$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: Vxdew7NpExjDQurFZTfyqyrze9+gQW0abFXEZaCYMm4= Subject key identifier: AC:0E:C9:49:73:04:21:B3:BE:03:22:89:E4:BD:90:73:B4:15:68:71 Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 349EC8A9A72C7E5894AB93E7B862EA9634FABA55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 01FD Signing time: Thu 21 Aug 2025 17:40:39 +0000 Manifest this update: Thu 21 Aug 2025 17:35:39 +0000 Manifest next update: Sun 24 Aug 2025 22:45:39 +0000 Files and hashes: 1: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) 2: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 3: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: kJ7o2zNye+sFgH1RPdAGZbp7W3kJjRqk+z2H/MObVh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9e:c8:a9:a7:2c:7e:58:94:ab:93:e7:b8:62:ea:96:34:fa:ba:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Aug 21 17:35:39 2025 GMT Not After : Aug 24 22:45:39 2025 GMT Subject: CN=AC0EC949730421B3BE032289E4BD9073B4156871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:3d:d0:bd:06:41:5c:a0:0a:bd:0e:d6:00: 29:d3:d2:96:52:62:90:79:63:80:7c:59:2f:17:34: 8c:ef:ba:b9:aa:bc:39:91:18:7c:61:8f:1d:f9:f8: 09:d1:b8:37:f0:6c:ac:78:f4:1b:6a:e0:c8:82:fd: 32:70:2d:2e:b8:05:60:94:16:0b:31:c2:d8:c6:9d: e5:fd:a8:80:75:f2:a3:d6:8a:aa:56:f7:7b:63:1a: e5:52:30:58:52:35:cd:72:5d:50:5a:fc:c0:d6:a7: 26:f4:9d:d6:98:b3:3a:4a:4e:a1:67:f4:07:47:18: ea:19:c7:01:78:41:b4:b3:8a:1a:71:ff:5d:d0:08: b9:9e:32:0c:0a:1a:2e:30:b8:2e:a3:6f:f7:2e:fe: b0:13:90:35:40:8d:6a:fb:a5:58:ed:06:fe:de:03: d3:56:3f:ff:e7:e8:a0:a0:67:89:78:6e:59:ee:1a: 38:94:81:b4:02:1d:51:77:41:95:ad:4c:7c:0a:21: fa:17:f1:c1:77:60:e1:39:f7:21:55:8d:79:a1:15: ac:2e:b6:b8:e8:ff:7d:9a:9c:37:df:dd:87:c3:7a: 5a:c3:58:98:a1:ab:d7:ab:06:04:75:e4:6f:4d:9f: f4:f7:59:1a:48:4d:41:3e:65:01:c2:f5:e5:23:07: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:C9:49:73:04:21:B3:BE:03:22:89:E4:BD:90:73:B4:15:68:71 X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:76:43:69:db:71:fd:42:6c:46:97:b2:2b:14:cd:b9:31:a7: 9f:65:d8:b8:d2:53:ba:ab:ef:2b:93:e0:b5:43:c5:72:57:c2: 61:50:dd:12:4e:72:65:0b:b4:f3:02:d3:ac:87:ad:cb:c8:e3: 3f:34:d9:5e:8e:f4:83:a9:90:37:72:9c:2d:bb:90:67:36:7f: 18:45:a8:93:06:25:a3:7e:23:40:56:9d:c9:91:b2:63:04:03: fa:a4:56:1e:a6:91:13:26:38:22:33:bb:e4:68:c9:f3:c4:77: b3:0b:0b:8d:f7:6a:45:9b:5b:3b:c2:cc:1c:a4:cd:86:73:29: 61:06:7d:12:3d:1d:26:02:53:79:4e:11:b2:0e:f1:37:4c:3c: 2b:b8:9b:8f:55:d7:b4:17:57:1f:a2:a1:99:26:85:e7:86:db: 35:b1:77:ab:9c:13:35:cb:31:9d:76:f3:fe:96:f2:b2:92:d9: 7f:98:74:aa:9e:46:f0:a5:a9:ac:c9:f0:07:f1:4e:86:75:10: 73:0b:d9:ed:ce:3d:5c:a6:d6:67:7b:3b:e9:9e:19:f1:dd:2b: bd:99:d1:a4:4b:2a:f7:62:1c:df:3d:81:82:16:c7:c2:16:16: 1d:d1:cc:27:58:f7:c2:fd:9f:29:c5:8a:3c:f6:4d:e4:12:53: 06:ca:5a:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJ7IqacsfliUq5PnuGLqljT6ulUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTA4MjExNzM1MzlaFw0yNTA4MjQyMjQ1MzlaMDMxMTAvBgNV BAMTKEFDMEVDOTQ5NzMwNDIxQjNCRTAzMjI4OUU0QkQ5MDczQjQxNTY4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Nz3QvQZBXKAKvQ7WACnT0pZS YpB5Y4B8WS8XNIzvurmqvDmRGHxhjx35+AnRuDfwbKx49Btq4MiC/TJwLS64BWCU FgsxwtjGneX9qIB18qPWiqpW93tjGuVSMFhSNc1yXVBa/MDWpyb0ndaYszpKTqFn 9AdHGOoZxwF4QbSzihpx/13QCLmeMgwKGi4wuC6jb/cu/rATkDVAjWr7pVjtBv7e A9NWP//n6KCgZ4l4blnuGjiUgbQCHVF3QZWtTHwKIfoX8cF3YOE59yFVjXmhFawu trjo/32anDff3YfDelrDWJihq9erBgR15G9Nn/T3WRpITUE+ZQHC9eUjBycdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrA7JSXMEIbO+AyKJ5L2Qc7QVaHEwHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ2Q2nbcf1CbEaXsisUzbkxp59l2LjSU7qr 7yuT4LVDxXJXwmFQ3RJOcmULtPMC06yHrcvI4z802V6O9IOpkDdynC27kGc2fxhF qJMGJaN+I0BWncmRsmMEA/qkVh6mkRMmOCIzu+RoyfPEd7MLC433akWbWzvCzByk zYZzKWEGfRI9HSYCU3lOEbIO8TdMPCu4m49V17QXVx+ioZkmheeG2zWxd6ucEzXL MZ128/6W8rKS2X+YdKqeRvClqazJ8AfxToZ1EHML2e3OPVym1md7O+meGfHdK72Z 0aRLKvdiHN89gYIWx8IWFh3RzCdY98L9nynFijz2TeQSUwbKWjw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:59 2025 by rpki-client