$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json) Hash identifier: Z95V3qgrXTHnGr4xDbX3IwNWUQDHf5D3VCo0mEYwFws= Subject key identifier: E4:A0:E3:08:2B:D9:29:F9:85:9B:5F:7B:88:B4:2B:93:33:6C:EE:C8 Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Certificate serial: 7E5075DA2FC6B344BC62D09E93A520D124B364EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft Manifest number: 0235 Signing time: Sat 28 Feb 2026 00:31:52 +0000 Manifest this update: Sat 28 Feb 2026 00:26:52 +0000 Manifest next update: Tue 03 Mar 2026 07:47:52 +0000 Files and hashes: 1: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: en7yrsRqDUaal9vRU4LRRex8mQ3pcI0rlYghVnCEE78=) 2: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: iufPrZZScnO80QkyCPvSlgZqxsE8YzjDEGRWUUoEP4M=) 3: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: hQ2s7fYxTa698GBvWXuHWmM/+x22+EhkQ805K0uJTUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 07:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:50:75:da:2f:c6:b3:44:bc:62:d0:9e:93:a5:20:d1:24:b3:64:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Validity Not Before: Feb 28 00:26:52 2026 GMT Not After : Mar 3 07:47:52 2026 GMT Subject: CN=E4A0E3082BD929F9859B5F7B88B42B93336CEEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:7f:17:e8:5d:e7:b1:be:ef:0d:50:96:33: 4e:b0:3f:d9:d9:a4:f3:5f:2f:f4:28:f9:33:7b:1a: 37:a1:ec:58:1c:90:6f:22:5f:81:6d:57:97:4e:67: 73:79:14:7a:f8:ee:80:b5:68:3c:6b:a4:70:6d:65: 81:9f:6d:14:44:4a:8c:0b:ae:ee:be:e5:f3:91:a5: 8d:1e:c2:0e:a7:92:1b:a3:79:29:6d:44:4a:23:0b: 7c:28:8b:f9:50:9d:7e:d1:7f:e8:6c:36:c2:08:9c: f7:74:1c:3f:72:cc:0c:ae:83:be:c1:02:e5:eb:b5: ae:15:2d:d6:40:90:da:8e:c7:1a:c0:e3:07:6a:63: d5:7b:c3:23:fb:1d:b7:cb:f9:fb:04:f2:6d:52:23: c0:02:ca:4a:46:47:d9:e3:32:f5:38:90:21:9c:0a: 7e:35:47:f4:65:2a:40:15:b1:65:1e:1a:c9:88:39: 1c:88:40:7b:c2:23:ea:32:bb:ee:95:35:ba:1e:53: ee:e9:fe:a5:e7:3b:0a:08:af:49:45:28:bd:5c:81: 93:3c:ae:7c:18:64:2e:f4:e8:3d:bf:06:0f:7c:c1: a2:d9:b1:8f:16:3f:0e:92:33:ff:28:7c:b3:98:08: 47:d2:6c:ae:e0:18:88:31:e8:4b:59:c7:12:7b:3c: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A0:E3:08:2B:D9:29:F9:85:9B:5F:7B:88:B4:2B:93:33:6C:EE:C8 X509v3 Authority Key Identifier: keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:bf:fc:ff:c9:99:06:6b:9d:29:6f:be:ab:cc:51:eb:cc:15: 42:6d:b4:03:19:02:b9:7f:f9:66:73:eb:4e:ed:20:01:4c:58: 0c:e9:7e:6a:c0:b1:c8:d6:58:b5:75:bb:40:39:e1:1a:59:c3: 3d:0b:95:f4:d4:66:fe:60:a7:99:e0:52:a9:25:63:b1:1a:0d: e5:78:20:e3:e9:5e:d4:98:43:5d:25:38:2e:ff:04:db:b4:10: 9e:d1:b0:76:d4:94:5b:ec:8c:ac:be:78:8a:90:9c:e2:92:78: 4b:7c:58:ec:39:1e:20:58:6d:b8:36:49:71:d0:a6:be:c9:bd: 03:5c:cf:75:ec:4e:db:d6:d6:4d:88:16:6c:d0:5e:21:26:3b: 61:b8:9a:b3:d9:35:0e:bd:d5:7c:fe:8a:5b:5f:31:6b:b7:89: d4:85:79:b2:00:9f:c6:0f:7a:62:3b:4e:4d:1a:3e:cf:a0:00: 02:4d:39:6d:c9:29:b2:20:0f:e9:0e:a7:21:a5:00:29:1b:19: 0a:a0:82:1b:49:53:b5:ff:6a:3e:fa:36:9c:80:3f:01:57:60: 01:0a:89:63:f7:15:3d:d9:b8:4c:f8:0b:f4:1c:73:b3:69:a3: 20:bb:3d:e1:75:a1:3a:c1:fc:e1:8f:6b:cd:4b:e5:fe:45:84: 68:a4:38:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflB12i/Gs0S8YtCek6Ug0SSzZOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUx MkM5Q0I5RjAeFw0yNjAyMjgwMDI2NTJaFw0yNjAzMDMwNzQ3NTJaMDMxMTAvBgNV BAMTKEU0QTBFMzA4MkJEOTI5Rjk4NTlCNUY3Qjg4QjQyQjkzMzM2Q0VFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMX8X6F3nsb7vDVCWM06wP9nZ pPNfL/Qo+TN7Gjeh7FgckG8iX4FtV5dOZ3N5FHr47oC1aDxrpHBtZYGfbRRESowL ru6+5fORpY0ewg6nkhujeSltREojC3woi/lQnX7Rf+hsNsIInPd0HD9yzAyug77B AuXrta4VLdZAkNqOxxrA4wdqY9V7wyP7HbfL+fsE8m1SI8ACykpGR9njMvU4kCGc Cn41R/RlKkAVsWUeGsmIORyIQHvCI+oyu+6VNboeU+7p/qXnOwoIr0lFKL1cgZM8 rnwYZC706D2/Bg98waLZsY8WPw6SM/8ofLOYCEfSbK7gGIgx6EtZxxJ7PCAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5KDjCCvZKfmFm197iLQrkzNs7sgwHwYDVR0j BBgwFoAUZYwNhhfC0FznIEJ+Hfcv3hLJy58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjVkODhmMS1iOWMwLTQ4NWUtOTE2ZS01OWI3ZTM2OThkYTEvMC82NThDMEQ4NjE3 QzJEMDVDRTcyMDQyN0UxREY3MkZERTEyQzlDQjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUxMkM5 Q0I5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJG REUxMkM5Q0I5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW//P/JmQZrnSlvvqvMUevMFUJttAMZArl/ +WZz607tIAFMWAzpfmrAscjWWLV1u0A54RpZwz0LlfTUZv5gp5ngUqklY7EaDeV4 IOPpXtSYQ10lOC7/BNu0EJ7RsHbUlFvsjKy+eIqQnOKSeEt8WOw5HiBYbbg2SXHQ pr7JvQNcz3XsTtvW1k2IFmzQXiEmO2G4mrPZNQ691Xz+iltfMWu3idSFebIAn8YP emI7Tk0aPs+gAAJNOW3JKbIgD+kOpyGlACkbGQqgghtJU7X/aj76NpyAPwFXYAEK iWP3FT3ZuEz4C/Qcc7NpoyC7PeF1oTrB/OGPa81L5f5FhGikOHc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:56:51 2026 by rpki-client