$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: oqogWg5tqlQJXuyTOSa/UjCE/oPr/IlWHKuDrJMESUc= Subject key identifier: DA:B2:CF:B7:A7:C4:CE:0C:14:40:8C:EE:6A:15:BD:F2:BC:2B:43:ED Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 03C6536EFD759FAFCFF4F4B96E944B150F8A0AB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 01DB Signing time: Thu 05 Jun 2025 16:30:38 +0000 Manifest this update: Thu 05 Jun 2025 16:25:38 +0000 Manifest next update: Mon 09 Jun 2025 01:20:38 +0000 Files and hashes: 1: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: 75rf0EHTYL12rY3gzCUz2Ez98Ax3YtxSXSU6CHyrcuo=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) 3: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c6:53:6e:fd:75:9f:af:cf:f4:f4:b9:6e:94:4b:15:0f:8a:0a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Jun 5 16:25:38 2025 GMT Not After : Jun 9 01:20:38 2025 GMT Subject: CN=DAB2CFB7A7C4CE0C14408CEE6A15BDF2BC2B43ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:1b:d1:53:a2:ea:d4:fd:44:e7:0a:e2:37: 1b:93:6f:42:61:6d:ed:58:9e:eb:f1:56:46:74:10: b1:3c:e4:c6:07:9e:41:56:30:9d:af:37:50:0f:b2: 60:4b:a5:f4:ab:5c:1d:8c:78:a3:fe:6b:e8:4a:13: 43:3a:24:d7:ea:97:97:a4:fe:93:05:65:1b:9e:45: c8:b3:af:d4:44:0b:13:0d:8a:a9:57:c2:cd:92:82: 1b:71:17:f5:c6:f8:98:30:7b:8c:56:8d:2e:2f:cf: 35:1c:34:9d:e7:a3:c6:52:d7:f1:b3:82:7e:ae:84: a0:e4:b1:3b:e5:a5:94:ac:12:76:a0:bc:68:b3:67: 81:43:a2:f7:95:7e:9a:c8:16:8c:83:33:03:ef:31: 0c:61:ed:2e:c0:d5:6d:47:86:cb:77:43:1f:53:ff: ef:e5:b2:1f:d2:33:ba:c4:fe:36:55:db:b9:f1:09: 64:bd:9b:fb:87:55:12:fa:51:40:7c:c8:54:f4:4a: e8:b5:3e:f5:bb:6e:7f:a4:95:4e:4d:4f:3d:4d:18: f1:2d:5b:40:09:d2:87:c5:bc:90:69:1b:f8:b6:85: a2:d9:9d:17:cc:e9:7f:cf:77:58:8f:a0:27:38:3b: 10:b4:a9:a2:25:13:ee:c6:2f:73:96:e2:5e:8e:81: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B2:CF:B7:A7:C4:CE:0C:14:40:8C:EE:6A:15:BD:F2:BC:2B:43:ED X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:db:2c:52:da:70:79:41:53:a6:20:c3:2b:33:6f:99:b0:e8: 87:30:ca:9c:e1:9f:a2:6d:13:d6:e3:cc:76:f4:23:31:39:89: 6b:61:dc:ce:ab:9e:cc:ba:84:3d:04:56:78:cd:62:53:cd:80: 7c:c1:57:11:69:f3:fc:34:9f:d1:56:0c:cf:93:98:51:78:d2: ff:e4:9e:46:5d:ce:c1:03:6e:04:a2:24:96:0b:79:aa:97:e4: ea:d9:11:91:db:4c:24:80:e0:0c:75:c9:4b:46:74:9a:d0:ef: 0c:26:e8:f9:77:5b:18:c2:f5:2e:2b:17:57:ef:43:8c:f3:25: b8:70:9b:9c:2e:98:23:f5:f1:1e:c9:f5:0d:8f:a7:13:8e:0a: 4e:f4:cb:b3:87:67:f4:2e:05:e6:e6:3d:91:39:5a:f3:95:a0: 92:92:25:75:cc:6d:81:79:52:fb:6f:c3:45:04:fc:b1:f5:a0: 16:84:64:78:52:a9:a6:5d:38:96:66:02:5a:ef:b3:e4:13:ec: 1c:49:7b:bf:07:52:e1:6f:87:9c:71:93:cb:06:f9:ec:17:7b: 3b:8b:9c:26:ca:30:2b:6f:8c:b3:da:eb:ec:e9:a6:01:82:8b: a2:73:f9:95:21:16:ac:1f:85:26:35:64:53:04:fb:a2:45:ea: b8:1f:e0:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8ZTbv11n6/P9PS5bpRLFQ+KCrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTA2MDUxNjI1MzhaFw0yNTA2MDkwMTIwMzhaMDMxMTAvBgNV BAMTKERBQjJDRkI3QTdDNENFMEMxNDQwOENFRTZBMTVCREYyQkMyQjQzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qBvRU6Lq1P1E5wriNxuTb0Jh be1YnuvxVkZ0ELE85MYHnkFWMJ2vN1APsmBLpfSrXB2MeKP+a+hKE0M6JNfql5ek /pMFZRueRcizr9RECxMNiqlXws2SghtxF/XG+Jgwe4xWjS4vzzUcNJ3no8ZS1/Gz gn6uhKDksTvlpZSsEnagvGizZ4FDoveVfprIFoyDMwPvMQxh7S7A1W1Hhst3Qx9T /+/lsh/SM7rE/jZV27nxCWS9m/uHVRL6UUB8yFT0Sui1PvW7bn+klU5NTz1NGPEt W0AJ0ofFvJBpG/i2haLZnRfM6X/Pd1iPoCc4OxC0qaIlE+7GL3OW4l6Ogb2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rLPt6fEzgwUQIzuahW98rwrQ+0wHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnbLFLacHlBU6Ygwyszb5mw6Icwypzhn6Jt E9bjzHb0IzE5iWth3M6rnsy6hD0EVnjNYlPNgHzBVxFp8/w0n9FWDM+TmFF40v/k nkZdzsEDbgSiJJYLeaqX5OrZEZHbTCSA4Ax1yUtGdJrQ7wwm6Pl3WxjC9S4rF1fv Q4zzJbhwm5wumCP18R7J9Q2PpxOOCk70y7OHZ/QuBebmPZE5WvOVoJKSJXXMbYF5 Uvtvw0UE/LH1oBaEZHhSqaZdOJZmAlrvs+QT7BxJe78HUuFvh5xxk8sG+ewXezuL nCbKMCtvjLPa6+zppgGCi6Jz+ZUhFqwfhSY1ZFME+6JF6rgf4I8= -----END CERTIFICATE-----Generated at Sat Jun 7 04:22:06 2025 by rpki-client