$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: ZGPYrctkriy8fbR0uKPpLteJ7ksam/u5KDRa1RDOzAo= Subject key identifier: 76:BD:F0:65:29:EE:88:B2:E6:12:6B:06:4D:3D:3F:67:C4:B4:7B:9E Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 1523CCCC0FF0733635D767DDD69249F98CCA2CD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 04E5 Signing time: Sun 29 Jun 2025 15:21:30 +0000 Manifest this update: Sun 29 Jun 2025 15:16:30 +0000 Manifest next update: Wed 02 Jul 2025 22:48:30 +0000 Files and hashes: 1: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: tvwgCakk5qBRtD5u0tgfjYAyONP/c3ROcHQ9JfJFjE8=) 2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:23:cc:cc:0f:f0:73:36:35:d7:67:dd:d6:92:49:f9:8c:ca:2c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Jun 29 15:16:30 2025 GMT Not After : Jul 2 22:48:30 2025 GMT Subject: CN=76BDF06529EE88B2E6126B064D3D3F67C4B47B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:78:ca:0f:9b:91:6d:42:04:d7:93:ec:d3: b0:39:c1:17:5f:26:8c:38:9a:bf:90:a8:8f:8f:26: 7d:d8:31:ba:3b:0c:a1:a5:b1:7b:86:7f:61:de:bc: 05:6e:48:e8:df:5f:6f:9e:14:90:72:2b:ae:23:76: e1:22:80:49:7c:66:f1:4e:c3:39:7b:b7:a9:b9:99: 70:c4:18:16:4c:4a:64:47:13:75:4a:e1:cf:a3:b1: ad:2f:24:78:d4:70:64:37:cb:05:f9:ec:d1:b9:a0: 25:ec:4b:b8:e6:dc:64:4e:f5:f2:7d:1a:a8:72:04: 72:53:36:47:43:84:e6:8a:2d:b6:1a:3d:13:51:f3: ae:a9:d2:40:f6:e6:ee:a4:4a:62:6e:99:64:35:5c: 31:bf:e7:fd:53:4e:2e:40:a9:45:0d:b6:f1:45:80: be:2c:c8:c9:3e:fd:38:a4:13:5a:41:2f:54:b3:45: b1:39:db:ce:7f:45:96:19:3d:1c:a9:4f:dd:76:d9: 3b:08:cc:bb:e4:94:a8:d3:7f:5e:d8:53:5f:12:06: d8:73:d4:0b:c0:2f:73:04:f3:fc:cd:62:0b:b0:13: 82:7a:c5:59:6c:f2:44:1d:1d:d8:3d:80:b3:ae:fb: 8e:1e:10:6b:41:c6:9f:81:13:20:88:4a:b2:bf:9b: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BD:F0:65:29:EE:88:B2:E6:12:6B:06:4D:3D:3F:67:C4:B4:7B:9E X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:cc:70:d4:08:a4:e8:a6:81:b7:4b:8b:bd:a6:00:d2:b0:34: 33:12:b8:c7:a4:e7:c2:bb:db:54:0f:4f:7b:5b:1c:f2:03:db: f0:33:7c:2c:6a:b6:f5:69:18:a9:9b:13:05:ae:5f:d8:96:90: c9:a6:af:55:f4:bf:b4:d1:37:60:1d:9e:ca:26:74:ef:31:13: 6e:87:0a:5d:9b:da:35:c6:b7:8b:c1:32:df:1d:3e:07:58:01: 38:6a:7a:5a:fd:34:0b:83:56:08:20:bd:ba:51:77:36:eb:b4: 44:f6:60:2b:19:03:d7:5f:46:05:86:1a:23:e8:f6:d1:ad:d6: 45:7b:8a:a1:7c:45:38:67:4c:94:b6:80:51:0a:3e:0d:ea:27: fe:f5:f5:4c:a8:5d:30:8b:ca:17:05:f6:9d:8b:3f:29:1c:ae: 97:48:fa:d9:39:69:a8:b3:e8:81:cf:b4:0f:4f:6f:de:68:27: 3d:9c:36:bb:e6:f5:13:ce:7c:67:6b:fa:09:a6:72:1b:5a:a9: b9:bd:b6:7a:98:ff:60:68:3b:61:b7:e0:06:b7:43:d0:96:54: fe:17:e3:e5:f6:27:bf:04:26:12:96:3a:2a:c8:13:90:a3:42: 2d:24:9a:04:17:78:6e:da:0d:df:b3:2a:aa:91:06:66:9b:b0: 4d:97:22:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSPMzA/wczY112fd1pJJ+YzKLNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNTA2MjkxNTE2MzBaFw0yNTA3MDIyMjQ4MzBaMDMxMTAvBgNV BAMTKDc2QkRGMDY1MjlFRTg4QjJFNjEyNkIwNjREM0QzRjY3QzRCNDdCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPO3jKD5uRbUIE15Ps07A5wRdf Jow4mr+QqI+PJn3YMbo7DKGlsXuGf2HevAVuSOjfX2+eFJByK64jduEigEl8ZvFO wzl7t6m5mXDEGBZMSmRHE3VK4c+jsa0vJHjUcGQ3ywX57NG5oCXsS7jm3GRO9fJ9 GqhyBHJTNkdDhOaKLbYaPRNR866p0kD25u6kSmJumWQ1XDG/5/1TTi5AqUUNtvFF gL4syMk+/TikE1pBL1SzRbE5285/RZYZPRypT9122TsIzLvklKjTf17YU18SBthz 1AvAL3ME8/zNYguwE4J6xVls8kQdHdg9gLOu+44eEGtBxp+BEyCISrK/myOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdr3wZSnuiLLmEmsGTT0/Z8S0e54wHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPMcNQIpOimgbdLi72mANKwNDMSuMek58K7 21QPT3tbHPID2/AzfCxqtvVpGKmbEwWuX9iWkMmmr1X0v7TRN2AdnsomdO8xE26H Cl2b2jXGt4vBMt8dPgdYAThqelr9NAuDVgggvbpRdzbrtET2YCsZA9dfRgWGGiPo 9tGt1kV7iqF8RThnTJS2gFEKPg3qJ/719UyoXTCLyhcF9p2LPykcrpdI+tk5aaiz 6IHPtA9Pb95oJz2cNrvm9RPOfGdr+gmmchtaqbm9tnqY/2BoO2G34Aa3Q9CWVP4X 4+X2J78EJhKWOirIE5CjQi0kmgQXeG7aDd+zKqqRBmabsE2XIuk= -----END CERTIFICATE-----Generated at Mon Jun 30 16:32:56 2025 by rpki-client