$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: LaTYoyghItMZs1h4omIKMKTemHZR4UoVyssIqpCubBY= Subject key identifier: 0D:53:37:A4:FD:77:1D:69:FF:E0:2D:55:A6:12:13:A0:77:24:9D:2E Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 634BCE4213E7B24834C7B8EE430D6F8924A59A88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 04EE Signing time: Sun 20 Jul 2025 02:50:43 +0000 Manifest this update: Sun 20 Jul 2025 02:45:43 +0000 Manifest next update: Wed 23 Jul 2025 03:59:43 +0000 Files and hashes: 1: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 2: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: cH9U++bce1y6OmlcqP69AT6bjzip6OiXsa0hpWAa0bc=) 3: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 4: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 5: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 6: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4b:ce:42:13:e7:b2:48:34:c7:b8:ee:43:0d:6f:89:24:a5:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Jul 20 02:45:43 2025 GMT Not After : Jul 23 03:59:43 2025 GMT Subject: CN=0D5337A4FD771D69FFE02D55A61213A077249D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:1d:7d:4f:49:13:15:64:4c:66:81:6d:8f: 9a:21:e1:49:fc:7d:00:1d:b8:ec:11:f7:0f:2c:01: c6:66:5b:dd:2c:91:92:dc:fa:a1:04:97:b9:ea:28: 94:ef:8a:d7:48:69:28:5a:6b:14:82:38:6a:49:77: 67:57:03:cb:06:28:57:5d:17:07:9b:02:c8:fc:8a: 12:09:01:c0:7d:f1:0b:02:ab:65:f3:4f:36:e2:98: a1:e6:f7:1f:8e:0b:db:0f:f9:b4:58:4b:c2:e3:ba: 0d:ff:59:07:47:2a:61:ee:2f:3c:4b:5c:e5:90:66: 4c:a4:4d:a0:35:98:b5:89:af:6b:1a:96:4f:aa:4c: 0a:c7:1f:8e:c1:96:df:19:d9:8a:22:34:a6:eb:9e: 25:90:76:dc:4f:75:d2:a3:79:65:c2:72:bc:64:28: 1f:b1:b4:f5:a8:de:e6:d9:0c:e5:ee:69:2f:f3:24: c6:87:02:a3:3c:9e:c9:6f:d6:a1:40:01:2b:d0:47: 6e:c3:51:d4:53:bb:80:e8:84:1e:a3:f8:c8:27:d9: 7d:f7:d3:03:70:ba:a0:a4:ed:ee:2a:9e:85:ac:ce: 4a:27:67:2e:05:fb:24:6f:65:51:b8:3e:fd:f3:bb: 72:cf:8f:aa:75:96:fb:89:7d:11:00:11:a2:1b:cc: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:53:37:A4:FD:77:1D:69:FF:E0:2D:55:A6:12:13:A0:77:24:9D:2E X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bd:30:54:8e:a0:67:a3:32:f9:00:b2:cd:88:da:82:ad:8e: 0e:a2:d1:25:73:1c:1c:26:8c:e7:15:e9:6d:c2:db:1b:62:3c: 65:2d:ac:a2:33:5d:41:c7:4e:64:73:f0:db:da:b5:74:f6:97: 43:a3:de:00:8c:6d:ad:5b:2d:51:4d:d7:55:4c:87:54:84:51: 3c:9a:7a:35:49:28:0b:eb:d6:91:87:0b:31:25:ac:04:c9:12: fb:53:06:1f:2c:db:9f:88:3d:62:51:30:00:8c:ef:7e:63:98: e2:5e:e6:84:e4:c4:70:3d:01:5e:b2:b1:1f:62:7b:c6:80:ba: d1:28:e1:e3:f0:ea:0f:e5:55:50:5e:04:16:90:a5:22:34:8b: bb:07:b5:7b:47:ff:07:57:5b:17:bb:0f:3c:48:d3:ee:46:9d: 19:d3:17:38:35:6e:af:97:48:65:58:ef:e3:4e:6a:d9:07:23: b5:91:f8:54:69:a7:21:84:5c:be:aa:6f:82:7a:c4:eb:ce:5b: cf:ca:c6:58:51:85:81:66:74:0f:5a:3f:2b:ad:c0:e5:db:3a: 05:4c:63:e7:a2:5a:21:65:c1:8f:23:8c:b1:d2:3c:70:37:12: 26:d1:76:56:ed:7a:fe:0b:00:aa:34:d6:a4:87:0d:88:2d:cd: 87:92:b0:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0vOQhPnskg0x7juQw1viSSlmogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTA3MjAwMjQ1NDNaFw0yNTA3MjMwMzU5NDNaMDMxMTAvBgNV BAMTKDBENTMzN0E0RkQ3NzFENjlGRkUwMkQ1NUE2MTIxM0EwNzcyNDlEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnh19T0kTFWRMZoFtj5oh4Un8 fQAduOwR9w8sAcZmW90skZLc+qEEl7nqKJTvitdIaShaaxSCOGpJd2dXA8sGKFdd FwebAsj8ihIJAcB98QsCq2XzTzbimKHm9x+OC9sP+bRYS8Ljug3/WQdHKmHuLzxL XOWQZkykTaA1mLWJr2salk+qTArHH47Blt8Z2YoiNKbrniWQdtxPddKjeWXCcrxk KB+xtPWo3ubZDOXuaS/zJMaHAqM8nslv1qFAASvQR27DUdRTu4DohB6j+Mgn2X33 0wNwuqCk7e4qnoWszkonZy4F+yRvZVG4Pv3zu3LPj6p1lvuJfREAEaIbzPG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVM3pP13HWn/4C1VphIToHcknS4wHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq9MFSOoGejMvkAss2I2oKtjg6i0SVzHBwm jOcV6W3C2xtiPGUtrKIzXUHHTmRz8NvatXT2l0Oj3gCMba1bLVFN11VMh1SEUTya ejVJKAvr1pGHCzElrATJEvtTBh8s25+IPWJRMACM735jmOJe5oTkxHA9AV6ysR9i e8aAutEo4ePw6g/lVVBeBBaQpSI0i7sHtXtH/wdXWxe7DzxI0+5GnRnTFzg1bq+X SGVY7+NOatkHI7WR+FRppyGEXL6qb4J6xOvOW8/KxlhRhYFmdA9aPyutwOXbOgVM Y+eiWiFlwY8jjLHSPHA3EibRdlbtev4LAKo01qSHDYgtzYeSsGg= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:58 2025 by rpki-client