$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: y+tKcqsUPfI1i/JwWbxqqQvJefzszdhxUNos47FkHnE= Subject key identifier: FC:09:69:9E:62:F8:7C:44:D5:81:33:E7:66:EF:88:DD:81:4A:11:16 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 0E510AB2CDFD67BB882ACC0260B4CF5433123F87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 04BF Signing time: Thu 03 Apr 2025 16:41:03 +0000 Manifest this update: Thu 03 Apr 2025 16:36:03 +0000 Manifest next update: Mon 07 Apr 2025 04:18:03 +0000 Files and hashes: 1: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: IiLRYF0xuupK9NLr/uHVK1bKp5eYEphsIJ8xD5fLF50=) 2: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: EofXMeQ3rQxAMPrxu14cOWyeKj+CAQJFfwVa/5Ug6IM=) 3: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: suwrafb9tqASxxDVH33nr5LVYCbJJmQzXeiotL7Kfnk=) 4: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: f00G0Ym1ByDy1/qaeBLTX62vBHyBJkGQ88rOwSYKEAQ=) 5: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: W8X6r3JanpvGeoa+e5QvEzIjBLTO+VwBEX5tmADWxPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:51:0a:b2:cd:fd:67:bb:88:2a:cc:02:60:b4:cf:54:33:12:3f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Apr 3 16:36:03 2025 GMT Not After : Apr 7 04:18:03 2025 GMT Subject: CN=FC09699E62F87C44D58133E766EF88DD814A1116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:8c:be:93:bb:fa:72:64:f9:9b:cf:d3:c5: cd:ac:06:79:d9:67:1e:af:36:16:3e:31:cb:da:5b: 1d:65:66:ae:ec:f8:8b:f9:af:78:6b:16:ef:27:d3: 31:0e:19:f6:e7:b0:db:8e:1c:6b:ab:f9:e3:18:64: 95:fc:a8:d2:0a:b5:da:52:09:2c:30:47:13:4b:49: 15:89:53:94:d6:60:4b:19:e3:c5:21:3b:3e:c0:9c: 1f:6b:36:67:60:a6:2b:ef:d2:76:f9:81:95:50:fb: d9:4d:84:38:06:d5:35:c2:e8:bc:fb:f0:57:d4:99: 30:23:a0:72:12:e6:02:5b:60:68:3c:e4:a3:bd:28: 75:9d:db:8f:d4:ab:7e:8c:7f:3f:af:36:1f:ef:13: 2c:40:74:22:9f:bb:af:76:f0:fc:2b:23:f8:b7:bb: ae:ea:56:63:95:6f:8e:00:7f:a3:cb:07:a3:53:ee: ec:4e:a0:71:56:a5:58:ea:3b:f5:b9:2b:78:0b:ec: cd:01:dc:5e:cc:ab:17:52:69:d9:72:55:ec:45:51: 18:a6:8e:d4:8d:3b:d9:90:53:6a:6f:88:d3:db:bc: 59:9b:4d:93:55:00:b5:4f:72:a1:c3:d5:97:28:3f: 2f:9d:a0:bf:4a:02:f0:bf:4c:7c:a3:92:49:11:8a: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:09:69:9E:62:F8:7C:44:D5:81:33:E7:66:EF:88:DD:81:4A:11:16 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f0:3a:07:d4:3b:96:d0:39:8c:0d:9a:d0:91:2e:43:9f:69: 2e:2a:ea:fe:38:fc:83:84:c5:4c:64:dc:32:74:c8:c5:79:9b: 9c:7e:ea:e1:95:3d:e0:1f:0a:a6:4f:55:ce:9f:22:6f:93:54: b6:ad:ef:e0:8b:13:ab:bf:e5:ee:3f:66:aa:08:32:d8:4b:a0: f4:5e:06:04:fe:ba:ce:58:63:2c:14:68:b5:3d:84:3f:a9:e6: 75:49:46:ae:07:d7:cf:bb:93:b3:51:99:6c:62:85:e1:bd:7f: 33:d6:a0:c5:98:c7:63:4d:6e:0d:de:f0:b1:b6:81:c1:08:ed: e7:6b:fe:aa:07:52:23:ce:0e:22:12:4d:c7:3e:4f:77:11:e0: 11:f2:5f:51:cb:47:22:5b:8e:69:9f:27:9e:ff:52:9d:44:74: 9c:ab:98:84:df:d3:e1:2c:55:ca:11:99:e6:5a:9c:61:3f:2d: a1:ee:c4:07:ab:a8:99:ef:45:61:c9:a2:ba:49:15:33:72:cb: 80:92:28:ff:02:a2:dc:eb:f7:49:67:14:1f:1f:46:07:92:04: e7:b8:d6:25:2b:63:18:2f:f2:46:7f:13:84:b6:32:a3:6a:24: b6:45:ba:b5:73:a6:8a:10:64:b9:0a:04:d3:5f:d1:15:47:a9: 02:bb:4b:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlEKss39Z7uIKswCYLTPVDMSP4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNTA0MDMxNjM2MDNaFw0yNTA0MDcwNDE4MDNaMDMxMTAvBgNV BAMTKEZDMDk2OTlFNjJGODdDNDRENTgxMzNFNzY2RUY4OEREODE0QTExMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1Yy+k7v6cmT5m8/Txc2sBnnZ Zx6vNhY+McvaWx1lZq7s+Iv5r3hrFu8n0zEOGfbnsNuOHGur+eMYZJX8qNIKtdpS CSwwRxNLSRWJU5TWYEsZ48UhOz7AnB9rNmdgpivv0nb5gZVQ+9lNhDgG1TXC6Lz7 8FfUmTAjoHIS5gJbYGg85KO9KHWd24/Uq36Mfz+vNh/vEyxAdCKfu6928PwrI/i3 u67qVmOVb44Af6PLB6NT7uxOoHFWpVjqO/W5K3gL7M0B3F7MqxdSadlyVexFURim jtSNO9mQU2pviNPbvFmbTZNVALVPcqHD1ZcoPy+doL9KAvC/THyjkkkRih6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/AlpnmL4fETVgTPnZu+I3YFKERYwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALwOgfUO5bQOYwNmtCRLkOfaS4q6v44/IOE xUxk3DJ0yMV5m5x+6uGVPeAfCqZPVc6fIm+TVLat7+CLE6u/5e4/ZqoIMthLoPRe BgT+us5YYywUaLU9hD+p5nVJRq4H18+7k7NRmWxiheG9fzPWoMWYx2NNbg3e8LG2 gcEI7edr/qoHUiPODiISTcc+T3cR4BHyX1HLRyJbjmmfJ57/Up1EdJyrmITf0+Es VcoRmeZanGE/LaHuxAerqJnvRWHJorpJFTNyy4CSKP8Cotzr90lnFB8fRgeSBOe4 1iUrYxgv8kZ/E4S2MqNqJLZFurVzpooQZLkKBNNf0RVHqQK7S/o= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:32 2025 by rpki-client