$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: yr05fwpk5D8yZOOA+UpQl+J8hVi6v/WAX/qjoQmbXI4= Subject key identifier: 60:62:92:88:BE:A3:CD:BA:4A:35:6B:DA:70:84:ED:58:B3:B2:56:5E Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 43522A7EF6048F805475FD0D0F998D7D20B765F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 04CC Signing time: Sat 03 May 2025 05:51:03 +0000 Manifest this update: Sat 03 May 2025 05:46:03 +0000 Manifest next update: Tue 06 May 2025 12:52:03 +0000 Files and hashes: 1: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: suwrafb9tqASxxDVH33nr5LVYCbJJmQzXeiotL7Kfnk=) 2: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: QbFvfCrnMQBTBfnGAg6UsU/N0206cjj9RtViWZQS8qA=) 3: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: EofXMeQ3rQxAMPrxu14cOWyeKj+CAQJFfwVa/5Ug6IM=) 4: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: f00G0Ym1ByDy1/qaeBLTX62vBHyBJkGQ88rOwSYKEAQ=) 5: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: W8X6r3JanpvGeoa+e5QvEzIjBLTO+VwBEX5tmADWxPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:52:2a:7e:f6:04:8f:80:54:75:fd:0d:0f:99:8d:7d:20:b7:65:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: May 3 05:46:03 2025 GMT Not After : May 6 12:52:03 2025 GMT Subject: CN=60629288BEA3CDBA4A356BDA7084ED58B3B2565E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:0c:af:4c:34:5b:cb:a4:a4:71:75:7c:dc: eb:b2:52:c3:e9:ac:2f:e2:08:b3:a8:3b:36:5c:fa: db:22:06:6b:40:68:24:3f:64:3c:06:3d:a6:d0:04: 8d:0e:a6:99:2f:47:ff:80:78:37:f1:d3:42:7a:be: 55:4f:64:64:9d:58:c6:0a:92:0d:c2:22:b8:b5:72: a8:a0:28:94:87:67:11:51:a5:6a:d1:9a:15:7a:e5: 40:a8:9b:3a:1b:68:60:0c:f4:78:43:17:6d:df:27: 1e:f9:f2:32:ec:a9:b7:9b:46:d9:3b:c7:7f:ea:25: 8a:02:06:b2:73:bc:65:76:b4:d4:7d:5c:c4:11:f4: f8:76:77:70:ac:ef:63:76:fd:01:f5:88:d3:c9:88: c4:00:b5:05:d8:3b:f9:d8:9c:c6:18:14:92:d5:dd: 1d:52:52:fa:70:8c:e1:2f:78:4a:36:f7:93:a1:26: 5d:7e:c6:e6:c0:a0:3d:3e:62:d0:52:88:e7:dc:fa: 2c:d7:39:42:86:05:b0:3e:60:35:73:6b:42:26:fa: b6:b8:5b:63:cf:77:da:d1:da:72:a8:b4:17:06:3a: 7a:34:d6:aa:8e:32:34:04:6d:7c:d4:18:d4:9b:dd: f9:c8:0e:8a:ec:75:93:ec:14:1b:1a:d4:0d:16:5e: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:62:92:88:BE:A3:CD:BA:4A:35:6B:DA:70:84:ED:58:B3:B2:56:5E X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ad:88:ef:37:54:22:ce:e1:d7:4b:f1:9b:15:38:e7:b4:ae: ee:ea:57:58:d4:0e:9a:0d:68:bb:76:8d:d4:f2:b4:7a:dc:07: 6d:df:2d:93:e8:90:22:b8:4f:e6:09:f8:03:0b:dd:48:e3:c6: 42:2f:95:58:ec:0a:37:3b:7d:5f:db:ff:cd:3a:0c:45:4c:aa: 2e:8c:f5:db:34:20:10:77:a8:ce:17:4b:7a:65:bb:01:14:f8: 6c:f4:90:a5:8c:62:30:26:57:f5:e2:d3:67:63:ea:57:2b:88: b8:bd:d5:9c:aa:d6:5b:d2:1a:82:96:85:f4:65:5b:89:aa:a3: 8b:f8:1f:6b:29:31:38:bd:f9:aa:6f:9b:cd:cc:6b:8b:89:78: a0:70:87:14:16:ba:8a:2e:cc:71:12:34:9b:0a:25:cd:f2:99: a2:24:f4:21:e3:37:8b:b0:a0:7c:51:53:25:49:c4:9f:2e:fb: e8:5a:dc:68:0b:b8:54:a5:99:21:5b:df:27:56:ae:ab:87:54: 31:0e:c1:e6:96:de:5b:e8:b6:e0:ee:7d:35:f8:8b:37:6a:97: 01:1c:12:3c:dd:88:bb:8f:56:f8:b7:11:2b:d6:97:e4:0a:eb: 00:0d:1a:44:f9:af:66:51:7c:c2:3b:70:90:4e:9b:20:48:d2: 72:65:2d:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1IqfvYEj4BUdf0ND5mNfSC3ZfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNTA1MDMwNTQ2MDNaFw0yNTA1MDYxMjUyMDNaMDMxMTAvBgNV BAMTKDYwNjI5Mjg4QkVBM0NEQkE0QTM1NkJEQTcwODRFRDU4QjNCMjU2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEwyvTDRby6SkcXV83OuyUsPp rC/iCLOoOzZc+tsiBmtAaCQ/ZDwGPabQBI0OppkvR/+AeDfx00J6vlVPZGSdWMYK kg3CIri1cqigKJSHZxFRpWrRmhV65UComzobaGAM9HhDF23fJx758jLsqbebRtk7 x3/qJYoCBrJzvGV2tNR9XMQR9Ph2d3Cs72N2/QH1iNPJiMQAtQXYO/nYnMYYFJLV 3R1SUvpwjOEveEo295OhJl1+xubAoD0+YtBSiOfc+izXOUKGBbA+YDVza0Im+ra4 W2PPd9rR2nKotBcGOno01qqOMjQEbXzUGNSb3fnIDorsdZPsFBsa1A0WXjwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGKSiL6jzbpKNWvacITtWLOyVl4wHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWtiO83VCLO4ddL8ZsVOOe0ru7qV1jUDpoN aLt2jdTytHrcB23fLZPokCK4T+YJ+AML3UjjxkIvlVjsCjc7fV/b/806DEVMqi6M 9ds0IBB3qM4XS3pluwEU+Gz0kKWMYjAmV/Xi02dj6lcriLi91Zyq1lvSGoKWhfRl W4mqo4v4H2spMTi9+apvm83Ma4uJeKBwhxQWuoouzHESNJsKJc3ymaIk9CHjN4uw oHxRUyVJxJ8u++ha3GgLuFSlmSFb3ydWrquHVDEOweaW3lvotuDufTX4izdqlwEc EjzdiLuPVvi3ESvWl+QK6wANGkT5r2ZRfMI7cJBOmyBI0nJlLUo= -----END CERTIFICATE-----Generated at Tue May 6 06:50:29 2025 by rpki-client