$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: 499GjnVx01AjBG+wbbfM9bNMgz+sKUGvdSLZcWrAyz0= Subject key identifier: 4F:3B:BA:FE:DF:A3:55:52:40:AC:C1:20:BE:E0:0D:90:DE:2A:38:AD Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 77012D8D1FFE562471556E6BCCB7C5074FF5D654 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 01E5 Signing time: Sat 28 Jun 2025 16:40:38 +0000 Manifest this update: Sat 28 Jun 2025 16:35:38 +0000 Manifest next update: Wed 02 Jul 2025 00:00:38 +0000 Files and hashes: 1: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) 3: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: Q0IHlcsOHtIEUEDTte3R/WGAXSfI8PiM2Y6qWhJ2bSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:01:2d:8d:1f:fe:56:24:71:55:6e:6b:cc:b7:c5:07:4f:f5:d6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Jun 28 16:35:38 2025 GMT Not After : Jul 2 00:00:38 2025 GMT Subject: CN=4F3BBAFEDFA3555240ACC120BEE00D90DE2A38AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c3:6c:96:dd:ae:84:04:c8:a2:d5:f0:f6:68: b9:3c:d9:45:fc:a0:13:d2:90:94:bf:60:98:d7:36: 1e:a1:13:2f:df:6e:2c:08:af:79:79:93:5f:7e:d5: fb:d8:7c:16:0b:fa:94:4a:6c:0e:7d:86:ab:8f:ec: cc:bb:74:d6:c7:5a:04:e0:53:42:52:6d:2a:a4:0f: 96:0a:e4:e8:04:56:bd:9a:aa:4f:fb:97:a1:b4:b3: 88:88:ad:22:44:13:5a:3d:17:a1:6b:f5:08:39:ce: bc:f7:05:76:ef:9e:ab:e6:4b:b3:91:35:6e:73:2a: 47:29:eb:a9:7b:c7:cb:4b:6a:8f:8a:99:61:19:dd: 9b:35:87:ac:eb:eb:c1:89:b6:00:ee:8c:cb:31:68: 24:30:a8:40:8c:ca:70:c4:c3:cd:57:f9:81:41:05: 6e:a3:47:09:41:f9:65:b0:c7:73:87:08:89:e5:0d: 55:1f:c1:52:e6:cb:bd:29:a1:24:fe:b1:89:5d:27: 50:80:5f:07:34:ed:ff:34:b4:b2:76:bf:58:06:da: 1f:c2:05:eb:a6:d1:6d:5e:8b:6c:75:b2:33:38:73: e6:f7:97:5a:0e:62:25:94:6a:79:f1:89:43:17:4a: c3:da:ba:05:a2:1c:8e:65:c2:f2:2c:fd:e6:3d:b3: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:BA:FE:DF:A3:55:52:40:AC:C1:20:BE:E0:0D:90:DE:2A:38:AD X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:92:4e:17:09:42:7b:fd:f7:69:a4:7d:4b:5d:6b:c5:d7:72: c8:7b:67:52:3b:7f:5e:f9:20:07:1a:4c:90:f6:f3:d1:a3:c5: 25:35:8f:1a:5b:ba:e1:21:a1:2e:c1:ea:4d:5f:e8:e7:e8:83: 9c:d4:69:f6:ae:30:e5:6e:b0:2f:1c:2d:69:61:cc:42:2f:f4: 56:ed:7b:47:2c:67:3f:3e:84:7a:f1:78:dd:ce:2d:33:8f:aa: 33:53:64:12:0c:d2:64:97:26:7e:80:f3:43:6c:04:8e:ee:36: 2b:4b:24:e2:fd:6a:94:63:c1:36:59:bf:f0:c0:fb:4b:db:26: d3:27:12:30:f1:8b:d5:64:51:09:7a:f1:b3:02:5b:14:01:d3: ca:a9:7a:53:3e:ce:de:40:e0:f2:eb:ff:e0:46:53:0b:1c:5a: 59:f9:c9:88:2e:3f:b9:0a:fb:8a:29:8b:82:fe:f4:e5:3a:70: 05:19:8a:db:c5:c5:5b:3d:1e:94:77:d5:59:d7:20:d8:3b:5b: f3:a6:fb:dc:4b:53:fe:e5:91:be:84:5f:00:d0:02:8a:58:3e: 10:7d:5d:ab:be:39:5a:8f:b7:64:61:61:33:d7:e6:2e:6d:ea: 55:02:6c:f4:f1:e4:91:38:47:4b:4f:7f:cd:bc:69:83:48:27: d9:83:73:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwEtjR/+ViRxVW5rzLfFB0/11lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTA2MjgxNjM1MzhaFw0yNTA3MDIwMDAwMzhaMDMxMTAvBgNV BAMTKDRGM0JCQUZFREZBMzU1NTI0MEFDQzEyMEJFRTAwRDkwREUyQTM4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7w2yW3a6EBMii1fD2aLk82UX8 oBPSkJS/YJjXNh6hEy/fbiwIr3l5k19+1fvYfBYL+pRKbA59hquP7My7dNbHWgTg U0JSbSqkD5YK5OgEVr2aqk/7l6G0s4iIrSJEE1o9F6Fr9Qg5zrz3BXbvnqvmS7OR NW5zKkcp66l7x8tLao+KmWEZ3Zs1h6zr68GJtgDujMsxaCQwqECMynDEw81X+YFB BW6jRwlB+WWwx3OHCInlDVUfwVLmy70poST+sYldJ1CAXwc07f80tLJ2v1gG2h/C Beum0W1ei2x1sjM4c+b3l1oOYiWUannxiUMXSsPaugWiHI5lwvIs/eY9swXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTzu6/t+jVVJArMEgvuANkN4qOK0wHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWSThcJQnv992mkfUtda8XXcsh7Z1I7f175 IAcaTJD289GjxSU1jxpbuuEhoS7B6k1f6Ofog5zUafauMOVusC8cLWlhzEIv9Fbt e0csZz8+hHrxeN3OLTOPqjNTZBIM0mSXJn6A80NsBI7uNitLJOL9apRjwTZZv/DA +0vbJtMnEjDxi9VkUQl68bMCWxQB08qpelM+zt5A4PLr/+BGUwscWln5yYguP7kK +4opi4L+9OU6cAUZitvFxVs9HpR31VnXINg7W/Om+9xLU/7lkb6EXwDQAopYPhB9 Xau+OVqPt2RhYTPX5i5t6lUCbPTx5JE4R0tPf828aYNIJ9mDc78= -----END CERTIFICATE-----Generated at Sun Jun 29 19:40:40 2025 by rpki-client