$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: /xi3h4+U8n/7SnosO4Mq+QoZA3bCBFAWQAJPcc89qmo= Subject key identifier: 94:7B:75:9C:97:12:99:D8:1B:8A:45:E8:9D:F4:BE:C3:B4:A9:15:BB Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 091CBCCB942C21FC5B0E520DAD4B8FFE8CA67818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 02E0 Signing time: Fri 22 Aug 2025 13:20:46 +0000 Manifest this update: Fri 22 Aug 2025 13:15:46 +0000 Manifest next update: Mon 25 Aug 2025 20:16:46 +0000 Files and hashes: 1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: b161+UcCCfZOcLEhAX6wuE6OxaBLPfcjGWq1jcbZjZo=) 2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1c:bc:cb:94:2c:21:fc:5b:0e:52:0d:ad:4b:8f:fe:8c:a6:78:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Aug 22 13:15:46 2025 GMT Not After : Aug 25 20:16:46 2025 GMT Subject: CN=947B759C971299D81B8A45E89DF4BEC3B4A915BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:91:93:85:28:16:4b:fd:7c:4a:4a:97:d4: 43:fe:45:24:b4:0c:f0:83:44:cf:b9:46:63:d4:d8: 95:f1:69:46:91:67:10:0c:fb:d0:75:6a:da:a0:bb: 0f:24:3f:62:7d:21:61:9b:cd:8d:28:55:20:52:66: cd:96:d0:e1:89:b3:d6:13:37:45:04:75:62:b5:57: 59:cf:f9:1c:de:98:48:c6:92:f4:43:d9:12:eb:ed: b0:7b:51:88:b0:9c:6e:8b:7d:89:f7:db:3c:b0:13: 37:83:0c:cc:95:ed:d9:c8:93:3b:31:de:a5:90:a0: 5e:75:bb:11:23:c3:10:db:42:7c:c5:37:c2:50:b8: 04:c8:0a:be:57:46:6e:c0:5c:06:44:91:89:79:7f: 94:25:68:0c:90:04:fc:bf:26:b3:2b:cc:c1:d4:37: 13:bf:6f:ef:bb:c5:48:24:da:02:0e:c3:a7:ab:19: a6:5c:d8:68:1a:b7:ed:df:bd:dd:1b:9e:89:75:e2: 58:cc:d3:ac:09:fe:5e:7c:a1:90:1d:d5:0c:ee:e7: 83:91:95:09:23:2c:4f:f3:6b:e5:db:2c:27:c3:09: 7f:8a:34:4b:f4:47:7e:d8:ef:13:86:7d:b9:e2:36: ee:2d:eb:4b:13:b0:29:b9:b1:ed:69:f5:49:2f:01: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7B:75:9C:97:12:99:D8:1B:8A:45:E8:9D:F4:BE:C3:B4:A9:15:BB X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:73:56:13:b8:94:d9:87:46:13:5c:b9:eb:21:58:a4:66:9a: ce:3c:17:2c:c1:c8:f1:ab:8e:4f:d3:fd:4c:16:ee:46:b1:57: 47:2e:50:d5:9d:2e:c5:03:20:6b:df:0e:6d:1d:db:43:92:40: e7:3f:26:b5:60:11:38:5e:a7:bb:1c:c0:92:1f:79:28:95:cb: ed:9f:ab:b4:ee:c4:0b:69:6f:e7:87:72:4b:ce:7e:8a:63:e2: 36:fe:1a:63:b3:22:08:2f:91:4b:4b:31:99:16:15:c6:cd:c1: fd:ce:54:47:bd:4c:3a:33:90:0b:bc:fd:30:7a:da:d6:f6:14: 35:f6:58:08:7c:db:33:97:36:04:73:cd:f3:e3:e1:85:9a:3f: ee:09:93:c7:67:83:3a:7b:38:6d:2f:92:a8:23:b9:74:a8:a7: 4d:eb:72:cb:2e:5b:2a:1e:00:e8:83:81:e1:16:56:2b:e3:a5: a8:38:5a:9a:09:dd:b2:ac:71:35:8e:4d:cc:1a:6d:74:c1:9e: 0e:47:14:e7:f7:0b:06:b8:a4:5e:17:45:5b:e1:b0:46:56:c4: 64:85:62:62:06:4b:29:7a:43:2a:cf:29:99:90:c1:17:82:bc: 87:24:6c:32:9e:93:eb:07:2c:bf:85:15:9b:a7:57:c3:99:0a: ab:20:12:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRy8y5QsIfxbDlINrUuP/oymeBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNTA4MjIxMzE1NDZaFw0yNTA4MjUyMDE2NDZaMDMxMTAvBgNV BAMTKDk0N0I3NTlDOTcxMjk5RDgxQjhBNDVFODlERjRCRUMzQjRBOTE1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJipGThSgWS/18SkqX1EP+RSS0 DPCDRM+5RmPU2JXxaUaRZxAM+9B1atqguw8kP2J9IWGbzY0oVSBSZs2W0OGJs9YT N0UEdWK1V1nP+RzemEjGkvRD2RLr7bB7UYiwnG6LfYn32zywEzeDDMyV7dnIkzsx 3qWQoF51uxEjwxDbQnzFN8JQuATICr5XRm7AXAZEkYl5f5QlaAyQBPy/JrMrzMHU NxO/b++7xUgk2gIOw6erGaZc2Ggat+3fvd0bnol14ljM06wJ/l58oZAd1Qzu54OR lQkjLE/za+XbLCfDCX+KNEv0R37Y7xOGfbniNu4t60sTsCm5se1p9UkvAfOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlHt1nJcSmdgbikXonfS+w7SpFbswHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZzVhO4lNmHRhNcueshWKRmms48FyzByPGr jk/T/UwW7kaxV0cuUNWdLsUDIGvfDm0d20OSQOc/JrVgEThep7scwJIfeSiVy+2f q7TuxAtpb+eHckvOfopj4jb+GmOzIggvkUtLMZkWFcbNwf3OVEe9TDozkAu8/TB6 2tb2FDX2WAh82zOXNgRzzfPj4YWaP+4Jk8dngzp7OG0vkqgjuXSop03rcssuWyoe AOiDgeEWVivjpag4WpoJ3bKscTWOTcwabXTBng5HFOf3Cwa4pF4XRVvhsEZWxGSF YmIGSyl6QyrPKZmQwReCvIckbDKek+sHLL+FFZunV8OZCqsgEi8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:55 2025 by rpki-client