$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: 6jDx4tzW37eawaOAfmRUYkXFYkZL19cH+MakNKz3pCI= Subject key identifier: 46:0A:D1:F9:43:5A:4E:BB:09:AD:CE:F6:F7:62:E0:62:29:DF:37:7E Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 140C5A25037DE08D6DCF0AC4CE5FA7BAFCE2CC9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 0198 Signing time: Mon 30 Jun 2025 21:11:20 +0000 Manifest this update: Mon 30 Jun 2025 21:06:20 +0000 Manifest next update: Thu 03 Jul 2025 22:34:20 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: nepxzQwvJ312nV9iZgEKlOIPKHQAkqWcvRmCemfI68k=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: 8fcVvUOnHnEDxc1LP+W4ikZfxvy9KJkdRccQg7Mp1b8=) 3: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: IGYSsd36OdcG5hqjxnDG+CFla2NPnEracZMsTzKQ5h4=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: cWHJAdhMo3cUB7SJI/qLeHQjD7fvumO0S0ippQ4UQLg=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: kwgZlAehoInBl32w+IZeJMWxeIEAZ8IfMVtQyqbqAN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 22:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0c:5a:25:03:7d:e0:8d:6d:cf:0a:c4:ce:5f:a7:ba:fc:e2:cc:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Jun 30 21:06:20 2025 GMT Not After : Jul 3 22:34:20 2025 GMT Subject: CN=460AD1F9435A4EBB09ADCEF6F762E06229DF377E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:bf:4d:0a:7a:62:12:2f:19:76:27:73:36: c2:aa:56:42:08:34:5b:d5:e3:d2:ab:1c:bc:28:4a: b0:67:38:2e:1a:8e:4d:31:d7:27:24:e0:1a:cd:4f: 0f:b6:5f:aa:54:4d:3b:8e:9f:9e:c1:0f:80:6b:4a: d1:84:1e:ff:00:34:db:ed:3e:53:79:92:e3:32:f6: 39:33:a1:2b:bf:b0:8d:ab:e9:60:06:76:eb:fa:b2: 0a:cb:e2:d6:a1:8f:2c:80:a2:b8:3a:ab:75:f2:ee: c8:9a:3c:9f:65:5e:01:33:3f:c6:73:f6:4c:9e:3c: ab:05:01:af:2e:ea:e9:74:75:82:6d:41:80:8f:38: 12:11:79:de:1f:fc:7b:fa:6c:4e:5e:ef:3c:a2:e6: af:0f:b5:ab:71:9b:54:71:49:81:05:79:bf:df:d1: c0:de:54:07:ed:07:ca:80:04:64:3a:ab:18:f9:41: aa:ef:08:64:44:ce:28:3e:1c:4e:a8:82:31:56:ea: 9e:ca:c8:ec:8a:a0:81:32:7d:e3:b0:15:b6:30:e9: 47:ef:9d:55:14:8b:ef:84:86:49:9b:0d:ff:8a:ca: e5:bf:a1:17:32:21:1c:98:f9:a4:2f:63:93:90:9f: 34:f7:a9:86:a3:30:4f:d7:16:a2:82:76:ab:88:a2: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:D1:F9:43:5A:4E:BB:09:AD:CE:F6:F7:62:E0:62:29:DF:37:7E X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:1b:8d:e2:4c:1d:69:31:22:41:a5:a0:26:c8:b9:0c:6d:cb: 5e:a7:2f:ac:04:20:f2:41:fd:8c:c5:54:2d:c5:86:41:51:e4: bc:17:dd:1e:d3:95:59:e4:bf:19:c6:75:e8:fc:b5:ce:49:0a: ad:43:33:81:e5:fb:65:8f:84:95:6d:23:d5:89:c6:92:ba:02: 42:a9:2d:b5:8a:3e:dc:4b:96:d1:fe:b8:9f:b4:15:cf:18:f9: 49:fe:ea:22:27:f0:08:2b:cb:5c:db:fc:a5:24:fa:87:2c:c2: 79:34:cb:44:67:c9:70:b9:96:f3:0e:bb:be:3d:91:f9:d8:a1: ca:1e:ca:14:35:c7:66:c6:23:27:a3:61:48:55:fc:a8:2c:b2: e3:33:b4:c0:2e:a6:6e:6f:ba:94:99:36:d1:c9:0d:12:25:9f: ee:ba:5a:a7:96:89:65:18:7f:3c:be:c8:0c:29:34:27:90:d1: 63:0b:3f:5b:6a:1d:a7:23:10:ef:2c:e8:e2:f4:5e:27:27:06: 37:15:58:f4:52:67:60:3d:4e:5a:eb:9e:63:e2:30:33:a0:45: 0a:a4:75:d7:f5:45:b4:58:be:3f:d8:9a:c6:aa:29:36:c4:0d: a3:23:08:c3:4e:9e:26:35:34:a5:0a:76:49:83:4c:33:d6:88: 2a:71:13:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAxaJQN94I1tzwrEzl+nuvzizJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTA2MzAyMTA2MjBaFw0yNTA3MDMyMjM0MjBaMDMxMTAvBgNV BAMTKDQ2MEFEMUY5NDM1QTRFQkIwOUFEQ0VGNkY3NjJFMDYyMjlERjM3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwr9NCnpiEi8ZdidzNsKqVkII NFvV49KrHLwoSrBnOC4ajk0x1yck4BrNTw+2X6pUTTuOn57BD4BrStGEHv8ANNvt PlN5kuMy9jkzoSu/sI2r6WAGduv6sgrL4tahjyyAorg6q3Xy7siaPJ9lXgEzP8Zz 9kyePKsFAa8u6ul0dYJtQYCPOBIRed4f/Hv6bE5e7zyi5q8Ptatxm1RxSYEFeb/f 0cDeVAftB8qABGQ6qxj5QarvCGREzig+HE6ogjFW6p7KyOyKoIEyfeOwFbYw6Ufv nVUUi++EhkmbDf+KyuW/oRcyIRyY+aQvY5OQnzT3qYajME/XFqKCdquIopAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgrR+UNaTrsJrc7292LgYinfN34wHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgbjeJMHWkxIkGloCbIuQxty16nL6wEIPJB /YzFVC3FhkFR5LwX3R7TlVnkvxnGdej8tc5JCq1DM4Hl+2WPhJVtI9WJxpK6AkKp LbWKPtxLltH+uJ+0Fc8Y+Un+6iIn8Agry1zb/KUk+ocswnk0y0RnyXC5lvMOu749 kfnYocoeyhQ1x2bGIyejYUhV/KgssuMztMAupm5vupSZNtHJDRIln+66WqeWiWUY fzy+yAwpNCeQ0WMLP1tqHacjEO8s6OL0XicnBjcVWPRSZ2A9TlrrnmPiMDOgRQqk ddf1RbRYvj/YmsaqKTbEDaMjCMNOniY1NKUKdkmDTDPWiCpxEzU= -----END CERTIFICATE-----Generated at Wed Jul 2 06:06:56 2025 by rpki-client