$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: 5JsYyRPJITNWtPj3Tx4Jevj5qlUGnHZyC3DpQDelXr8= Subject key identifier: C0:E8:5E:02:CB:A1:18:08:D5:81:2B:65:FD:AF:B5:61:63:C9:B3:77 Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 233E7702E7E7B9E3376DF239D9AE161D19306F44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 0217 Signing time: Sun 19 Oct 2025 16:00:39 +0000 Manifest this update: Sun 19 Oct 2025 15:55:39 +0000 Manifest next update: Wed 22 Oct 2025 22:52:39 +0000 Files and hashes: 1: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) 3: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: Kl6ehUNv7J5ZB9F5FzSp8u9sBdi/MEonsrbi31c8/v0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3e:77:02:e7:e7:b9:e3:37:6d:f2:39:d9:ae:16:1d:19:30:6f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Oct 19 15:55:39 2025 GMT Not After : Oct 22 22:52:39 2025 GMT Subject: CN=C0E85E02CBA11808D5812B65FDAFB56163C9B377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:dc:8a:9e:bd:fc:e2:77:00:2e:e4:83:76: c1:69:66:fd:2b:3f:ad:5b:ae:4b:18:60:21:41:29: 98:5d:5c:f6:d3:cf:71:b2:33:c1:34:4f:3b:cd:0c: 63:a7:02:f5:c5:16:69:a1:0c:81:28:3d:7a:33:16: e2:42:6e:34:eb:b5:ce:84:4f:1f:61:16:5f:d1:1e: 40:33:30:2a:95:c9:4a:c3:0d:ff:8c:48:f0:be:3c: 7e:e0:65:b1:ca:56:ca:18:4d:10:5b:73:b5:b8:9d: 98:2a:d7:ee:58:df:87:49:2b:27:ec:ca:41:b2:71: b6:70:2a:ee:f6:7b:c1:3c:fb:77:17:21:b2:27:3b: 2e:00:d6:34:7e:3e:67:ca:3e:14:73:85:28:bf:9b: b1:47:e0:41:29:bf:eb:0a:c0:8e:51:c0:d8:42:8b: fc:99:9a:45:77:4c:82:7a:b5:8d:ee:59:86:39:81: db:ac:53:04:25:10:09:55:c4:93:a9:fb:4e:8e:4a: 36:7a:a4:79:04:5b:10:45:0e:37:b1:cf:7e:a0:a7: 82:1c:0c:e3:a9:50:c7:a9:d5:bb:a4:9a:c5:8e:5d: ed:6f:bb:c0:3a:c1:91:dd:ae:c3:a7:8a:15:98:3e: 72:af:46:ea:42:63:5d:03:6b:14:2e:f4:f0:d7:82: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E8:5E:02:CB:A1:18:08:D5:81:2B:65:FD:AF:B5:61:63:C9:B3:77 X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5b:c7:b2:74:bf:28:21:26:fa:98:a8:4a:88:57:a3:e0:d1: 73:b4:fa:ec:0f:6d:bf:a4:61:78:19:4d:00:3e:d3:13:91:3b: 09:76:f5:a9:17:a2:37:7e:83:31:85:d8:2d:36:bf:4a:9a:69: a2:f2:e1:4a:16:6d:06:54:81:09:7b:75:2a:e7:72:68:ed:f5: 02:81:7f:f1:7f:f9:2a:86:1c:a4:ee:39:7e:d0:7b:66:e1:bb: d2:5f:21:59:54:80:0a:23:d4:d1:fd:5f:fa:60:33:46:f7:e7: 7e:39:d9:04:a8:9b:58:16:5f:43:56:df:69:6f:ca:91:54:63: 02:02:b3:7e:30:e4:4f:38:48:26:fe:a0:30:c2:07:4f:f5:ce: f0:96:aa:66:e7:b4:4f:3a:23:5f:07:ee:37:80:12:b1:86:db: 83:bb:f1:f0:04:8e:c6:b8:2f:19:c7:d7:f0:93:08:4c:ff:7f: f2:d4:f9:d3:e3:88:0e:d7:c7:84:44:e9:04:2d:28:dc:04:97: c2:60:ce:0b:68:d0:f0:01:e5:31:90:bf:64:37:a5:c1:d4:65: 9f:10:f9:56:7b:b3:5d:32:c6:d7:21:5b:66:0b:a2:8b:b5:1c: 60:ca:81:18:88:b8:05:8a:8b:d3:f4:fd:4d:00:98:d4:5f:f5: 1a:de:4e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIz53AufnueM3bfI52a4WHRkwb0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTEwMTkxNTU1MzlaFw0yNTEwMjIyMjUyMzlaMDMxMTAvBgNV BAMTKEMwRTg1RTAyQ0JBMTE4MDhENTgxMkI2NUZEQUZCNTYxNjNDOUIzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnetyKnr384ncALuSDdsFpZv0r P61brksYYCFBKZhdXPbTz3GyM8E0TzvNDGOnAvXFFmmhDIEoPXozFuJCbjTrtc6E Tx9hFl/RHkAzMCqVyUrDDf+MSPC+PH7gZbHKVsoYTRBbc7W4nZgq1+5Y34dJKyfs ykGycbZwKu72e8E8+3cXIbInOy4A1jR+PmfKPhRzhSi/m7FH4EEpv+sKwI5RwNhC i/yZmkV3TIJ6tY3uWYY5gdusUwQlEAlVxJOp+06OSjZ6pHkEWxBFDjexz36gp4Ic DOOpUMep1bukmsWOXe1vu8A6wZHdrsOnihWYPnKvRupCY10DaxQu9PDXgp3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOheAsuhGAjVgStl/a+1YWPJs3cwHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9bx7J0vyghJvqYqEqIV6Pg0XO0+uwPbb+k YXgZTQA+0xOROwl29akXojd+gzGF2C02v0qaaaLy4UoWbQZUgQl7dSrncmjt9QKB f/F/+SqGHKTuOX7Qe2bhu9JfIVlUgAoj1NH9X/pgM0b353452QSom1gWX0NW32lv ypFUYwICs34w5E84SCb+oDDCB0/1zvCWqmbntE86I18H7jeAErGG24O78fAEjsa4 LxnH1/CTCEz/f/LU+dPjiA7Xx4RE6QQtKNwEl8Jgzgto0PAB5TGQv2Q3pcHUZZ8Q +VZ7s10yxtchW2YLoou1HGDKgRiIuAWKi9P0/U0AmNRf9RreTpA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:38:19 2025 by rpki-client