$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: LFxkUAUjFnEiaKGWtZKX0Y5ZtdED9r9nzUEV0EUtHk4= Subject key identifier: 52:76:8F:F7:3D:8A:A1:6B:0F:01:39:A3:D0:8A:CB:41:83:E9:F6:9A Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 2F143655D3FF9CE94C5B17CC31568747F6523B0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 0251 Signing time: Fri 27 Feb 2026 19:00:44 +0000 Manifest this update: Fri 27 Feb 2026 18:55:44 +0000 Manifest next update: Tue 03 Mar 2026 06:16:44 +0000 Files and hashes: 1: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) 3: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: qKg9m3VCzXA3vI0OrT0VyFUBZBM3RdB49bZ0iVuTZWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:14:36:55:d3:ff:9c:e9:4c:5b:17:cc:31:56:87:47:f6:52:3b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Feb 27 18:55:44 2026 GMT Not After : Mar 3 06:16:44 2026 GMT Subject: CN=52768FF73D8AA16B0F0139A3D08ACB4183E9F69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:5d:ce:be:0b:c8:01:aa:0a:b8:42:7f:0f: 04:c7:e3:40:45:8b:a8:68:c4:fd:6e:8a:81:92:b4: 14:b8:76:ed:10:76:6d:0c:a6:da:fa:97:5b:84:84: 3e:89:8a:cd:28:70:8b:13:3b:ee:b7:8a:c0:46:1e: ca:28:ef:db:51:86:1c:f6:85:9e:0f:23:e7:56:f4: 4e:d0:38:b1:41:21:49:3f:06:6b:d3:77:22:cf:6a: 6a:66:ac:f9:c9:5f:15:d3:aa:30:0f:42:74:cb:6b: 4c:15:3d:ce:68:4b:ac:74:58:13:dd:64:f5:83:72: 21:06:62:db:0c:71:e6:45:ed:b0:85:3e:e7:ef:21: 60:3a:02:95:e9:95:6e:3f:a9:fd:0e:d0:cb:cd:2b: 2b:e1:ad:0b:6a:a3:d3:a8:7d:9f:7d:c1:30:8b:7a: ab:98:84:d2:c6:8f:b9:54:76:a4:a4:ab:b8:21:3b: 66:d7:45:7d:26:33:ab:bd:8e:ef:a6:01:39:42:44: f9:9c:4b:16:0f:2c:be:67:a1:36:69:39:ec:89:b9: 84:0c:4c:9b:cd:c0:6f:be:4b:54:df:f6:3b:92:10: 31:ae:8b:ae:37:1e:4b:37:47:52:87:c8:2c:6b:4c: e0:da:aa:ec:3e:76:9e:12:e3:be:d9:11:43:26:48: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:8F:F7:3D:8A:A1:6B:0F:01:39:A3:D0:8A:CB:41:83:E9:F6:9A X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0a:ec:f6:e9:f9:26:23:ff:be:41:55:6f:5c:dd:bd:dc:8c: 93:39:55:ba:5c:b9:cc:c4:e7:2f:57:c1:e5:1d:f6:9c:6c:12: 45:fb:5d:d0:08:ac:e7:ef:41:42:b5:f1:cd:cf:dd:b4:fb:38: b3:66:3e:1d:bf:aa:b7:5d:ab:2b:9c:08:9f:66:52:e3:85:c3: 1b:a1:b6:bf:f3:2a:74:c6:69:36:0c:ef:fb:e3:39:2c:89:67: 57:17:c2:f1:69:08:29:94:ce:d4:b1:b6:e5:b2:35:21:33:93: cf:c2:a1:01:59:a7:03:74:20:eb:91:62:1f:26:d8:69:51:5c: c7:7b:e6:b0:db:49:f8:cb:2c:50:78:15:3c:70:03:58:93:2c: bd:be:29:86:26:0a:e6:89:49:ff:08:d7:81:09:8d:37:81:7c: 0b:d8:cd:26:88:6b:03:b6:35:ac:38:6a:4c:2e:b8:89:09:5a: 0e:7d:dc:56:7e:55:81:1b:4a:f3:0d:6e:4d:fd:8e:7c:be:37: f9:26:f9:6b:8d:d3:79:9b:e3:7f:ad:ca:2a:79:14:8a:a0:3a: cd:98:f4:3d:dc:14:79:73:cf:27:32:7f:e5:16:d5:7e:23:0a: 3b:72:b7:fd:27:24:a2:4a:00:c2:8c:04:c2:9d:a7:9c:8d:a8: a9:58:9c:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxQ2VdP/nOlMWxfMMVaHR/ZSOw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNjAyMjcxODU1NDRaFw0yNjAzMDMwNjE2NDRaMDMxMTAvBgNV BAMTKDUyNzY4RkY3M0Q4QUExNkIwRjAxMzlBM0QwOEFDQjQxODNFOUY2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+N13OvgvIAaoKuEJ/DwTH40BF i6hoxP1uioGStBS4du0Qdm0Mptr6l1uEhD6Jis0ocIsTO+63isBGHsoo79tRhhz2 hZ4PI+dW9E7QOLFBIUk/BmvTdyLPampmrPnJXxXTqjAPQnTLa0wVPc5oS6x0WBPd ZPWDciEGYtsMceZF7bCFPufvIWA6ApXplW4/qf0O0MvNKyvhrQtqo9OofZ99wTCL equYhNLGj7lUdqSkq7ghO2bXRX0mM6u9ju+mATlCRPmcSxYPLL5noTZpOeyJuYQM TJvNwG++S1Tf9juSEDGui643Hks3R1KHyCxrTODaquw+dp4S477ZEUMmSHvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUnaP9z2KoWsPATmj0IrLQYPp9powHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsK7Pbp+SYj/75BVW9c3b3cjJM5VbpcuczE 5y9XweUd9pxsEkX7XdAIrOfvQUK18c3P3bT7OLNmPh2/qrddqyucCJ9mUuOFwxuh tr/zKnTGaTYM7/vjOSyJZ1cXwvFpCCmUztSxtuWyNSEzk8/CoQFZpwN0IOuRYh8m 2GlRXMd75rDbSfjLLFB4FTxwA1iTLL2+KYYmCuaJSf8I14EJjTeBfAvYzSaIawO2 Naw4akwuuIkJWg593FZ+VYEbSvMNbk39jny+N/km+WuN03mb43+tyip5FIqgOs2Y 9D3cFHlzzycyf+UW1X4jCjtyt/0nJKJKAMKMBMKdp5yNqKlYnMY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:57:02 2026 by rpki-client