$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: acOiFYXtAum9DdkTKXf3jJMDinC4qK05CjTRaSR7WKo= Subject key identifier: 6C:5D:82:FE:46:4F:B2:EE:8D:4D:5A:01:72:06:5F:6B:5C:36:13:B4 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 759197E979747FB62EA012CC6CC2821FA1D7E2E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 01F1 Signing time: Sun 02 Nov 2025 06:22:22 +0000 Manifest this update: Sun 02 Nov 2025 06:17:22 +0000 Manifest next update: Wed 05 Nov 2025 16:49:22 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: f8wopox2/rGdvSVKA7yWjv6sCGLFeKzmQb9NtZpg0KA=) 3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:91:97:e9:79:74:7f:b6:2e:a0:12:cc:6c:c2:82:1f:a1:d7:e2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Nov 2 06:17:22 2025 GMT Not After : Nov 5 16:49:22 2025 GMT Subject: CN=6C5D82FE464FB2EE8D4D5A0172065F6B5C3613B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:c8:e5:be:f8:84:bd:57:3d:cb:13:58:e8: 66:c6:79:8d:ca:b1:df:de:6b:d4:62:ec:cf:23:fe: ed:50:a5:26:1c:29:71:4e:eb:0d:7a:8b:61:c4:74: d1:49:4d:41:d9:76:7b:46:15:3d:d6:90:fc:74:7e: 9b:e7:fe:62:5d:1f:1b:f9:66:58:ec:3e:bc:80:90: 9f:2e:f1:a6:ff:3e:ec:e7:a6:71:57:88:14:56:b9: da:0d:bb:46:da:b0:37:5b:14:33:cb:11:cf:53:87: 94:38:c1:2f:d2:51:8a:fd:7f:1c:b2:af:99:63:07: 1f:db:aa:54:fc:8a:2a:3d:c9:6c:54:9c:bb:4d:66: fb:fa:b0:51:ed:7a:ba:26:dd:98:ec:44:2f:1e:00: 3f:8e:2a:60:12:20:2c:e8:33:0a:18:b6:b8:31:e4: 9e:4a:2f:c4:5d:09:62:83:f8:b3:f7:36:dc:f0:5f: f2:74:98:70:e2:8e:84:43:18:27:01:9e:1a:c2:bb: e4:07:61:82:4f:ad:d1:1c:78:a0:af:99:3a:f2:b5: 9d:92:67:5c:a0:c4:9f:ee:84:92:99:04:0a:cf:2b: 6f:72:da:bf:85:97:00:de:30:2c:e7:45:ba:1a:11: ba:8b:9f:10:7d:1a:4e:bb:ba:2e:a5:c2:9f:f4:a4: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5D:82:FE:46:4F:B2:EE:8D:4D:5A:01:72:06:5F:6B:5C:36:13:B4 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:94:dd:59:6e:97:16:04:ae:8a:e9:18:82:bc:a7:2c:f1:5a: aa:78:66:bb:09:9e:23:64:0e:9c:c1:29:81:b3:dc:7d:2c:a4: c3:9c:2e:fc:05:01:74:15:8a:5d:ac:94:72:17:21:12:b6:fa: 98:e7:25:54:46:60:75:61:3e:f4:56:82:94:a6:db:93:6c:b5: 93:8f:cd:92:25:5e:5c:7a:47:50:91:21:7d:61:29:8b:da:5f: 7f:0f:ef:76:01:a2:f6:47:3b:77:ab:3e:55:59:b7:54:3c:af: 99:75:85:ef:df:80:b2:87:f2:06:5e:3c:3d:64:0d:37:a8:05: e8:1a:e7:20:83:68:16:80:f7:c8:4b:45:8a:ee:45:63:b3:04: 2b:ad:35:5c:b5:8c:f3:1e:37:96:29:bc:a2:64:2f:95:eb:48: a2:7a:f0:e4:5d:df:0b:b6:35:a4:18:07:a9:7b:de:6c:9b:1c: f3:9a:7b:aa:51:e0:95:a1:ba:af:5f:e5:2c:17:a8:ca:fa:bb: 96:e3:4b:0c:ac:d3:30:47:df:a7:6c:1e:e8:6b:82:20:19:47: 9b:4e:29:da:2f:40:c8:39:2c:a1:96:4b:e8:2e:8e:84:eb:e2: db:b3:b2:fa:93:ae:d5:89:94:d4:6e:be:9c:3d:fa:54:5a:79: a7:f7:d0:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZGX6Xl0f7YuoBLMbMKCH6HX4ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTExMDIwNjE3MjJaFw0yNTExMDUxNjQ5MjJaMDMxMTAvBgNV BAMTKDZDNUQ4MkZFNDY0RkIyRUU4RDRENUEwMTcyMDY1RjZCNUMzNjEzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxMjlvviEvVc9yxNY6GbGeY3K sd/ea9Ri7M8j/u1QpSYcKXFO6w16i2HEdNFJTUHZdntGFT3WkPx0fpvn/mJdHxv5 ZljsPryAkJ8u8ab/PuznpnFXiBRWudoNu0basDdbFDPLEc9Th5Q4wS/SUYr9fxyy r5ljBx/bqlT8iio9yWxUnLtNZvv6sFHterom3ZjsRC8eAD+OKmASICzoMwoYtrgx 5J5KL8RdCWKD+LP3NtzwX/J0mHDijoRDGCcBnhrCu+QHYYJPrdEceKCvmTrytZ2S Z1ygxJ/uhJKZBArPK29y2r+FlwDeMCznRboaEbqLnxB9Gk67ui6lwp/0pKxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbF2C/kZPsu6NTVoBcgZfa1w2E7QwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyU3VlulxYErorpGIK8pyzxWqp4ZrsJniNk DpzBKYGz3H0spMOcLvwFAXQVil2slHIXIRK2+pjnJVRGYHVhPvRWgpSm25NstZOP zZIlXlx6R1CRIX1hKYvaX38P73YBovZHO3erPlVZt1Q8r5l1he/fgLKH8gZePD1k DTeoBega5yCDaBaA98hLRYruRWOzBCutNVy1jPMeN5YpvKJkL5XrSKJ68ORd3wu2 NaQYB6l73mybHPOae6pR4JWhuq9f5SwXqMr6u5bjSwys0zBH36dsHuhrgiAZR5tO KdovQMg5LKGWS+gujoTr4tuzsvqTrtWJlNRuvpw9+lRaeaf30BA= -----END CERTIFICATE-----Generated at Tue Nov 4 08:11:10 2025 by rpki-client