$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: Mie1CbuhYviMKXy8P8d9mxNzD7oz8hFD1mOuyh44lYk= Subject key identifier: B7:76:DC:1D:25:7C:AE:A1:32:BD:D4:87:EA:80:E0:16:B7:4E:9F:C5 Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 3288A3D92FB6E7DA788AF9804C1B2777ABF3F955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 0186 Signing time: Mon 21 Jul 2025 18:01:57 +0000 Manifest this update: Mon 21 Jul 2025 17:56:57 +0000 Manifest next update: Fri 25 Jul 2025 01:25:57 +0000 Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) 2: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: OhIyX6tdU/Uq6AXOc+MnsNqGE8ZWtZLKcG2ieAkjScY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:88:a3:d9:2f:b6:e7:da:78:8a:f9:80:4c:1b:27:77:ab:f3:f9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Jul 21 17:56:57 2025 GMT Not After : Jul 25 01:25:57 2025 GMT Subject: CN=B776DC1D257CAEA132BDD487EA80E016B74E9FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:ba:6c:78:e3:1b:98:31:87:a4:13:b6:4a: b2:95:b3:df:10:f7:0f:fd:08:00:5c:68:97:6b:94: 1d:eb:a6:95:40:84:16:40:d0:bc:ad:77:40:de:97: 51:3a:36:92:f3:f5:8d:12:e5:4c:be:2f:cf:b0:8c: 8e:47:a6:5c:16:34:37:b1:ae:2f:c2:24:23:0a:a3: 26:22:27:20:f2:d6:1c:5a:e0:53:03:54:6c:17:7a: 5d:d6:7f:46:f1:4d:82:6b:3c:6a:b0:a1:d5:1e:61: e6:a0:8f:8d:56:f0:83:48:4a:89:16:05:c4:44:eb: fe:21:c0:ff:90:70:14:8f:0c:ab:7a:4f:3f:ea:ec: 7e:bb:08:7d:0a:11:ca:d4:64:31:98:11:b6:74:b4: ed:b9:7d:36:5c:d3:70:7e:91:3c:5a:73:fc:d9:be: 5e:ed:c0:93:9c:eb:e2:22:28:56:5d:47:67:9e:65: 50:ce:31:3e:5d:99:6e:25:3a:84:aa:0c:30:b4:9c: 39:ac:56:93:01:1a:dc:16:d2:21:7d:9c:93:5b:f2: 21:18:89:44:95:ba:fe:07:f3:ac:37:aa:17:2b:f9: 25:e8:9b:a1:81:11:c5:d5:e4:b6:ef:61:8b:07:13: ef:39:41:f8:4c:98:5f:35:bb:69:38:04:25:5b:dc: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:76:DC:1D:25:7C:AE:A1:32:BD:D4:87:EA:80:E0:16:B7:4E:9F:C5 X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fc:12:8f:16:c6:cb:8a:c6:5c:40:60:ce:59:e7:c0:0b:bb: de:08:89:b8:d2:54:17:46:ef:35:79:ed:fa:e9:3f:a6:81:9b: 2c:be:56:ba:00:34:dd:48:36:e5:e7:36:a6:91:b6:76:f8:12: e7:df:e3:c7:25:ec:1a:5d:fa:3f:b0:f9:9d:f7:75:e5:0c:86: bc:32:3d:4b:07:03:83:7a:c1:9e:50:0e:b7:19:da:f2:91:27: f2:06:fd:15:eb:71:f2:88:8a:30:aa:2a:ac:0d:16:c8:46:7b: 9d:56:ad:27:b8:39:bd:b4:05:14:bd:5b:4f:32:5f:71:73:2a: 34:d5:95:0f:34:f3:a3:44:62:51:48:00:bb:e6:d7:58:6b:8d: 71:e6:89:0a:da:5d:79:6c:e0:c8:e3:a7:2e:c2:11:b8:7b:09: 96:7f:89:74:d9:91:d5:3c:1f:fd:2e:6d:9a:7b:1f:de:35:f6: f1:98:9a:16:1e:ff:59:ce:9c:c3:2a:6f:ec:ec:78:b8:32:03: 47:e9:a9:a3:e6:17:84:47:0d:cf:61:4e:6b:27:9b:8b:5f:9a: 45:5e:0c:b7:29:58:a1:22:bb:4b:e1:29:21:5b:18:65:0b:f7: f8:98:14:4b:29:73:1c:f8:8f:b4:48:5f:bb:49:94:36:9f:65: 60:53:8e:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoij2S+259p4ivmATBsnd6vz+VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTA3MjExNzU2NTdaFw0yNTA3MjUwMTI1NTdaMDMxMTAvBgNV BAMTKEI3NzZEQzFEMjU3Q0FFQTEzMkJERDQ4N0VBODBFMDE2Qjc0RTlGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/rpseOMbmDGHpBO2SrKVs98Q 9w/9CABcaJdrlB3rppVAhBZA0Lytd0Del1E6NpLz9Y0S5Uy+L8+wjI5HplwWNDex ri/CJCMKoyYiJyDy1hxa4FMDVGwXel3Wf0bxTYJrPGqwodUeYeagj41W8INISokW BcRE6/4hwP+QcBSPDKt6Tz/q7H67CH0KEcrUZDGYEbZ0tO25fTZc03B+kTxac/zZ vl7twJOc6+IiKFZdR2eeZVDOMT5dmW4lOoSqDDC0nDmsVpMBGtwW0iF9nJNb8iEY iUSVuv4H86w3qhcr+SXom6GBEcXV5LbvYYsHE+85QfhMmF81u2k4BCVb3P9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3bcHSV8rqEyvdSH6oDgFrdOn8UwHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn8Eo8WxsuKxlxAYM5Z58ALu94IibjSVBdG 7zV57frpP6aBmyy+VroANN1INuXnNqaRtnb4Euff48cl7Bpd+j+w+Z33deUMhrwy PUsHA4N6wZ5QDrcZ2vKRJ/IG/RXrcfKIijCqKqwNFshGe51WrSe4Ob20BRS9W08y X3FzKjTVlQ8086NEYlFIALvm11hrjXHmiQraXXls4Mjjpy7CEbh7CZZ/iXTZkdU8 H/0ubZp7H9419vGYmhYe/1nOnMMqb+zseLgyA0fpqaPmF4RHDc9hTmsnm4tfmkVe DLcpWKEiu0vhKSFbGGUL9/iYFEspcxz4j7RIX7tJlDafZWBTjho= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:25 2025 by rpki-client