$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: h2Kwpijy8i3TYIUzfgkhbhOMMs5/eJWA+mVctmPsd0Q= Subject key identifier: 22:9D:D2:0B:F7:8A:FE:FA:BD:48:EE:31:19:8C:A3:54:81:F3:BD:1B Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 2A385D3CD04B6378C20CBF0E5DC19D01FCC38CBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 01AE Signing time: Sat 18 Oct 2025 10:52:02 +0000 Manifest this update: Sat 18 Oct 2025 10:47:02 +0000 Manifest next update: Tue 21 Oct 2025 15:50:02 +0000 Files and hashes: 1: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: XSk0wNrf1RlDJP4XEMxSfCPqvteZ7xAoV1ECADdHBzo=) 2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:38:5d:3c:d0:4b:63:78:c2:0c:bf:0e:5d:c1:9d:01:fc:c3:8c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Oct 18 10:47:02 2025 GMT Not After : Oct 21 15:50:02 2025 GMT Subject: CN=229DD20BF78AFEFABD48EE31198CA35481F3BD1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:2b:67:64:98:bd:f8:42:93:ff:dd:dc:46: e9:eb:f7:69:04:04:2f:0f:ff:74:9a:91:9c:61:f5: 9b:3d:a8:d1:8f:42:e7:bc:09:25:4e:ee:ad:a6:db: 20:6b:24:f9:0f:0b:8f:9a:b8:ac:79:c0:44:c8:53: 8b:b3:48:21:25:a7:30:ef:f1:54:c6:4f:0e:72:f2: ce:af:b9:95:f0:a7:de:fd:c4:38:dc:af:41:d4:ca: 39:a7:04:51:d6:83:55:9e:9b:dd:39:fd:71:73:a2: bb:70:e7:25:7b:29:ae:bd:a7:35:4c:9b:8b:9c:6b: 26:8f:2c:75:be:d4:a0:d6:6c:85:6c:bc:77:b0:be: 62:7e:11:4b:d0:7b:5d:db:6a:96:c3:75:5a:49:8d: b4:ac:91:40:29:5f:2b:5c:dc:a2:9e:96:37:21:b1: 9e:e9:69:3a:60:2e:24:a6:e0:4b:b9:25:01:b8:4a: 74:ca:7e:ec:45:1d:30:39:33:e1:7d:b1:7d:a4:bc: 70:d3:45:7a:56:16:29:f1:d7:bc:92:c8:51:38:7e: a5:1e:39:ef:be:55:29:43:61:66:dc:ae:ed:fd:60: b4:09:fb:a2:6c:02:4a:98:77:7d:cd:bf:31:21:7f: d2:45:63:95:67:85:8b:a4:a4:82:64:c3:7e:57:e6: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:D2:0B:F7:8A:FE:FA:BD:48:EE:31:19:8C:A3:54:81:F3:BD:1B X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:85:13:75:e0:86:ed:0f:4f:da:80:db:ad:dc:d6:8d:5f:f2: e5:d0:27:2e:2e:16:6e:ac:5b:d4:c6:b8:0a:b4:f4:f9:86:41: c6:a8:07:3e:c6:88:92:db:a1:90:0e:bc:c9:1e:da:17:20:df: 2d:a8:fe:1c:8a:80:0a:36:11:91:8b:8d:7b:b0:73:0b:16:63: 37:f0:d6:85:b6:7f:63:ba:4c:00:14:b2:86:5a:6d:f1:77:83: 4c:7d:a8:26:79:4a:4c:66:93:56:03:e8:b5:60:ce:c9:f7:70: 1b:ce:74:67:a1:c0:98:d1:19:84:0a:92:9a:e6:50:e4:d7:f5: 67:d5:3c:5a:b0:77:e7:3b:71:43:56:55:f5:04:a7:e5:ce:46: 81:a1:34:34:0f:e9:56:57:4f:03:27:3c:a5:8d:a5:8c:c5:b0: dd:3b:92:80:b3:92:ff:20:72:d5:0d:58:bf:68:e2:a5:69:42: c3:a2:ac:b5:0b:63:94:e9:19:c9:b7:24:54:2c:24:6c:80:d1: 81:b4:7c:5f:f1:61:e6:87:51:4d:b1:ae:e4:f7:24:9f:e8:a4: af:0f:2e:e4:f4:92:3c:d9:aa:ec:03:00:25:d5:61:3b:2a:52: 2f:2e:c3:c4:70:12:52:ce:2a:8a:61:6d:1a:4e:d2:87:16:8e: 0e:cf:48:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjhdPNBLY3jCDL8OXcGdAfzDjLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTEwMTgxMDQ3MDJaFw0yNTEwMjExNTUwMDJaMDMxMTAvBgNV BAMTKDIyOUREMjBCRjc4QUZFRkFCRDQ4RUUzMTE5OENBMzU0ODFGM0JEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JStnZJi9+EKT/93cRunr92kE BC8P/3SakZxh9Zs9qNGPQue8CSVO7q2m2yBrJPkPC4+auKx5wETIU4uzSCElpzDv 8VTGTw5y8s6vuZXwp979xDjcr0HUyjmnBFHWg1Wem905/XFzortw5yV7Ka69pzVM m4ucayaPLHW+1KDWbIVsvHewvmJ+EUvQe13bapbDdVpJjbSskUApXytc3KKeljch sZ7paTpgLiSm4Eu5JQG4SnTKfuxFHTA5M+F9sX2kvHDTRXpWFinx17ySyFE4fqUe Oe++VSlDYWbcru39YLQJ+6JsAkqYd33NvzEhf9JFY5VnhYukpIJkw35X5vJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIp3SC/eK/vq9SO4xGYyjVIHzvRswHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKFE3Xghu0PT9qA263c1o1f8uXQJy4uFm6s W9TGuAq09PmGQcaoBz7GiJLboZAOvMke2hcg3y2o/hyKgAo2EZGLjXuwcwsWYzfw 1oW2f2O6TAAUsoZabfF3g0x9qCZ5Skxmk1YD6LVgzsn3cBvOdGehwJjRGYQKkprm UOTX9WfVPFqwd+c7cUNWVfUEp+XORoGhNDQP6VZXTwMnPKWNpYzFsN07koCzkv8g ctUNWL9o4qVpQsOirLULY5TpGcm3JFQsJGyA0YG0fF/xYeaHUU2xruT3JJ/opK8P LuT0kjzZquwDACXVYTsqUi8uw8RwElLOKophbRpO0ocWjg7PSOY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:22 2025 by rpki-client