$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: stGG7vHcfI9F5vESC+FmcVG6EMDZQKicbSfNnOJOhqQ= Subject key identifier: C3:EB:4E:71:F2:53:25:C7:07:82:3E:0C:4C:4A:37:3A:61:D8:24:62 Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 437A72252B652D696DEB7623CBF755115B620DBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 04EE Signing time: Sun 20 Jul 2025 03:21:29 +0000 Manifest this update: Sun 20 Jul 2025 03:16:29 +0000 Manifest next update: Wed 23 Jul 2025 14:52:29 +0000 Files and hashes: 1: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=) 2: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: 5M5JzKQbyMb8iRGMAEPJTMr/AsR5izQZofzDJ8Sl3rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7a:72:25:2b:65:2d:69:6d:eb:76:23:cb:f7:55:11:5b:62:0d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Jul 20 03:16:29 2025 GMT Not After : Jul 23 14:52:29 2025 GMT Subject: CN=C3EB4E71F25325C707823E0C4C4A373A61D82462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:0c:4f:3a:e3:12:33:e6:6d:1b:4f:cd:ed: 12:5d:b6:79:dd:82:7f:c1:27:03:0d:0e:47:da:0a: be:81:10:33:a4:e9:c3:0d:91:cc:9d:33:fa:67:eb: 3e:ae:03:45:f4:c4:d5:38:66:99:a3:f2:85:9b:d8: 46:85:5a:85:3d:b0:9d:4a:eb:9f:ef:89:51:9e:f7: c5:22:c8:d8:6d:b4:0d:7e:2d:38:00:b5:fa:56:d0: 74:15:31:9f:2b:b3:06:e6:7c:b3:a3:7c:ba:b1:94: 2c:14:ab:fd:65:81:d5:20:33:cb:30:4c:1c:70:34: de:a8:64:72:11:9f:e6:f0:85:80:b6:db:f5:cf:9d: 5c:75:4e:64:3c:80:34:ca:13:ad:2b:b8:f0:28:11: 77:9c:27:2e:c7:2a:3f:93:15:03:f0:62:2f:60:bf: bb:26:40:0e:d5:50:f7:36:22:46:30:96:d5:b8:d4: 6f:a9:56:a4:d4:cb:06:fb:4a:6a:8c:a8:0d:10:3f: 85:fd:cc:9b:04:01:4f:21:50:3c:4d:3d:16:02:49: 6a:79:9c:9d:5b:2b:0c:14:6e:88:6e:61:71:a4:e5: 81:57:9c:88:01:13:ef:8e:79:b1:d2:3b:16:cc:41: 85:57:75:af:dc:92:d6:1d:37:d2:09:f1:85:ab:69: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:4E:71:F2:53:25:C7:07:82:3E:0C:4C:4A:37:3A:61:D8:24:62 X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d1:c8:1a:4e:c1:30:20:d2:d8:d4:6b:6a:5c:30:8f:8f:3a: c5:bf:1a:96:b3:65:cc:ec:72:87:e3:cc:9d:99:ec:b9:c2:4b: 20:b5:70:6b:33:86:2f:2e:cb:9e:7a:12:0b:93:a1:93:f7:54: aa:7d:be:f7:61:0e:80:05:ea:69:8f:d9:b7:23:19:64:ec:36: 9d:e2:1c:04:0b:98:3e:a2:54:dc:ad:4f:d4:ff:5c:81:a8:7f: 1e:16:18:d6:fc:29:56:c2:dd:e3:d0:90:3f:44:3a:2e:24:be: 48:3c:e7:22:7c:42:b6:cc:65:c1:c9:d4:72:16:f9:3d:95:de: 8f:dd:e7:e4:18:4a:2b:e8:03:28:00:29:70:2b:53:04:21:c6: a7:83:d6:52:db:be:7d:9f:36:0a:1f:c4:30:ff:65:9c:2a:87: 41:04:0e:92:db:b3:1c:e6:8b:f3:21:74:f9:2d:79:73:8a:62: e2:67:cc:80:56:30:07:09:5b:9b:03:97:86:47:8e:10:23:0e: c8:e2:bc:10:96:98:e8:76:0f:18:0b:21:33:84:cc:46:ee:89: 30:14:27:d7:c7:00:0f:c0:b3:d6:e5:57:65:cf:1d:2c:f6:e2: 6d:54:ed:a3:f9:49:ea:b7:34:9a:c2:8b:13:fc:5f:1a:2a:2e: 2e:63:46:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3pyJStlLWlt63Yjy/dVEVtiDb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNTA3MjAwMzE2MjlaFw0yNTA3MjMxNDUyMjlaMDMxMTAvBgNV BAMTKEMzRUI0RTcxRjI1MzI1QzcwNzgyM0UwQzRDNEEzNzNBNjFEODI0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd7wxPOuMSM+ZtG0/N7RJdtnnd gn/BJwMNDkfaCr6BEDOk6cMNkcydM/pn6z6uA0X0xNU4Zpmj8oWb2EaFWoU9sJ1K 65/viVGe98UiyNhttA1+LTgAtfpW0HQVMZ8rswbmfLOjfLqxlCwUq/1lgdUgM8sw TBxwNN6oZHIRn+bwhYC22/XPnVx1TmQ8gDTKE60ruPAoEXecJy7HKj+TFQPwYi9g v7smQA7VUPc2IkYwltW41G+pVqTUywb7SmqMqA0QP4X9zJsEAU8hUDxNPRYCSWp5 nJ1bKwwUbohuYXGk5YFXnIgBE++OebHSOxbMQYVXda/cktYdN9IJ8YWradjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+tOcfJTJccHgj4MTEo3OmHYJGIwHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLRyBpOwTAg0tjUa2pcMI+POsW/GpazZczs cofjzJ2Z7LnCSyC1cGszhi8uy556EguToZP3VKp9vvdhDoAF6mmP2bcjGWTsNp3i HAQLmD6iVNytT9T/XIGofx4WGNb8KVbC3ePQkD9EOi4kvkg85yJ8QrbMZcHJ1HIW +T2V3o/d5+QYSivoAygAKXArUwQhxqeD1lLbvn2fNgofxDD/ZZwqh0EEDpLbsxzm i/MhdPkteXOKYuJnzIBWMAcJW5sDl4ZHjhAjDsjivBCWmOh2DxgLITOEzEbuiTAU J9fHAA/As9blV2XPHSz24m1U7aP5Seq3NJrCixP8XxoqLi5jRvw= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:00 2025 by rpki-client