$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: HQH5VLRs2r8ke/5N+dRBG7TBtuPEOfR8wLnPBpjn7tM= Subject key identifier: 09:78:B4:B9:5E:6E:F4:5F:7A:AD:10:D4:AD:13:E4:3B:C8:9B:68:9C Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 2AD4DDF0ABC734D5D1FEC28F40C5F16C2D45F7A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: 010F Signing time: Sat 18 Oct 2025 10:51:51 +0000 Manifest this update: Sat 18 Oct 2025 10:46:51 +0000 Manifest next update: Tue 21 Oct 2025 21:08:51 +0000 Files and hashes: 1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: bTtocdDlh6ARcCpTfZLHeveXHsbYa72XQfHK2KXWbP8=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:dd:f0:ab:c7:34:d5:d1:fe:c2:8f:40:c5:f1:6c:2d:45:f7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Oct 18 10:46:51 2025 GMT Not After : Oct 21 21:08:51 2025 GMT Subject: CN=0978B4B95E6EF45F7AAD10D4AD13E43BC89B689C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:c5:d9:54:41:e3:e0:10:7c:e4:4f:b8:87: 95:86:df:cc:c6:e0:a2:4f:3a:a3:19:c1:74:a3:da: af:fd:e2:ed:09:3b:77:fa:3c:a2:cc:5b:86:f6:44: 15:50:6b:78:2a:b6:cd:cf:9c:bb:ae:89:b9:38:71: 03:d9:42:0b:ea:df:d6:3d:70:51:1d:50:3d:60:87: 50:4f:cb:e0:85:d3:40:27:33:df:9f:c4:74:c2:c3: fe:b3:ee:ac:91:9b:39:10:b5:d2:48:f4:3b:43:6e: 90:c0:4d:62:06:15:fd:74:2c:b6:f5:01:6a:9f:cc: 8f:77:32:f1:68:ee:67:b5:0a:06:c3:2b:f7:af:22: c7:a0:2b:fc:14:0b:42:6e:99:75:cb:5d:01:c8:91: 91:72:b2:68:f8:6c:c5:ec:8a:91:a4:a3:e0:0a:0e: 9b:e6:26:b5:46:a3:e6:a4:13:64:ec:47:c3:aa:49: af:19:3c:28:fb:bb:fa:c8:13:5f:69:8c:f9:b5:d4: 49:ed:3d:e9:67:13:57:c1:63:f7:46:87:9b:e4:2d: 98:1c:e0:f9:cc:0b:0a:02:26:9c:e7:29:8e:38:99: 27:bc:66:e2:50:37:7e:56:20:13:b6:86:77:d0:92: ee:45:22:ac:01:de:2d:32:8b:6e:3c:9c:53:96:a5: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:78:B4:B9:5E:6E:F4:5F:7A:AD:10:D4:AD:13:E4:3B:C8:9B:68:9C X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:66:fb:58:40:52:75:cd:95:c9:6d:ce:dc:76:07:4b:fe:53: a0:e4:5a:6a:75:21:19:2f:5d:5c:cf:8a:13:64:f0:de:77:6b: c9:59:0e:1e:f3:aa:ea:32:ec:7c:7f:f9:50:72:3f:fe:aa:77: de:ec:8e:48:c3:0a:36:06:52:f6:07:af:dd:ad:bd:6f:5a:16: fe:7b:aa:53:d4:6d:69:1d:e7:c5:42:24:db:f5:71:4c:e5:20: ca:7c:d6:b0:29:a8:a9:4b:33:0f:de:ab:07:8b:31:4f:fd:ae: aa:bc:23:4c:38:0e:26:1a:11:e7:3f:a1:c0:57:8d:02:17:a6: bc:24:2e:6e:f6:86:0b:ca:b8:4b:f0:92:c4:74:03:d7:6f:9d: 04:29:2f:6c:cd:9e:82:41:b1:55:6f:d8:4d:57:25:74:b1:d1: 86:de:44:8a:fa:af:95:d4:eb:7c:74:0a:fe:b7:00:29:c0:f7: 4a:63:d0:6b:bf:f4:98:7d:a9:77:c0:6e:29:a5:49:34:ca:f4: 4c:ac:75:62:36:47:e1:39:25:a1:ae:82:4a:0f:ca:3c:4c:a0: cf:26:78:c0:39:75:4c:cd:1a:c1:da:43:4c:06:2b:eb:a1:2b: f6:92:51:0a:62:57:44:89:ac:01:c8:b8:9a:c2:b6:e1:71:b2: 26:37:76:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtTd8KvHNNXR/sKPQMXxbC1F96EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTEwMTgxMDQ2NTFaFw0yNTEwMjEyMTA4NTFaMDMxMTAvBgNV BAMTKDA5NzhCNEI5NUU2RUY0NUY3QUFEMTBENEFEMTNFNDNCQzg5QjY4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3cXZVEHj4BB85E+4h5WG38zG 4KJPOqMZwXSj2q/94u0JO3f6PKLMW4b2RBVQa3gqts3PnLuuibk4cQPZQgvq39Y9 cFEdUD1gh1BPy+CF00AnM9+fxHTCw/6z7qyRmzkQtdJI9DtDbpDATWIGFf10LLb1 AWqfzI93MvFo7me1CgbDK/evIsegK/wUC0JumXXLXQHIkZFysmj4bMXsipGko+AK DpvmJrVGo+akE2TsR8OqSa8ZPCj7u/rIE19pjPm11EntPelnE1fBY/dGh5vkLZgc 4PnMCwoCJpznKY44mSe8ZuJQN35WIBO2hnfQku5FIqwB3i0yi248nFOWpT9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCXi0uV5u9F96rRDUrRPkO8ibaJwwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9m+1hAUnXNlcltztx2B0v+U6DkWmp1IRkv XVzPihNk8N53a8lZDh7zquoy7Hx/+VByP/6qd97sjkjDCjYGUvYHr92tvW9aFv57 qlPUbWkd58VCJNv1cUzlIMp81rApqKlLMw/eqweLMU/9rqq8I0w4DiYaEec/ocBX jQIXprwkLm72hgvKuEvwksR0A9dvnQQpL2zNnoJBsVVv2E1XJXSx0YbeRIr6r5XU 63x0Cv63ACnA90pj0Gu/9Jh9qXfAbimlSTTK9EysdWI2R+E5JaGugkoPyjxMoM8m eMA5dUzNGsHaQ0wGK+uhK/aSUQpiV0SJrAHIuJrCtuFxsiY3dpc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:26 2025 by rpki-client