$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: acmwf8YmrpQBGXdfqvMIcl7uCKkTvM1XLQkawiAbU8I= Subject key identifier: 2F:6A:83:4E:E9:63:BE:77:A9:6D:B7:9D:41:FD:F6:45:49:ED:A4:14 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 1F51A8BBC1E408A0B22539E15BE30E82F57EFDF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 0218 Signing time: Sun 19 Oct 2025 07:10:51 +0000 Manifest this update: Sun 19 Oct 2025 07:05:51 +0000 Manifest next update: Wed 22 Oct 2025 17:22:51 +0000 Files and hashes: 1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) 2: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: 59CSm/YAMJn3o1P3Jo7jGD/ogKrkZ104fAfHf9NQyak=) 3: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:51:a8:bb:c1:e4:08:a0:b2:25:39:e1:5b:e3:0e:82:f5:7e:fd:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Oct 19 07:05:51 2025 GMT Not After : Oct 22 17:22:51 2025 GMT Subject: CN=2F6A834EE963BE77A96DB79D41FDF64549EDA414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:b0:4d:e2:3f:8c:ab:cc:0e:90:56:ac:59: 92:ba:d4:71:75:40:e2:7a:33:dd:0e:55:b7:9c:1a: 43:af:a1:ac:96:c8:1c:5d:b2:2a:82:f9:39:f6:14: bb:ca:f5:e8:18:f3:91:70:fb:c1:f5:68:85:d3:ce: f7:c6:5f:09:2f:47:31:8a:77:63:9d:1c:bf:ad:bd: d3:41:c4:30:49:9b:c7:f1:c5:ce:b6:ac:81:49:e2: 0e:88:e9:bd:d0:4c:b4:0d:d0:66:49:72:06:ab:f6: 3a:f9:6b:34:72:a4:d4:a6:21:e7:1c:13:16:b1:cc: 6b:ec:14:1a:01:90:0f:0b:48:40:99:11:44:9c:64: 61:46:9f:9d:4e:0a:f6:b5:ed:64:4b:2d:2f:ac:e6: 80:bd:b6:a6:6d:c2:ec:75:20:bc:6a:d7:76:e9:cd: bf:d3:cf:b2:7e:ce:b8:bd:13:3c:d0:3d:2d:7b:c6: 25:05:05:24:1c:5e:fb:83:f8:26:5c:e0:e3:25:ed: 4f:af:70:75:63:bc:5f:c6:e3:15:67:69:f8:c8:49: 14:5f:1e:56:11:55:5d:3a:39:8a:18:aa:0e:f7:09: 72:45:04:ea:0a:83:15:60:1f:36:c2:a3:8e:83:a2: c3:f3:44:d7:b8:7b:54:7e:65:05:63:1e:24:44:13: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6A:83:4E:E9:63:BE:77:A9:6D:B7:9D:41:FD:F6:45:49:ED:A4:14 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:50:22:03:06:c3:b2:a0:00:4d:1e:b1:22:5f:c3:d2:9c:b9: 41:7b:0f:e9:9c:52:44:11:fa:f5:8e:e1:18:dd:11:32:e6:4d: 92:4a:8e:e4:44:84:d0:e5:77:a8:a8:a8:b0:18:d2:04:89:9b: 9f:04:4b:a9:b1:dd:ea:d2:31:5e:68:ab:16:d0:30:ae:77:01: 6e:76:ca:0e:a2:a4:16:74:ac:99:2e:13:3c:2b:ba:90:2a:f8: 4e:9e:85:70:c0:21:d2:40:9e:95:b0:00:a3:5b:86:ba:4b:a5: b7:81:74:0b:be:2c:27:c6:db:8a:bf:4a:7a:7e:a8:e5:56:40: a4:7c:43:c7:db:1a:9b:f4:74:bc:d5:fe:14:ba:56:f2:37:ea: e2:89:8c:15:f0:12:29:56:cb:83:0f:9b:eb:c1:92:0f:48:2c: 08:a5:e6:b3:c1:5b:c1:2f:77:82:8d:7e:ef:75:ec:36:71:16: c2:ac:5f:5b:af:93:b6:cc:75:ec:52:e4:c9:96:5a:cb:d8:07: 13:e2:a8:c9:26:61:de:c9:0e:7c:0c:95:4e:06:ff:62:15:7b: c7:c8:c6:85:10:07:53:30:29:44:fc:2e:c9:57:dd:28:23:02: 82:f8:4d:72:5f:89:6a:db:33:51:d2:b1:fe:99:ed:f1:15:ca: f9:dd:8c:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1Gou8HkCKCyJTnhW+MOgvV+/fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTEwMTkwNzA1NTFaFw0yNTEwMjIxNzIyNTFaMDMxMTAvBgNV BAMTKDJGNkE4MzRFRTk2M0JFNzdBOTZEQjc5RDQxRkRGNjQ1NDlFREE0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzbBN4j+Mq8wOkFasWZK61HF1 QOJ6M90OVbecGkOvoayWyBxdsiqC+Tn2FLvK9egY85Fw+8H1aIXTzvfGXwkvRzGK d2OdHL+tvdNBxDBJm8fxxc62rIFJ4g6I6b3QTLQN0GZJcgar9jr5azRypNSmIecc ExaxzGvsFBoBkA8LSECZEUScZGFGn51OCva17WRLLS+s5oC9tqZtwux1ILxq13bp zb/Tz7J+zri9EzzQPS17xiUFBSQcXvuD+CZc4OMl7U+vcHVjvF/G4xVnafjISRRf HlYRVV06OYoYqg73CXJFBOoKgxVgHzbCo46DosPzRNe4e1R+ZQVjHiREE/IZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL2qDTuljvnepbbedQf32RUntpBQwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZQIgMGw7KgAE0esSJfw9KcuUF7D+mcUkQR +vWO4RjdETLmTZJKjuREhNDld6ioqLAY0gSJm58ES6mx3erSMV5oqxbQMK53AW52 yg6ipBZ0rJkuEzwrupAq+E6ehXDAIdJAnpWwAKNbhrpLpbeBdAu+LCfG24q/Snp+ qOVWQKR8Q8fbGpv0dLzV/hS6VvI36uKJjBXwEilWy4MPm+vBkg9ILAil5rPBW8Ev d4KNfu917DZxFsKsX1uvk7bMdexS5MmWWsvYBxPiqMkmYd7JDnwMlU4G/2IVe8fI xoUQB1MwKUT8LslX3SgjAoL4TXJfiWrbM1HSsf6Z7fEVyvndjOw= -----END CERTIFICATE-----Generated at Tue Oct 21 05:27:55 2025 by rpki-client