$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: V7Seco3DxA3v8K7TX25OtyLO1OpwE9jP6FT45CqFjgs= Subject key identifier: 5A:58:10:78:5B:EB:2A:21:21:03:59:39:90:E0:11:F5:BE:27:E7:E7 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 4CA837AF2072C9A3D09226FB67FD6F42D7AFD1EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: EF Signing time: Thu 07 Aug 2025 08:41:52 +0000 Manifest this update: Thu 07 Aug 2025 08:36:52 +0000 Manifest next update: Sun 10 Aug 2025 12:43:52 +0000 Files and hashes: 1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: mvvHjGxl9kyjfjBZwyqvzUWiftt0On6aR8GH5MxNEjs=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 12:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a8:37:af:20:72:c9:a3:d0:92:26:fb:67:fd:6f:42:d7:af:d1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Aug 7 08:36:52 2025 GMT Not After : Aug 10 12:43:52 2025 GMT Subject: CN=5A5810785BEB2A212103593990E011F5BE27E7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:cb:8b:46:dd:ca:da:f3:81:97:d0:98:51: e4:84:ab:8a:d0:25:1c:c2:8f:2d:2a:2a:fa:a5:2c: af:58:75:08:08:a8:5f:b9:0b:c2:76:7e:fc:63:67: 85:e1:10:57:42:cd:9a:ba:3c:04:7f:ea:fe:6f:b4: 2a:a2:3e:63:f4:72:45:a3:af:75:77:7f:b8:dd:bf: 6a:a4:16:e2:b3:ce:21:f2:5e:9e:83:b0:c5:ba:49: 64:1f:09:96:64:99:6b:54:64:55:b6:ab:dd:63:c9: b9:ee:5c:41:ca:7c:9f:28:f2:66:b8:8d:01:95:5e: b2:67:33:b9:82:3d:17:d4:d0:98:f2:90:b3:8b:cd: d5:eb:f0:b5:74:3f:4e:92:39:bc:54:5f:4e:64:52: 15:e9:45:33:50:02:23:5b:2a:99:23:f7:02:a0:0d: 68:2c:54:d7:8a:a6:60:12:35:70:e0:30:bc:03:49: 33:0c:0e:24:7e:ab:81:f3:55:6c:fe:09:d6:3f:e8: 12:c4:a0:d5:e0:18:8a:2a:91:1f:3b:4e:be:4e:5a: 29:d1:06:06:0a:63:d3:e8:11:67:df:e1:d9:2f:24: 7e:3a:e1:42:fc:8b:a4:9c:8e:7f:59:ec:0a:f2:d5: 56:d7:11:c4:cd:23:6c:c2:94:8b:59:7c:43:4a:82: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:58:10:78:5B:EB:2A:21:21:03:59:39:90:E0:11:F5:BE:27:E7:E7 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:fa:09:a4:6d:d0:34:4a:ff:70:cf:18:2d:dd:8c:b7:50:c0: 24:c4:8d:2b:1c:31:fe:64:e7:d9:29:a8:4e:92:95:09:26:19: 23:4c:ba:00:40:7a:be:10:90:c5:7f:0b:d3:1b:83:4a:6a:a9: 5c:06:a4:ad:10:ad:5c:59:7f:2c:15:7d:1a:47:d8:32:3c:e4: b4:44:45:b4:6c:f8:aa:f2:18:96:f0:b7:3d:2c:3b:b9:31:7e: 90:07:cc:5e:85:4d:f3:a2:06:f9:c1:91:ba:46:6f:d7:0a:75: a1:62:d7:8a:36:86:24:ad:56:5d:5b:2a:7a:47:9b:ed:9a:63: d7:99:b8:2e:d7:79:e4:8f:11:4d:b0:76:4d:83:42:ba:dc:d6: 97:d9:d6:eb:33:a8:9e:db:57:ec:1d:67:2d:45:0f:98:02:da: 1d:9d:1f:ad:f0:88:32:b4:45:d2:f6:8f:6f:b8:96:6c:22:0b: 5c:e3:e7:17:c5:65:79:f3:a0:c0:63:d2:5f:7e:2f:65:f7:f8: 77:18:93:d9:39:4d:c7:0c:1c:81:e1:0c:22:1f:b7:65:ca:ec: 95:09:82:6f:0b:f6:71:6d:39:9a:70:a9:e0:bf:0f:c5:bb:d0: a7:b1:7b:a5:12:d6:2b:20:f7:00:d6:1d:d7:91:53:67:47:5f: 40:a6:0d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKg3ryByyaPQkib7Z/1vQtev0ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTA4MDcwODM2NTJaFw0yNTA4MTAxMjQzNTJaMDMxMTAvBgNV BAMTKDVBNTgxMDc4NUJFQjJBMjEyMTAzNTkzOTkwRTAxMUY1QkUyN0U3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQw8uLRt3K2vOBl9CYUeSEq4rQ JRzCjy0qKvqlLK9YdQgIqF+5C8J2fvxjZ4XhEFdCzZq6PAR/6v5vtCqiPmP0ckWj r3V3f7jdv2qkFuKzziHyXp6DsMW6SWQfCZZkmWtUZFW2q91jybnuXEHKfJ8o8ma4 jQGVXrJnM7mCPRfU0JjykLOLzdXr8LV0P06SObxUX05kUhXpRTNQAiNbKpkj9wKg DWgsVNeKpmASNXDgMLwDSTMMDiR+q4HzVWz+CdY/6BLEoNXgGIoqkR87Tr5OWinR BgYKY9PoEWff4dkvJH464UL8i6Scjn9Z7Ary1VbXEcTNI2zClItZfENKgrM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWlgQeFvrKiEhA1k5kOAR9b4n5+cwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALf6CaRt0DRK/3DPGC3djLdQwCTEjSscMf5k 59kpqE6SlQkmGSNMugBAer4QkMV/C9Mbg0pqqVwGpK0QrVxZfywVfRpH2DI85LRE RbRs+KryGJbwtz0sO7kxfpAHzF6FTfOiBvnBkbpGb9cKdaFi14o2hiStVl1bKnpH m+2aY9eZuC7XeeSPEU2wdk2DQrrc1pfZ1uszqJ7bV+wdZy1FD5gC2h2dH63wiDK0 RdL2j2+4lmwiC1zj5xfFZXnzoMBj0l9+L2X3+HcYk9k5TccMHIHhDCIft2XK7JUJ gm8L9nFtOZpwqeC/D8W70Kexe6US1isg9wDWHdeRU2dHX0CmDVU= -----END CERTIFICATE-----Generated at Fri Aug 8 19:25:15 2025 by rpki-client