$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: tGejv/KealaOEL5UbHcN9hypH6TUA487US8+ezsPZBc= Subject key identifier: 0D:C8:7B:7F:EB:62:D3:A8:6E:61:46:E5:85:69:42:2E:69:07:A6:8E Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 232BEEB2825C889E174164857DD74618625759CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01B0 Signing time: Fri 22 Aug 2025 00:01:21 +0000 Manifest this update: Thu 21 Aug 2025 23:56:21 +0000 Manifest next update: Mon 25 Aug 2025 07:42:21 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) 2: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: XJ9zv93FPGlYI/4ZcOhuMDdVOnafHdEeyWRXq6re/S4=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: cWHJAdhMo3cUB7SJI/qLeHQjD7fvumO0S0ippQ4UQLg=) 4: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: 8fcVvUOnHnEDxc1LP+W4ikZfxvy9KJkdRccQg7Mp1b8=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2b:ee:b2:82:5c:88:9e:17:41:64:85:7d:d7:46:18:62:57:59:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Aug 21 23:56:21 2025 GMT Not After : Aug 25 07:42:21 2025 GMT Subject: CN=0DC87B7FEB62D3A86E6146E58569422E6907A68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:77:bf:5d:a3:39:0f:33:08:a9:14:9a:59: f9:9c:eb:05:da:d6:91:a8:de:e1:f0:64:d0:19:8e: 38:12:02:e3:d4:2e:07:08:dc:cc:91:72:22:27:f6: c0:ea:50:23:ad:03:a5:85:81:b8:f4:ef:80:ea:15: 4f:c3:1f:f8:80:7d:ff:16:f3:a4:14:d6:ba:9f:20: 44:33:69:eb:88:95:ad:2d:22:b3:0b:de:e6:3c:35: 00:dc:32:6a:e7:04:aa:a0:21:23:76:cd:e6:38:62: b6:29:91:6b:f9:dc:e3:7a:d4:8a:bf:49:9e:66:38: 77:93:dc:bb:ce:32:81:69:be:0e:cd:3f:a5:40:62: 96:a1:84:db:af:6f:76:f0:f7:51:ee:da:04:d8:f6: db:23:ba:f6:a4:57:b3:87:32:e6:57:30:c3:1e:7a: 31:d3:fe:20:55:00:57:1c:9d:b4:74:75:6f:56:ef: 65:fb:8c:17:f5:66:a1:8f:c3:61:c5:f7:ad:57:fa: 8c:25:bd:66:d9:82:a3:83:2d:b4:a0:d8:82:14:39: ec:63:64:62:6c:44:bd:0e:fe:f9:34:64:c9:14:ac: 1d:73:78:0e:8e:14:7d:62:4c:43:b5:9b:0d:0d:d4: 40:30:0f:4f:2b:54:31:53:f5:97:03:48:cb:60:23: 31:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:7B:7F:EB:62:D3:A8:6E:61:46:E5:85:69:42:2E:69:07:A6:8E X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f0:f9:c6:1c:d9:a5:6a:d3:48:bf:33:42:d6:5e:c1:ad:c9: b9:26:f4:b8:82:81:0f:6c:40:df:ed:d4:33:d4:f8:f9:21:61: 4f:35:bf:7e:db:3f:99:34:b7:ba:b0:f3:99:f3:2c:6a:92:44: ad:64:19:ae:e5:c1:af:71:94:cb:d5:58:50:d9:08:b9:00:e6: 08:2a:8e:e7:3f:cf:51:42:e9:29:d9:a3:95:b2:e0:13:14:6c: b9:66:a9:93:f4:7f:93:be:ff:c0:83:87:54:8a:c8:5d:20:97: 91:99:5d:6d:d1:e0:c7:4c:c1:a0:44:d2:87:8b:62:4f:dc:b7: ee:e2:a1:1a:46:4b:1c:bd:08:84:9e:1e:ed:b6:98:88:f1:0b: 90:1b:00:dd:39:ac:fe:ea:36:77:81:af:89:13:1f:30:27:34: f5:f6:a5:2e:da:bd:34:3a:10:8a:3b:1f:13:93:c7:88:a9:75: cc:ca:62:52:4d:58:04:5c:d2:62:cd:87:4f:07:a1:c0:2d:55: c6:b5:4d:44:68:99:1c:f2:7e:a0:26:0e:63:94:75:fb:f0:52: 2f:dc:86:ff:3e:b4:22:91:04:56:84:30:cb:6e:1e:0c:35:c3: 4d:e5:a3:95:14:e1:af:49:04:79:cb:79:b7:4c:d6:b4:29:8e: 78:ce:78:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyvusoJciJ4XQWSFfddGGGJXWcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTA4MjEyMzU2MjFaFw0yNTA4MjUwNzQyMjFaMDMxMTAvBgNV BAMTKDBEQzg3QjdGRUI2MkQzQTg2RTYxNDZFNTg1Njk0MjJFNjkwN0E2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzXe/XaM5DzMIqRSaWfmc6wXa 1pGo3uHwZNAZjjgSAuPULgcI3MyRciIn9sDqUCOtA6WFgbj074DqFU/DH/iAff8W 86QU1rqfIEQzaeuIla0tIrML3uY8NQDcMmrnBKqgISN2zeY4YrYpkWv53ON61Iq/ SZ5mOHeT3LvOMoFpvg7NP6VAYpahhNuvb3bw91Hu2gTY9tsjuvakV7OHMuZXMMMe ejHT/iBVAFccnbR0dW9W72X7jBf1ZqGPw2HF961X+owlvWbZgqODLbSg2IIUOexj ZGJsRL0O/vk0ZMkUrB1zeA6OFH1iTEO1mw0N1EAwD08rVDFT9ZcDSMtgIzFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDch7f+ti06huYUblhWlCLmkHpo4wHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXw+cYc2aVq00i/M0LWXsGtybkm9LiCgQ9s QN/t1DPU+PkhYU81v37bP5k0t7qw85nzLGqSRK1kGa7lwa9xlMvVWFDZCLkA5ggq juc/z1FC6SnZo5Wy4BMUbLlmqZP0f5O+/8CDh1SKyF0gl5GZXW3R4MdMwaBE0oeL Yk/ct+7ioRpGSxy9CISeHu22mIjxC5AbAN05rP7qNneBr4kTHzAnNPX2pS7avTQ6 EIo7HxOTx4ipdczKYlJNWARc0mLNh08HocAtVca1TURomRzyfqAmDmOUdfvwUi/c hv8+tCKRBFaEMMtuHgw1w03lo5UU4a9JBHnLebdM1rQpjnjOeCI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:08 2025 by rpki-client