$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: LNsx2nMEP6eAqOLtCPRbfhNCJ4w3lfBS4r7iLMNaMFE= Subject key identifier: B0:9A:5A:D0:D5:CC:88:3C:81:9A:68:BF:3A:18:FF:DC:C1:B8:01:E3 Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 6795792AD073A40534947BC781550166109D0EBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 04BF Signing time: Sat 05 Apr 2025 14:11:27 +0000 Manifest this update: Sat 05 Apr 2025 14:06:27 +0000 Manifest next update: Tue 08 Apr 2025 20:59:27 +0000 Files and hashes: 1: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: ikCBqyTFwh6uj+sGxPztwL+n3kc9cKQDHNdVREbe7FA=) 2: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: ausumUMgj6tjQ4SI6wmJqem19b6YmPHS5gZXncdyH6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:95:79:2a:d0:73:a4:05:34:94:7b:c7:81:55:01:66:10:9d:0e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Apr 5 14:06:27 2025 GMT Not After : Apr 8 20:59:27 2025 GMT Subject: CN=B09A5AD0D5CC883C819A68BF3A18FFDCC1B801E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:5b:0d:30:d0:4c:7a:e5:20:0d:26:d6:31: 97:ef:72:d9:15:5f:28:c9:37:82:cc:25:94:cb:24: 50:79:8f:f6:b8:74:18:c9:5c:f1:ce:2f:06:da:9f: f6:c5:3f:f3:ee:6a:87:2c:4d:04:78:ec:0a:9a:a2: 4a:37:15:5d:4b:e9:82:71:17:7e:fd:b9:57:72:d8: a5:27:4b:71:d0:09:64:b5:79:66:bd:3d:95:60:d6: 0d:25:19:24:46:72:7c:82:45:a4:ef:6b:c1:c6:d3: c7:ae:ca:17:00:16:1f:6a:3a:ef:1e:90:c2:de:f1: dc:bc:3b:95:e6:00:6e:f0:b7:54:b8:25:75:47:7c: d7:d2:1d:d8:a9:aa:8c:ca:4b:86:ec:1c:2b:fa:cd: 01:c6:48:c8:c1:23:08:55:00:54:8c:23:d8:64:da: 92:3f:ca:8a:12:f4:5b:94:52:ca:32:65:dc:5b:00: d4:1f:39:b4:95:4c:82:92:c2:7c:72:15:6a:31:b2: fd:3a:1f:bd:b0:d0:cd:9e:d6:34:0b:b1:62:3b:6d: 8f:53:8f:03:4f:ca:4b:1f:bd:2d:6e:f6:42:24:8a: bb:64:30:6a:d1:f4:13:58:24:4a:fa:a9:b9:01:40: 12:6a:ac:c4:5a:09:04:75:65:93:5b:56:64:b4:1c: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9A:5A:D0:D5:CC:88:3C:81:9A:68:BF:3A:18:FF:DC:C1:B8:01:E3 X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:01:15:5e:5b:3c:5a:0c:7a:fe:00:05:cc:fb:93:7e:2f:00: d0:da:7d:44:4a:5f:e5:55:c5:5f:fe:1f:f0:e0:ef:89:3f:82: 34:d6:9b:4f:cd:75:2c:6d:46:e2:a6:05:27:92:cf:da:69:14: 95:9e:9f:1d:ac:ef:d5:cc:73:d3:a9:d7:ed:82:c7:16:63:eb: 8b:c7:ae:5c:70:7d:44:7b:b4:30:86:a6:8f:6f:32:b1:ec:1b: 86:93:5a:a0:39:23:f0:d3:74:66:72:cd:4d:b2:e8:6f:e9:97: ff:4f:0b:8f:74:21:bb:8f:a3:a1:5c:bc:c4:b2:b9:0e:ab:b7: 7d:f4:e3:ec:66:7b:9e:33:e8:a2:06:bf:a4:7a:fa:8d:5c:d7: 6a:62:ac:19:7d:c4:5f:35:fc:a0:82:67:64:63:72:5a:0b:17: e0:eb:39:82:aa:dd:6b:0e:ea:58:32:a7:5a:f4:4b:d5:22:1b: 3b:7e:b4:08:e8:21:8a:86:51:e6:aa:5a:3d:e7:f1:96:b5:d6: d1:c3:4e:5d:2a:7c:e6:50:ea:b0:c5:5b:ed:91:dc:4f:9e:a4: e4:74:65:90:25:e7:74:ba:12:f8:5a:83:96:0f:d0:a4:3f:17: 83:53:67:ba:a8:c9:b1:47:c4:b2:85:c5:bf:8c:87:10:44:10: 4c:43:e1:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5V5KtBzpAU0lHvHgVUBZhCdDrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNTA0MDUxNDA2MjdaFw0yNTA0MDgyMDU5MjdaMDMxMTAvBgNV BAMTKEIwOUE1QUQwRDVDQzg4M0M4MTlBNjhCRjNBMThGRkRDQzFCODAxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65VsNMNBMeuUgDSbWMZfvctkV XyjJN4LMJZTLJFB5j/a4dBjJXPHOLwban/bFP/PuaocsTQR47Aqaoko3FV1L6YJx F379uVdy2KUnS3HQCWS1eWa9PZVg1g0lGSRGcnyCRaTva8HG08euyhcAFh9qOu8e kMLe8dy8O5XmAG7wt1S4JXVHfNfSHdipqozKS4bsHCv6zQHGSMjBIwhVAFSMI9hk 2pI/yooS9FuUUsoyZdxbANQfObSVTIKSwnxyFWoxsv06H72w0M2e1jQLsWI7bY9T jwNPyksfvS1u9kIkirtkMGrR9BNYJEr6qbkBQBJqrMRaCQR1ZZNbVmS0HBQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJpa0NXMiDyBmmi/Ohj/3MG4AeMwHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgBFV5bPFoMev4ABcz7k34vANDafURKX+VV xV/+H/Dg74k/gjTWm0/NdSxtRuKmBSeSz9ppFJWenx2s79XMc9Op1+2CxxZj64vH rlxwfUR7tDCGpo9vMrHsG4aTWqA5I/DTdGZyzU2y6G/pl/9PC490IbuPo6FcvMSy uQ6rt3304+xme54z6KIGv6R6+o1c12pirBl9xF81/KCCZ2RjcloLF+DrOYKq3WsO 6lgyp1r0S9UiGzt+tAjoIYqGUeaqWj3n8Za11tHDTl0qfOZQ6rDFW+2R3E+epOR0 ZZAl53S6Evhag5YP0KQ/F4NTZ7qoybFHxLKFxb+MhxBEEExD4X8= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:36 2025 by rpki-client