$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: LiZ/ZvHliZptJoRPDbIrMp96rhqxsuKVtRZy6n076cE= Subject key identifier: A5:97:ED:E1:BC:DD:E4:14:0C:D0:5E:B9:7E:94:C0:3B:EA:A2:1A:47 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 5585CE3C4F90EC792777D1BE5DBBB9C685B81CCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 02E6 Signing time: Fri 05 Sep 2025 08:40:46 +0000 Manifest this update: Fri 05 Sep 2025 08:35:46 +0000 Manifest next update: Mon 08 Sep 2025 16:58:46 +0000 Files and hashes: 1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: gegUURPNQLQ37/yJlMmIf6iXIG/frgjW0bYolyZaP+w=) 2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:85:ce:3c:4f:90:ec:79:27:77:d1:be:5d:bb:b9:c6:85:b8:1c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Sep 5 08:35:46 2025 GMT Not After : Sep 8 16:58:46 2025 GMT Subject: CN=A597EDE1BCDDE4140CD05EB97E94C03BEAA21A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:f9:e2:f8:66:a4:2f:7f:28:e4:da:ab:8a: 49:59:c7:a2:dc:4d:73:2f:3d:a7:18:95:5a:77:53: b7:d8:75:fc:e2:d6:ac:44:15:56:53:fb:07:61:cb: 41:9f:60:b8:00:49:01:c9:0f:42:e8:de:48:74:38: f3:df:36:1c:97:79:91:18:e2:fc:52:ab:a2:c1:38: a3:8d:a5:c6:11:40:3a:f8:a8:00:a0:f0:e4:c0:0e: ea:48:f2:de:4f:59:6a:bc:40:dd:7e:dd:f5:b4:31: 38:dc:b7:7a:f3:7f:ee:11:c1:ed:da:54:88:eb:41: f8:2b:b7:aa:83:af:cb:f6:64:33:87:6f:77:81:75: 49:e1:0d:1b:51:1b:ef:6f:48:75:c0:65:a9:0e:ef: 66:b6:65:7b:ce:59:d8:b0:a2:09:00:a9:73:bf:33: 23:d4:9f:48:82:d5:cd:43:08:bd:3e:a3:d9:93:e6: 15:46:e6:dc:26:82:50:46:05:d4:88:9c:31:ac:f5: 76:44:8e:df:b3:42:ba:8e:3d:fa:68:2a:4b:4f:fb: 49:8b:ae:ae:8b:3b:62:cb:b5:61:57:40:45:8b:a8: 1c:5c:e7:72:9a:cc:e4:db:43:5f:b1:27:19:8c:30: e0:f6:da:4a:53:28:d6:33:83:6e:19:0b:6a:6b:c0: be:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:97:ED:E1:BC:DD:E4:14:0C:D0:5E:B9:7E:94:C0:3B:EA:A2:1A:47 X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:54:a2:e0:18:fe:a1:32:2f:ae:4b:f4:7b:0c:55:03:20:de: 16:81:9f:8f:00:ef:fe:95:03:06:cd:ab:e9:52:53:fa:2c:fa: ef:b7:be:bd:53:d3:9f:61:b5:34:d9:58:ec:49:e6:39:88:f6: 89:f6:b7:d6:61:28:af:0f:d5:c0:e5:e6:b8:a2:79:d1:fe:4d: 8e:4b:6e:d5:b3:f8:2d:c3:03:c3:d1:a6:da:81:d4:ad:05:be: 43:19:98:1e:55:bb:66:b4:51:14:ad:ee:aa:01:e1:b4:a8:29: f5:cb:6b:4b:b1:f9:df:39:ec:a3:8b:ca:61:58:39:b3:65:ab: 40:cb:58:fc:b9:a9:20:dd:53:eb:6a:99:96:61:86:53:46:18: 4c:25:bf:2f:3a:61:0a:c5:90:e5:9f:d3:6a:07:f4:6f:f6:aa: 0e:b9:d6:62:93:56:bc:65:38:70:53:58:1c:c4:c8:27:21:22: 95:07:2d:56:ad:45:40:93:8d:18:23:15:7f:04:41:c6:d5:bb: 96:26:f9:59:d0:98:0b:ca:b3:9e:b5:57:04:da:44:de:fd:d0: ad:a0:69:37:d5:da:d0:a0:7c:61:41:1f:32:67:c3:50:f1:40: 96:56:f3:2b:23:61:ac:f8:2a:f0:24:7c:3d:e9:ae:fd:b7:0e: 42:62:75:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYXOPE+Q7Hknd9G+Xbu5xoW4HMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNTA5MDUwODM1NDZaFw0yNTA5MDgxNjU4NDZaMDMxMTAvBgNV BAMTKEE1OTdFREUxQkNEREU0MTQwQ0QwNUVCOTdFOTRDMDNCRUFBMjFBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3vni+GakL38o5NqriklZx6Lc TXMvPacYlVp3U7fYdfzi1qxEFVZT+wdhy0GfYLgASQHJD0Lo3kh0OPPfNhyXeZEY 4vxSq6LBOKONpcYRQDr4qACg8OTADupI8t5PWWq8QN1+3fW0MTjct3rzf+4Rwe3a VIjrQfgrt6qDr8v2ZDOHb3eBdUnhDRtRG+9vSHXAZakO72a2ZXvOWdiwogkAqXO/ MyPUn0iC1c1DCL0+o9mT5hVG5twmglBGBdSInDGs9XZEjt+zQrqOPfpoKktP+0mL rq6LO2LLtWFXQEWLqBxc53KazOTbQ1+xJxmMMOD22kpTKNYzg24ZC2prwL4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZft4bzd5BQM0F65fpTAO+qiGkcwHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFUouAY/qEyL65L9HsMVQMg3haBn48A7/6V AwbNq+lSU/os+u+3vr1T059htTTZWOxJ5jmI9on2t9ZhKK8P1cDl5riiedH+TY5L btWz+C3DA8PRptqB1K0FvkMZmB5Vu2a0URSt7qoB4bSoKfXLa0ux+d857KOLymFY ObNlq0DLWPy5qSDdU+tqmZZhhlNGGEwlvy86YQrFkOWf02oH9G/2qg651mKTVrxl OHBTWBzEyCchIpUHLVatRUCTjRgjFX8EQcbVu5Ym+VnQmAvKs561VwTaRN790K2g aTfV2tCgfGFBHzJnw1DxQJZW8ysjYaz4KvAkfD3prv23DkJidSU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:41 2025 by rpki-client