: 82:c4:ce:0e:4c:3f:d7:ca:6d:5b:89:f8:cc:56:7e: 91:76:14:93:cc:78:2e:93:dc:26:20:cf:2a:33:19: eb:b1:f8:30:24:a5:e7:99:f9:71:96:b6:67:81:b7: 86:a2:62:1b:7e:a7:1c:55:b1:d8:3a:28:e4:80:ad: 73:5e:fb:99:3a:b4:48:8c:e7:b1:c9:d5:cc:ff:22: 31:da:11:ee:23:28:d4:41:59:72:03:d2:d7:a7:c6: 66:dd:3a:26:32:b7:fa:c3:4d:71:cb:08:58:dd:46: a5:4c:ca:62:84:79:34:29:09:71:8d:da:79:da:36: 50:01:17:5a:d1:85:a2:7e:99:5b:5c:28:8d:1a:e7: dd:2c:55:5a:73:2f:2d:e7:94:da:8e:95:e3:b7:0f: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6F:B5:F5:5D:A2:4B:8F:81:50:B9:04:F8:87:C0:1A:0E:49:6A:FD X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7b:6e:74:53:9e:70:c0:38:e1:f8:09:d5:91:1d:26:4a:0e: cb:98:21:35:14:b9:fa:2b:dc:f8:f3:02:89:72:58:22:75:96: d5:d2:8e:5e:e9:42:85:71:8e:99:66:a5:24:f6:70:f1:d5:c6: 58:b6:8f:80:85:e9:f1:7f:5e:fc:36:a6:66:9a:3e:82:74:0e: 86:00:27:c0:e5:85:aa:03:5c:2d:50:80:99:86:4d:cf:74:c2: bc:84:ca:a6:a7:a3:bc:0a:b9:80:2a:d1:ea:16:ae:18:3a:10: ee:5f:3a:25:b8:a5:c5:db:4e:56:12:a1:04:52:ac:15:04:cb: ee:41:42:57:d4:99:d6:5d:ef:11:84:5a:47:cf:c5:28:77:2e: f5:32:26:e6:3d:c0:df:c9:1d:fc:15:36:04:02:fa:74:f5:0c: a5:ca:53:85:87:3a:47:ad:b2:cb:7b:29:e0:bc:36:cd:35:0e: 64:6a:ca:26:bc:82:bd:9d:1c:1c:a4:62:4c:23:ad:c7:1f:bf: b2:97:bc:70:17:45:62:7c:4f:94:f0:bb:87:ac:1e:ff:16:3e: 0a:5c:30:06:41:0c:e0:f9:73:42:07:03:51:f6:08:00:12:7b: 04:d2:86:35:20:c2:47:ee:57:16:0a:d1:82:2f:88:8e:cc:7f: 84:63:e5:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcB9an5k6gY+XZ9laUyAaXyV1sQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNjAzMDEyMzU2NDNaFw0yNjAzMDUwMTQ0NDNaMDMxMTAvBgNV BAMTKDI1NkZCNUY1NURBMjRCOEY4MTUwQjkwNEY4ODdDMDFBMEU0OTZBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzo1RAHxwPP9S/+6mVjsAKKKw Cu2szvhTQ53cfSZ2UK2vvLnpCavDsrn4Izhjpy1ikIByIbQ3JlAjjz6O3F2YO73a PGuGqXxMZrWpfOUZug/OSoBy8caoWzeMWFiApcg6gPzIlWHxqYLEzg5MP9fKbVuJ +MxWfpF2FJPMeC6T3CYgzyozGeux+DAkpeeZ+XGWtmeBt4aiYht+pxxVsdg6KOSA rXNe+5k6tEiM57HJ1cz/IjHaEe4jKNRBWXID0tenxmbdOiYyt/rDTXHLCFjdRqVM ymKEeTQpCXGN2nnaNlABF1rRhaJ+mVtcKI0a590sVVpzLy3nlNqOleO3DwIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJW+19V2iS4+BULkE+IfAGg5Jav0wHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl7bnRTnnDAOOH4CdWRHSZKDsuYITUUufor 3PjzAolyWCJ1ltXSjl7pQoVxjplmpST2cPHVxli2j4CF6fF/Xvw2pmaaPoJ0DoYA J8DlhaoDXC1QgJmGTc90wryEyqano7wKuYAq0eoWrhg6EO5fOiW4pcXbTlYSoQRS rBUEy+5BQlfUmdZd7xGEWkfPxSh3LvUyJuY9wN/JHfwVNgQC+nT1DKXKU4WHOket sst7KeC8Ns01DmRqyia8gr2dHBykYkwjrccfv7KXvHAXRWJ8T5Twu4esHv8WPgpc MAZBDOD5c0IHA1H2CAASewTShjUgwkfuVxYK0YIviI7Mf4Rj5cE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:39 2026 by rpki-client