$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: 2T1HKw2lwFS69GN11Ja7eZ4mzOvvF2kDaXOtLvV9ooY= Subject key identifier: 6A:B4:2B:4B:A1:74:19:C6:50:EB:E9:AB:11:16:4B:59:C9:C1:F4:5E Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 168222D07402FD8072E3BE87317F07747C1C92E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 01CE Signing time: Wed 07 May 2025 23:00:37 +0000 Manifest this update: Wed 07 May 2025 22:55:37 +0000 Manifest next update: Sat 10 May 2025 23:10:37 +0000 Files and hashes: 1: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: pSh8peuCnMK2jRtrDworIJG6sZX8CsJ/hEZMmyp2/S4=) 2: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 3: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 23:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:82:22:d0:74:02:fd:80:72:e3:be:87:31:7f:07:74:7c:1c:92:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: May 7 22:55:37 2025 GMT Not After : May 10 23:10:37 2025 GMT Subject: CN=6AB42B4BA17419C650EBE9AB11164B59C9C1F45E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:85:d4:80:64:5e:ef:cd:88:e4:32:7b:b5: 68:cb:60:81:e1:68:f8:a9:f2:03:f9:ab:b2:11:40: 07:d0:5c:a0:e5:10:cc:44:1c:c7:8d:17:95:b5:16: 4d:92:0e:ec:43:4e:0d:f4:ba:2b:be:93:50:71:eb: 9e:d1:da:b4:15:d4:33:a2:14:89:9e:48:7f:37:cd: ce:96:fc:f5:ac:5e:fd:83:83:45:54:4f:a7:73:93: f9:16:2f:10:1c:54:92:77:db:95:04:61:45:02:8c: 9e:4f:e4:62:31:9e:ee:e8:2f:c6:00:9c:03:4d:75: fc:84:0f:52:30:32:7b:c2:27:15:3e:cb:9f:b8:12: 5b:58:32:4c:be:4a:fa:56:e6:cf:bb:c2:27:55:64: 0d:e4:5b:bf:80:85:0e:70:08:6a:88:cd:dc:7a:78: db:72:e9:6f:57:77:70:9f:9f:f4:f7:4d:bb:b6:ff: 75:78:fe:f5:0e:40:e8:65:d5:e6:31:fa:86:e7:72: b4:a7:fd:df:54:66:60:1a:06:aa:e4:8f:e8:f4:d4: 6a:44:bd:cb:36:dd:80:10:ce:0c:53:a6:0d:ae:ad: 9e:e0:1d:2a:be:e2:dc:9d:46:54:95:0d:d6:ff:d1: 21:20:4f:13:9e:6e:0a:c9:e0:25:d3:62:39:e7:a7: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:2B:4B:A1:74:19:C6:50:EB:E9:AB:11:16:4B:59:C9:C1:F4:5E X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:77:ff:2b:b3:22:a8:c9:fd:11:c8:2f:a5:6a:68:1d:ac:29: ab:d4:10:b8:29:33:95:ba:14:be:8c:6b:69:bb:73:53:60:ab: a2:e7:24:a9:0f:06:ac:42:85:b4:98:9d:b8:a2:bb:a2:49:ec: 09:b5:cc:27:8e:7f:ce:48:77:cd:cb:31:c2:62:47:3e:5f:59: f5:ef:5d:40:ea:4a:8e:4e:db:23:02:80:01:8d:6d:25:71:1b: 9c:6c:4d:9f:e1:16:d3:24:40:1f:8a:aa:bc:81:70:b7:1d:17: b9:bc:33:95:2f:4a:44:30:0e:ef:53:bc:7f:4e:e2:8f:7f:41: 6f:e0:17:9d:42:3d:fd:ce:47:6c:59:49:29:5a:19:e5:5f:ca: ab:0c:5a:41:76:33:9b:1f:41:14:89:94:13:7a:7d:02:5e:6f: 54:b4:37:52:10:78:78:c8:c2:10:9c:f5:e5:13:52:02:36:26: 10:11:79:0d:83:27:ad:ff:c2:a7:f8:ae:8a:e5:93:7c:d0:4d: b4:dc:1f:23:44:8e:f8:77:36:81:dd:6d:6b:89:01:44:3c:d1: 65:c3:fe:eb:be:07:a7:46:f3:87:ca:33:1e:a7:dc:ea:80:33: e3:f9:fc:32:19:6e:a8:55:a1:3d:a4:4e:e6:67:9c:42:a7:94: e7:a6:60:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoIi0HQC/YBy476HMX8HdHwckuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTA1MDcyMjU1MzdaFw0yNTA1MTAyMzEwMzdaMDMxMTAvBgNV BAMTKDZBQjQyQjRCQTE3NDE5QzY1MEVCRTlBQjExMTY0QjU5QzlDMUY0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQYXUgGRe782I5DJ7tWjLYIHh aPip8gP5q7IRQAfQXKDlEMxEHMeNF5W1Fk2SDuxDTg30uiu+k1Bx657R2rQV1DOi FImeSH83zc6W/PWsXv2Dg0VUT6dzk/kWLxAcVJJ325UEYUUCjJ5P5GIxnu7oL8YA nANNdfyED1IwMnvCJxU+y5+4EltYMky+SvpW5s+7widVZA3kW7+AhQ5wCGqIzdx6 eNty6W9Xd3Cfn/T3Tbu2/3V4/vUOQOhl1eYx+obncrSn/d9UZmAaBqrkj+j01GpE vcs23YAQzgxTpg2urZ7gHSq+4tydRlSVDdb/0SEgTxOebgrJ4CXTYjnnp6XVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUarQrS6F0GcZQ6+mrERZLWcnB9F4wHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJ3/yuzIqjJ/RHIL6VqaB2sKavUELgpM5W6 FL6Ma2m7c1Ngq6LnJKkPBqxChbSYnbiiu6JJ7Am1zCeOf85Id83LMcJiRz5fWfXv XUDqSo5O2yMCgAGNbSVxG5xsTZ/hFtMkQB+KqryBcLcdF7m8M5UvSkQwDu9TvH9O 4o9/QW/gF51CPf3OR2xZSSlaGeVfyqsMWkF2M5sfQRSJlBN6fQJeb1S0N1IQeHjI whCc9eUTUgI2JhAReQ2DJ63/wqf4rorlk3zQTbTcHyNEjvh3NoHdbWuJAUQ80WXD /uu+B6dG84fKMx6n3OqAM+P5/DIZbqhVoT2kTuZnnEKnlOemYOg= -----END CERTIFICATE-----Generated at Thu May 8 23:33:24 2025 by rpki-client