$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: AU+ykgR7g0w01VvSm8e8AboW/8Z6Q2Db3PxHilfFh20= Subject key identifier: 17:AB:B4:EA:BD:50:6D:1D:D8:2D:38:7F:1A:83:BF:A6:D9:F1:4D:2A Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 482C7D3B043E3A7FBAB5B014F9F95FE4E2946E81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 018E Signing time: Fri 08 Aug 2025 19:02:19 +0000 Manifest this update: Fri 08 Aug 2025 18:57:19 +0000 Manifest next update: Mon 11 Aug 2025 22:04:19 +0000 Files and hashes: 1: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: GbYKF8zaq9DSPCq6A1icx8nuWP6XXVwaSinJa7/sKSk=) 2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2c:7d:3b:04:3e:3a:7f:ba:b5:b0:14:f9:f9:5f:e4:e2:94:6e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Aug 8 18:57:19 2025 GMT Not After : Aug 11 22:04:19 2025 GMT Subject: CN=17ABB4EABD506D1DD82D387F1A83BFA6D9F14D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:3f:b4:b7:27:0e:32:e4:57:a5:3d:61:87: f2:4e:28:b0:96:c8:e4:ea:5d:b9:a6:d6:5b:30:82: 30:14:4d:1b:77:3e:01:58:44:91:cf:2d:89:69:ad: 3e:48:cc:59:ae:93:99:8c:ac:99:02:4a:c7:63:20: 73:b5:1a:f2:af:e7:94:03:fc:dd:df:26:73:9f:a8: de:f1:87:c7:0b:b3:7b:0a:a0:6d:da:ba:28:80:ef: dc:38:30:52:4b:c7:fd:26:41:be:d5:38:77:68:76: 2e:86:a9:8b:ea:13:66:bc:16:de:9a:83:81:53:d4: 33:61:f4:57:fa:10:5c:40:5f:72:6e:8a:92:d6:2c: 90:9b:b6:17:bc:d6:62:6c:68:58:5e:05:d5:b0:31: ea:6e:9d:2b:30:1a:ce:0b:a6:f8:cf:a8:da:dc:4c: ee:38:a3:08:9e:bc:21:63:cd:ea:86:9f:81:ce:12: a5:b9:30:2c:4c:3d:4e:d3:67:d0:d9:60:40:77:cb: 0e:16:ca:75:08:1d:a6:97:8e:3c:9c:88:ea:94:86: f4:7d:9e:dc:44:53:1f:0b:52:62:19:94:9d:4a:b0: b6:58:08:4c:b8:44:aa:24:e0:3e:6d:f6:df:33:26: c8:88:41:63:4a:c4:0d:00:b7:7f:b5:91:86:c4:72: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AB:B4:EA:BD:50:6D:1D:D8:2D:38:7F:1A:83:BF:A6:D9:F1:4D:2A X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f0:9f:c6:d4:fc:c0:6c:fe:ec:33:b4:70:b1:4e:63:e4:3e: 60:d0:95:bd:27:90:09:f4:92:2e:12:a3:99:30:ea:91:32:03: 01:df:93:b7:80:bd:8b:19:eb:43:97:40:f4:61:09:f7:f6:7f: a7:ab:5b:c2:b0:c2:c2:9e:c3:f4:9a:ab:c8:a8:dd:d9:8c:bc: 6e:5a:60:fb:51:27:0a:99:08:01:d6:65:f0:ff:33:e2:b4:31: 09:20:5f:fd:09:5f:b4:83:0a:3e:05:95:60:a5:a5:16:ca:9c: 65:b6:de:90:59:76:d9:fc:19:fb:b3:00:b5:5d:a9:a5:72:9d: c3:39:7e:d0:e0:a8:d4:39:b9:fc:37:41:06:a0:a8:67:d3:5a: b9:19:85:cd:db:d0:23:6a:45:b6:45:0c:78:e3:88:38:f9:cc: 8c:27:41:f3:42:09:d5:2d:e2:da:0e:e1:d1:5f:4a:49:11:ee: 8f:1b:34:94:b4:c8:ef:f7:43:59:4c:5c:a4:7b:23:54:df:a8: 62:0c:07:43:40:91:23:cf:bf:46:5d:ad:d7:19:81:59:b2:19: 58:4b:82:94:f0:e3:56:55:32:7f:d2:a4:1a:97:d8:25:df:77: 63:a1:5e:73:1b:85:04:dc:c3:c0:26:48:29:2e:27:2f:95:7e: b3:df:79:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCx9OwQ+On+6tbAU+flf5OKUboEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTA4MDgxODU3MTlaFw0yNTA4MTEyMjA0MTlaMDMxMTAvBgNV BAMTKDE3QUJCNEVBQkQ1MDZEMUREODJEMzg3RjFBODNCRkE2RDlGMTREMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVIz+0tycOMuRXpT1hh/JOKLCW yOTqXbmm1lswgjAUTRt3PgFYRJHPLYlprT5IzFmuk5mMrJkCSsdjIHO1GvKv55QD /N3fJnOfqN7xh8cLs3sKoG3auiiA79w4MFJLx/0mQb7VOHdodi6GqYvqE2a8Ft6a g4FT1DNh9Ff6EFxAX3JuipLWLJCbthe81mJsaFheBdWwMepunSswGs4LpvjPqNrc TO44owievCFjzeqGn4HOEqW5MCxMPU7TZ9DZYEB3yw4WynUIHaaXjjyciOqUhvR9 ntxEUx8LUmIZlJ1KsLZYCEy4RKok4D5t9t8zJsiIQWNKxA0At3+1kYbEcsEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6u06r1QbR3YLTh/GoO/ptnxTSowHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfwn8bU/MBs/uwztHCxTmPkPmDQlb0nkAn0 ki4So5kw6pEyAwHfk7eAvYsZ60OXQPRhCff2f6erW8KwwsKew/Saq8io3dmMvG5a YPtRJwqZCAHWZfD/M+K0MQkgX/0JX7SDCj4FlWClpRbKnGW23pBZdtn8GfuzALVd qaVyncM5ftDgqNQ5ufw3QQagqGfTWrkZhc3b0CNqRbZFDHjjiDj5zIwnQfNCCdUt 4toO4dFfSkkR7o8bNJS0yO/3Q1lMXKR7I1TfqGIMB0NAkSPPv0ZdrdcZgVmyGVhL gpTw41ZVMn/SpBqX2CXfd2OhXnMbhQTcw8AmSCkuJy+VfrPfees= -----END CERTIFICATE-----Generated at Sat Aug 9 22:42:45 2025 by rpki-client