$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: H6aarJx54diJ/HaGgiT/dMzsVVN6CjF1XrN0VeUtVuQ= Subject key identifier: 26:B3:3B:8E:DD:68:C9:D3:45:72:58:7C:8C:8B:4B:7C:D6:87:A4:B4 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 0731D154F09753ACC727D61E302E72F8C4D90C62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 02FF Signing time: Fri 31 Oct 2025 02:00:47 +0000 Manifest this update: Fri 31 Oct 2025 01:55:47 +0000 Manifest next update: Mon 03 Nov 2025 06:00:47 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=) 2: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: fg1gpGODSCcy0K0Pa5Lv6XeuBV8XappDDOpJrIeBwRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:31:d1:54:f0:97:53:ac:c7:27:d6:1e:30:2e:72:f8:c4:d9:0c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Oct 31 01:55:47 2025 GMT Not After : Nov 3 06:00:47 2025 GMT Subject: CN=26B33B8EDD68C9D34572587C8C8B4B7CD687A4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:52:9c:4a:56:ac:e0:9d:73:e0:a7:03:2e: 11:5b:90:26:74:46:e2:4c:55:b1:de:38:93:34:4f: a0:ce:e5:14:73:25:06:d1:c0:87:25:86:23:b8:f0: f8:b6:ca:bf:cd:5e:15:5e:41:12:29:89:19:df:84: 3a:21:71:37:b1:82:a5:fd:cf:4a:13:64:c5:a5:04: 14:45:60:ac:41:70:82:c1:4d:b6:22:92:3e:e2:75: a5:36:a7:f0:19:7a:32:b1:45:6d:b8:f2:27:3a:d6: d6:b4:83:03:4a:23:78:07:60:8c:34:19:50:1b:8b: a0:1a:82:1f:7c:72:81:fc:f6:89:32:bb:e9:06:93: 85:4f:c0:e6:8b:44:95:ce:2b:bc:ed:50:19:a9:ac: ad:da:0d:7b:00:84:11:1a:b5:87:86:57:86:a9:a7: 9c:bf:2c:d2:f9:27:6c:14:62:6f:30:7b:2f:4e:89: 68:28:13:2e:0e:fa:ea:11:2e:1c:55:fb:5a:92:66: 33:84:1d:8b:f7:93:5a:cd:fb:c2:d6:5f:f7:3f:a0: df:cd:2d:3e:b6:ae:90:11:13:58:5e:3a:e8:6b:7c: 66:a6:a0:23:6a:88:76:e7:d2:c3:25:d1:63:7a:47: ba:fd:cf:eb:54:53:64:9e:f8:88:35:a0:ff:6d:07: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B3:3B:8E:DD:68:C9:D3:45:72:58:7C:8C:8B:4B:7C:D6:87:A4:B4 X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:ed:8d:d2:78:6b:5d:24:81:2b:84:b5:e1:56:38:00:af:a1: 75:3b:b1:1f:f0:79:3f:96:f2:27:f7:29:4a:0f:df:2f:a2:7a: 26:50:45:10:80:4e:ea:e7:e8:f3:d8:d0:64:09:52:9b:00:c7: 12:e1:15:97:2f:3e:22:1b:ee:ed:5f:d5:9f:d5:a0:ee:38:ef: 1c:45:ac:a5:97:29:11:b4:4d:dc:bb:1f:30:f5:5c:4e:23:7b: 4b:e3:57:ea:b5:92:cc:26:f5:19:62:1d:0c:01:68:c5:78:70: fe:09:11:c9:4f:85:f8:b1:03:68:1a:58:a1:bb:0d:36:e1:c0: 5d:e9:91:25:8d:b5:63:49:b1:eb:77:71:59:12:ca:63:a9:81: a6:d3:2e:9c:89:09:30:e6:a1:39:8f:8d:33:43:6c:02:30:93: dd:4b:a7:48:c3:eb:52:e4:9d:6e:91:f5:5c:c7:86:61:30:95: a0:d0:1f:e5:da:69:08:e2:1e:e7:36:01:e9:6f:ea:fa:a4:c7: 39:c6:f7:f8:f8:68:97:18:e6:9f:d2:e0:f6:48:34:6d:cc:ef: a2:02:5d:24:74:59:94:8b:5a:7d:fc:d2:13:57:1c:f0:3b:35: b4:d1:2c:bb:89:1c:c3:8b:9b:54:97:1f:f8:e2:0c:e2:2f:bb: 39:60:02:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzHRVPCXU6zHJ9YeMC5y+MTZDGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNTEwMzEwMTU1NDdaFw0yNTExMDMwNjAwNDdaMDMxMTAvBgNV BAMTKDI2QjMzQjhFREQ2OEM5RDM0NTcyNTg3QzhDOEI0QjdDRDY4N0E0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC451KcSlas4J1z4KcDLhFbkCZ0 RuJMVbHeOJM0T6DO5RRzJQbRwIclhiO48Pi2yr/NXhVeQRIpiRnfhDohcTexgqX9 z0oTZMWlBBRFYKxBcILBTbYikj7idaU2p/AZejKxRW248ic61ta0gwNKI3gHYIw0 GVAbi6Aagh98coH89okyu+kGk4VPwOaLRJXOK7ztUBmprK3aDXsAhBEatYeGV4ap p5y/LNL5J2wUYm8wey9OiWgoEy4O+uoRLhxV+1qSZjOEHYv3k1rN+8LWX/c/oN/N LT62rpARE1heOuhrfGamoCNqiHbn0sMl0WN6R7r9z+tUU2Se+Ig1oP9tBxDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJrM7jt1oydNFclh8jItLfNaHpLQwHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3tjdJ4a10kgSuEteFWOACvoXU7sR/weT+W 8if3KUoP3y+ieiZQRRCATurn6PPY0GQJUpsAxxLhFZcvPiIb7u1f1Z/VoO447xxF rKWXKRG0Tdy7HzD1XE4je0vjV+q1kswm9RliHQwBaMV4cP4JEclPhfixA2gaWKG7 DTbhwF3pkSWNtWNJset3cVkSymOpgabTLpyJCTDmoTmPjTNDbAIwk91Lp0jD61Lk nW6R9VzHhmEwlaDQH+XaaQjiHuc2Aelv6vqkxznG9/j4aJcY5p/S4PZING3M76IC XSR0WZSLWn380hNXHPA7NbTRLLuJHMOLm1SXH/jiDOIvuzlgAr8= -----END CERTIFICATE-----Generated at Sun Nov 2 04:56:45 2025 by rpki-client