$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: KGv5f9hsd0Jtw60X0PFtxijJ/t4Si3wBlkrOZmFSaew= Subject key identifier: DF:BE:B3:52:C6:9D:E0:68:BE:89:D4:19:25:31:FA:29:AA:F0:2C:75 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 25E104B02906139AEADEDA5AAE4FE05342B3E4CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: FD Signing time: Sun 07 Sep 2025 19:51:54 +0000 Manifest this update: Sun 07 Sep 2025 19:46:54 +0000 Manifest next update: Thu 11 Sep 2025 04:56:54 +0000 Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) 2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: R4U3ouU/4QwAgoVWDuhKGBjJTXv35wbtvy77vhsuT2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 04:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e1:04:b0:29:06:13:9a:ea:de:da:5a:ae:4f:e0:53:42:b3:e4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Sep 7 19:46:54 2025 GMT Not After : Sep 11 04:56:54 2025 GMT Subject: CN=DFBEB352C69DE068BE89D4192531FA29AAF02C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:02:4f:5e:61:de:61:5f:3f:2d:f4:38:1c: 98:83:28:67:73:49:e0:86:aa:a4:03:07:22:0d:d8: 50:bf:50:f0:44:9d:a2:16:06:51:b6:f0:53:09:67: 14:e7:4b:18:1b:67:98:80:6c:9d:9c:45:41:a6:5f: 9c:44:86:54:cb:61:02:7e:03:5c:3b:85:08:38:5a: 80:6e:20:36:9e:58:99:66:01:7b:36:6a:19:e8:77: 25:3f:3c:98:1a:75:6a:08:3f:72:e7:1e:a3:6b:a5: 12:a5:98:81:30:64:7e:10:9f:9a:7b:b4:a1:50:22: e3:90:c9:22:af:0d:2c:18:e9:e7:91:3b:ec:ae:72: 05:7b:6e:c9:0b:b6:88:10:91:ef:e6:6d:ee:e5:ec: 42:54:6b:b7:79:97:eb:78:be:c2:01:ad:f7:06:d7: f0:e7:12:13:1a:26:b0:22:05:b9:3d:32:0c:cb:3b: e0:64:05:5b:50:3f:da:a9:54:09:df:1c:72:e9:f5: 9a:4e:ac:52:ca:fe:00:1c:3f:71:ba:2c:b9:d1:0a: 9e:08:2c:af:15:e0:e0:89:aa:6a:16:84:58:17:c3: d8:07:88:36:2c:ba:7d:81:f4:26:fe:c6:64:2b:42: da:fe:84:81:5e:aa:68:ce:af:96:5c:40:fd:40:f8: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:B3:52:C6:9D:E0:68:BE:89:D4:19:25:31:FA:29:AA:F0:2C:75 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:08:d8:0b:90:fb:55:9e:85:90:82:2d:7d:8b:2b:78:44:db: b1:62:91:50:80:c5:f3:ee:d1:9a:8c:a4:ad:53:9e:35:31:d5: fc:3b:05:6b:f3:56:ac:1f:38:c0:70:ec:4b:c5:b1:7c:24:9a: ec:c1:f0:8a:dd:12:26:2d:99:29:8d:ae:c8:cf:6e:9c:6f:c1: 99:84:34:88:37:cf:13:6f:34:b2:ed:c5:f5:0f:c4:3e:85:62: 3d:e3:49:42:30:26:c0:23:24:a6:c5:a8:bb:92:c2:c4:b8:4a: b0:62:ea:03:a9:1b:c6:df:1e:a0:c4:a4:aa:59:9c:e2:fe:f3: 19:15:e9:d9:15:a3:0e:26:77:6a:06:c3:0e:bb:8c:40:c2:e8: 06:75:c6:39:16:49:84:5b:67:e1:51:c9:5a:d4:89:b0:b0:ca: 52:82:36:a5:8c:87:14:17:12:fb:dd:7d:97:d0:92:04:70:30: 68:c4:03:4b:9b:48:bc:cc:73:60:03:2f:cf:38:8b:66:29:95: 94:25:b7:63:fc:56:0d:64:20:88:58:d3:e5:15:9e:da:90:9f: d2:49:be:7e:de:52:c8:28:6d:85:71:3f:f4:95:21:4a:e5:63: 1f:e9:25:44:a4:23:37:f1:1b:ce:a4:bd:a6:2f:a0:81:f2:36: 4e:fa:81:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeEEsCkGE5rq3tpark/gU0Kz5MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTA5MDcxOTQ2NTRaFw0yNTA5MTEwNDU2NTRaMDMxMTAvBgNV BAMTKERGQkVCMzUyQzY5REUwNjhCRTg5RDQxOTI1MzFGQTI5QUFGMDJDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/AJPXmHeYV8/LfQ4HJiDKGdz SeCGqqQDByIN2FC/UPBEnaIWBlG28FMJZxTnSxgbZ5iAbJ2cRUGmX5xEhlTLYQJ+ A1w7hQg4WoBuIDaeWJlmAXs2ahnodyU/PJgadWoIP3LnHqNrpRKlmIEwZH4Qn5p7 tKFQIuOQySKvDSwY6eeRO+yucgV7bskLtogQke/mbe7l7EJUa7d5l+t4vsIBrfcG 1/DnEhMaJrAiBbk9MgzLO+BkBVtQP9qpVAnfHHLp9ZpOrFLK/gAcP3G6LLnRCp4I LK8V4OCJqmoWhFgXw9gHiDYsun2B9Cb+xmQrQtr+hIFeqmjOr5ZcQP1A+HodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU376zUsad4Gi+idQZJTH6KarwLHUwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcI2AuQ+1WehZCCLX2LK3hE27FikVCAxfPu 0ZqMpK1TnjUx1fw7BWvzVqwfOMBw7EvFsXwkmuzB8IrdEiYtmSmNrsjPbpxvwZmE NIg3zxNvNLLtxfUPxD6FYj3jSUIwJsAjJKbFqLuSwsS4SrBi6gOpG8bfHqDEpKpZ nOL+8xkV6dkVow4md2oGww67jEDC6AZ1xjkWSYRbZ+FRyVrUibCwylKCNqWMhxQX EvvdfZfQkgRwMGjEA0ubSLzMc2ADL884i2YplZQlt2P8Vg1kIIhY0+UVntqQn9JJ vn7eUsgobYVxP/SVIUrlYx/pJUSkIzfxG86kvaYvoIHyNk76gSY= -----END CERTIFICATE-----Generated at Mon Sep 8 08:12:44 2025 by rpki-client