$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: Iz9qfl4zqdVgcMZ1dIjNhL5ny2OhbDa8Dsy870ZFcA4= Subject key identifier: 8A:4D:16:A5:10:50:4C:CD:66:10:25:A8:12:F2:84:AC:5E:CA:A6:54 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 3396A9EADBC08B8F38E68E260CC8B2A039EE6C49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01CB Signing time: Mon 20 Oct 2025 01:51:25 +0000 Manifest this update: Mon 20 Oct 2025 01:46:25 +0000 Manifest next update: Thu 23 Oct 2025 08:00:25 +0000 Files and hashes: 1: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: CaJKo9W/gkcYg9FLELzZ4meEJcd7anSbTpIslExTzhQ=) 2: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) 3: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: jJN+a1uyK5er9vytVlfqMqFHVNtiQSwDgGPE7xDkxVU=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: dHvA0l4MoAsHbnDeUczCGz/tbqjQXH0AlY+9WKNokS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:96:a9:ea:db:c0:8b:8f:38:e6:8e:26:0c:c8:b2:a0:39:ee:6c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Oct 20 01:46:25 2025 GMT Not After : Oct 23 08:00:25 2025 GMT Subject: CN=8A4D16A510504CCD661025A812F284AC5ECAA654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:ca:60:4d:ed:b4:c3:78:c8:68:f6:7d:1e: 58:db:46:44:54:2d:c2:39:0d:f6:d0:73:33:22:ca: e2:dd:6e:66:ab:e7:85:48:b5:90:2b:3e:a2:93:bd: 58:f6:aa:2b:fc:4c:bf:19:74:9f:bb:5d:c7:8c:a3: 1a:e3:a5:c1:7d:01:29:ec:c9:59:a7:49:e4:56:f0: 2f:d3:f4:b3:af:7a:9b:7f:c0:30:00:54:d7:df:8d: 8a:20:41:08:3c:44:30:90:5b:3b:45:86:d5:bb:b3: 6e:44:63:40:c7:86:4d:88:42:21:26:61:ab:c3:82: d4:90:2a:e4:9f:93:47:4a:b3:55:f2:01:47:6e:bc: 25:db:16:17:b3:3b:cd:23:a3:b0:50:5e:97:06:b6: b9:01:99:6f:1a:b2:b0:22:aa:9c:06:47:da:36:0d: b5:96:93:bd:09:12:b5:ce:1d:98:f9:ad:99:6e:40: f4:4f:cc:4c:76:2e:9f:82:eb:74:64:79:89:8e:1f: c3:68:03:43:61:73:e1:96:4a:b3:21:23:40:2a:e0: 40:3a:32:59:ba:d1:3f:85:58:0b:5c:c6:44:3d:bb: 84:e8:ad:f4:5e:64:1c:cb:75:d5:1e:16:6c:7d:58: 3e:d7:c8:be:aa:cb:d1:41:9b:e3:03:3e:5b:da:aa: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:16:A5:10:50:4C:CD:66:10:25:A8:12:F2:84:AC:5E:CA:A6:54 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e0:fc:31:bd:b9:f8:cd:0b:ab:0f:47:0d:50:55:1e:d7:ac: 68:9e:06:34:04:63:82:e0:f1:3a:29:41:af:a8:a4:dc:3f:99: 12:9b:0f:c9:a9:c2:26:0b:c3:4e:20:55:ad:f3:88:05:2e:db: 5e:bd:81:08:7b:cf:7f:5c:80:d1:30:d6:f1:12:99:1c:d4:22: 84:43:1b:87:86:c2:91:ec:fa:b6:31:d1:65:7d:7d:0d:85:8b: 1f:b5:01:fc:e1:d1:09:ad:36:ba:0e:8f:dd:ee:bc:3c:2e:e9: 23:36:8e:ef:bb:c8:31:18:df:e8:79:c2:c1:b3:c9:92:75:75: c8:6c:85:a4:65:ad:c7:1c:13:22:95:9a:bb:ad:e1:1a:00:ac: 3a:2a:6b:06:3b:9d:f3:bf:69:eb:32:75:85:f9:c9:56:55:fe: ee:56:2d:4a:bd:20:57:b2:5b:35:52:3a:35:4f:68:2c:4f:5e: 52:14:46:b2:cd:a3:01:5a:6c:05:b1:e1:0e:25:a3:22:54:cd: 53:9f:d2:88:1b:29:8b:68:10:fe:63:38:3d:d6:35:76:bc:73: d2:85:32:31:d6:aa:25:7b:c4:1c:43:d8:25:15:a3:7c:a9:2b: f3:61:57:c7:a7:2f:f4:ea:5d:a3:b8:07:65:7f:f6:fe:06:fc: 37:b1:dd:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5ap6tvAi4845o4mDMiyoDnubEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTEwMjAwMTQ2MjVaFw0yNTEwMjMwODAwMjVaMDMxMTAvBgNV BAMTKDhBNEQxNkE1MTA1MDRDQ0Q2NjEwMjVBODEyRjI4NEFDNUVDQUE2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0U8pgTe20w3jIaPZ9HljbRkRU LcI5DfbQczMiyuLdbmar54VItZArPqKTvVj2qiv8TL8ZdJ+7XceMoxrjpcF9ASns yVmnSeRW8C/T9LOvept/wDAAVNffjYogQQg8RDCQWztFhtW7s25EY0DHhk2IQiEm YavDgtSQKuSfk0dKs1XyAUduvCXbFhezO80jo7BQXpcGtrkBmW8asrAiqpwGR9o2 DbWWk70JErXOHZj5rZluQPRPzEx2Lp+C63RkeYmOH8NoA0Nhc+GWSrMhI0Aq4EA6 Mlm60T+FWAtcxkQ9u4TorfReZBzLddUeFmx9WD7XyL6qy9FBm+MDPlvaqriPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUik0WpRBQTM1mECWoEvKErF7KplQwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrg/DG9ufjNC6sPRw1QVR7XrGieBjQEY4Lg 8TopQa+opNw/mRKbD8mpwiYLw04gVa3ziAUu2169gQh7z39cgNEw1vESmRzUIoRD G4eGwpHs+rYx0WV9fQ2Fix+1Afzh0QmtNroOj93uvDwu6SM2ju+7yDEY3+h5wsGz yZJ1dchshaRlrcccEyKVmrut4RoArDoqawY7nfO/aesydYX5yVZV/u5WLUq9IFey WzVSOjVPaCxPXlIURrLNowFabAWx4Q4loyJUzVOf0ogbKYtoEP5jOD3WNXa8c9KF MjHWqiV7xBxD2CUVo3ypK/NhV8enL/TqXaO4B2V/9v4G/Dex3ZU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:41 2025 by rpki-client