$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: 3TXsma4WTIwyNZKVdGKTA7jzi4SDjZpcFxFBlYEU61g= Subject key identifier: 6A:AC:36:13:33:D5:D7:2C:E8:C3:16:84:F7:CD:AE:58:6F:77:20:D8 Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 69D0B13A3C7C40C7F277EB7A8F53808533BEC044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 0289 Signing time: Sun 01 Mar 2026 05:13:49 +0000 Manifest this update: Sun 01 Mar 2026 05:08:49 +0000 Manifest next update: Wed 04 Mar 2026 06:30:49 +0000 Files and hashes: 1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: Tr9Xm455VVFwcMWVKgFVkQjW4pXUazCaoGIyqlMivog=) 2: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: rQ59XH3mjXCdDBmXsYJlcWLwwELVJ/BHTonB7nYgqOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d0:b1:3a:3c:7c:40:c7:f2:77:eb:7a:8f:53:80:85:33:be:c0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Mar 1 05:08:49 2026 GMT Not After : Mar 4 06:30:49 2026 GMT Subject: CN=6AAC361333D5D72CE8C31684F7CDAE586F7720D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:d8:2e:d5:0b:6d:e4:33:f3:8f:a3:6d:56: 89:47:b9:86:d4:40:32:c9:6e:2b:e5:5c:ea:bd:05: 5d:36:93:98:1b:38:64:43:f3:28:ef:24:10:99:e6: 73:b0:6d:cf:e4:b5:6d:8c:75:50:8d:02:76:b9:dc: 12:53:7f:22:61:f3:77:88:fd:f6:a0:e8:90:36:ce: 0d:21:1d:5e:f1:4e:9a:be:7f:a4:2f:fe:80:d3:02: 21:7b:fd:0f:4b:6b:2a:0a:0d:c6:eb:71:e2:1b:d1: 04:33:74:6a:81:3e:bd:ac:06:7b:f3:f8:44:b2:fc: a8:8b:b2:61:72:b1:dc:c1:19:ee:19:14:4c:34:cb: e9:7b:44:01:70:fb:4a:b2:5d:c1:3a:05:f4:b9:e4: e4:05:de:4e:e1:36:01:e8:3d:1a:83:33:8d:49:bb: be:63:49:2a:9c:e1:a2:47:e0:2f:d9:59:65:93:2e: e4:21:87:77:86:a6:28:cb:76:2f:5f:f7:18:2c:f2: fb:6b:30:a7:92:13:ed:be:f6:ad:42:6d:d1:45:64: 4b:27:89:76:86:71:23:a0:f9:23:c0:96:23:9f:7e: fc:0b:f2:cc:e4:ec:a6:48:6d:d2:cf:a1:d8:84:05: 4c:7c:8f:54:a0:67:f9:70:29:98:55:34:dd:c3:93: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AC:36:13:33:D5:D7:2C:E8:C3:16:84:F7:CD:AE:58:6F:77:20:D8 X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a7:67:7e:2a:de:32:3e:2f:c0:ac:6c:10:f9:c5:0d:fa:ea: b9:16:b0:44:5d:c3:28:fa:d6:04:24:aa:47:2a:29:ad:98:95: 86:15:3d:d2:47:c3:1c:ae:30:c5:c9:ab:26:93:05:5f:89:96: be:88:ff:96:cd:9c:6f:b2:25:5e:5a:24:f7:d2:67:8a:82:f0: 09:65:de:e4:d8:15:c8:68:0f:5b:af:54:c9:60:6b:c4:fc:de: c6:d4:88:83:86:6e:6c:b9:7e:66:12:a5:55:64:5f:fd:1c:03: 5f:29:24:8b:63:c1:cb:b6:5d:64:04:f5:19:6d:c4:1f:9c:f1: 3c:17:bf:d1:e6:05:f0:1d:6a:ab:44:6f:60:2c:80:d5:6c:07: 47:a1:63:33:5b:24:93:73:93:f7:07:f2:a3:19:9f:56:36:0f: 03:d6:85:f4:c8:bb:fb:31:1c:ea:4b:93:15:10:66:eb:c6:0d: 79:a9:b3:d7:39:1d:28:a5:7b:4e:d3:a8:40:68:f6:c1:81:df: 96:e1:7d:a6:e7:76:8e:1d:d9:76:97:bd:db:19:9b:88:58:95: 58:3d:52:8d:4d:17:56:e3:19:9a:30:f2:5a:bb:f8:14:16:b3: b1:7f:5e:4d:c5:a2:d4:be:91:f8:69:34:62:af:30:44:2c:cc: 46:1a:43:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadCxOjx8QMfyd+t6j1OAhTO+wEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNjAzMDEwNTA4NDlaFw0yNjAzMDQwNjMwNDlaMDMxMTAvBgNV BAMTKDZBQUMzNjEzMzNENUQ3MkNFOEMzMTY4NEY3Q0RBRTU4NkY3NzIwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkdgu1Qtt5DPzj6NtVolHuYbU QDLJbivlXOq9BV02k5gbOGRD8yjvJBCZ5nOwbc/ktW2MdVCNAna53BJTfyJh83eI /fag6JA2zg0hHV7xTpq+f6Qv/oDTAiF7/Q9LayoKDcbrceIb0QQzdGqBPr2sBnvz +ESy/KiLsmFysdzBGe4ZFEw0y+l7RAFw+0qyXcE6BfS55OQF3k7hNgHoPRqDM41J u75jSSqc4aJH4C/ZWWWTLuQhh3eGpijLdi9f9xgs8vtrMKeSE+2+9q1CbdFFZEsn iXaGcSOg+SPAliOffvwL8szk7KZIbdLPodiEBUx8j1SgZ/lwKZhVNN3Dk2lrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaqw2EzPV1yzowxaE982uWG93INgwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACunZ34q3jI+L8CsbBD5xQ366rkWsERdwyj6 1gQkqkcqKa2YlYYVPdJHwxyuMMXJqyaTBV+Jlr6I/5bNnG+yJV5aJPfSZ4qC8All 3uTYFchoD1uvVMlga8T83sbUiIOGbmy5fmYSpVVkX/0cA18pJItjwcu2XWQE9Rlt xB+c8TwXv9HmBfAdaqtEb2AsgNVsB0ehYzNbJJNzk/cH8qMZn1Y2DwPWhfTIu/sx HOpLkxUQZuvGDXmps9c5HSile07TqEBo9sGB35bhfabndo4d2XaXvdsZm4hYlVg9 Uo1NF1bjGZow8lq7+BQWs7F/Xk3FotS+kfhpNGKvMEQszEYaQzM= -----END CERTIFICATE-----Generated at Mon Mar 2 01:58:54 2026 by rpki-client