$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: s6QCjmtKlFvURVzl9uWI/wQVnxGJbjVVlzlGo9dPwrg= Subject key identifier: 6C:C2:6F:42:65:FD:E4:0F:CF:65:52:76:8E:6B:07:05:22:D8:7A:77 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 409181D3008E2FA463CC7744FE0850D9DB73FEA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 13:51:07 +0000 Manifest this update: Sun 19 Oct 2025 13:46:07 +0000 Manifest next update: Wed 22 Oct 2025 17:24:07 +0000 Files and hashes: 1: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=) 2: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=) 3: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: uusrgJZ6ZkSJBmlOTxV7GUV8IrFxsN1wvSt+nbTWVMc=) 4: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=) 5: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:91:81:d3:00:8e:2f:a4:63:cc:77:44:fe:08:50:d9:db:73:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Oct 19 13:46:07 2025 GMT Not After : Oct 22 17:24:07 2025 GMT Subject: CN=6CC26F4265FDE40FCF6552768E6B070522D87A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:d1:ee:46:c7:81:97:73:fe:7a:6e:46:ae: a4:ea:6d:a5:90:4e:19:6c:97:66:e1:3b:c6:a0:68: 42:88:f4:53:36:41:e2:db:9f:6e:94:ed:a1:24:59: ba:71:03:1c:a0:54:9e:22:eb:87:7f:07:ad:5c:da: 5c:99:b2:5c:f7:af:94:e6:3e:da:c7:21:cb:80:c2: 0c:91:42:85:b4:12:41:24:e9:bc:e3:14:17:1f:5f: fe:61:99:70:1a:fe:2e:e8:27:36:b1:8c:62:64:71: 14:5b:c7:95:75:e6:89:f7:d8:0e:67:45:01:3a:36: 9b:32:ae:45:1e:35:8a:3d:6e:64:cd:33:c6:4f:ce: 0a:ab:0d:45:72:2c:b2:d0:ff:97:b8:bd:78:c1:e3: 3c:50:72:bf:68:aa:c7:3f:df:7c:9a:a8:09:3c:71: cd:b4:7e:49:3e:73:18:8b:10:ad:dc:7f:fc:ea:4e: 9a:2f:69:c7:61:da:64:17:b6:8f:fb:4a:53:a6:17: 95:58:d0:23:70:04:15:85:ca:b3:f8:3c:e3:1c:3f: 50:55:94:3a:cf:fa:55:73:27:06:5b:24:15:c6:c2: f0:8f:8b:dc:b9:f2:e2:e4:42:11:e2:6d:5c:92:83: 57:fa:c2:fe:46:e0:fb:86:a0:6a:d1:18:b1:cd:d1: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:6F:42:65:FD:E4:0F:CF:65:52:76:8E:6B:07:05:22:D8:7A:77 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f3:18:46:55:2c:51:1f:b8:7a:b9:cd:96:6f:7a:c4:99:f0: 89:16:e5:4e:eb:b8:35:d2:9f:99:02:c6:ba:bb:17:be:ff:19: ca:12:41:af:47:b3:39:76:3a:03:a7:43:26:bb:b4:5f:18:52: 74:6b:97:f9:bd:fb:ea:60:58:93:15:b7:6c:99:43:da:42:46: 39:36:ce:cc:f5:3f:c9:a7:0e:66:69:15:ea:1d:1e:69:5c:4e: 5c:0c:18:db:b2:2c:d9:53:90:28:6c:c5:54:85:cf:ad:31:e1: 39:a9:a9:6b:72:5c:92:43:08:a3:aa:47:84:bf:4f:03:da:66: 2c:75:2a:7f:87:34:a4:c8:db:97:36:14:7e:05:98:89:ac:6e: ea:bc:21:04:fe:8d:d3:34:59:59:40:e6:21:b8:63:ab:04:a4: 67:4f:41:6a:37:db:13:f7:6d:07:8f:ab:32:94:74:dd:8d:16: 30:c4:2f:1e:07:57:9a:0c:8f:4b:42:3b:7e:28:46:06:f7:2e: 34:75:82:fe:73:c3:d7:7c:b3:3d:c6:0e:13:e3:ee:c5:84:d8: 36:28:61:70:fc:e0:1c:98:dd:e5:6f:03:4a:17:f9:57:e5:fa: f3:93:c5:12:12:28:48:7d:75:dc:b1:70:46:d7:1b:98:01:90: 6b:01:c9:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJGB0wCOL6RjzHdE/ghQ2dtz/qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNTEwMTkxMzQ2MDdaFw0yNTEwMjIxNzI0MDdaMDMxMTAvBgNV BAMTKDZDQzI2RjQyNjVGREU0MEZDRjY1NTI3NjhFNkIwNzA1MjJEODdBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FNHuRseBl3P+em5GrqTqbaWQ Thlsl2bhO8agaEKI9FM2QeLbn26U7aEkWbpxAxygVJ4i64d/B61c2lyZslz3r5Tm PtrHIcuAwgyRQoW0EkEk6bzjFBcfX/5hmXAa/i7oJzaxjGJkcRRbx5V15on32A5n RQE6NpsyrkUeNYo9bmTNM8ZPzgqrDUVyLLLQ/5e4vXjB4zxQcr9oqsc/33yaqAk8 cc20fkk+cxiLEK3cf/zqTpovacdh2mQXto/7SlOmF5VY0CNwBBWFyrP4POMcP1BV lDrP+lVzJwZbJBXGwvCPi9y58uLkQhHibVySg1f6wv5G4PuGoGrRGLHN0aWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMJvQmX95A/PZVJ2jmsHBSLYencwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPzGEZVLFEfuHq5zZZvesSZ8IkW5U7ruDXS n5kCxrq7F77/GcoSQa9Hszl2OgOnQya7tF8YUnRrl/m9++pgWJMVt2yZQ9pCRjk2 zsz1P8mnDmZpFeodHmlcTlwMGNuyLNlTkChsxVSFz60x4TmpqWtyXJJDCKOqR4S/ TwPaZix1Kn+HNKTI25c2FH4FmImsbuq8IQT+jdM0WVlA5iG4Y6sEpGdPQWo32xP3 bQePqzKUdN2NFjDELx4HV5oMj0tCO34oRgb3LjR1gv5zw9d8sz3GDhPj7sWE2DYo YXD84ByY3eVvA0oX+Vfl+vOTxRISKEh9ddyxcEbXG5gBkGsByUM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:52 2025 by rpki-client