$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: 2h9U8+XVZ3fAZUNeyTrc5dkC2wcTgJKV457H8qps5n0= Subject key identifier: B5:F5:D6:FA:50:15:F4:86:0C:A7:E9:3A:E0:2F:48:F4:A7:6A:08:E3 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 575A6C5CB4689CD1B8AA66BA3E63DD91D2613C5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 01FE Signing time: Thu 21 Aug 2025 19:30:53 +0000 Manifest this update: Thu 21 Aug 2025 19:25:53 +0000 Manifest next update: Mon 25 Aug 2025 04:47:53 +0000 Files and hashes: 1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) 2: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: C178tdB7orhcooSZRcqNfKKly9CgGuzPjAsVvthoGRg=) 3: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5a:6c:5c:b4:68:9c:d1:b8:aa:66:ba:3e:63:dd:91:d2:61:3c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Aug 21 19:25:53 2025 GMT Not After : Aug 25 04:47:53 2025 GMT Subject: CN=B5F5D6FA5015F4860CA7E93AE02F48F4A76A08E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:e8:a0:5e:2c:27:26:e1:f8:c2:eb:b3:80: 86:ff:4c:83:5c:d2:84:c7:71:40:c3:60:61:00:69: fc:ac:c9:c4:9d:19:b6:56:2d:e0:6f:e5:62:88:3d: 57:df:85:71:55:9d:0e:89:12:3e:48:34:2f:8d:ef: a2:2d:a3:c9:ce:1f:85:24:0b:ad:f3:b9:63:14:aa: d2:3e:f6:ab:2c:d9:83:6d:a3:cc:84:df:69:cd:55: 4c:61:74:11:e4:fa:f4:8e:0d:d3:86:68:86:7f:39: 20:c7:0d:60:9f:bb:66:28:6d:4a:db:9a:1c:9b:81: 9c:7f:84:b2:d7:57:07:8b:18:b2:2a:50:54:3f:fd: 3c:7d:47:fc:5c:01:97:a3:6f:18:dd:21:ca:ee:d8: 18:d0:bf:73:3f:25:f8:44:11:a4:32:45:2d:96:d7: b0:56:fa:b3:af:0a:4e:51:76:63:f4:02:4c:f7:a1: bd:93:ff:75:b6:40:13:f8:72:c7:2c:08:08:e0:49: ec:fb:9e:34:44:9b:28:de:e5:99:f9:91:f7:35:39: 12:a8:9c:7a:e3:3a:d5:05:28:05:1e:bf:08:c6:35: 88:3f:a9:77:34:01:fc:d1:a8:e8:c9:7b:6a:8b:6f: 8a:98:55:98:a2:09:09:87:4d:cb:e4:be:bd:e8:79: 14:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:D6:FA:50:15:F4:86:0C:A7:E9:3A:E0:2F:48:F4:A7:6A:08:E3 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:10:be:56:8c:ca:a2:2d:86:ee:ff:95:8e:22:1c:04:6b:c1: b1:b4:15:d9:3c:52:93:a7:b8:44:36:dd:75:8c:65:28:6c:04: f8:44:90:d6:79:10:1f:3e:aa:c3:29:48:fd:15:c0:d5:07:ce: a9:0e:25:0b:12:94:bf:49:c4:88:47:79:e8:07:01:77:a7:f0: 51:0d:a6:48:ae:52:1c:0a:92:c9:fe:60:6f:9b:96:44:98:1f: f0:22:48:75:5a:e3:77:03:9e:d2:f4:21:02:b8:28:4e:eb:0c: 2f:3c:d3:53:ea:55:c3:5e:c4:73:a5:b8:9a:ee:ac:23:f3:30: b8:f0:57:cd:7b:f3:e4:68:c6:e5:b3:4c:f7:d8:de:d2:98:46: 37:83:8a:44:9b:cb:dd:00:0a:fc:eb:e2:63:1e:d3:e8:78:77: e4:ca:6c:76:ef:cb:7b:99:97:fb:20:c6:00:e9:7b:24:e0:4a: 6f:d0:ee:37:bc:f9:68:0b:1a:88:fe:aa:12:79:82:c1:b1:fc: a3:8f:24:84:66:8e:12:c9:0c:d7:64:c3:3e:09:c7:94:d5:40: 37:f4:f2:0a:11:d8:6e:3b:aa:01:eb:65:fe:66:bc:b2:00:f9: 49:aa:11:4f:f4:35:92:bd:f0:46:0d:fa:f5:36:aa:d0:3c:93: a7:29:79:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1psXLRonNG4qma6PmPdkdJhPF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTA4MjExOTI1NTNaFw0yNTA4MjUwNDQ3NTNaMDMxMTAvBgNV BAMTKEI1RjVENkZBNTAxNUY0ODYwQ0E3RTkzQUUwMkY0OEY0QTc2QTA4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHOigXiwnJuH4wuuzgIb/TINc 0oTHcUDDYGEAafysycSdGbZWLeBv5WKIPVffhXFVnQ6JEj5INC+N76Ito8nOH4Uk C63zuWMUqtI+9qss2YNto8yE32nNVUxhdBHk+vSODdOGaIZ/OSDHDWCfu2YobUrb mhybgZx/hLLXVweLGLIqUFQ//Tx9R/xcAZejbxjdIcru2BjQv3M/JfhEEaQyRS2W 17BW+rOvCk5RdmP0Akz3ob2T/3W2QBP4cscsCAjgSez7njREmyje5Zn5kfc1ORKo nHrjOtUFKAUevwjGNYg/qXc0AfzRqOjJe2qLb4qYVZiiCQmHTcvkvr3oeRSpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfXW+lAV9IYMp+k64C9I9KdqCOMwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4QvlaMyqIthu7/lY4iHARrwbG0Fdk8UpOn uEQ23XWMZShsBPhEkNZ5EB8+qsMpSP0VwNUHzqkOJQsSlL9JxIhHeegHAXen8FEN pkiuUhwKksn+YG+blkSYH/AiSHVa43cDntL0IQK4KE7rDC8801PqVcNexHOluJru rCPzMLjwV8178+RoxuWzTPfY3tKYRjeDikSby90ACvzr4mMe0+h4d+TKbHbvy3uZ l/sgxgDpeyTgSm/Q7je8+WgLGoj+qhJ5gsGx/KOPJIRmjhLJDNdkwz4Jx5TVQDf0 8goR2G47qgHrZf5mvLIA+UmqEU/0NZK98EYN+vU2qtA8k6cpeQ4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:44:12 2025 by rpki-client