$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: A15+yDKMe2MJS62hueQfo97JHW/rAY8ZP8Kqs5m1ce4= Subject key identifier: AA:37:36:07:15:06:5A:73:5F:95:C4:72:1A:94:09:FB:0F:22:BE:27 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 29953775D4A4B2149D727F2A7A0AAEE33CF641A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01A1 Signing time: Sun 20 Jul 2025 00:21:20 +0000 Manifest this update: Sun 20 Jul 2025 00:16:20 +0000 Manifest next update: Wed 23 Jul 2025 02:59:20 +0000 Files and hashes: 1: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: cWHJAdhMo3cUB7SJI/qLeHQjD7fvumO0S0ippQ4UQLg=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: 8fcVvUOnHnEDxc1LP+W4ikZfxvy9KJkdRccQg7Mp1b8=) 3: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: cl1IO/4Comb+/nKzlW3mSBMkOa0ZnTNg7/SVECs1MCo=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:95:37:75:d4:a4:b2:14:9d:72:7f:2a:7a:0a:ae:e3:3c:f6:41:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Jul 20 00:16:20 2025 GMT Not After : Jul 23 02:59:20 2025 GMT Subject: CN=AA37360715065A735F95C4721A9409FB0F22BE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:00:ef:84:f9:46:0a:2e:9f:83:62:25:2d: cf:7f:2f:de:6a:07:2c:ef:e0:fd:5e:fd:00:61:19: fb:83:25:6f:bb:d5:73:91:ba:98:00:f0:27:dc:e5: 86:10:c0:fc:08:0c:75:64:f8:61:36:7e:0f:22:a8: 8e:84:78:03:65:cd:d7:b0:dd:74:d9:62:30:dc:05: 6f:50:f0:25:1b:57:82:cc:f6:fc:64:a6:58:a2:96: c5:23:b6:5b:09:01:a8:41:46:b2:41:61:94:af:f9: 0c:a0:f4:bd:ec:3f:b6:76:20:cd:42:04:ec:82:54: 87:2a:d4:f6:fe:82:89:6e:b6:eb:d3:71:11:a8:5c: c7:b4:77:35:63:01:06:63:f1:b6:de:2a:09:cd:c1: 42:ef:7e:31:06:49:a2:cd:aa:96:b7:c2:a4:68:e2: 82:6e:79:f3:72:a4:f2:2c:df:ea:2a:2c:73:d9:22: 3d:09:27:58:2e:6f:95:7b:6b:62:b1:c1:8d:32:a5: be:7d:9a:01:1d:fe:1e:c7:15:fe:7d:f4:b8:50:3e: 1a:86:c3:a5:9c:0c:81:15:b1:05:82:5e:8e:55:f1: b6:6e:b2:19:fe:cf:3c:57:95:1d:3e:16:f0:89:5b: c1:7c:fc:ae:bf:fb:cf:ab:00:64:2b:44:b8:e6:22: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:37:36:07:15:06:5A:73:5F:95:C4:72:1A:94:09:FB:0F:22:BE:27 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:63:c6:e2:70:14:9d:9c:e4:77:cc:46:2f:1c:4d:8e:bd:0c: 3f:78:0e:6b:22:41:eb:cd:6e:0a:89:6b:43:76:d5:46:f9:6c: 60:73:28:59:00:dc:fd:b9:32:e2:5c:75:28:82:9b:fd:f5:1e: a0:9e:29:a6:d0:4d:8c:82:fd:37:89:4a:85:dc:95:3b:25:7a: d5:b5:50:7f:22:e1:22:47:9c:20:64:6a:77:38:9a:bb:fa:5d: 54:c5:f0:81:f7:79:dd:28:fb:b6:63:cd:c1:ff:13:43:8e:22: 10:4f:d5:61:c3:ff:35:1b:7e:aa:68:78:e6:3b:de:b7:b5:b7: b4:94:dd:2f:ca:51:cb:ad:c1:4b:aa:fa:57:b4:19:7c:a1:94: 84:06:34:1f:a9:aa:9d:b7:d7:99:b0:5b:8a:cd:56:8b:7f:4b: f5:09:35:fd:18:1c:51:12:85:97:85:eb:61:e4:6e:22:86:93: e5:fa:8b:6a:1a:cd:e0:58:7d:50:c4:c8:64:a1:eb:99:c6:e7: 48:d7:a4:ad:16:94:c0:87:36:2e:df:f5:48:9a:77:fc:17:d6: 41:c2:50:8e:db:78:55:0a:da:5f:5e:be:d1:3b:a9:b1:83:53: cc:ef:1b:c6:14:fe:77:65:9e:c8:b9:28:7b:1b:d9:25:2c:56: d7:ea:f9:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZU3ddSkshSdcn8qegqu4zz2QaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTA3MjAwMDE2MjBaFw0yNTA3MjMwMjU5MjBaMDMxMTAvBgNV BAMTKEFBMzczNjA3MTUwNjVBNzM1Rjk1QzQ3MjFBOTQwOUZCMEYyMkJFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iADvhPlGCi6fg2IlLc9/L95q Byzv4P1e/QBhGfuDJW+71XORupgA8Cfc5YYQwPwIDHVk+GE2fg8iqI6EeANlzdew 3XTZYjDcBW9Q8CUbV4LM9vxkpliilsUjtlsJAahBRrJBYZSv+Qyg9L3sP7Z2IM1C BOyCVIcq1Pb+golutuvTcRGoXMe0dzVjAQZj8bbeKgnNwULvfjEGSaLNqpa3wqRo 4oJuefNypPIs3+oqLHPZIj0JJ1gub5V7a2KxwY0ypb59mgEd/h7HFf599LhQPhqG w6WcDIEVsQWCXo5V8bZushn+zzxXlR0+FvCJW8F8/K6/+8+rAGQrRLjmIn29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqjc2BxUGWnNflcRyGpQJ+w8ivicwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFjxuJwFJ2c5HfMRi8cTY69DD94DmsiQevN bgqJa0N21Ub5bGBzKFkA3P25MuJcdSiCm/31HqCeKabQTYyC/TeJSoXclTsletW1 UH8i4SJHnCBkanc4mrv6XVTF8IH3ed0o+7ZjzcH/E0OOIhBP1WHD/zUbfqpoeOY7 3re1t7SU3S/KUcutwUuq+le0GXyhlIQGNB+pqp2315mwW4rNVot/S/UJNf0YHFES hZeF62HkbiKGk+X6i2oazeBYfVDEyGSh65nG50jXpK0WlMCHNi7f9Uiad/wX1kHC UI7beFUK2l9evtE7qbGDU8zvG8YU/ndlnsi5KHsb2SUsVtfq+c0= -----END CERTIFICATE-----Generated at Mon Jul 21 23:38:10 2025 by rpki-client