$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: /86iOKhrvbQnhq2l/+F4nMPkPest+5G5ZCSiVDjf2EE= Subject key identifier: A4:23:31:36:33:35:DF:62:04:59:6D:9E:1C:BF:3E:EF:5A:F3:12:DD Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 07E5F8666E44EA14D3C736F2F574907B2255E540 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 18:12:11 +0000 Manifest this update: Thu 21 Aug 2025 18:07:11 +0000 Manifest next update: Sun 24 Aug 2025 23:05:11 +0000 Files and hashes: 1: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: dttoTx4BQRFnMAvnuJnvYcnCQ5YOgtytig0qE7CIy64=) 2: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: gid9lbxvRcQIyJazQqnfGVa83IqljARSegmr0EVc+9U=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: +2/fO8INW6MBjsIr2MpsMr5pDS/07SU3AZAKJ801ins=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e5:f8:66:6e:44:ea:14:d3:c7:36:f2:f5:74:90:7b:22:55:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: Aug 21 18:07:11 2025 GMT Not After : Aug 24 23:05:11 2025 GMT Subject: CN=A42331363335DF6204596D9E1CBF3EEF5AF312DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:4d:b5:d2:ed:23:a0:af:8b:44:07:7c:65: c3:6d:53:9f:b0:96:de:21:a0:a8:cf:1c:65:0b:43: b8:88:54:48:24:ed:da:a0:a7:d3:e7:bb:9c:76:94: b0:e5:1f:2f:d0:ec:55:9d:33:58:3c:68:ac:10:ca: 5a:d2:ca:90:f8:01:23:3e:8f:e2:c1:5c:a5:41:35: 59:50:fc:e4:b0:05:66:4a:4a:28:67:c9:65:34:e8: bd:f4:a5:47:61:9e:4d:04:b2:14:aa:7d:d4:c4:cd: 37:54:8c:c6:b5:1f:e9:28:4b:82:25:0f:89:83:df: ff:e9:55:f5:12:f7:eb:8c:7c:dd:fc:03:cd:1f:70: 66:85:1d:9e:1d:6a:5d:c8:b2:6e:3a:2e:e7:44:b2: c2:8b:f8:7d:50:3e:2a:be:d7:3a:74:57:a6:54:d2: a1:e0:30:86:9c:62:79:94:0d:ec:d7:80:3b:49:3f: 24:69:0b:c1:4d:20:c2:65:a7:51:8f:21:5d:09:39: 58:8c:7b:42:4e:c8:ab:90:6c:37:b8:d1:e4:07:ab: a9:93:e5:a5:bd:2e:51:da:a0:c6:26:25:f9:b0:06: a3:bf:02:f4:33:a6:06:72:ba:80:ec:79:15:a5:8a: 83:ef:be:c3:2a:d5:2e:4a:f2:88:5b:30:d9:54:65: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:23:31:36:33:35:DF:62:04:59:6D:9E:1C:BF:3E:EF:5A:F3:12:DD X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:76:f8:3e:23:de:a2:69:66:73:30:9a:5b:1e:b7:67:62:8c: df:9e:e4:ce:d4:d8:1a:ae:73:74:c6:dd:10:cd:87:f8:86:05: d1:27:6b:18:bb:24:ba:82:39:35:69:39:e8:f3:3f:5d:93:5a: cb:ed:a1:cb:6c:9d:3b:32:98:0f:c9:27:22:76:28:c6:2c:05: 91:3a:42:2a:64:82:9f:c7:d5:f2:7e:77:03:14:df:f8:e3:df: 08:a3:98:c6:e9:51:39:77:8a:b2:50:6d:3f:23:0e:4a:ad:53: eb:b2:80:a1:5a:04:9a:3f:e8:01:92:c4:55:b4:7c:3b:33:cd: a0:0f:7d:33:52:3b:30:a2:62:e0:73:e4:df:1e:78:96:f4:81: c5:d3:ba:35:5e:9e:8a:64:f1:ce:44:62:7d:43:0d:14:2d:cf: 99:7a:18:e5:64:d4:60:66:0d:87:24:41:41:c5:e9:52:f7:d9: 57:26:1c:23:f3:e1:b1:4a:fe:a0:e0:4a:ec:77:31:e1:c4:f6: 56:85:59:b9:95:3b:bc:eb:1a:f6:61:07:b1:05:f1:48:50:51: 0e:f6:90:22:71:af:bb:f7:b8:d5:07:d2:0a:87:c8:7b:72:da: 87:5b:71:6e:2c:d7:81:b9:97:c8:5f:75:67:b7:a6:40:69:cd: 41:25:35:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+X4Zm5E6hTTxzby9XSQeyJV5UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNTA4MjExODA3MTFaFw0yNTA4MjQyMzA1MTFaMDMxMTAvBgNV BAMTKEE0MjMzMTM2MzMzNURGNjIwNDU5NkQ5RTFDQkYzRUVGNUFGMzEyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ck210u0joK+LRAd8ZcNtU5+w lt4hoKjPHGULQ7iIVEgk7dqgp9Pnu5x2lLDlHy/Q7FWdM1g8aKwQylrSypD4ASM+ j+LBXKVBNVlQ/OSwBWZKSihnyWU06L30pUdhnk0EshSqfdTEzTdUjMa1H+koS4Il D4mD3//pVfUS9+uMfN38A80fcGaFHZ4dal3Ism46LudEssKL+H1QPiq+1zp0V6ZU 0qHgMIacYnmUDezXgDtJPyRpC8FNIMJlp1GPIV0JOViMe0JOyKuQbDe40eQHq6mT 5aW9LlHaoMYmJfmwBqO/AvQzpgZyuoDseRWlioPvvsMq1S5K8ohbMNlUZfQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpCMxNjM132IEWW2eHL8+71rzEt0wHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD52+D4j3qJpZnMwmlset2dijN+e5M7U2Bqu c3TG3RDNh/iGBdEnaxi7JLqCOTVpOejzP12TWsvtoctsnTsymA/JJyJ2KMYsBZE6 Qipkgp/H1fJ+dwMU3/jj3wijmMbpUTl3irJQbT8jDkqtU+uygKFaBJo/6AGSxFW0 fDszzaAPfTNSOzCiYuBz5N8eeJb0gcXTujVenopk8c5EYn1DDRQtz5l6GOVk1GBm DYckQUHF6VL32VcmHCPz4bFK/qDgSux3MeHE9laFWbmVO7zrGvZhB7EF8UhQUQ72 kCJxr7v3uNUH0gqHyHty2odbcW4s14G5l8hfdWe3pkBpzUElNSM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:04 2025 by rpki-client