$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: 7/zaLeff44a0pRMpxcxsA7NmYoLaDrz8iWGZQVn/quo= Subject key identifier: D9:D9:B6:2D:B4:AC:E4:8C:56:1A:E4:7D:0E:A7:53:29:3C:89:4A:ED Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 719B6CC77740902F50A58E28822726919FF73B18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 01B9 Signing time: Mon 30 Jun 2025 18:32:16 +0000 Manifest this update: Mon 30 Jun 2025 18:27:16 +0000 Manifest next update: Thu 03 Jul 2025 23:13:16 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 6/pSy7z7eY7tiFM1qTKt66H7MbktwVP3GS8euOTpVH0=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: HZBrLgbQWVxYZnyaKdY/e4UzmMZ9mCIC/cIgRz7eJNM=) 3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: WfS+hJt0MRHreGBYJWQj9QwW51lq/cgm3WlkvKr1/Is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9b:6c:c7:77:40:90:2f:50:a5:8e:28:82:27:26:91:9f:f7:3b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Jun 30 18:27:16 2025 GMT Not After : Jul 3 23:13:16 2025 GMT Subject: CN=D9D9B62DB4ACE48C561AE47D0EA753293C894AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:78:2f:e2:7f:3d:bc:88:a1:a0:38:96:50: 52:cd:87:db:ce:c4:fd:80:a4:ee:a7:3f:9b:77:56: 94:ee:e5:a2:51:b4:dc:7f:fa:3b:b2:31:0e:28:68: c5:9c:10:c3:32:e1:2e:b1:8a:19:b9:ed:99:be:1d: 1b:d6:41:95:7d:b7:d5:2b:a5:b5:ef:51:06:b0:a0: 85:58:33:26:24:35:b2:ac:dd:10:87:8c:22:6f:84: d9:c6:44:77:db:6b:46:cc:2f:67:6f:74:78:f6:6f: 7a:8d:63:65:9c:de:1d:87:5e:3f:b5:76:73:76:a2: 7d:a1:02:b1:cb:57:02:c6:7f:8f:35:41:42:82:6d: bd:fa:52:5f:60:29:b8:22:8a:61:70:fe:7f:93:0b: 89:9a:c3:c7:61:c3:62:2b:ac:da:19:9b:4d:bf:6a: fe:01:56:82:72:41:5c:54:c6:b0:79:a4:ab:aa:24: a2:25:57:04:ce:00:00:53:80:c6:8d:5e:61:ee:d8: 18:2e:6f:f0:63:f3:5d:2e:70:88:53:2e:d4:e0:8a: ba:0b:07:d8:d2:2e:17:ae:38:de:08:2c:5a:c9:0d: 0e:ca:10:07:d9:f9:16:f1:95:0e:7d:72:19:99:34: 8a:81:1f:d8:5c:20:06:44:28:24:0c:cc:2b:53:74: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:B6:2D:B4:AC:E4:8C:56:1A:E4:7D:0E:A7:53:29:3C:89:4A:ED X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:62:cb:b5:81:5c:aa:22:54:b1:79:a9:d4:07:83:c2:41:3b: be:32:60:bb:7d:91:0b:c3:44:49:db:88:23:91:a3:af:3a:88: fc:9a:68:b9:6c:b5:11:99:58:11:3a:1c:46:7a:5d:cb:83:43: c3:65:3a:00:9e:28:db:a9:2d:dd:e6:e7:af:dd:f4:f1:ec:e1: 70:0a:1a:73:a8:b9:2b:ff:44:4a:38:27:69:13:97:b5:9a:0e: 3f:88:c2:b1:37:c7:73:26:70:b2:70:fe:dd:cd:cc:48:d7:78: e3:c0:4d:67:b2:9f:64:8c:f2:16:fc:5f:b5:59:36:d5:89:37: 35:bd:1e:82:f2:9b:17:32:e4:d0:52:d3:f9:4f:5b:70:0c:db: f4:ee:8d:12:d1:fa:23:27:4a:a6:09:34:2f:b0:eb:12:a0:14: cf:44:d9:b2:46:8c:9d:e0:43:2e:f7:ac:f4:2f:32:92:4b:e5: 25:ef:35:e4:6c:47:2d:c7:0e:e2:43:65:28:59:8c:9e:da:b0: 06:a6:71:a4:88:d9:3a:af:c0:19:dd:5d:0c:69:a5:34:08:b9: 53:87:88:19:4d:aa:9f:5e:a6:fd:fc:41:82:78:72:43:45:f9: 6d:8a:7e:03:78:85:c0:62:f4:c9:e2:24:7d:01:53:b7:ec:97: 06:70:78:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZtsx3dAkC9QpY4ogicmkZ/3OxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTA2MzAxODI3MTZaFw0yNTA3MDMyMzEzMTZaMDMxMTAvBgNV BAMTKEQ5RDlCNjJEQjRBQ0U0OEM1NjFBRTQ3RDBFQTc1MzI5M0M4OTRBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh43gv4n89vIihoDiWUFLNh9vO xP2ApO6nP5t3VpTu5aJRtNx/+juyMQ4oaMWcEMMy4S6xihm57Zm+HRvWQZV9t9Ur pbXvUQawoIVYMyYkNbKs3RCHjCJvhNnGRHfba0bML2dvdHj2b3qNY2Wc3h2HXj+1 dnN2on2hArHLVwLGf481QUKCbb36Ul9gKbgiimFw/n+TC4maw8dhw2IrrNoZm02/ av4BVoJyQVxUxrB5pKuqJKIlVwTOAABTgMaNXmHu2Bgub/Bj810ucIhTLtTgiroL B9jSLheuON4ILFrJDQ7KEAfZ+RbxlQ59chmZNIqBH9hcIAZEKCQMzCtTdIAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2dm2LbSs5IxWGuR9DqdTKTyJSu0wHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFiy7WBXKoiVLF5qdQHg8JBO74yYLt9kQvD REnbiCORo686iPyaaLlstRGZWBE6HEZ6XcuDQ8NlOgCeKNupLd3m56/d9PHs4XAK GnOouSv/REo4J2kTl7WaDj+IwrE3x3MmcLJw/t3NzEjXeOPATWeyn2SM8hb8X7VZ NtWJNzW9HoLymxcy5NBS0/lPW3AM2/TujRLR+iMnSqYJNC+w6xKgFM9E2bJGjJ3g Qy73rPQvMpJL5SXvNeRsRy3HDuJDZShZjJ7asAamcaSI2TqvwBndXQxppTQIuVOH iBlNqp9epv38QYJ4ckNF+W2KfgN4hcBi9MniJH0BU7fslwZweG8= -----END CERTIFICATE-----Generated at Tue Jul 1 18:26:57 2025 by rpki-client