$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: gy4fnlDRUfIAW094jGdUyeAK5Oi7vFGjTu1RQenAGCE= Subject key identifier: 2E:57:78:D0:72:B8:A4:15:4D:85:23:DB:D8:D7:B3:20:AA:EC:D3:3B Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 1AC44FF82303FF70809F9793CC16D22E4509DD0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: 014B Signing time: Mon 02 Mar 2026 06:22:05 +0000 Manifest this update: Mon 02 Mar 2026 06:17:05 +0000 Manifest next update: Thu 05 Mar 2026 07:36:05 +0000 Files and hashes: 1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: rWOVmZ8XFuCBfUe4kDbGNsYyyEu+hLz+F55iTP9oiXM=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: I8arlV9bMVGsAQTZtHx6y++6HiyiMdDVTXwTw+QSjwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c4:4f:f8:23:03:ff:70:80:9f:97:93:cc:16:d2:2e:45:09:dd:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Mar 2 06:17:05 2026 GMT Not After : Mar 5 07:36:05 2026 GMT Subject: CN=2E5778D072B8A4154D8523DBD8D7B320AAECD33B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:72:ae:5e:97:bc:84:42:a3:37:7a:5d:9f: 7e:f0:cf:99:e6:84:3b:ee:d9:1b:dc:d1:b0:bc:42: a2:dc:79:e9:b2:49:8b:49:b2:d1:f5:5b:05:1d:19: a7:4e:c9:60:33:82:87:c9:c5:71:6b:bc:2b:90:46: 7f:8c:9b:d1:45:20:60:4b:fa:7a:a6:8b:3d:47:0c: 6d:a7:f4:20:6d:ec:f7:60:6b:18:ed:de:bf:8a:34: 33:29:2b:6d:04:29:b4:64:a9:36:3c:67:e5:87:d9: 2d:a1:f9:93:38:95:13:76:84:f8:8c:53:71:c5:df: ff:95:52:39:7d:6c:c9:b8:e2:e7:b4:02:69:ed:bf: f7:b5:93:65:1d:86:90:d1:1b:c9:bc:57:46:38:d4: f0:1d:78:3f:cc:2f:ca:26:a7:75:16:30:2e:60:dc: e8:15:96:b3:34:22:d8:4c:d8:bd:27:5f:68:d7:fc: cc:d6:a1:10:b2:8e:25:07:a5:50:2f:1b:d7:84:32: e8:6c:a6:d5:c4:91:32:99:fc:e6:e7:4e:25:3a:d1: 89:e4:8c:65:c5:30:28:2b:29:46:c1:2b:78:95:bc: d1:db:08:9b:0d:67:de:c4:d3:28:5d:6a:01:e1:20: a7:61:ca:63:81:0b:7c:49:1d:65:20:2e:04:f2:b4: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:57:78:D0:72:B8:A4:15:4D:85:23:DB:D8:D7:B3:20:AA:EC:D3:3B X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:40:8c:ac:71:32:e1:0d:8c:2c:e3:34:2e:61:31:48:6b:ce: f6:17:65:e9:d2:53:8b:d2:c1:35:09:bf:64:6c:de:a2:e6:e1: b0:77:8b:6a:78:a7:99:6b:81:13:86:fa:51:78:a9:64:1b:62: 8f:53:53:90:6e:42:16:3c:45:94:2f:cb:18:e8:c0:46:26:87: a0:68:3d:a4:fc:74:7c:67:5e:ed:ec:8e:3c:42:02:7c:ba:8a: 71:42:79:2c:61:91:ac:c3:0b:42:7f:50:06:bb:99:30:be:d7: f8:bc:65:4a:f9:45:43:f1:c3:fd:bb:8a:7c:04:75:17:ed:ca: 1f:be:0c:a9:4f:51:7f:57:be:b3:d4:30:f9:9c:fc:1f:15:cc: 59:4a:4c:28:0e:90:d9:53:78:b3:e7:c7:aa:aa:22:33:ce:c6: c3:b3:4d:26:63:ed:21:a4:dd:e8:21:1d:4a:40:6e:00:89:0c: 83:88:f7:8f:45:fc:e7:e8:21:45:4b:4d:c6:ac:9b:87:4f:0f: ca:a0:f3:76:d6:d9:fa:15:dd:92:af:8e:78:4e:48:e9:49:f7: 67:5c:95:d5:ae:84:74:4e:5b:d2:82:c0:aa:c8:43:af:33:29: bb:00:55:e1:46:fa:7d:82:6b:1f:0f:3c:b1:c1:a4:9d:41:b4: af:89:51:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsRP+CMD/3CAn5eTzBbSLkUJ3QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNjAzMDIwNjE3MDVaFw0yNjAzMDUwNzM2MDVaMDMxMTAvBgNV BAMTKDJFNTc3OEQwNzJCOEE0MTU0RDg1MjNEQkQ4RDdCMzIwQUFFQ0QzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+03KuXpe8hEKjN3pdn37wz5nm hDvu2Rvc0bC8QqLceemySYtJstH1WwUdGadOyWAzgofJxXFrvCuQRn+Mm9FFIGBL +nqmiz1HDG2n9CBt7Pdgaxjt3r+KNDMpK20EKbRkqTY8Z+WH2S2h+ZM4lRN2hPiM U3HF3/+VUjl9bMm44ue0Amntv/e1k2UdhpDRG8m8V0Y41PAdeD/ML8omp3UWMC5g 3OgVlrM0IthM2L0nX2jX/MzWoRCyjiUHpVAvG9eEMuhsptXEkTKZ/ObnTiU60Ynk jGXFMCgrKUbBK3iVvNHbCJsNZ97E0yhdagHhIKdhymOBC3xJHWUgLgTytKRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULld40HK4pBVNhSPb2NezIKrs0zswHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZAjKxxMuENjCzjNC5hMUhrzvYXZenSU4vS wTUJv2Rs3qLm4bB3i2p4p5lrgROG+lF4qWQbYo9TU5BuQhY8RZQvyxjowEYmh6Bo PaT8dHxnXu3sjjxCAny6inFCeSxhkazDC0J/UAa7mTC+1/i8ZUr5RUPxw/27inwE dRftyh++DKlPUX9XvrPUMPmc/B8VzFlKTCgOkNlTeLPnx6qqIjPOxsOzTSZj7SGk 3eghHUpAbgCJDIOI949F/OfoIUVLTcasm4dPD8qg83bW2foV3ZKvjnhOSOlJ92dc ldWuhHROW9KCwKrIQ68zKbsAVeFG+n2Cax8PPLHBpJ1BtK+JUUs= -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:02 2026 by rpki-client