$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: AyerpWNKJqr/oA+wgemm9MNQCFNRtjiSVcxtbo7z6Ss= Subject key identifier: 8E:D4:D4:CC:17:98:E3:E4:51:6A:E2:6D:89:52:9D:6E:4D:91:F7:9E Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 39E753B6DFEF6E58079644495FFA244A4DB9D567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 051D Signing time: Tue 04 Nov 2025 04:21:31 +0000 Manifest this update: Tue 04 Nov 2025 04:16:31 +0000 Manifest next update: Fri 07 Nov 2025 13:05:31 +0000 Files and hashes: 1: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=) 2: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: iL5AK+2qWFR+P70IWAkcF006uQWpoXfmL2pGueVOBOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e7:53:b6:df:ef:6e:58:07:96:44:49:5f:fa:24:4a:4d:b9:d5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Nov 4 04:16:31 2025 GMT Not After : Nov 7 13:05:31 2025 GMT Subject: CN=8ED4D4CC1798E3E4516AE26D89529D6E4D91F79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:d5:83:83:81:43:a5:dc:42:8d:aa:b6:2a: b1:32:fb:1c:69:89:c7:cc:d3:63:1b:c4:06:75:f1: 30:78:d4:b3:e1:d3:b4:0d:78:8a:13:51:70:88:16: 8b:9d:5e:7a:e6:c1:2b:e0:da:c6:84:60:f3:b9:ba: 22:a9:ad:59:b0:b4:16:5f:02:4e:fc:d4:9d:3a:55: 6b:1e:a6:5f:3d:79:a8:2f:b0:18:35:df:17:86:fb: fa:c2:90:65:3d:ce:9f:1a:47:62:5f:7b:8b:c1:4e: 2f:1e:d4:fe:8d:72:8a:32:76:f2:ca:6d:2c:0a:d0: f6:ec:20:2b:2b:c1:7d:d8:7c:e0:bd:cc:87:7a:3a: 43:18:bc:56:5e:4c:5d:c3:46:2c:58:11:62:11:b9: 84:a4:a4:31:9b:cd:2f:8a:52:39:76:2b:d6:0c:e2: f2:60:cb:5d:21:16:1d:3c:65:a2:d8:8a:bf:78:bb: d7:24:85:02:c8:fa:da:77:f8:95:17:58:b8:e7:51: 89:36:3e:52:54:fd:53:f3:cc:5c:38:e8:cf:ec:6f: c1:d9:24:23:c0:23:7b:3f:9b:0d:c6:6d:e2:59:be: 13:09:8e:82:5b:7f:3e:a5:55:fa:bc:14:2b:9c:63: 50:b4:ca:2a:4c:e5:ad:42:e5:07:33:7f:04:7d:cc: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:D4:CC:17:98:E3:E4:51:6A:E2:6D:89:52:9D:6E:4D:91:F7:9E X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ee:85:df:eb:51:78:39:f5:9f:c7:8b:f2:2c:a3:ef:a1:2c: 20:fd:26:33:9a:e0:13:b5:bf:86:d9:24:5b:cd:59:31:70:e7: d8:4a:57:21:92:28:e1:30:4b:7b:ed:0e:ae:ac:d4:d1:76:94: 95:00:8e:35:d5:a1:37:8b:67:88:70:d1:38:12:e7:b5:95:56: 13:fe:fa:db:25:72:c9:ea:7a:ba:95:ae:4b:7b:f5:6f:06:76: fa:5e:27:15:7d:06:2f:bc:1b:02:e4:8f:83:27:d5:aa:ac:c0: a0:f0:c4:59:21:26:ec:b4:81:86:c3:89:e0:b2:80:1c:bd:a8: e7:e1:3d:6a:3d:88:83:f3:8f:e9:8e:d8:48:5e:f1:0b:82:d6: e9:f1:b7:d6:2f:7c:16:8e:bd:ac:18:2d:b3:7b:33:94:73:94: 72:dc:09:64:8d:99:4f:51:dd:02:45:15:e9:a1:ce:9c:2d:07: 98:3d:bb:58:18:ed:80:88:40:8c:2d:c7:0e:b8:68:ba:31:4e: 5d:54:e1:e1:31:44:84:6d:bc:12:9e:98:ae:f2:09:54:61:cf: 50:82:ab:ff:4e:c8:d3:a5:82:c1:50:c0:9f:ad:57:8e:30:0f: 0b:a1:24:7c:93:5c:77:59:3f:6f:8f:a9:a6:79:db:42:5a:6f: 85:05:2c:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOedTtt/vblgHlkRJX/okSk251WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNTExMDQwNDE2MzFaFw0yNTExMDcxMzA1MzFaMDMxMTAvBgNV BAMTKDhFRDRENENDMTc5OEUzRTQ1MTZBRTI2RDg5NTI5RDZFNEQ5MUY3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJdWDg4FDpdxCjaq2KrEy+xxp icfM02MbxAZ18TB41LPh07QNeIoTUXCIFoudXnrmwSvg2saEYPO5uiKprVmwtBZf Ak781J06VWsepl89eagvsBg13xeG+/rCkGU9zp8aR2Jfe4vBTi8e1P6NcooydvLK bSwK0PbsICsrwX3YfOC9zId6OkMYvFZeTF3DRixYEWIRuYSkpDGbzS+KUjl2K9YM 4vJgy10hFh08ZaLYir94u9ckhQLI+tp3+JUXWLjnUYk2PlJU/VPzzFw46M/sb8HZ JCPAI3s/mw3GbeJZvhMJjoJbfz6lVfq8FCucY1C0yipM5a1C5QczfwR9zKm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjtTUzBeY4+RRauJtiVKdbk2R954wHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHruhd/rUXg59Z/Hi/Iso++hLCD9JjOa4BO1 v4bZJFvNWTFw59hKVyGSKOEwS3vtDq6s1NF2lJUAjjXVoTeLZ4hw0TgS57WVVhP+ +tslcsnqerqVrkt79W8GdvpeJxV9Bi+8GwLkj4Mn1aqswKDwxFkhJuy0gYbDieCy gBy9qOfhPWo9iIPzj+mO2Ehe8QuC1unxt9YvfBaOvawYLbN7M5RzlHLcCWSNmU9R 3QJFFemhzpwtB5g9u1gY7YCIQIwtxw64aLoxTl1U4eExRIRtvBKemK7yCVRhz1CC q/9OyNOlgsFQwJ+tV44wDwuhJHyTXHdZP2+PqaZ520Jab4UFLKs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:01 2025 by rpki-client