$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: 7qZ4cAgX7voIXpsOnjwNXOcC1BBNuN7nI/sJ2Z4/7lg= Subject key identifier: 6A:DB:0B:A1:A9:94:35:C3:55:B1:A8:BD:26:62:9C:B6:26:3E:97:12 Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 32D5FD3C3778D26ED4C7B9C6EB84C68590430BFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 0194 Signing time: Fri 22 Aug 2025 03:22:02 +0000 Manifest this update: Fri 22 Aug 2025 03:17:02 +0000 Manifest next update: Mon 25 Aug 2025 10:33:02 +0000 Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) 2: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: UENfe1qHZgTJ0AfRK4hJ+BrpNAzgtNFUASExhxX4jN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d5:fd:3c:37:78:d2:6e:d4:c7:b9:c6:eb:84:c6:85:90:43:0b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Aug 22 03:17:02 2025 GMT Not After : Aug 25 10:33:02 2025 GMT Subject: CN=6ADB0BA1A99435C355B1A8BD26629CB6263E9712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:7b:6b:a3:36:42:22:df:03:b0:d2:ea:cd:7f: 63:44:cc:88:a8:51:1f:ec:06:81:66:fb:ba:e6:78: d4:15:2d:e2:55:da:78:24:5e:fb:c3:49:ee:9b:76: 48:1c:02:16:b8:d9:44:fb:5b:3f:10:f3:62:57:ab: 2e:54:d5:7e:ee:12:1d:ef:00:0c:3b:96:b2:35:12: 64:cd:7d:e7:49:6a:24:ae:e7:52:5a:45:72:5b:92: 79:a4:42:ad:eb:9e:91:9b:f9:ca:1b:1b:9f:57:45: bf:05:29:ed:e3:20:ae:38:88:84:80:e7:8b:9f:94: 9c:dd:65:10:ac:e8:04:f4:44:20:80:71:62:a1:e7: ba:45:7d:de:d7:07:b0:44:93:fa:a9:3f:ce:0d:d5: 09:c1:6b:82:87:79:85:fc:a1:5a:a8:7a:68:4f:91: c9:ec:da:a9:df:23:70:ed:67:a2:bc:e6:af:dc:63: 09:e8:15:92:01:62:9e:9b:70:20:3e:50:38:e0:16: 05:21:e9:7a:97:50:bd:9b:6b:b6:d4:3d:93:f0:3b: b8:56:b8:e3:71:29:17:db:23:84:43:a1:29:eb:f1: 0a:68:44:ca:e8:a0:38:df:2b:29:ee:91:c7:a9:ab: ed:b6:2c:e6:6b:96:5e:36:fd:16:10:18:6d:17:bb: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DB:0B:A1:A9:94:35:C3:55:B1:A8:BD:26:62:9C:B6:26:3E:97:12 X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:48:e2:0f:dd:4a:c7:e9:b1:4f:68:3e:15:3d:8e:eb:8e:6f: 14:64:f8:a8:3a:a9:a1:08:86:e8:53:da:c1:63:83:e2:df:dc: da:8f:f1:86:d3:f5:60:8b:05:cc:a5:cc:0e:d6:7d:97:af:27: 5b:29:05:a4:3c:39:5f:65:1a:a7:7b:e3:a0:08:f3:b2:d7:7e: 38:40:d8:3d:1d:d5:84:67:57:42:7f:98:f4:f5:fe:ac:0a:c1: 92:0a:3c:b8:ec:d9:56:7d:7a:eb:04:63:5d:4d:0d:b1:75:84: 4c:4e:e5:bc:52:d6:0b:13:4b:1b:3f:5f:65:13:7c:be:f7:af: 4e:4e:45:08:e0:59:39:91:5e:db:5a:86:dd:f7:7b:07:b2:f1: 8c:eb:da:26:f3:16:96:d3:ac:dd:d0:4e:c3:b9:46:89:7b:00: 2c:a7:cc:21:74:44:9e:6c:9c:b2:7b:8b:fc:f0:07:73:1c:c6: 24:cc:11:dc:52:b3:00:27:2b:0c:eb:6c:49:e5:f2:59:bc:e1: d1:ff:ff:28:55:93:2c:31:78:1b:48:d5:1a:e9:02:b7:0b:d2: b0:b7:dc:e7:5c:5c:1c:c7:0d:6f:09:62:b6:d7:67:d0:8a:41: dd:c1:7c:f9:dc:95:8f:e5:81:1b:5d:60:8c:2a:44:1b:f6:dc: d7:81:fb:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtX9PDd40m7Ux7nG64TGhZBDC/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTA4MjIwMzE3MDJaFw0yNTA4MjUxMDMzMDJaMDMxMTAvBgNV BAMTKDZBREIwQkExQTk5NDM1QzM1NUIxQThCRDI2NjI5Q0I2MjYzRTk3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7e2ujNkIi3wOw0urNf2NEzIio UR/sBoFm+7rmeNQVLeJV2ngkXvvDSe6bdkgcAha42UT7Wz8Q82JXqy5U1X7uEh3v AAw7lrI1EmTNfedJaiSu51JaRXJbknmkQq3rnpGb+cobG59XRb8FKe3jIK44iISA 54uflJzdZRCs6AT0RCCAcWKh57pFfd7XB7BEk/qpP84N1QnBa4KHeYX8oVqoemhP kcns2qnfI3DtZ6K85q/cYwnoFZIBYp6bcCA+UDjgFgUh6XqXUL2ba7bUPZPwO7hW uONxKRfbI4RDoSnr8QpoRMrooDjfKynukcepq+22LOZrll42/RYQGG0Xu+aDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUatsLoamUNcNVsai9JmKctiY+lxIwHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFI4g/dSsfpsU9oPhU9juuObxRk+Kg6qaEI huhT2sFjg+Lf3NqP8YbT9WCLBcylzA7WfZevJ1spBaQ8OV9lGqd746AI87LXfjhA 2D0d1YRnV0J/mPT1/qwKwZIKPLjs2VZ9eusEY11NDbF1hExO5bxS1gsTSxs/X2UT fL73r05ORQjgWTmRXttaht33ewey8Yzr2ibzFpbTrN3QTsO5Rol7ACynzCF0RJ5s nLJ7i/zwB3McxiTMEdxSswAnKwzrbEnl8lm84dH//yhVkywxeBtI1RrpArcL0rC3 3OdcXBzHDW8JYrbXZ9CKQd3BfPnclY/lgRtdYIwqRBv23NeB+90= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:42 2025 by rpki-client