$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: v7sXhz90Rt5NASG2yES6izs8nZkjIGhm6RG3A+8sakA= Subject key identifier: E5:95:C4:D8:CB:71:2B:CD:A1:D0:B7:6B:6E:04:E9:7D:00:BB:F6:D7 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 4EFE440BB6DA360F958289F22164B5AC892B4BEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0377 Signing time: Sun 01 Mar 2026 12:41:45 +0000 Manifest this update: Sun 01 Mar 2026 12:36:45 +0000 Manifest next update: Wed 04 Mar 2026 23:50:45 +0000 Files and hashes: 1: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: 3YtIvtqFDhvqOEsRxoBdRnJiUzZZd1hLL+AofMzXhG8=) 2: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xR28xhgfPaocTNljEccnigENCimK3oapTJgJUkyM5nM=) 3: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: AVUnfzqrbeXvBd5BraZJwmqr2wTn8R4ubDG+bOW20aI=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fe:44:0b:b6:da:36:0f:95:82:89:f2:21:64:b5:ac:89:2b:4b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Mar 1 12:36:45 2026 GMT Not After : Mar 4 23:50:45 2026 GMT Subject: CN=E595C4D8CB712BCDA1D0B76B6E04E97D00BBF6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:57:74:e2:70:fd:e7:f0:59:65:1e:74:37: 83:2e:73:3a:93:fb:1d:46:10:ff:39:fd:d5:5c:92: 13:41:c5:fb:b3:90:86:cd:05:28:85:8b:44:5d:20: b5:ba:31:ed:27:a5:50:61:64:bd:76:7f:19:62:3f: b9:ec:21:22:bf:76:f5:2d:fa:47:e7:8b:83:e6:8b: d4:e8:f4:c4:d4:ac:7b:be:3f:05:af:b3:0f:8a:e4: 25:07:40:a6:92:af:3b:1c:b7:13:6e:4a:7d:78:ec: e1:aa:9b:dd:43:4a:ea:4d:8f:64:fe:cb:1c:23:14: 3b:54:4b:95:53:15:c0:3a:84:13:7d:fe:38:08:96: 6d:bc:2f:cc:67:57:fb:aa:63:81:68:32:b9:5c:ae: a1:b0:d8:98:d4:76:b8:13:5b:e7:08:81:51:cc:e5: 19:eb:d4:86:79:fc:36:56:f2:1f:cf:4f:79:bf:2c: be:d3:94:5f:6d:81:b9:9c:72:3d:a4:bd:43:17:65: d2:46:67:10:ac:f8:64:10:14:e9:e5:fe:5d:33:09: 2a:dc:6d:79:cf:b2:e6:a5:ed:e6:52:8d:2a:30:a6: de:bb:8d:2a:2f:9b:c2:b7:fb:81:cd:bd:5b:fc:44: b1:a4:a5:96:a4:38:8e:2c:85:67:14:48:47:44:8f: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:95:C4:D8:CB:71:2B:CD:A1:D0:B7:6B:6E:04:E9:7D:00:BB:F6:D7 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:10:44:79:63:56:a6:91:0f:17:6f:50:ae:32:87:b3:be:08: af:73:bb:aa:88:b2:fc:c6:7e:fa:d8:cb:3b:e0:2f:ae:b9:62: 9e:24:53:c7:c4:97:8f:5a:9a:69:cd:f2:2e:0c:74:97:20:64: c0:67:9d:43:c5:32:41:d0:d7:a1:0a:23:aa:28:89:55:9a:23: 16:ea:dd:44:1a:aa:6f:5e:84:be:7c:b6:89:6a:df:b9:dc:5a: a4:69:67:25:a3:e1:f2:73:41:20:5a:a8:74:df:2a:f4:fa:2f: ec:cc:96:bc:97:d0:93:c3:cb:0f:55:bb:4a:f2:f9:55:4a:af: 13:56:91:43:60:a3:10:3f:29:27:4e:07:35:f8:68:a4:ce:59: 55:c8:21:d8:e2:d3:66:0f:52:3a:6c:1c:72:47:34:8b:10:92: b8:f9:75:98:8a:2f:9f:c2:91:dd:29:ac:a0:dd:34:65:4e:34: 78:c9:e0:7d:33:59:13:9c:f2:50:0b:7d:1a:bc:63:e8:48:ec: 51:8a:8d:0d:8e:86:94:3c:89:a7:c4:7a:60:a2:74:0c:22:95: f4:0d:4d:1f:84:a9:f6:fc:7c:c6:61:51:f3:f4:ed:5c:cc:91: da:03:5e:ea:4a:e3:08:d3:c9:0e:ec:69:51:5a:69:2c:94:a5: f1:8a:7c:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTv5EC7baNg+VgonyIWS1rIkrS+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNjAzMDExMjM2NDVaFw0yNjAzMDQyMzUwNDVaMDMxMTAvBgNV BAMTKEU1OTVDNEQ4Q0I3MTJCQ0RBMUQwQjc2QjZFMDRFOTdEMDBCQkY2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfFd04nD95/BZZR50N4MuczqT +x1GEP85/dVckhNBxfuzkIbNBSiFi0RdILW6Me0npVBhZL12fxliP7nsISK/dvUt +kfni4Pmi9To9MTUrHu+PwWvsw+K5CUHQKaSrzsctxNuSn147OGqm91DSupNj2T+ yxwjFDtUS5VTFcA6hBN9/jgIlm28L8xnV/uqY4FoMrlcrqGw2JjUdrgTW+cIgVHM 5Rnr1IZ5/DZW8h/PT3m/LL7TlF9tgbmccj2kvUMXZdJGZxCs+GQQFOnl/l0zCSrc bXnPsual7eZSjSowpt67jSovm8K3+4HNvVv8RLGkpZakOI4shWcUSEdEj1k/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZXE2MtxK82h0LdrbgTpfQC79tcwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN4QRHljVqaRDxdvUK4yh7O+CK9zu6qIsvzG fvrYyzvgL665Yp4kU8fEl49ammnN8i4MdJcgZMBnnUPFMkHQ16EKI6ooiVWaIxbq 3UQaqm9ehL58tolq37ncWqRpZyWj4fJzQSBaqHTfKvT6L+zMlryX0JPDyw9Vu0ry +VVKrxNWkUNgoxA/KSdOBzX4aKTOWVXIIdji02YPUjpsHHJHNIsQkrj5dZiKL5/C kd0prKDdNGVONHjJ4H0zWROc8lALfRq8Y+hI7FGKjQ2OhpQ8iafEemCidAwilfQN TR+Eqfb8fMZhUfP07VzMkdoDXupK4wjTyQ7saVFaaSyUpfGKfJA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:12 2026 by rpki-client