$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: /fGXnu+vv/yGrbZfLashUu98TKLh3kuFVRW/4sGVepI= Subject key identifier: 07:DF:37:75:A5:5A:96:38:88:AD:55:E1:BB:85:E3:D7:F9:0E:B7:45 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 2D861755EBF9B9C6F7E16E86FE757E1AC5EEDB3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 22:51:07 +0000 Manifest this update: Sat 28 Jun 2025 22:46:07 +0000 Manifest next update: Wed 02 Jul 2025 07:00:07 +0000 Files and hashes: 1: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=) 2: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=) 3: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: 0gFe8cWA3nPo5Z305mxYylCWCKO7vRBbxpRAEg4C//8=) 4: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=) 5: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:86:17:55:eb:f9:b9:c6:f7:e1:6e:86:fe:75:7e:1a:c5:ee:db:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Jun 28 22:46:07 2025 GMT Not After : Jul 2 07:00:07 2025 GMT Subject: CN=07DF3775A55A963888AD55E1BB85E3D7F90EB745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:6b:8e:90:e5:03:e8:33:94:0b:d5:8e:fb: a5:35:7a:4d:f1:80:e0:63:53:64:07:66:2d:8c:db: 3d:5a:3d:98:6b:d5:84:71:70:1e:6a:87:eb:fd:54: eb:55:37:cb:a2:fa:60:3e:65:29:e3:e1:8e:e7:45: 61:37:0f:02:20:41:b0:a8:77:96:c1:af:87:51:b4: 10:15:34:03:af:7d:e0:9d:02:fb:a2:8c:2c:15:c6: e7:84:a4:f0:1d:c6:de:a0:80:ed:b4:6a:13:b6:3b: f3:b5:dc:e7:d9:46:e6:ce:07:a2:d2:48:fb:8a:e8: 32:69:cf:06:57:e8:19:71:1f:15:dc:ef:ea:89:8f: 5e:4c:e1:30:e1:61:32:3e:d5:88:39:6f:f9:50:4e: c6:85:8f:a8:47:97:6d:5f:7c:45:72:99:97:1f:68: 5a:24:7f:ae:39:ce:99:65:9b:74:f7:ca:c9:9f:88: 0b:67:5d:03:43:d6:63:0d:64:0b:06:21:ea:47:0a: bb:31:15:4b:22:68:c5:ac:f6:77:f5:a1:d4:f3:1e: 55:67:06:9e:39:77:7d:83:f6:c9:33:fb:e8:d4:f4: 69:1d:9f:9a:2a:aa:65:10:25:c3:a7:de:49:35:d6: 1a:85:4b:87:53:30:38:9a:3d:d1:16:fb:2d:dd:9b: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:37:75:A5:5A:96:38:88:AD:55:E1:BB:85:E3:D7:F9:0E:B7:45 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c6:22:6d:e1:6c:e0:0f:1e:81:af:c9:2b:a2:9f:ed:e3:8f: d8:c0:6c:f7:ba:da:84:5e:c2:df:21:44:5c:9f:1a:93:f9:18: 5d:f3:fc:0f:9c:65:d1:21:a2:f1:4b:23:6a:85:3b:fa:58:7f: 78:46:17:fb:65:ef:ad:c8:f1:65:e8:d9:fb:5b:94:20:14:b1: 69:0f:58:1b:d9:84:bc:a6:e9:20:d6:bf:9f:91:53:36:64:fa: 68:1c:3b:ad:5a:08:fc:f3:80:f7:0e:f5:77:44:33:51:19:d4: 24:c7:77:a6:72:0a:68:21:81:12:f3:78:66:58:3b:2d:96:d4: ca:c9:cc:6a:1d:75:80:6a:91:88:aa:91:9e:e3:e6:d6:ca:f6: 47:07:d2:50:49:2e:e1:4d:9f:41:98:ae:c6:1d:ae:a4:e8:e1: dc:e6:89:4e:1a:ab:0e:41:3e:5b:12:e0:30:d6:00:91:ef:b9: 19:de:d8:f8:d0:7c:23:56:fc:d1:9f:84:38:1f:3a:5f:e5:67: 05:67:b7:05:35:9d:6b:18:21:4a:c4:71:52:d6:26:18:bb:3b: ec:9a:82:a7:f3:84:2a:7b:7a:76:bf:4b:ee:29:ce:cb:7c:98: 2b:a6:2e:3e:aa:1e:f5:ad:ec:79:d8:af:21:43:06:1b:57:22: db:d7:ab:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYYXVev5ucb34W6G/nV+GsXu2zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNTA2MjgyMjQ2MDdaFw0yNTA3MDIwNzAwMDdaMDMxMTAvBgNV BAMTKDA3REYzNzc1QTU1QTk2Mzg4OEFENTVFMUJCODVFM0Q3RjkwRUI3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKmuOkOUD6DOUC9WO+6U1ek3x gOBjU2QHZi2M2z1aPZhr1YRxcB5qh+v9VOtVN8ui+mA+ZSnj4Y7nRWE3DwIgQbCo d5bBr4dRtBAVNAOvfeCdAvuijCwVxueEpPAdxt6ggO20ahO2O/O13OfZRubOB6LS SPuK6DJpzwZX6BlxHxXc7+qJj15M4TDhYTI+1Yg5b/lQTsaFj6hHl21ffEVymZcf aFokf645zpllm3T3ysmfiAtnXQND1mMNZAsGIepHCrsxFUsiaMWs9nf1odTzHlVn Bp45d32D9skz++jU9Gkdn5oqqmUQJcOn3kk11hqFS4dTMDiaPdEW+y3dm+Y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB983daValjiIrVXhu4Xj1/kOt0UwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHGIm3hbOAPHoGvySuin+3jj9jAbPe62oRe wt8hRFyfGpP5GF3z/A+cZdEhovFLI2qFO/pYf3hGF/tl763I8WXo2ftblCAUsWkP WBvZhLym6SDWv5+RUzZk+mgcO61aCPzzgPcO9XdEM1EZ1CTHd6ZyCmghgRLzeGZY Oy2W1MrJzGoddYBqkYiqkZ7j5tbK9kcH0lBJLuFNn0GYrsYdrqTo4dzmiU4aqw5B PlsS4DDWAJHvuRne2PjQfCNW/NGfhDgfOl/lZwVntwU1nWsYIUrEcVLWJhi7O+ya gqfzhCp7ena/S+4pzst8mCumLj6qHvWt7HnYryFDBhtXItvXq/Q= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:40 2025 by rpki-client