$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: w0S5g/OSmm5ouNM2ynl1i6ReHYFd3wh4OqKFa76HBlU= Subject key identifier: 2A:47:B9:15:2F:8C:94:E5:F2:79:07:82:46:95:E4:3E:DD:F7:BB:F7 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 2644BCD9FA75106311019662335254CF3CB3ABF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 034A Signing time: Fri 17 Apr 2026 00:00:55 +0000 Manifest this update: Thu 16 Apr 2026 23:55:55 +0000 Manifest next update: Mon 20 Apr 2026 03:15:55 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=) 2: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: 1olMeQJ37r2CGIxpoULtXXkI/mVLoniVAFoSnEoinmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:44:bc:d9:fa:75:10:63:11:01:96:62:33:52:54:cf:3c:b3:ab:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Apr 16 23:55:55 2026 GMT Not After : Apr 20 03:15:55 2026 GMT Subject: CN=2A47B9152F8C94E5F27907824695E43EDDF7BBF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:3d:47:62:7f:5e:ba:28:bb:89:56:9e:c7: f4:1c:fb:24:3c:b6:f1:d5:84:81:bd:02:a9:0f:cc: c8:8d:6e:db:0a:7c:cf:53:a3:ae:e9:78:13:0c:1a: dd:4b:eb:2d:8e:4c:ca:2c:89:e6:b4:72:c3:dd:17: cb:78:d1:74:5a:5c:36:76:24:92:cb:4a:4c:ca:e1: 79:e6:7f:1e:63:c2:d6:4d:a5:92:1d:c3:52:12:d8: 39:37:06:f0:45:00:6a:09:21:29:01:1b:22:91:2e: 19:f0:ce:c0:a7:f6:b4:dc:a9:78:91:ac:44:33:33: f8:f2:59:08:6c:f3:7a:11:0f:6a:37:2f:88:70:ea: eb:b7:a6:7d:7c:0f:07:63:db:f6:d2:c2:eb:75:56: 58:e8:74:53:d0:05:08:85:e4:7a:81:5b:62:d3:f9: aa:cf:c3:a4:9b:bc:3d:37:59:3a:17:80:32:8a:b2: 68:a1:06:36:3a:c7:96:40:6b:c5:0c:60:7f:72:37: ac:3e:17:be:3c:aa:65:67:65:fc:b6:01:a6:08:4a: 2f:59:f4:31:92:53:11:ec:48:3a:61:13:8a:b0:5d: 20:b9:3b:1b:bf:3e:ae:a9:7d:0d:74:01:e1:17:6f: 0b:d9:23:81:77:ad:a2:b7:f1:02:d3:09:23:24:5b: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:47:B9:15:2F:8C:94:E5:F2:79:07:82:46:95:E4:3E:DD:F7:BB:F7 X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4d:66:07:0c:0e:91:fa:49:a3:e0:4a:97:8f:d1:fc:72:92: b7:0a:bf:ac:5a:4f:70:e9:3b:9a:03:6f:6f:d2:4f:f6:91:5b: 3b:dc:66:e9:83:a9:e5:a6:f5:7d:1c:45:dd:31:c1:85:10:b7: 09:68:fa:cd:fd:f7:03:6f:96:16:8a:3f:08:a3:2d:43:8d:65: d1:3d:19:46:b3:33:cf:d5:fd:c1:33:e1:69:ab:80:f0:04:3f: 87:72:32:3a:c1:c2:81:b1:dd:76:e3:a8:40:da:71:aa:9c:8b: fb:c9:80:a6:93:2f:f8:66:ff:1f:08:11:58:22:d9:47:07:37: 60:23:f4:47:0c:69:cf:3e:c1:1a:59:96:cf:26:ef:32:5d:08: 92:60:08:8d:16:21:62:c7:de:48:9c:23:84:b8:c7:33:8e:dd: 3e:48:27:eb:3c:61:16:f6:72:38:0c:97:39:b9:12:13:ec:d4: 82:12:0b:69:5a:bf:87:5e:e9:9f:57:80:c2:13:2a:e1:46:ff: 71:f0:f3:80:96:81:6d:39:e5:f1:9b:88:8d:9e:47:85:aa:71: cc:e0:e9:1f:f9:2c:57:4c:b1:76:d2:23:81:85:7e:3c:80:70: de:d8:f8:86:85:90:76:95:5c:ae:c3:03:54:d4:16:36:4d:26: c0:3c:7e:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkS82fp1EGMRAZZiM1JUzzyzq/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNjA0MTYyMzU1NTVaFw0yNjA0MjAwMzE1NTVaMDMxMTAvBgNV BAMTKDJBNDdCOTE1MkY4Qzk0RTVGMjc5MDc4MjQ2OTVFNDNFRERGN0JCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVT1HYn9euii7iVaex/Qc+yQ8 tvHVhIG9AqkPzMiNbtsKfM9To67peBMMGt1L6y2OTMosiea0csPdF8t40XRaXDZ2 JJLLSkzK4Xnmfx5jwtZNpZIdw1IS2Dk3BvBFAGoJISkBGyKRLhnwzsCn9rTcqXiR rEQzM/jyWQhs83oRD2o3L4hw6uu3pn18Dwdj2/bSwut1VljodFPQBQiF5HqBW2LT +arPw6SbvD03WToXgDKKsmihBjY6x5ZAa8UMYH9yN6w+F748qmVnZfy2AaYISi9Z 9DGSUxHsSDphE4qwXSC5Oxu/Pq6pfQ10AeEXbwvZI4F3raK38QLTCSMkWx+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKke5FS+MlOXyeQeCRpXkPt33u/cwHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxNZgcMDpH6SaPgSpeP0fxykrcKv6xaT3Dp O5oDb2/ST/aRWzvcZumDqeWm9X0cRd0xwYUQtwlo+s399wNvlhaKPwijLUONZdE9 GUazM8/V/cEz4WmrgPAEP4dyMjrBwoGx3XbjqEDacaqci/vJgKaTL/hm/x8IEVgi 2UcHN2Aj9EcMac8+wRpZls8m7zJdCJJgCI0WIWLH3kicI4S4xzOO3T5IJ+s8YRb2 cjgMlzm5EhPs1IISC2lav4de6Z9XgMITKuFG/3Hw84CWgW055fGbiI2eR4Wqcczg 6R/5LFdMsXbSI4GFfjyAcN7Y+IaFkHaVXK7DA1TUFjZNJsA8fnQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:08 2026 by rpki-client