$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: oQw4B/IZye1cw58h1ubM780aJpNq1B17gb6SX4RF1HQ= Subject key identifier: 13:41:EB:4D:EF:55:62:FC:42:6C:72:70:83:1F:AD:E3:B8:1C:11:2A Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 02A816395D5847933F3C4DDE4C9C649585126EAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 0204 Signing time: Sat 06 Sep 2025 21:20:39 +0000 Manifest this update: Sat 06 Sep 2025 21:15:39 +0000 Manifest next update: Wed 10 Sep 2025 04:55:39 +0000 Files and hashes: 1: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: 4wdn7RPRr2qQoolaFqqAc3x3k5deb3cCxzMxLlRusCA=) 2: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 3: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a8:16:39:5d:58:47:93:3f:3c:4d:de:4c:9c:64:95:85:12:6e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Sep 6 21:15:39 2025 GMT Not After : Sep 10 04:55:39 2025 GMT Subject: CN=1341EB4DEF5562FC426C7270831FADE3B81C112A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:38:1b:5b:49:3e:09:a9:5a:74:c1:1b:96: 54:d2:23:7d:4c:6f:bb:1b:7b:43:9d:de:1a:46:a9: 56:13:38:3c:cc:5e:f2:02:2d:34:1b:3e:be:b5:33: af:05:6c:a7:aa:00:fe:46:ed:9d:66:da:f7:98:75: ce:70:d4:d1:fc:c5:12:2b:3e:90:09:40:9a:a3:c6: 1b:62:7c:c9:27:c7:5d:c5:70:c0:8d:a5:3b:da:d9: 58:4c:49:df:c3:b8:1b:61:73:f8:cf:36:0f:27:7a: 65:d3:2d:3b:2e:99:58:1b:26:8c:c3:61:19:60:71: 14:38:8f:fb:a7:7f:fe:d1:5e:49:52:e0:13:78:2a: c9:db:61:4c:36:5d:63:d4:c8:17:19:e9:96:f0:ef: 4e:d0:99:78:df:a6:28:80:dd:a2:7d:db:2b:fa:d1: df:64:49:da:a9:59:2c:fe:85:f7:36:a7:af:b0:9d: 2c:96:c4:5f:2a:c6:51:d6:ab:63:77:69:97:52:c6: 01:6f:bd:4d:ea:a7:6b:9c:89:be:df:85:07:83:10: 7a:64:19:de:03:6a:d2:e6:d9:d1:d4:76:b8:94:82: f1:c8:10:3b:df:83:41:e4:6d:b4:de:a4:bc:85:58: b0:78:26:98:2c:3e:72:32:0d:ea:fb:9e:17:9a:00: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:41:EB:4D:EF:55:62:FC:42:6C:72:70:83:1F:AD:E3:B8:1C:11:2A X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:30:24:61:5f:51:13:b3:c9:a4:d3:6a:c8:8e:da:f4:89:d2: 82:f9:0f:ef:59:20:9c:3d:f5:99:66:6c:64:ff:f3:8d:f0:d1: 8a:e6:74:4b:c9:f6:4e:fc:84:58:b6:5b:77:15:40:65:83:2e: ea:09:13:a0:73:3b:50:28:dd:42:94:e2:c5:9d:71:8e:41:5f: 64:4c:03:c3:27:b3:63:45:ff:8b:7a:48:e8:fb:a6:4b:e2:35: f5:b7:f4:c0:b3:fd:32:2d:b1:29:79:cf:e4:65:76:b2:67:8c: 36:78:88:21:91:06:d2:d7:d2:e3:ac:17:58:1c:10:c6:33:3f: 4d:48:4a:32:2a:3e:dc:21:3e:54:fc:a4:4e:b2:95:12:4d:be: 99:9d:5b:62:07:15:42:03:b3:a1:95:f6:a5:6a:3b:05:06:83: 7c:fa:59:b0:d2:1c:69:f4:f2:a6:1b:21:d2:b0:fe:d2:f6:44: 3c:26:5a:bf:54:30:5e:bd:ec:33:b4:2e:28:8d:02:75:d3:8b: 19:94:c8:81:a3:b8:be:c1:16:aa:d1:a8:14:59:86:cc:e3:72: 30:01:d2:d2:e2:1c:2c:83:05:88:88:75:f2:cd:50:b7:e9:bb: 49:48:c0:be:1e:18:be:e5:54:45:a1:bb:eb:5f:47:b7:5e:73: bc:08:3f:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqgWOV1YR5M/PE3eTJxklYUSbqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTA5MDYyMTE1MzlaFw0yNTA5MTAwNDU1MzlaMDMxMTAvBgNV BAMTKDEzNDFFQjRERUY1NTYyRkM0MjZDNzI3MDgzMUZBREUzQjgxQzExMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOTgbW0k+CaladMEbllTSI31M b7sbe0Od3hpGqVYTODzMXvICLTQbPr61M68FbKeqAP5G7Z1m2veYdc5w1NH8xRIr PpAJQJqjxhtifMknx13FcMCNpTva2VhMSd/DuBthc/jPNg8nemXTLTsumVgbJozD YRlgcRQ4j/unf/7RXklS4BN4KsnbYUw2XWPUyBcZ6Zbw707QmXjfpiiA3aJ92yv6 0d9kSdqpWSz+hfc2p6+wnSyWxF8qxlHWq2N3aZdSxgFvvU3qp2ucib7fhQeDEHpk Gd4DatLm2dHUdriUgvHIEDvfg0HkbbTepLyFWLB4JpgsPnIyDer7nheaANzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0HrTe9VYvxCbHJwgx+t47gcESowHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcwJGFfUROzyaTTasiO2vSJ0oL5D+9ZIJw9 9ZlmbGT/843w0YrmdEvJ9k78hFi2W3cVQGWDLuoJE6BzO1Ao3UKU4sWdcY5BX2RM A8Mns2NF/4t6SOj7pkviNfW39MCz/TItsSl5z+RldrJnjDZ4iCGRBtLX0uOsF1gc EMYzP01ISjIqPtwhPlT8pE6ylRJNvpmdW2IHFUIDs6GV9qVqOwUGg3z6WbDSHGn0 8qYbIdKw/tL2RDwmWr9UMF697DO0LiiNAnXTixmUyIGjuL7BFqrRqBRZhszjcjAB 0tLiHCyDBYiIdfLNULfpu0lIwL4eGL7lVEWhu+tfR7dec7wIP1w= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:10 2025 by rpki-client