$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: beUQnCS7LRBtiiqeSPA4ni2v+B72DwXRTLQqXDZxkFo= Subject key identifier: 0D:09:4B:24:3A:04:CE:38:A9:CF:6F:B1:80:F0:E6:07:86:F5:2E:23 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 0D218AB0648438818E14CAC36C1517A78D28C781 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 0205 Signing time: Sat 06 Sep 2025 21:20:50 +0000 Manifest this update: Sat 06 Sep 2025 21:15:50 +0000 Manifest next update: Tue 09 Sep 2025 23:38:50 +0000 Files and hashes: 1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) 2: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: YsXLIUJZEFd9edQIC4lAs2eKL1N+Zj60sGkkroHg5Kw=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:21:8a:b0:64:84:38:81:8e:14:ca:c3:6c:15:17:a7:8d:28:c7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Sep 6 21:15:50 2025 GMT Not After : Sep 9 23:38:50 2025 GMT Subject: CN=0D094B243A04CE38A9CF6FB180F0E60786F52E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:ac:e0:04:4c:81:f0:bf:93:60:b8:85:3b: d0:e5:1e:15:ec:22:1d:d9:77:fd:fe:6d:aa:2e:a6: 4c:3f:7a:e4:db:ec:d4:7a:80:90:38:01:0d:0c:6b: df:50:23:b0:09:c2:62:a6:d7:7a:6c:49:c5:0a:72: 9e:bc:c7:44:69:cb:39:df:39:76:da:2a:1e:8f:11: ca:ad:7c:b1:20:c9:71:87:47:bb:80:9a:36:81:e7: 51:27:c4:44:5e:e8:b3:fd:4a:de:9f:a7:8b:62:5f: 97:8b:80:95:cb:c6:e7:ae:3c:58:40:6f:8d:71:f4: 1f:ab:f3:12:9a:7d:13:04:c5:99:05:d5:ab:b0:ef: ca:6e:89:88:12:f3:35:ea:1c:c5:25:20:3e:c5:61: 31:d8:86:69:ac:ff:3e:16:44:b3:22:03:41:68:8b: 82:3c:26:9a:74:ce:37:45:73:3e:c9:9c:bb:e9:51: 3d:9d:62:80:cf:4f:b6:b7:b5:8e:e0:f3:ca:17:f0: 46:ad:bd:d8:c5:fa:d0:06:72:86:f1:0c:5c:75:ed: 04:7b:fc:0f:be:82:ba:c4:1c:e4:56:67:7b:a3:28: ac:c5:df:91:de:7d:96:b7:cf:82:ba:4e:62:50:ac: 47:57:89:95:e0:6c:c4:d7:5f:b9:c2:42:67:fa:e6: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:09:4B:24:3A:04:CE:38:A9:CF:6F:B1:80:F0:E6:07:86:F5:2E:23 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:2a:27:09:eb:9d:9d:e9:c8:0d:01:73:db:42:a9:04:ff:a3: 3c:ed:f1:20:b1:47:22:fc:a6:13:b6:2b:99:e3:a6:6d:b2:81: 5a:3b:aa:c1:ab:18:34:08:f7:7b:bf:ce:22:df:d7:5a:8a:a1: 7a:3c:fe:43:6d:12:1a:32:32:3d:57:15:14:9d:aa:91:d8:41: 32:7a:e9:3a:a7:3f:08:22:7b:c5:ae:10:bb:6c:7d:57:88:07: 96:40:48:f3:07:72:cf:54:66:b3:0c:54:52:01:a5:2c:ff:2a: 3f:c2:95:18:8f:dc:62:2e:e6:0f:2d:6f:a5:2b:19:03:1d:04: 33:e5:51:33:f0:7a:7f:7d:0b:a7:14:3b:8a:ba:75:df:ec:fe: b0:b8:89:65:d5:4c:f8:04:c6:13:cd:87:4e:02:21:f9:a3:88: 0a:9b:6e:00:b8:7d:49:17:d9:d8:82:5b:72:28:5e:ac:ef:aa: b6:b7:36:31:20:21:c9:23:eb:47:1c:a6:68:8c:e5:bd:af:da: d5:6a:9f:85:68:a4:06:b8:5b:ec:97:e2:42:b0:5a:bd:16:2d: e0:6a:38:41:4d:f1:f0:ca:8e:18:34:6a:7a:79:4a:5f:f3:3e: 49:c9:d2:23:6e:e0:11:07:c9:8d:84:06:00:d6:f8:83:a4:cf: 4c:29:7b:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSGKsGSEOIGOFMrDbBUXp40ox4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTA5MDYyMTE1NTBaFw0yNTA5MDkyMzM4NTBaMDMxMTAvBgNV BAMTKDBEMDk0QjI0M0EwNENFMzhBOUNGNkZCMTgwRjBFNjA3ODZGNTJFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyKzgBEyB8L+TYLiFO9DlHhXs Ih3Zd/3+baoupkw/euTb7NR6gJA4AQ0Ma99QI7AJwmKm13psScUKcp68x0Rpyznf OXbaKh6PEcqtfLEgyXGHR7uAmjaB51EnxERe6LP9St6fp4tiX5eLgJXLxueuPFhA b41x9B+r8xKafRMExZkF1auw78puiYgS8zXqHMUlID7FYTHYhmms/z4WRLMiA0Fo i4I8Jpp0zjdFcz7JnLvpUT2dYoDPT7a3tY7g88oX8EatvdjF+tAGcobxDFx17QR7 /A++grrEHORWZ3ujKKzF35HefZa3z4K6TmJQrEdXiZXgbMTXX7nCQmf65iwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQlLJDoEzjipz2+xgPDmB4b1LiMwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcqJwnrnZ3pyA0Bc9tCqQT/ozzt8SCxRyL8 phO2K5njpm2ygVo7qsGrGDQI93u/ziLf11qKoXo8/kNtEhoyMj1XFRSdqpHYQTJ6 6TqnPwgie8WuELtsfVeIB5ZASPMHcs9UZrMMVFIBpSz/Kj/ClRiP3GIu5g8tb6Ur GQMdBDPlUTPwen99C6cUO4q6dd/s/rC4iWXVTPgExhPNh04CIfmjiAqbbgC4fUkX 2diCW3IoXqzvqra3NjEgIckj60ccpmiM5b2v2tVqn4VopAa4W+yX4kKwWr0WLeBq OEFN8fDKjhg0anp5Sl/zPknJ0iNu4BEHyY2EBgDW+IOkz0wpezo= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:58 2025 by rpki-client