$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: itg0b+COyljKL0EjctZXH1gxLK1KsFoT8snJDphfYfE= Subject key identifier: A3:BD:34:43:01:71:B9:8E:A0:F8:5F:96:F8:86:12:94:A8:5B:80:1A Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 1B074AA0CA08638D7BFF09A977410A7FED62B95D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 0181 Signing time: Sat 10 May 2025 22:21:20 +0000 Manifest this update: Sat 10 May 2025 22:16:20 +0000 Manifest next update: Wed 14 May 2025 02:19:20 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: nepxzQwvJ312nV9iZgEKlOIPKHQAkqWcvRmCemfI68k=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: 8fcVvUOnHnEDxc1LP+W4ikZfxvy9KJkdRccQg7Mp1b8=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: cWHJAdhMo3cUB7SJI/qLeHQjD7fvumO0S0ippQ4UQLg=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: kwgZlAehoInBl32w+IZeJMWxeIEAZ8IfMVtQyqbqAN8=) 5: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: GpThDFw/vWrmzs8qJCTH3msSwOVJFh+hn5v8l4lq9J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:07:4a:a0:ca:08:63:8d:7b:ff:09:a9:77:41:0a:7f:ed:62:b9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: May 10 22:16:20 2025 GMT Not After : May 14 02:19:20 2025 GMT Subject: CN=A3BD34430171B98EA0F85F96F8861294A85B801A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:56:5b:f3:e4:d8:82:74:93:cb:58:f3:f0: 2c:ef:91:4c:23:f2:55:7c:4b:d0:81:95:2c:75:95: 74:16:84:35:1f:c7:b6:f1:c2:a0:49:8d:f4:7c:ce: 69:8a:04:cf:fd:47:06:08:fd:b7:85:42:e1:90:e7: 01:de:ed:f6:ae:8a:15:43:f1:87:46:34:a1:ee:16: 43:b9:53:d1:4f:36:45:f8:74:81:f2:27:94:81:76: b8:16:32:67:d9:25:6e:9d:25:a4:c1:85:6e:2a:48: ed:ac:ce:f2:e1:11:3d:57:a8:f5:cf:6e:62:da:66: d4:31:ff:2f:9c:fd:fe:7f:99:18:fb:16:0e:a2:70: fe:42:bd:f6:06:ca:03:ad:d1:7d:7f:50:65:6c:e4: 3b:76:30:25:f2:df:c6:04:e5:29:fd:ac:c4:2c:52: 46:6b:e6:b7:9f:fe:68:92:2d:5c:23:60:38:77:b5: b3:3d:53:64:87:29:a4:2d:a2:90:a2:2a:2b:16:be: 7a:1a:28:b5:39:c1:2c:58:d7:18:1a:e2:4e:0c:dc: 26:43:7f:af:f0:c3:ef:09:f9:d1:c4:54:ce:d8:d2: a0:17:0d:83:7d:1a:00:34:28:5b:88:ac:28:64:93: c9:bb:34:63:90:e9:d5:e7:fa:85:81:0e:a2:f1:93: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:34:43:01:71:B9:8E:A0:F8:5F:96:F8:86:12:94:A8:5B:80:1A X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e9:90:62:af:fd:bb:16:a9:77:b3:fb:ed:6d:b2:13:14:8a: c8:e9:bc:68:c4:c5:3e:60:e4:6b:74:b4:43:a9:b4:69:9a:a4: 3f:6c:70:7f:6d:5b:56:b6:3e:53:39:5a:55:59:01:28:b5:96: 99:5f:bb:53:69:d4:75:26:8a:34:59:71:2d:28:20:0f:87:dd: bc:c9:50:36:e4:67:d6:c9:0b:39:71:7a:7f:ea:dc:ec:03:c7: 1e:c1:94:e9:76:ab:86:68:e3:aa:87:29:fa:03:e9:52:84:a1: b7:0c:ff:b3:fc:c0:a2:88:38:e7:cb:0b:c2:da:88:e0:d3:55: 9d:83:23:dc:49:5f:21:44:85:af:49:bf:76:b2:58:0f:9b:39: d6:d1:36:79:57:4d:c9:9c:72:22:b4:38:0b:4a:9f:a8:21:b8: 77:79:2e:0f:a1:43:d8:96:32:a1:a5:98:a2:ef:a9:57:d6:01: 4b:6a:7e:2b:ad:fd:5e:80:d1:0e:f0:b5:d9:98:a0:48:ad:1a: df:51:1f:78:35:c0:fb:d6:33:7d:11:f9:17:ea:37:18:9f:9d: 15:01:61:03:4a:27:43:21:31:c1:ea:d6:30:a4:10:5a:e3:df: 21:5d:a5:f6:88:ab:dd:78:05:65:99:2f:6a:b1:fe:c4:0b:a1: 4e:b9:94:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwdKoMoIY417/wmpd0EKf+1iuV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTA1MTAyMjE2MjBaFw0yNTA1MTQwMjE5MjBaMDMxMTAvBgNV BAMTKEEzQkQzNDQzMDE3MUI5OEVBMEY4NUY5NkY4ODYxMjk0QTg1QjgwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZVZb8+TYgnSTy1jz8CzvkUwj 8lV8S9CBlSx1lXQWhDUfx7bxwqBJjfR8zmmKBM/9RwYI/beFQuGQ5wHe7fauihVD 8YdGNKHuFkO5U9FPNkX4dIHyJ5SBdrgWMmfZJW6dJaTBhW4qSO2szvLhET1XqPXP bmLaZtQx/y+c/f5/mRj7Fg6icP5CvfYGygOt0X1/UGVs5Dt2MCXy38YE5Sn9rMQs UkZr5ref/miSLVwjYDh3tbM9U2SHKaQtopCiKisWvnoaKLU5wSxY1xga4k4M3CZD f6/ww+8J+dHEVM7Y0qAXDYN9GgA0KFuIrChkk8m7NGOQ6dXn+oWBDqLxkyu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo700QwFxuY6g+F+W+IYSlKhbgBowHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrpkGKv/bsWqXez++1tshMUisjpvGjExT5g 5Gt0tEOptGmapD9scH9tW1a2PlM5WlVZASi1lplfu1Np1HUmijRZcS0oIA+H3bzJ UDbkZ9bJCzlxen/q3OwDxx7BlOl2q4Zo46qHKfoD6VKEobcM/7P8wKKIOOfLC8La iODTVZ2DI9xJXyFEha9Jv3ayWA+bOdbRNnlXTcmcciK0OAtKn6ghuHd5Lg+hQ9iW MqGlmKLvqVfWAUtqfiut/V6A0Q7wtdmYoEitGt9RH3g1wPvWM30R+RfqNxifnRUB YQNKJ0MhMcHq1jCkEFrj3yFdpfaIq914BWWZL2qx/sQLoU65lHg= -----END CERTIFICATE-----Generated at Tue May 13 00:20:08 2025 by rpki-client