$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: Vgh5lUnnRS3FPKFVwNuzP6lb7+WwP+df2VVPSgXVdGE= Subject key identifier: 8F:20:D0:53:1A:72:FC:25:A7:5D:32:C2:B9:8A:27:8F:10:FD:03:CC Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 2F24B3F03E4242E562EC0193B09E7E99179DDFA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01B6 Signing time: Wed 03 Sep 2025 23:11:21 +0000 Manifest this update: Wed 03 Sep 2025 23:06:21 +0000 Manifest next update: Sun 07 Sep 2025 03:55:21 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: dHvA0l4MoAsHbnDeUczCGz/tbqjQXH0AlY+9WKNokS8=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: jJN+a1uyK5er9vytVlfqMqFHVNtiQSwDgGPE7xDkxVU=) 4: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: ro3rVrXboYnRw/Yw3T9xETZY4oBDLRKYdXAdRxl7kQk=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:24:b3:f0:3e:42:42:e5:62:ec:01:93:b0:9e:7e:99:17:9d:df:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Sep 3 23:06:21 2025 GMT Not After : Sep 7 03:55:21 2025 GMT Subject: CN=8F20D0531A72FC25A75D32C2B98A278F10FD03CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:87:d1:c2:87:71:be:49:3d:30:7d:88:34: c7:b0:45:15:a4:f8:b9:21:4e:00:a9:30:74:0b:50: 68:5e:da:59:0a:2c:87:f5:7b:6d:66:f4:e7:3d:37: 24:c0:77:ae:98:ad:f2:01:29:41:6a:b0:90:ce:80: 7a:2f:aa:de:a5:9f:b2:23:d8:92:65:28:9c:69:53: 4c:2c:c0:1a:6a:f4:36:b7:70:18:8a:92:49:a5:14: aa:e8:1a:29:97:76:02:a7:5d:f3:ee:ce:dd:a1:7f: 86:1b:41:75:fd:a8:90:7b:eb:e3:9b:8a:76:26:c6: 7e:18:cc:38:fb:e0:ba:48:fd:6a:b8:50:54:bb:8e: c2:f2:9c:a8:7f:6b:af:a5:bc:77:75:37:e2:38:01: 1c:b4:f8:f1:b7:bc:8a:89:6e:be:03:3c:79:83:81: 4a:9d:1e:9b:0d:c3:85:08:14:a1:53:5f:07:4b:af: 68:50:d0:e5:80:5d:2e:04:57:58:46:f4:7a:7f:f1: d1:60:42:34:c6:bb:80:c7:34:70:7f:96:5e:91:29: ce:be:8a:06:3c:5c:e3:e1:d4:46:3c:49:34:27:8c: 59:8a:ce:8b:7e:d2:4c:68:7d:f7:22:c9:8f:de:a7: 31:52:21:95:9a:35:d3:61:19:4a:f9:64:d2:58:97: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:20:D0:53:1A:72:FC:25:A7:5D:32:C2:B9:8A:27:8F:10:FD:03:CC X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:97:b3:ae:72:c1:00:b8:61:c0:dd:46:47:8b:79:85:3f:21: 91:50:c0:1c:a6:87:4a:f4:52:d0:9d:5d:7a:94:1d:b5:1f:2a: de:c2:d4:0b:6b:3f:b0:d8:de:a9:bc:94:91:a4:5d:74:8c:5b: 62:2c:5c:af:e7:c6:cc:95:c3:f9:ce:ba:4c:cf:02:45:6e:fd: e6:de:d4:ce:4d:5e:b7:3e:ff:40:e3:d7:fb:8b:68:72:da:fa: 8f:87:d0:da:e0:d2:10:8b:25:4d:e1:5b:63:db:89:6d:3c:d6: 7f:52:c2:b1:c0:7b:50:76:f7:c3:ee:be:40:b5:91:60:fd:e7: 5e:4d:70:11:0f:e5:e6:83:7a:4b:5b:4e:90:3a:88:0c:c7:11: 09:e7:46:7f:4e:21:9a:f0:91:42:de:1d:f7:4e:d8:6d:7c:ec: 33:95:8d:90:4c:6f:8b:0b:11:7a:eb:68:56:68:fb:a9:f1:03: 69:42:cb:d5:db:16:db:71:9b:ab:56:b0:b9:11:4e:12:98:02: 6b:2d:84:c8:38:99:ea:f5:2d:27:de:f9:e9:8a:9b:53:e9:1a: 48:42:fb:8d:cd:eb:27:cc:e5:b6:36:13:f0:51:74:2b:19:bf: 33:39:89:28:01:e1:f4:8f:b9:61:1e:d0:8a:17:16:4d:9e:3d: c9:e7:13:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULySz8D5CQuVi7AGTsJ5+mRed36gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTA5MDMyMzA2MjFaFw0yNTA5MDcwMzU1MjFaMDMxMTAvBgNV BAMTKDhGMjBEMDUzMUE3MkZDMjVBNzVEMzJDMkI5OEEyNzhGMTBGRDAzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStofRwodxvkk9MH2INMewRRWk +LkhTgCpMHQLUGhe2lkKLIf1e21m9Oc9NyTAd66YrfIBKUFqsJDOgHovqt6ln7Ij 2JJlKJxpU0wswBpq9Da3cBiKkkmlFKroGimXdgKnXfPuzt2hf4YbQXX9qJB76+Ob inYmxn4YzDj74LpI/Wq4UFS7jsLynKh/a6+lvHd1N+I4ARy0+PG3vIqJbr4DPHmD gUqdHpsNw4UIFKFTXwdLr2hQ0OWAXS4EV1hG9Hp/8dFgQjTGu4DHNHB/ll6RKc6+ igY8XOPh1EY8STQnjFmKzot+0kxoffciyY/epzFSIZWaNdNhGUr5ZNJYlwRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjyDQUxpy/CWnXTLCuYonjxD9A8wwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGXs65ywQC4YcDdRkeLeYU/IZFQwBymh0r0 UtCdXXqUHbUfKt7C1AtrP7DY3qm8lJGkXXSMW2IsXK/nxsyVw/nOukzPAkVu/ebe 1M5NXrc+/0Dj1/uLaHLa+o+H0Nrg0hCLJU3hW2PbiW081n9SwrHAe1B298PuvkC1 kWD9515NcBEP5eaDektbTpA6iAzHEQnnRn9OIZrwkULeHfdO2G187DOVjZBMb4sL EXrraFZo+6nxA2lCy9XbFttxm6tWsLkRThKYAmsthMg4mer1LSfe+emKm1PpGkhC +43N6yfM5bY2E/BRdCsZvzM5iSgB4fSPuWEe0IoXFk2ePcnnE3s= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:19 2025 by rpki-client