$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: 7561sERuJAIU5x61kPY7PG1HhTQBTve2FUiDikmWOoo= Subject key identifier: 91:0B:74:3A:83:2E:C4:67:9D:AE:47:85:06:59:C3:A2:D5:4C:14:FA Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 14F5F85E1749D78572FFA3E9F9FA6B2571954E29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 01D7 Signing time: Thu 04 Sep 2025 22:42:19 +0000 Manifest this update: Thu 04 Sep 2025 22:37:19 +0000 Manifest next update: Mon 08 Sep 2025 01:11:19 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: 54Vj/4Y496DwABcep6D5knRsMUTfAF6c8rwxGfMX2Ao=) 3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f5:f8:5e:17:49:d7:85:72:ff:a3:e9:f9:fa:6b:25:71:95:4e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Sep 4 22:37:19 2025 GMT Not After : Sep 8 01:11:19 2025 GMT Subject: CN=910B743A832EC4679DAE47850659C3A2D54C14FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:65:5f:07:cd:9d:3a:05:5a:5b:aa:d2:45: 82:0b:35:13:ec:e2:09:01:9a:f8:c2:3d:cb:fb:7f: f4:4b:d8:d8:fa:23:f1:3a:82:76:fb:5f:f1:1b:51: c5:fd:db:a2:48:fe:6c:30:7e:02:f3:e9:a5:25:a2: 05:41:d5:b6:4a:d8:df:eb:4c:67:cc:50:9f:68:06: 1d:bd:6b:85:47:8b:b6:10:81:e7:ed:d0:96:c0:01: 4f:b9:4b:66:61:83:70:48:ac:f1:33:a3:20:e0:e9: 86:3a:c6:e0:ba:a9:05:6a:e2:b3:03:e8:2b:07:c2: a0:64:0a:19:0d:b4:b1:ed:18:96:64:a0:b2:d2:78: 94:16:21:b8:96:ad:41:9a:b2:3d:2b:5d:2f:f6:9e: 56:cd:cc:f6:48:9a:d5:8d:a2:91:47:a5:ab:e9:6a: bb:fd:1a:a6:78:ec:ce:16:ac:2d:23:c4:cd:51:40: c8:ff:a5:cb:eb:ae:f1:1c:cb:c7:94:7d:e8:74:ec: 9e:2b:9d:31:18:12:72:38:2e:31:44:44:2a:57:e8: d4:a8:1f:04:60:97:d4:13:c6:90:79:a8:15:ce:bc: b6:f9:90:74:52:5b:e0:1e:6b:98:73:7e:d0:69:ea: 55:fa:aa:41:6d:51:c5:1a:6b:2f:26:3b:b4:c1:dc: 1d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0B:74:3A:83:2E:C4:67:9D:AE:47:85:06:59:C3:A2:D5:4C:14:FA X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f4:d7:79:a1:dc:18:91:02:50:31:e5:4b:2f:e7:ef:63:f3: d8:25:ad:0b:53:08:10:4b:53:59:dc:b4:03:85:a6:39:cf:2b: d7:f8:dc:1a:6e:06:9b:05:46:f1:34:bc:47:26:1c:76:f4:e1: 0a:38:45:03:83:04:8c:3e:9f:c7:4f:bb:9a:03:e3:7d:39:46: d4:6a:35:ae:21:b9:90:2d:b3:3e:cd:45:69:ee:fc:c6:2f:b0: 8d:5b:11:15:eb:c7:30:70:58:97:26:37:35:e3:45:f4:47:b0: 95:b4:37:d7:33:30:c3:f5:a2:58:3b:0f:d5:58:30:a8:5a:e7: 2e:a5:80:f4:e1:ab:1b:b2:3e:ce:f4:2d:cc:24:0c:34:e9:95: 17:f9:04:0d:1e:27:cf:82:f2:59:de:24:19:fa:71:70:b9:c4: 39:cc:af:58:49:6a:55:e0:70:c3:95:1b:7f:09:12:7b:9e:d9: ac:06:f3:1b:8d:46:80:30:84:89:5d:bb:aa:bd:fe:66:d2:b9: 57:bd:24:1a:48:5b:ca:aa:2c:df:d6:cc:6e:70:70:3c:39:39: b6:d0:f9:3c:6c:69:cf:07:0e:7b:39:4b:5c:8b:48:62:4a:01: 30:15:29:80:26:7d:cb:de:df:de:55:95:87:cb:8e:4a:e9:fe: 78:b5:45:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPX4XhdJ14Vy/6Pp+fprJXGVTikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTA5MDQyMjM3MTlaFw0yNTA5MDgwMTExMTlaMDMxMTAvBgNV BAMTKDkxMEI3NDNBODMyRUM0Njc5REFFNDc4NTA2NTlDM0EyRDU0QzE0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6WVfB82dOgVaW6rSRYILNRPs 4gkBmvjCPcv7f/RL2Nj6I/E6gnb7X/EbUcX926JI/mwwfgLz6aUlogVB1bZK2N/r TGfMUJ9oBh29a4VHi7YQgeft0JbAAU+5S2Zhg3BIrPEzoyDg6YY6xuC6qQVq4rMD 6CsHwqBkChkNtLHtGJZkoLLSeJQWIbiWrUGasj0rXS/2nlbNzPZImtWNopFHpavp arv9GqZ47M4WrC0jxM1RQMj/pcvrrvEcy8eUfeh07J4rnTEYEnI4LjFERCpX6NSo HwRgl9QTxpB5qBXOvLb5kHRSW+Aea5hzftBp6lX6qkFtUcUaay8mO7TB3B2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkQt0OoMuxGedrkeFBlnDotVMFPowHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3013mh3BiRAlAx5Usv5+9j89glrQtTCBBL U1nctAOFpjnPK9f43BpuBpsFRvE0vEcmHHb04Qo4RQODBIw+n8dPu5oD4305RtRq Na4huZAtsz7NRWnu/MYvsI1bERXrxzBwWJcmNzXjRfRHsJW0N9czMMP1olg7D9VY MKha5y6lgPThqxuyPs70LcwkDDTplRf5BA0eJ8+C8lneJBn6cXC5xDnMr1hJalXg cMOVG38JEnue2awG8xuNRoAwhIldu6q9/mbSuVe9JBpIW8qqLN/WzG5wcDw5ObbQ +Txsac8HDns5S1yLSGJKATAVKYAmfcve395VlYfLjkrp/ni1RQU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:20 2025 by rpki-client