$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: 9ZrmgkgsbUg+sfjmVBjBZOeGJxpMbH0sE+pTTNTjHZE= Subject key identifier: 49:62:67:CC:DF:7B:98:44:75:80:65:81:AE:E5:EB:13:22:46:3A:C8 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 0CA29C666382742DA766D74EE9539E725B4FB9D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 01F7 Signing time: Wed 06 Aug 2025 09:10:51 +0000 Manifest this update: Wed 06 Aug 2025 09:05:51 +0000 Manifest next update: Sat 09 Aug 2025 12:05:51 +0000 Files and hashes: 1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) 2: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: bKV19Hww5MhgcblRiyjM48wELrmKHm5IRrX+M0vl9sM=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a2:9c:66:63:82:74:2d:a7:66:d7:4e:e9:53:9e:72:5b:4f:b9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Aug 6 09:05:51 2025 GMT Not After : Aug 9 12:05:51 2025 GMT Subject: CN=496267CCDF7B984475806581AEE5EB1322463AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:ce:b1:07:8a:2a:28:01:78:b0:47:4e:19: 6a:cc:f7:a0:42:c8:6a:9d:f4:bc:d4:f7:de:39:4c: 2a:42:43:61:4c:5b:67:93:3b:36:7b:0e:97:89:2f: 3f:b2:f8:2e:cf:6c:b7:12:64:35:1d:62:62:f3:48: 03:07:04:73:93:5a:2d:15:a2:2f:ce:bf:73:b4:be: 52:91:db:0d:95:a5:16:b3:61:b4:bc:04:06:30:d0: 86:09:e6:9e:9d:25:bf:0d:0b:5a:64:6d:9c:77:21: 13:f3:59:a3:ee:9d:29:c2:19:8a:cc:77:80:b1:46: 34:36:1f:e5:0c:11:57:e8:e4:ae:13:ac:e5:18:e3: 0d:ce:7f:80:3c:b6:fc:31:2c:cf:5f:99:41:c9:99: 1a:64:62:21:71:aa:71:9c:44:64:94:f1:1b:a3:88: 52:36:1b:fc:42:ec:bf:ee:25:37:46:b8:ea:36:2b: 18:b0:a6:49:91:49:2a:ff:84:be:02:49:d7:95:88: 47:f8:f6:c9:d0:d9:44:57:28:de:77:4f:c9:a4:6b: d5:9b:2c:a0:fe:5d:53:bb:9f:f5:4d:46:5b:fb:16: a9:6e:56:69:ec:66:e8:30:56:ec:24:4b:7d:16:b7: 96:07:31:9b:af:9c:88:33:c6:5d:5e:39:ee:88:8a: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:62:67:CC:DF:7B:98:44:75:80:65:81:AE:E5:EB:13:22:46:3A:C8 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c1:81:bc:32:c4:51:d1:0b:13:9d:12:6e:74:bd:b6:8b:bc: 65:91:4f:51:78:1c:7d:13:43:15:e1:b6:12:36:25:75:5d:ef: 42:c3:1c:bc:e6:58:f9:43:d6:74:52:63:fd:6e:5e:39:2f:ad: c6:6b:cb:97:fd:e5:68:b6:11:0e:a2:24:dd:fd:93:9e:c2:da: d8:68:c4:99:86:37:56:26:ed:85:1f:5e:ad:6c:25:ff:f3:a3: ad:bc:5d:d5:e1:24:d3:2b:4c:0b:c8:be:6c:e0:99:47:0d:bb: 0e:11:5c:79:e6:da:1a:39:b1:f8:c8:33:4b:6b:4e:3e:30:fa: 19:41:99:b9:a7:71:45:16:42:db:5c:04:e4:35:fe:bb:c2:f5: 74:9c:19:85:bc:31:b8:4d:1a:66:f6:fc:ae:8d:24:d3:a9:6e: 57:a3:fa:5b:a4:0c:89:d8:9b:e9:68:fd:b8:71:a1:8f:a6:56: a3:8b:40:79:0a:20:94:8a:29:b0:9d:a8:97:90:49:ff:df:b2: 2d:94:7f:d6:be:07:2f:77:92:a1:bf:fc:7f:0d:2a:4f:86:a3: d2:8d:ba:7d:59:e4:6d:7f:f6:d9:3c:bc:40:28:dd:bb:0d:9d: ab:08:da:a8:96:10:d2:1d:db:bf:94:1a:40:ab:5d:e0:f7:1c: 59:00:9c:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKKcZmOCdC2nZtdO6VOecltPudQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTA4MDYwOTA1NTFaFw0yNTA4MDkxMjA1NTFaMDMxMTAvBgNV BAMTKDQ5NjI2N0NDREY3Qjk4NDQ3NTgwNjU4MUFFRTVFQjEzMjI0NjNBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDs6xB4oqKAF4sEdOGWrM96BC yGqd9LzU9945TCpCQ2FMW2eTOzZ7DpeJLz+y+C7PbLcSZDUdYmLzSAMHBHOTWi0V oi/Ov3O0vlKR2w2VpRazYbS8BAYw0IYJ5p6dJb8NC1pkbZx3IRPzWaPunSnCGYrM d4CxRjQ2H+UMEVfo5K4TrOUY4w3Of4A8tvwxLM9fmUHJmRpkYiFxqnGcRGSU8Ruj iFI2G/xC7L/uJTdGuOo2KxiwpkmRSSr/hL4CSdeViEf49snQ2URXKN53T8mka9Wb LKD+XVO7n/VNRlv7FqluVmnsZugwVuwkS30Wt5YHMZuvnIgzxl1eOe6Iiuj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWJnzN97mER1gGWBruXrEyJGOsgwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/BgbwyxFHRCxOdEm50vbaLvGWRT1F4HH0T QxXhthI2JXVd70LDHLzmWPlD1nRSY/1uXjkvrcZry5f95Wi2EQ6iJN39k57C2tho xJmGN1Ym7YUfXq1sJf/zo628XdXhJNMrTAvIvmzgmUcNuw4RXHnm2ho5sfjIM0tr Tj4w+hlBmbmncUUWQttcBOQ1/rvC9XScGYW8MbhNGmb2/K6NJNOpblej+lukDInY m+lo/bhxoY+mVqOLQHkKIJSKKbCdqJeQSf/fsi2Uf9a+By93kqG//H8NKk+Go9KN un1Z5G1/9tk8vEAo3bsNnasI2qiWENId27+UGkCrXeD3HFkAnMI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:18 2025 by rpki-client