$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: /fiTxgYEjaVwwMA9hiEXB0aQfCuhIFATPitSzUWWnG0= Subject key identifier: 1F:17:E8:18:51:87:FD:A5:63:78:75:ED:9D:07:EB:94:50:3E:31:58 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 1E3231AC0004360DB8C4FA249718642FDF179C11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 0253 Signing time: Sun 01 Mar 2026 06:31:31 +0000 Manifest this update: Sun 01 Mar 2026 06:26:31 +0000 Manifest next update: Wed 04 Mar 2026 10:08:31 +0000 Files and hashes: 1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) 2: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: 1acF3Q+Q6gyy3krr4nVgVznZgEwCPWZ+sId5iHhPMRM=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:32:31:ac:00:04:36:0d:b8:c4:fa:24:97:18:64:2f:df:17:9c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Mar 1 06:26:31 2026 GMT Not After : Mar 4 10:08:31 2026 GMT Subject: CN=1F17E8185187FDA5637875ED9D07EB94503E3158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:19:57:f4:2c:a6:68:09:da:8d:53:8b:43: 7a:db:91:ca:17:c6:bd:8b:df:ba:e8:8a:7f:ae:9d: d1:8b:43:24:09:3d:b3:6a:a2:9d:18:6c:78:d6:07: 4f:94:e2:23:35:41:28:f1:59:17:ca:67:35:f1:ee: 6f:d9:a3:1a:d1:cb:4c:66:57:db:b0:bd:e1:9b:cd: ba:38:ac:a5:83:c1:f8:90:44:20:6c:8d:35:fe:8d: a3:30:91:21:6d:2f:d3:db:16:35:99:3b:1c:a9:b7: 13:71:20:5f:ce:6d:bf:be:5f:09:6e:b5:75:06:69: 87:12:b7:cf:33:79:c9:63:3c:de:dd:d8:7e:2d:9c: 2f:1a:0f:1d:c2:f4:58:cc:9d:55:c2:f1:d4:41:f4: 93:f0:80:9b:47:f5:2a:25:9e:f9:43:d0:1a:c2:5e: 03:66:a3:c2:4b:97:ed:9e:e6:22:39:71:b4:b3:8d: 21:fb:7d:74:0f:00:7a:a1:1f:1a:bd:66:63:f8:b6: 78:92:a3:3d:1a:15:24:19:ad:df:ca:87:77:e9:0c: fb:6e:50:ea:61:83:fa:dd:03:4b:e9:86:8e:a1:f1: aa:b5:d1:1c:d0:dd:9a:ed:13:0a:37:79:8a:e4:e4: 27:44:c1:29:fe:60:62:09:93:26:7b:87:99:95:74: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:17:E8:18:51:87:FD:A5:63:78:75:ED:9D:07:EB:94:50:3E:31:58 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:97:49:f8:02:43:bd:5f:76:2a:a0:76:93:c6:ee:8c:52:76: a5:70:38:ad:8b:7c:c3:0c:c1:71:66:9f:09:06:45:cf:8c:62: ee:cb:1a:c6:05:59:43:c8:d0:68:46:dd:56:aa:08:28:c4:f4: 4e:d6:d1:91:b9:fb:3e:14:a7:f0:7b:0d:03:74:90:d8:1a:1e: e1:fa:9a:60:8d:ff:3f:2e:6c:d9:b1:d6:04:2d:93:80:8c:18: 8e:77:9d:8f:01:01:e9:20:a7:15:64:30:45:5e:63:69:03:85: 19:10:10:8b:a1:63:5d:42:01:69:df:27:ca:64:d4:cd:f2:50: d8:e9:4e:96:bd:a3:43:53:2f:a6:02:65:82:88:95:66:1e:2a: 50:2e:3f:41:b8:c9:6e:ae:25:f7:74:ec:6b:89:c3:a5:cf:4e: dd:13:16:88:dd:f3:27:a5:af:93:45:09:c7:e3:d3:71:89:82: 32:62:63:ee:07:21:29:19:9a:69:77:df:7c:a9:ce:6e:65:b9: 46:0a:c7:c8:e5:6b:ab:a3:9b:ea:65:be:fe:49:19:db:e9:da: b7:17:13:b6:80:24:8d:81:5a:97:54:49:13:6c:4e:c5:30:9e: fc:cf:87:05:bf:bd:2f:01:b2:cd:ca:88:9f:f3:e5:db:8b:c6: 97:8c:0c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjIxrAAENg24xPoklxhkL98XnBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNjAzMDEwNjI2MzFaFw0yNjAzMDQxMDA4MzFaMDMxMTAvBgNV BAMTKDFGMTdFODE4NTE4N0ZEQTU2Mzc4NzVFRDlEMDdFQjk0NTAzRTMxNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpBlX9CymaAnajVOLQ3rbkcoX xr2L37roin+undGLQyQJPbNqop0YbHjWB0+U4iM1QSjxWRfKZzXx7m/ZoxrRy0xm V9uwveGbzbo4rKWDwfiQRCBsjTX+jaMwkSFtL9PbFjWZOxyptxNxIF/Obb++Xwlu tXUGaYcSt88zecljPN7d2H4tnC8aDx3C9FjMnVXC8dRB9JPwgJtH9SolnvlD0BrC XgNmo8JLl+2e5iI5cbSzjSH7fXQPAHqhHxq9ZmP4tniSoz0aFSQZrd/Kh3fpDPtu UOphg/rdA0vpho6h8aq10RzQ3ZrtEwo3eYrk5CdEwSn+YGIJkyZ7h5mVdFsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHxfoGFGH/aVjeHXtnQfrlFA+MVgwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyXSfgCQ71fdiqgdpPG7oxSdqVwOK2LfMMM wXFmnwkGRc+MYu7LGsYFWUPI0GhG3VaqCCjE9E7W0ZG5+z4Up/B7DQN0kNgaHuH6 mmCN/z8ubNmx1gQtk4CMGI53nY8BAekgpxVkMEVeY2kDhRkQEIuhY11CAWnfJ8pk 1M3yUNjpTpa9o0NTL6YCZYKIlWYeKlAuP0G4yW6uJfd07GuJw6XPTt0TFojd8yel r5NFCcfj03GJgjJiY+4HISkZmml333ypzm5luUYKx8jla6ujm+plvv5JGdvp2rcX E7aAJI2BWpdUSRNsTsUwnvzPhwW/vS8Bss3KiJ/z5duLxpeMDGg= -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:26 2026 by rpki-client