$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: 1/m6+o2gM0LGAV7aNXXnEbkCJaxp0+Xbcoy13MEFvs4= Subject key identifier: 11:25:DE:8B:04:0C:9A:A6:2E:8A:B9:52:06:2C:5A:0E:C3:85:7F:69 Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 0637B7C23A0FA7C48A79DA79F5BFD5535D1F93EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 0167 Signing time: Sun 11 May 2025 10:12:01 +0000 Manifest this update: Sun 11 May 2025 10:07:01 +0000 Manifest next update: Wed 14 May 2025 10:42:01 +0000 Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) 2: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: iW+Elpa5EAHOycsU3gMAncgEszzlmN2MAxXrvSHJQGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 10:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:37:b7:c2:3a:0f:a7:c4:8a:79:da:79:f5:bf:d5:53:5d:1f:93:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: May 11 10:07:01 2025 GMT Not After : May 14 10:42:01 2025 GMT Subject: CN=1125DE8B040C9AA62E8AB952062C5A0EC3857F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:9a:4e:31:8b:da:bb:5b:95:13:7a:a5:03: ca:58:20:80:5e:54:a6:2a:19:9a:94:af:12:e1:ab: 45:f4:1c:88:a8:95:8c:8e:56:a1:67:29:eb:a0:e8: d6:8c:2a:2b:04:41:29:76:f4:00:62:b7:42:25:c2: b0:9f:5d:9c:2e:d2:c0:63:44:ba:92:49:04:39:6b: 42:72:08:57:73:53:e6:ab:b1:fd:33:98:ce:26:3d: ab:ca:67:26:38:85:a1:d0:3e:93:5f:05:ca:df:66: 94:0a:b6:cf:19:d9:92:04:d4:24:fd:33:63:a7:ff: 2c:4a:75:6f:cb:7e:38:72:01:29:f1:df:ba:85:38: 3b:a5:91:25:27:e9:91:db:79:41:70:ac:08:fc:40: 9d:0d:4c:84:9a:df:79:05:92:01:2c:ab:8b:2d:8b: 3f:79:34:43:46:94:41:cc:1c:52:2b:74:93:a7:33: 70:f1:37:70:97:f0:33:ef:cb:83:05:29:d8:ac:92: 02:1f:8e:2e:7e:03:c9:dc:fe:b6:bf:83:57:f2:75: fd:52:9c:16:6f:06:62:a0:85:8a:4e:b5:f9:af:99: ec:eb:94:67:43:f7:88:d9:f0:de:ed:d4:69:38:c8: f5:33:50:de:5a:bf:a9:1f:03:a7:8e:94:d0:64:13: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:25:DE:8B:04:0C:9A:A6:2E:8A:B9:52:06:2C:5A:0E:C3:85:7F:69 X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b3:46:6f:be:5e:f5:b9:7e:44:85:9a:3e:08:2d:0f:dc:1e: c3:47:ee:9a:de:39:2f:a1:94:41:2f:aa:d4:b4:15:1d:28:b2: cf:f9:27:46:33:05:79:09:5a:8c:ee:dd:88:8a:11:77:c2:09: 68:3a:2e:17:ac:8d:11:c2:a6:77:15:a3:f4:02:ef:f0:10:1b: 95:4b:1f:10:dd:54:24:91:ce:34:90:c3:28:df:29:b6:26:6b: 87:a6:58:e8:95:0d:fc:44:f7:13:e3:13:ee:ce:32:70:31:58: 51:85:4e:f8:3b:38:e2:42:fd:f3:42:6d:6c:2b:cf:37:66:b1: f3:02:24:13:cc:4d:16:50:5c:97:00:ae:cb:f2:65:a9:12:dc: b1:55:4e:d1:c7:16:e2:73:cc:90:89:e1:68:de:77:90:e7:32: a2:9a:f7:b7:09:47:d5:31:b5:e4:ec:54:85:87:7f:a5:c0:53: fc:05:d6:1c:41:11:de:6f:39:af:39:80:c5:e7:3d:2e:67:aa: b5:44:a8:65:d9:a3:df:48:c8:72:e8:eb:68:78:6b:4b:3a:b0: 99:3d:78:93:29:8a:14:13:a3:89:af:fa:4c:5e:3d:cc:60:f3: 58:38:21:d6:0d:cc:1d:09:ad:43:0c:e9:bf:a7:8e:93:3d:ec: d3:ca:ae:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBje3wjoPp8SKedp59b/VU10fk+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTA1MTExMDA3MDFaFw0yNTA1MTQxMDQyMDFaMDMxMTAvBgNV BAMTKDExMjVERThCMDQwQzlBQTYyRThBQjk1MjA2MkM1QTBFQzM4NTdGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrJpOMYvau1uVE3qlA8pYIIBe VKYqGZqUrxLhq0X0HIiolYyOVqFnKeug6NaMKisEQSl29ABit0IlwrCfXZwu0sBj RLqSSQQ5a0JyCFdzU+arsf0zmM4mPavKZyY4haHQPpNfBcrfZpQKts8Z2ZIE1CT9 M2On/yxKdW/LfjhyASnx37qFODulkSUn6ZHbeUFwrAj8QJ0NTISa33kFkgEsq4st iz95NENGlEHMHFIrdJOnM3DxN3CX8DPvy4MFKdiskgIfji5+A8nc/ra/g1fydf1S nBZvBmKghYpOtfmvmezrlGdD94jZ8N7t1Gk4yPUzUN5av6kfA6eOlNBkE35TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESXeiwQMmqYuirlSBixaDsOFf2kwHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGzRm++XvW5fkSFmj4ILQ/cHsNH7preOS+h lEEvqtS0FR0oss/5J0YzBXkJWozu3YiKEXfCCWg6LhesjRHCpncVo/QC7/AQG5VL HxDdVCSRzjSQwyjfKbYma4emWOiVDfxE9xPjE+7OMnAxWFGFTvg7OOJC/fNCbWwr zzdmsfMCJBPMTRZQXJcArsvyZakS3LFVTtHHFuJzzJCJ4Wjed5DnMqKa97cJR9Ux teTsVIWHf6XAU/wF1hxBEd5vOa85gMXnPS5nqrVEqGXZo99IyHLo62h4a0s6sJk9 eJMpihQTo4mv+kxePcxg81g4IdYNzB0JrUMM6b+njpM97NPKruo= -----END CERTIFICATE-----Generated at Mon May 12 11:20:34 2025 by rpki-client