$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: ZgV7MVWyi6A3aybTo/6+cNFmaqLhoql6/+/EA9w9GsA= Subject key identifier: A0:B2:26:9C:A0:8D:96:5A:B4:EA:7D:80:30:EE:27:F8:51:62:03:6F Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 3EC798EE79878FC58180F8D178F17E8FA8BB802F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 09:01:37 +0000 Manifest this update: Fri 22 Aug 2025 08:56:37 +0000 Manifest next update: Mon 25 Aug 2025 13:05:37 +0000 Files and hashes: 1: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=) 2: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=) 3: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=) 4: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=) 5: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: pzQvDYHHYZJK9jbnWa5gUibmvfID9+2gRrKim6Qd4II=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c7:98:ee:79:87:8f:c5:81:80:f8:d1:78:f1:7e:8f:a8:bb:80:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Aug 22 08:56:37 2025 GMT Not After : Aug 25 13:05:37 2025 GMT Subject: CN=A0B2269CA08D965AB4EA7D8030EE27F85162036F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:7f:9d:ff:f1:f0:30:a0:cf:6c:92:78:d2: ad:a2:a4:bb:bb:70:dc:ac:87:c8:c1:80:e0:40:39: 32:c4:e7:3d:10:d8:ea:1e:05:3e:ea:e6:f6:cc:9a: a1:39:4f:53:78:06:33:94:98:8f:6f:34:be:e2:46: ab:55:e8:25:45:25:23:09:35:d0:e3:f8:61:af:81: 25:ff:56:aa:f3:4c:4e:db:f2:31:ef:07:a7:7f:29: a1:b5:d7:cf:24:46:26:f1:c8:1a:0c:13:d0:41:ef: fd:76:ae:a0:e1:98:4d:13:5c:ba:88:0e:44:0a:0b: a4:55:3c:07:db:01:b5:8d:e0:27:46:e8:93:55:82: c9:f3:1b:ae:ab:3b:22:1b:32:03:da:74:0e:df:bb: d4:24:9b:eb:3b:26:5a:ca:0b:aa:37:b6:8f:d8:ee: b3:8f:f7:29:39:70:ff:ad:73:fb:7f:d5:65:da:f8: a3:b8:1c:8b:b9:30:13:66:8d:3b:c9:ef:66:76:84: 09:d3:ea:47:39:07:68:5f:48:92:88:83:91:c0:f4: a3:b6:0c:bc:cf:0d:cd:77:67:17:9f:21:52:db:bd: 4c:69:48:bb:5b:a9:7d:58:e3:51:61:54:40:2f:79: 08:43:81:b5:86:d6:9b:25:2a:52:83:07:b1:22:2e: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:26:9C:A0:8D:96:5A:B4:EA:7D:80:30:EE:27:F8:51:62:03:6F X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:0e:29:a0:97:39:86:72:47:56:1c:95:d9:b5:2d:cc:3f:ea: c7:9b:21:06:1f:95:f5:99:f1:98:68:0a:9e:05:1d:2c:9d:23: 2f:f8:9c:77:a1:83:c3:5d:37:e5:8f:ab:f6:cf:2a:27:2c:a1: ec:71:72:83:d3:59:7b:15:b3:53:16:22:ac:e2:d9:dd:93:0f: 89:a8:85:7c:9b:b2:e7:88:24:3f:ec:9b:4b:64:35:2a:dc:fc: fa:4b:02:df:7a:6e:ed:3c:a5:fa:ed:ae:9b:d8:e9:75:ea:ff: 5a:d5:10:88:f0:28:77:0e:38:fa:ea:ee:5f:34:fb:85:86:1a: af:26:55:85:22:3f:cc:ba:52:67:9d:44:6e:15:9c:f6:2d:a3: d4:49:a9:10:3c:fa:6f:b8:18:82:9f:7b:aa:65:43:ac:73:1e: 65:0b:c6:b8:a5:d1:70:aa:4b:d5:17:36:8b:3f:b0:43:61:98: 7a:1c:f3:b1:4a:55:9b:0e:09:32:33:e0:69:93:f4:ba:cc:4c: db:f6:0f:21:b2:43:2d:69:3d:50:e6:53:b2:ea:64:84:5d:9e: 7a:0d:41:b0:04:17:35:c0:20:46:2c:b3:74:03:89:81:4a:b6: d6:15:3b:49:67:38:d8:5b:ac:08:c2:ec:8f:44:2d:30:73:9b: 81:30:93:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPseY7nmHj8WBgPjRePF+j6i7gC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNTA4MjIwODU2MzdaFw0yNTA4MjUxMzA1MzdaMDMxMTAvBgNV BAMTKEEwQjIyNjlDQTA4RDk2NUFCNEVBN0Q4MDMwRUUyN0Y4NTE2MjAzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcCn+d//HwMKDPbJJ40q2ipLu7 cNysh8jBgOBAOTLE5z0Q2OoeBT7q5vbMmqE5T1N4BjOUmI9vNL7iRqtV6CVFJSMJ NdDj+GGvgSX/VqrzTE7b8jHvB6d/KaG1188kRibxyBoME9BB7/12rqDhmE0TXLqI DkQKC6RVPAfbAbWN4CdG6JNVgsnzG66rOyIbMgPadA7fu9Qkm+s7JlrKC6o3to/Y 7rOP9yk5cP+tc/t/1WXa+KO4HIu5MBNmjTvJ72Z2hAnT6kc5B2hfSJKIg5HA9KO2 DLzPDc13ZxefIVLbvUxpSLtbqX1Y41FhVEAveQhDgbWG1pslKlKDB7EiLsWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLImnKCNllq06n2AMO4n+FFiA28wHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMOKaCXOYZyR1Ycldm1Lcw/6sebIQYflfWZ 8ZhoCp4FHSydIy/4nHehg8NdN+WPq/bPKicsoexxcoPTWXsVs1MWIqzi2d2TD4mo hXybsueIJD/sm0tkNSrc/PpLAt96bu08pfrtrpvY6XXq/1rVEIjwKHcOOPrq7l80 +4WGGq8mVYUiP8y6UmedRG4VnPYto9RJqRA8+m+4GIKfe6plQ6xzHmULxril0XCq S9UXNos/sENhmHoc87FKVZsOCTIz4GmT9LrMTNv2DyGyQy1pPVDmU7LqZIRdnnoN QbAEFzXAIEYss3QDiYFKttYVO0lnONhbrAjC7I9ELTBzm4Ewk/Y= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:26 2025 by rpki-client