$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: PmUGIw4TPm+fBkJ2w+pDSbYFGy5Dd6/bTQYLgZx/TEM= Subject key identifier: 8E:BE:2F:7E:6E:5E:27:22:21:16:24:15:DB:7E:77:64:04:10:AA:A3 Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 31344FA1124076C5132A4F343A56008D362C51D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 017D Signing time: Tue 01 Jul 2025 05:41:58 +0000 Manifest this update: Tue 01 Jul 2025 05:36:58 +0000 Manifest next update: Fri 04 Jul 2025 11:02:58 +0000 Files and hashes: 1: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: +oQO5BT+OnIuJzw/ugFUWleXixVe/WjNWWHSknLdxdo=) 2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:34:4f:a1:12:40:76:c5:13:2a:4f:34:3a:56:00:8d:36:2c:51:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Jul 1 05:36:58 2025 GMT Not After : Jul 4 11:02:58 2025 GMT Subject: CN=8EBE2F7E6E5E272221162415DB7E77640410AAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:d4:f9:68:ef:38:cf:ff:28:4f:4a:f2:66: 97:32:44:8b:0c:79:80:7c:a9:d7:03:bc:cc:18:4c: 29:1c:26:7f:60:d3:29:95:22:61:8d:b8:8f:e1:ab: e3:9e:65:fd:cf:62:b1:0d:6b:12:5f:1c:3a:fb:da: fe:b5:e8:f4:8d:d7:21:e8:8c:c9:91:76:da:de:86: b0:56:42:d9:90:75:13:54:23:a2:1e:1a:a4:32:35: fb:8d:3f:d8:08:6f:97:36:ce:ca:69:09:fd:8e:10: 5d:73:c4:33:f9:16:c0:ab:07:49:76:6e:77:39:9d: 2c:77:db:45:89:bb:d1:39:57:a5:7e:97:62:e9:cd: 88:4e:59:2e:04:ce:e1:31:80:43:91:5c:3a:3b:21: ed:81:57:42:8c:59:0d:92:e3:c2:be:9f:5d:c1:96: 2f:ef:86:68:7d:42:d2:fe:c1:6d:50:ab:dc:cf:25: 4c:02:7d:35:bc:e0:de:ae:d2:6b:95:5b:e0:2c:f1: f4:55:58:df:a7:0e:89:51:31:e0:80:42:e8:ec:04: 82:be:6f:b5:94:6c:3b:4e:80:a1:8c:cc:66:d1:e0: 2f:76:bb:85:1a:08:87:e6:0f:00:e1:ca:87:71:e2: 17:5f:f7:9c:38:8a:91:76:5e:f1:43:84:8a:6a:5d: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:2F:7E:6E:5E:27:22:21:16:24:15:DB:7E:77:64:04:10:AA:A3 X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8d:34:eb:1e:72:6f:c4:5e:d7:3b:5d:fd:ca:56:5b:a8:ef: 82:02:90:7f:fe:31:d3:e9:39:66:ef:e1:b4:76:cd:91:e8:92: f2:51:5f:df:b7:ed:3f:23:e1:9e:63:e6:5c:d3:9e:95:c9:a8: ae:8b:5f:fe:bf:1b:eb:eb:30:5c:a7:73:6a:1d:e0:e2:c7:04: a3:e1:4d:df:28:4f:d6:66:78:90:c4:2c:d0:b5:ca:84:d9:56: 9c:6a:6e:81:c5:59:91:f0:05:35:31:e7:b2:4b:6e:08:28:aa: ce:ae:5a:cd:16:51:29:05:78:68:86:3c:ec:80:9a:9d:af:3f: e3:c0:21:04:d9:bc:04:ba:f8:09:79:87:e3:87:bd:53:e9:f6: 5d:05:64:aa:d9:86:32:d0:a1:28:f8:e6:ec:55:df:a5:be:35: 49:85:cf:14:5e:53:5d:89:06:49:65:37:aa:5e:e2:41:16:c2: 0e:dc:b6:b5:b8:7d:1b:a4:9c:0e:fb:59:d8:f5:eb:2c:7e:f5: 95:98:27:59:64:b1:51:c4:52:57:9d:50:4e:23:5c:10:73:53: a9:b0:b8:3a:fc:a7:01:2d:5d:4f:1d:bf:ba:62:62:73:4e:c8: b1:a5:dd:28:a7:c2:47:ea:d2:be:5b:91:50:0b:cc:9f:7d:2a: 43:54:75:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTRPoRJAdsUTKk80OlYAjTYsUdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTA3MDEwNTM2NThaFw0yNTA3MDQxMTAyNThaMDMxMTAvBgNV BAMTKDhFQkUyRjdFNkU1RTI3MjIyMTE2MjQxNURCN0U3NzY0MDQxMEFBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfR9T5aO84z/8oT0ryZpcyRIsM eYB8qdcDvMwYTCkcJn9g0ymVImGNuI/hq+OeZf3PYrENaxJfHDr72v616PSN1yHo jMmRdtrehrBWQtmQdRNUI6IeGqQyNfuNP9gIb5c2zsppCf2OEF1zxDP5FsCrB0l2 bnc5nSx320WJu9E5V6V+l2LpzYhOWS4EzuExgEORXDo7Ie2BV0KMWQ2S48K+n13B li/vhmh9QtL+wW1Qq9zPJUwCfTW84N6u0muVW+As8fRVWN+nDolRMeCAQujsBIK+ b7WUbDtOgKGMzGbR4C92u4UaCIfmDwDhyodx4hdf95w4ipF2XvFDhIpqXQkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjr4vfm5eJyIhFiQV2353ZAQQqqMwHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeNNOsecm/EXtc7Xf3KVluo74ICkH/+MdPp OWbv4bR2zZHokvJRX9+37T8j4Z5j5lzTnpXJqK6LX/6/G+vrMFync2od4OLHBKPh Td8oT9ZmeJDELNC1yoTZVpxqboHFWZHwBTUx57JLbggoqs6uWs0WUSkFeGiGPOyA mp2vP+PAIQTZvAS6+Al5h+OHvVPp9l0FZKrZhjLQoSj45uxV36W+NUmFzxReU12J BkllN6pe4kEWwg7ctrW4fRuknA77Wdj16yx+9ZWYJ1lksVHEUledUE4jXBBzU6mw uDr8pwEtXU8dv7piYnNOyLGl3Sinwkfq0r5bkVALzJ99KkNUdS4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:02:53 2025 by rpki-client