$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: 7plRDdLeCL/zRBhjJCpHdQQm4Q745yT9N62c4YsIIGs= Subject key identifier: FF:EB:35:8C:5A:74:B9:C2:A2:0A:9F:89:D3:34:8A:78:5C:BA:3B:2F Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 36DD365F32B541ACFECA684BC950717C6729FEE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 0502 Signing time: Thu 04 Sep 2025 06:41:31 +0000 Manifest this update: Thu 04 Sep 2025 06:36:31 +0000 Manifest next update: Sun 07 Sep 2025 16:06:31 +0000 Files and hashes: 1: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: BFmT+n5yFcwntxmJBT7hZMIKegaG4LCGoZEzW/B/0a8=) 2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 16:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:dd:36:5f:32:b5:41:ac:fe:ca:68:4b:c9:50:71:7c:67:29:fe:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Sep 4 06:36:31 2025 GMT Not After : Sep 7 16:06:31 2025 GMT Subject: CN=FFEB358C5A74B9C2A20A9F89D3348A785CBA3B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:76:4b:a1:df:41:fc:f4:e4:ee:b9:30:47: 1e:d2:48:c2:e5:9e:3f:98:45:a2:94:d1:c8:67:c3: 2b:7b:3d:a1:51:d3:c2:ad:27:c2:99:6a:64:2f:51: 05:73:f3:da:04:c7:68:6c:01:d5:4b:4a:69:f7:e4: 19:e9:65:a1:cf:e4:c3:60:e6:84:8f:ff:2f:fd:7c: 43:44:bb:eb:fb:f1:7d:f3:b1:86:19:4b:9d:b0:95: 38:32:c9:2a:a9:21:6a:05:d0:65:67:f4:48:64:4c: 12:eb:a8:b5:3b:9e:df:1f:8f:69:b5:68:2b:88:19: 9f:fd:d9:ff:3f:9c:47:d8:9c:74:4d:be:a0:7f:95: 92:ab:a3:23:68:8b:3e:a4:b8:03:1f:60:5c:1b:d3: 11:f8:e9:f0:c9:a9:73:f2:de:8c:25:bf:46:67:2d: cd:eb:7a:bc:a1:7d:01:32:db:bf:6e:d4:1c:56:37: c3:6b:88:82:4f:07:51:83:42:2a:f5:17:3c:51:28: 3b:c0:0c:40:a0:ec:80:0f:13:fa:da:9f:28:1f:74: 44:e1:5b:df:ab:3b:72:0c:23:e6:e7:a6:c9:9b:a4: 79:7a:46:3a:2f:8a:e2:0a:c8:0b:d1:90:c4:03:b6: d5:8e:ba:c4:76:bf:3e:02:0a:e6:d3:f4:15:28:a3: 01:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EB:35:8C:5A:74:B9:C2:A2:0A:9F:89:D3:34:8A:78:5C:BA:3B:2F X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:fb:6f:d3:35:87:39:7e:64:26:8f:cd:e5:2d:09:7c:28:b9: 34:1a:e7:97:08:21:55:31:de:ed:fc:eb:46:91:3b:1f:e2:2e: 13:ee:b0:b9:a2:49:9c:ef:65:37:89:fd:66:39:fc:ef:72:04: 86:47:c3:2a:de:4e:5d:cc:71:ca:6a:85:ed:13:4c:ae:3a:73: a3:6d:01:79:5c:37:f9:bd:20:12:05:1f:23:79:aa:5f:bb:98: 92:ff:77:2d:e0:5b:fd:0a:aa:e9:41:da:11:67:65:00:f6:f3: f8:a9:72:8b:b9:42:e5:82:d0:a8:8e:8b:3e:eb:44:72:93:11: b9:63:52:33:5b:3c:bd:f7:a6:74:13:e0:49:f9:bc:79:5e:74: 83:72:b5:15:9b:d9:d3:7d:5c:a9:22:9b:16:f2:34:9f:16:f0: b3:5f:e1:a6:d4:6d:a5:95:34:51:eb:60:a8:a6:82:ce:cc:3e: 4e:07:d1:da:b0:9a:f5:88:67:98:9d:5c:62:ef:ce:55:e7:19: d5:37:e9:1f:f4:67:7e:47:32:03:67:bb:27:83:de:69:a3:8b: a2:fa:6d:6d:24:18:22:61:e4:43:c5:95:20:a3:9e:e3:59:c0: 36:ea:a2:a9:a6:b4:66:9b:a5:0d:72:ad:69:88:1b:dc:93:28: 7f:69:d8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNt02XzK1Qaz+ymhLyVBxfGcp/uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNTA5MDQwNjM2MzFaFw0yNTA5MDcxNjA2MzFaMDMxMTAvBgNV BAMTKEZGRUIzNThDNUE3NEI5QzJBMjBBOUY4OUQzMzQ4QTc4NUNCQTNCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFn3ZLod9B/PTk7rkwRx7SSMLl nj+YRaKU0chnwyt7PaFR08KtJ8KZamQvUQVz89oEx2hsAdVLSmn35BnpZaHP5MNg 5oSP/y/9fENEu+v78X3zsYYZS52wlTgyySqpIWoF0GVn9EhkTBLrqLU7nt8fj2m1 aCuIGZ/92f8/nEfYnHRNvqB/lZKroyNoiz6kuAMfYFwb0xH46fDJqXPy3owlv0Zn Lc3reryhfQEy279u1BxWN8NriIJPB1GDQir1FzxRKDvADECg7IAPE/ranygfdETh W9+rO3IMI+bnpsmbpHl6RjoviuIKyAvRkMQDttWOusR2vz4CCubT9BUoowFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/+s1jFp0ucKiCp+J0zSKeFy6Oy8wHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEf7b9M1hzl+ZCaPzeUtCXwouTQa55cIIVUx 3u3860aROx/iLhPusLmiSZzvZTeJ/WY5/O9yBIZHwyreTl3Mccpqhe0TTK46c6Nt AXlcN/m9IBIFHyN5ql+7mJL/dy3gW/0KqulB2hFnZQD28/ipcou5QuWC0KiOiz7r RHKTEbljUjNbPL33pnQT4En5vHledINytRWb2dN9XKkimxbyNJ8W8LNf4abUbaWV NFHrYKimgs7MPk4H0dqwmvWIZ5idXGLvzlXnGdU36R/0Z35HMgNnuyeD3mmji6L6 bW0kGCJh5EPFlSCjnuNZwDbqoqmmtGabpQ1yrWmIG9yTKH9p2D0= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:10 2025 by rpki-client