$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: oxGL0xKmjUam9ZINm8/T2+IL/jj+FEB9UtLzJgZWqUs= Subject key identifier: 72:15:92:C5:34:19:03:1B:F7:47:9C:BE:3E:1E:BC:DD:B7:DF:9A:52 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 1B55B85C2953B9C863D154303B2D16ABDF114AA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 09:01:10 +0000 Manifest this update: Wed 04 Jun 2025 08:56:10 +0000 Manifest next update: Sat 07 Jun 2025 18:29:10 +0000 Files and hashes: 1: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=) 2: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=) 3: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=) 4: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: a6IofrQNqNbKkcN0IIrhQ8HZGYDmP3Zr5IwwuhR+rRs=) 5: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:55:b8:5c:29:53:b9:c8:63:d1:54:30:3b:2d:16:ab:df:11:4a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Jun 4 08:56:10 2025 GMT Not After : Jun 7 18:29:10 2025 GMT Subject: CN=721592C53419031BF7479CBE3E1EBCDDB7DF9A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:d2:65:2f:90:e0:83:95:b5:b0:79:98:6d: 85:86:30:bc:bc:d1:04:51:5b:23:80:e1:d0:1a:0e: c3:66:6d:2f:89:bb:6f:b3:66:0c:b2:3b:36:05:90: ed:b3:ce:ae:f5:24:51:89:2f:f3:c1:79:18:f2:9e: f4:ce:a5:fe:86:b1:91:80:5b:9e:7c:6e:57:8b:ae: de:c5:43:b3:b8:2a:b0:b6:2a:60:ee:f1:7f:f1:5c: 0a:15:a8:ad:4e:2c:26:b2:f4:00:29:60:dd:c2:d7: 02:0f:ee:50:9d:e1:9d:61:56:1a:1b:a2:89:6f:fb: e0:48:20:af:11:a5:2b:72:53:e8:f8:17:4b:29:3d: b5:9b:b3:a6:f8:01:a2:cc:58:19:6b:0c:de:ad:09: cc:d4:25:63:e1:5e:db:9a:33:23:8e:bb:65:c4:85: 72:2f:96:3b:be:17:d6:1e:b9:eb:98:32:f1:90:a4: da:ca:90:18:08:92:b0:04:30:07:76:a6:72:18:8c: 54:32:e9:36:f6:06:9e:3b:3d:f6:b0:fc:63:7c:5e: 5f:3a:91:37:84:8f:94:3c:a1:3d:e1:0b:a7:f8:53: d6:9f:5c:5a:2f:5f:97:ab:90:39:e5:77:20:0e:54: 80:1a:f1:1d:1d:a7:77:d1:8b:b5:9a:46:72:9d:41: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:15:92:C5:34:19:03:1B:F7:47:9C:BE:3E:1E:BC:DD:B7:DF:9A:52 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f7:64:43:38:14:77:7e:b9:fd:52:95:46:89:dc:10:4a:68: 40:f2:81:ef:51:83:22:95:25:49:c9:7d:6f:9f:30:1c:38:b0: 20:a4:a5:a4:3e:df:96:cf:a2:80:fc:fd:8e:b7:89:0d:32:1d: 87:70:1f:72:09:b5:38:a7:d8:bf:62:03:b8:7e:83:2b:c8:3b: 3a:2f:e0:03:6b:39:9e:b0:31:58:77:c7:b5:74:a3:7c:90:7f: 3c:3d:79:ef:d4:bd:00:66:df:c1:c6:5e:61:77:b2:1d:81:53: 8e:81:ca:66:80:5e:dd:37:c5:19:f1:fd:87:62:0e:6c:3c:93: 23:dc:15:25:12:a1:f0:38:d8:19:3e:6e:f8:0e:97:86:1f:83: 70:9a:b2:43:ff:cc:aa:fe:cd:da:f5:d5:b9:9a:b6:66:99:fa: 22:17:6f:12:2b:39:e5:bb:ea:f3:09:d8:ff:54:7f:f5:87:77: be:66:6e:0f:bc:76:67:0d:8d:3e:a8:99:87:74:3f:ac:fd:5b: a0:15:69:c1:71:d2:36:43:d4:d1:c3:b6:fc:40:bb:47:33:7a: b8:17:12:e9:37:40:28:2d:c1:21:47:38:38:c7:dd:70:3d:57: 24:f0:36:19:81:d8:bf:54:e8:ea:f6:a0:14:b4:b0:ee:21:1f: c4:6a:e5:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1W4XClTuchj0VQwOy0Wq98RSqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNTA2MDQwODU2MTBaFw0yNTA2MDcxODI5MTBaMDMxMTAvBgNV BAMTKDcyMTU5MkM1MzQxOTAzMUJGNzQ3OUNCRTNFMUVCQ0REQjdERjlBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4tJlL5Dgg5W1sHmYbYWGMLy8 0QRRWyOA4dAaDsNmbS+Ju2+zZgyyOzYFkO2zzq71JFGJL/PBeRjynvTOpf6GsZGA W558bleLrt7FQ7O4KrC2KmDu8X/xXAoVqK1OLCay9AApYN3C1wIP7lCd4Z1hVhob oolv++BIIK8RpStyU+j4F0spPbWbs6b4AaLMWBlrDN6tCczUJWPhXtuaMyOOu2XE hXIvlju+F9YeueuYMvGQpNrKkBgIkrAEMAd2pnIYjFQy6Tb2Bp47Pfaw/GN8Xl86 kTeEj5Q8oT3hC6f4U9afXFovX5erkDnldyAOVIAa8R0dp3fRi7WaRnKdQTFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchWSxTQZAxv3R5y+Ph683bffmlIwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALz3ZEM4FHd+uf1SlUaJ3BBKaEDyge9RgyKV JUnJfW+fMBw4sCCkpaQ+35bPooD8/Y63iQ0yHYdwH3IJtTin2L9iA7h+gyvIOzov 4ANrOZ6wMVh3x7V0o3yQfzw9ee/UvQBm38HGXmF3sh2BU46BymaAXt03xRnx/Ydi Dmw8kyPcFSUSofA42Bk+bvgOl4Yfg3CaskP/zKr+zdr11bmatmaZ+iIXbxIrOeW7 6vMJ2P9Uf/WHd75mbg+8dmcNjT6omYd0P6z9W6AVacFx0jZD1NHDtvxAu0czergX Euk3QCgtwSFHODjH3XA9VyTwNhmB2L9U6Or2oBS0sO4hH8Rq5RM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:40 2025 by rpki-client