$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json) Hash identifier: aTqCyBOkxdznTji4vEaDBkpB6ScicVTq0ePImV1a+YM= Subject key identifier: 80:14:20:DC:E3:78:2F:0A:78:B6:04:73:B7:7E:0E:77:FD:A1:83:DD Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Certificate serial: 626606C8F7CDCE6845D786B538A517E8D4BAF90F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft Manifest number: 024A Signing time: Thu 16 Apr 2026 17:22:04 +0000 Manifest this update: Thu 16 Apr 2026 17:17:04 +0000 Manifest next update: Sun 19 Apr 2026 19:40:04 +0000 Files and hashes: 1: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: ZoZMdipadf0PUO9ldrMwo6y+yQnWG3k1O5ng4mk5cs0=) 2: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: iufPrZZScnO80QkyCPvSlgZqxsE8YzjDEGRWUUoEP4M=) 3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: en7yrsRqDUaal9vRU4LRRex8mQ3pcI0rlYghVnCEE78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:66:06:c8:f7:cd:ce:68:45:d7:86:b5:38:a5:17:e8:d4:ba:f9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Validity Not Before: Apr 16 17:17:04 2026 GMT Not After : Apr 19 19:40:04 2026 GMT Subject: CN=801420DCE3782F0A78B60473B77E0E77FDA183DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:e5:ec:a4:86:9e:e5:fb:db:a3:59:08:a6: 00:e3:92:b7:8d:7b:28:7f:48:b1:0e:7a:0a:34:0d: cf:65:a6:b3:38:cd:f2:62:46:3e:53:06:fe:c4:80: 13:fd:49:bd:bb:b1:08:f8:a7:28:72:51:13:c7:51: c1:18:06:31:33:39:0b:14:ff:ba:de:a9:ab:31:1e: 80:14:8c:89:48:99:ae:46:e1:30:b9:52:6c:e9:97: 30:fe:84:22:2a:7a:ed:a0:96:e2:6c:5f:2c:cd:62: bd:7b:e1:0b:49:43:6e:0a:c2:d3:01:ae:09:c4:d4: 8f:22:32:94:27:63:5a:90:33:82:f6:64:cf:98:97: 03:5d:0d:77:db:64:4f:46:ad:e5:fb:28:81:9f:8a: 94:76:96:cb:a0:ce:8b:c6:c6:03:db:5e:dd:3f:3f: 35:d8:ad:be:f1:01:26:12:f4:2a:97:f8:52:dd:a9: d6:b5:bc:42:8f:b4:d7:d4:17:b6:8c:28:b8:84:a1: 34:8e:17:d2:dc:9c:67:4e:2c:ca:ce:42:ba:d6:43: eb:39:ec:ed:b7:11:ae:19:d9:71:5f:cb:43:5c:79: f5:a9:3f:f8:01:ea:2a:cd:38:7e:9e:1b:f1:f1:37: 0b:a4:ad:52:cf:3e:84:cc:98:47:f8:24:42:3e:94: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:20:DC:E3:78:2F:0A:78:B6:04:73:B7:7E:0E:77:FD:A1:83:DD X509v3 Authority Key Identifier: keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:23:35:e4:e9:35:b2:99:4e:d2:ab:db:cf:f2:57:c7:fb:8f: 0b:23:3a:68:da:91:df:35:f6:7f:d9:c2:c1:10:54:d9:ec:75: 7f:0d:0c:9b:27:d3:9b:97:30:13:d4:0b:ff:c4:72:64:c8:da: 5a:68:58:c9:4b:15:45:2f:1b:b9:10:33:d2:f6:a0:f5:b7:c4: 76:0c:aa:40:92:2a:d2:bd:18:37:b7:13:49:e6:75:0c:26:8c: bd:37:3a:d1:ae:f3:57:ee:d5:96:c6:ce:37:ea:a7:61:16:c8: 6b:29:23:7c:ab:f5:24:6c:2b:38:55:da:5c:02:57:05:bb:23: 35:2c:65:e5:39:48:4a:56:c3:d7:0f:a0:c7:25:9f:eb:f7:28: 31:ea:92:0d:41:0c:9f:c9:3e:b5:26:15:c3:37:c0:0c:dc:6d: 9f:8c:73:4b:3f:87:ca:95:95:92:7c:27:d0:aa:d4:07:37:b9: d6:01:9f:f1:c7:5d:24:38:fc:3b:f6:5d:bd:ac:77:01:ad:7f: 1a:51:23:c8:1e:4e:a8:0d:73:2a:dc:60:92:a6:a9:b9:e2:66: 0f:63:64:63:83:da:3b:dd:42:92:82:48:db:73:4d:fe:4a:a7: 02:80:80:6e:3b:13:f1:a2:a5:b9:a6:8a:2c:ed:ba:e2:b9:d8: b0:fb:4d:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmYGyPfNzmhF14a1OKUX6NS6+Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUx MkM5Q0I5RjAeFw0yNjA0MTYxNzE3MDRaFw0yNjA0MTkxOTQwMDRaMDMxMTAvBgNV BAMTKDgwMTQyMERDRTM3ODJGMEE3OEI2MDQ3M0I3N0UwRTc3RkRBMTgzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OuXspIae5fvbo1kIpgDjkreN eyh/SLEOego0Dc9lprM4zfJiRj5TBv7EgBP9Sb27sQj4pyhyURPHUcEYBjEzOQsU /7reqasxHoAUjIlIma5G4TC5UmzplzD+hCIqeu2gluJsXyzNYr174QtJQ24KwtMB rgnE1I8iMpQnY1qQM4L2ZM+YlwNdDXfbZE9GreX7KIGfipR2lsugzovGxgPbXt0/ PzXYrb7xASYS9CqX+FLdqda1vEKPtNfUF7aMKLiEoTSOF9LcnGdOLMrOQrrWQ+s5 7O23Ea4Z2XFfy0NcefWpP/gB6irNOH6eG/HxNwukrVLPPoTMmEf4JEI+lKfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgBQg3ON4Lwp4tgRzt34Od/2hg90wHwYDVR0j BBgwFoAUZYwNhhfC0FznIEJ+Hfcv3hLJy58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjVkODhmMS1iOWMwLTQ4NWUtOTE2ZS01OWI3ZTM2OThkYTEvMC82NThDMEQ4NjE3 QzJEMDVDRTcyMDQyN0UxREY3MkZERTEyQzlDQjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUxMkM5 Q0I5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJG REUxMkM5Q0I5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsjNeTpNbKZTtKr28/yV8f7jwsjOmjakd81 9n/ZwsEQVNnsdX8NDJsn05uXMBPUC//EcmTI2lpoWMlLFUUvG7kQM9L2oPW3xHYM qkCSKtK9GDe3E0nmdQwmjL03OtGu81fu1ZbGzjfqp2EWyGspI3yr9SRsKzhV2lwC VwW7IzUsZeU5SEpWw9cPoMcln+v3KDHqkg1BDJ/JPrUmFcM3wAzcbZ+Mc0s/h8qV lZJ8J9Cq1Ac3udYBn/HHXSQ4/Dv2Xb2sdwGtfxpRI8geTqgNcyrcYJKmqbniZg9j ZGOD2jvdQpKCSNtzTf5KpwKAgG47E/GipbmmiiztuuK52LD7TZg= -----END CERTIFICATE-----Generated at Sat Apr 18 05:50:12 2026 by rpki-client