$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: KeHI8M79/p2Q5WASjueh22DxEVqhXw44x3fzxw3wA7k= Subject key identifier: A4:95:FF:A2:6D:E5:E0:E2:D0:96:C3:5D:39:FA:87:83:DB:E6:89:26 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 264DB40F2880492FA2D3067E867E58314FB4688A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: E7 Signing time: Sun 20 Jul 2025 20:31:59 +0000 Manifest this update: Sun 20 Jul 2025 20:26:59 +0000 Manifest next update: Thu 24 Jul 2025 01:11:59 +0000 Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) 2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: nqHHqiDuoUJWzHsSAl0kQvEi4Ikq2NzaRkwUExmPA34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4d:b4:0f:28:80:49:2f:a2:d3:06:7e:86:7e:58:31:4f:b4:68:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Jul 20 20:26:59 2025 GMT Not After : Jul 24 01:11:59 2025 GMT Subject: CN=A495FFA26DE5E0E2D096C35D39FA8783DBE68926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:5a:cf:e1:dd:24:66:86:c7:e3:b8:d7:8f: 0a:d8:83:12:3e:11:19:52:a2:6c:b7:af:79:49:0d: 53:18:3b:64:a6:75:be:9e:c8:fe:62:ab:ea:02:01: 56:f7:9f:57:28:53:ac:1b:8f:8e:9e:d3:36:a3:f9: 9d:f6:3e:35:74:f7:e9:b1:17:57:27:c7:19:81:c8: ec:f0:ff:3a:fb:ff:7f:52:1b:29:6d:7e:aa:09:ac: 2d:bb:ef:3a:95:46:18:5d:ad:88:99:49:ea:52:2e: 79:8d:2a:bf:73:c1:61:e0:55:94:57:d9:60:88:68: f6:95:98:26:b3:d0:6b:78:d8:06:cf:f0:44:79:3c: 8f:88:1a:8a:fa:5d:59:e5:ba:6f:d8:8e:56:46:91: 22:bb:4d:08:77:e3:f1:b4:e1:09:cc:44:92:fc:7e: 9c:f9:2f:67:20:f1:2a:31:f3:49:f4:d7:17:39:66: 49:b1:4d:09:dd:f4:75:36:27:0b:4c:05:64:9b:b0: 63:70:97:2c:9d:18:b0:4d:62:93:45:8c:f0:e7:ff: 89:ce:49:ab:f5:82:e6:d9:ea:0d:cd:b1:66:75:95: d9:c1:73:03:c4:d7:56:29:34:ca:18:96:09:a5:2a: b6:da:04:cc:6d:75:b3:24:42:12:33:92:a4:f1:79: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:FF:A2:6D:E5:E0:E2:D0:96:C3:5D:39:FA:87:83:DB:E6:89:26 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:43:35:fe:d9:dd:55:ea:5d:ce:06:81:16:c5:90:87:e4:36: f5:51:cc:73:04:f3:00:9a:88:83:a3:53:e5:8a:93:18:17:c1: 36:32:09:ba:83:5b:76:28:63:dc:8a:09:e0:e4:ea:ce:b2:3c: 53:5a:6d:a2:a1:d4:ec:8f:39:d2:7a:bc:02:89:4b:dd:a3:77: d2:7e:7f:d9:82:58:6a:28:a5:fb:54:aa:6a:04:8f:00:e7:bc: e1:fd:99:dd:08:85:6f:10:8c:55:49:b0:e0:41:50:f5:70:2e: 3e:b6:39:1a:17:fa:1b:62:34:ef:c4:7a:2c:22:13:a3:94:59: 53:00:af:b2:a1:e2:cc:fe:e4:57:4e:26:7f:7a:3d:15:8e:c7: e7:a2:d7:e4:cf:6e:f3:8c:68:0b:6f:9f:fe:b1:23:28:e4:d2: db:53:83:1f:83:7c:c9:a1:cf:3d:29:f3:27:72:26:47:b9:7d: 89:e3:5a:6f:a6:b1:73:a8:5f:6f:29:6b:93:ec:5f:8d:b3:9e: 97:aa:a6:dd:5c:ec:6d:05:69:92:08:2f:c4:80:b1:1b:c5:81: 5a:aa:f2:f7:1b:01:01:57:a2:bc:49:2e:7f:6d:6e:69:d3:21: e9:50:0e:2e:12:1b:d3:85:48:87:8a:18:a2:22:f2:63:78:c7: 1b:75:b4:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJk20DyiASS+i0wZ+hn5YMU+0aIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTA3MjAyMDI2NTlaFw0yNTA3MjQwMTExNTlaMDMxMTAvBgNV BAMTKEE0OTVGRkEyNkRFNUUwRTJEMDk2QzM1RDM5RkE4NzgzREJFNjg5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0lrP4d0kZobH47jXjwrYgxI+ ERlSomy3r3lJDVMYO2Smdb6eyP5iq+oCAVb3n1coU6wbj46e0zaj+Z32PjV09+mx F1cnxxmByOzw/zr7/39SGyltfqoJrC277zqVRhhdrYiZSepSLnmNKr9zwWHgVZRX 2WCIaPaVmCaz0Gt42AbP8ER5PI+IGor6XVnlum/YjlZGkSK7TQh34/G04QnMRJL8 fpz5L2cg8Sox80n01xc5ZkmxTQnd9HU2JwtMBWSbsGNwlyydGLBNYpNFjPDn/4nO Sav1gubZ6g3NsWZ1ldnBcwPE11YpNMoYlgmlKrbaBMxtdbMkQhIzkqTxeWf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJX/om3l4OLQlsNdOfqHg9vmiSYwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRDNf7Z3VXqXc4GgRbFkIfkNvVRzHME8wCa iIOjU+WKkxgXwTYyCbqDW3YoY9yKCeDk6s6yPFNabaKh1OyPOdJ6vAKJS92jd9J+ f9mCWGoopftUqmoEjwDnvOH9md0IhW8QjFVJsOBBUPVwLj62ORoX+htiNO/Eeiwi E6OUWVMAr7Kh4sz+5FdOJn96PRWOx+ei1+TPbvOMaAtvn/6xIyjk0ttTgx+DfMmh zz0p8ydyJke5fYnjWm+msXOoX28pa5PsX42znpeqpt1c7G0FaZIIL8SAsRvFgVqq 8vcbAQFXorxJLn9tbmnTIelQDi4SG9OFSIeKGKIi8mN4xxt1tA4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:33:30 2025 by rpki-client