$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: Jd3uYGxuXAmP/a4j0PuWF7AgO7IC6wz0oFuBIbS9mwI= Subject key identifier: CA:D2:B5:77:C2:7C:E9:76:6C:D5:B3:E9:DF:6C:E1:47:8F:8E:32:BC Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 3B19FE19B5C6CA17D0DD830F78BE839D5D3A77A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 06:41:06 +0000 Manifest this update: Wed 06 Aug 2025 06:36:06 +0000 Manifest next update: Sat 09 Aug 2025 12:11:06 +0000 Files and hashes: 1: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=) 2: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=) 3: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: /5kbPQkxBGIOj3Uq1AYIPwSO0fO44H79xtv/wwdaxvE=) 4: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=) 5: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:19:fe:19:b5:c6:ca:17:d0:dd:83:0f:78:be:83:9d:5d:3a:77:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Aug 6 06:36:06 2025 GMT Not After : Aug 9 12:11:06 2025 GMT Subject: CN=CAD2B577C27CE9766CD5B3E9DF6CE1478F8E32BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:ed:ee:8d:cf:75:70:1b:bd:87:26:c9:dc: cf:f1:18:76:95:f4:e0:14:42:aa:cc:b2:82:10:ea: 1d:d4:56:68:f8:15:c1:50:0a:7c:25:cd:52:e2:41: d8:76:80:53:9b:57:be:99:65:80:75:3f:75:46:90: 26:48:38:d2:39:15:a9:f5:dd:c9:ed:aa:4b:5a:ca: b0:14:61:d9:ac:b5:52:18:85:d3:13:2b:79:88:16: 74:66:22:c9:8b:c5:bd:4c:6c:66:32:ee:ff:85:93: a8:67:5a:6c:53:40:3c:82:70:c6:17:b4:92:09:de: 87:82:b7:ca:ed:f7:23:bc:35:22:85:df:b9:29:2d: b4:6c:9a:48:26:88:28:fb:66:52:c5:a9:05:1e:53: f9:63:20:1b:dd:a9:73:57:1c:c1:ed:9a:1f:a5:e4: 49:7d:79:43:d6:c2:9e:4c:88:22:4f:14:0f:3f:c5: 59:ff:db:74:f2:8e:2d:70:c8:3f:64:b5:d8:72:4d: 4f:fa:3f:bf:71:50:39:9e:20:7f:da:99:e1:22:5e: db:df:98:12:58:94:f6:92:a4:84:05:18:d2:d9:7b: db:6d:9f:bf:25:07:57:0c:c7:18:19:cf:08:f9:9b: 54:e6:de:90:15:82:56:9e:45:a1:8b:da:20:26:3e: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:B5:77:C2:7C:E9:76:6C:D5:B3:E9:DF:6C:E1:47:8F:8E:32:BC X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:2d:42:75:4e:7e:9a:37:e0:16:70:24:21:99:27:64:0e: 22:ce:30:e9:d5:93:c5:d6:47:a9:86:2a:0f:64:79:d9:b4:0f: e8:d1:77:d0:c6:d3:a5:25:21:45:45:92:0f:7d:c2:7b:1b:28: aa:25:5b:35:1b:d4:85:d9:3a:13:d2:08:76:30:af:e9:f6:3b: 57:90:c2:af:11:dd:90:b9:a5:bd:2c:94:c4:58:da:d9:60:7c: c1:9e:b5:28:50:16:a3:a8:15:e5:67:f9:69:c3:fe:cd:1e:b4: 34:ff:a7:bf:b1:1a:19:5e:de:43:eb:97:3a:8f:de:27:b7:ba: 90:40:ac:79:a2:f8:4e:c0:02:9e:9b:9f:fc:76:ab:38:61:52: 67:e0:73:1a:e7:09:da:44:c9:40:e0:72:39:9f:95:56:e7:8c: 86:21:98:d8:74:f9:35:55:81:b5:49:16:fe:55:6d:73:2d:79: 9f:82:ed:e5:94:9b:02:68:1d:d4:d4:05:ef:f9:b6:4a:37:fa: f7:ac:a5:7c:ae:52:1b:a2:bf:f9:b5:45:97:a9:3b:3b:f5:a1: a5:43:43:e5:f9:fe:fd:a1:e0:f1:44:54:3f:0e:38:f9:be:ea: 9f:85:e5:ce:1b:61:a9:49:d7:e3:85:67:9e:26:20:e6:49:5d: 83:7a:b2:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxn+GbXGyhfQ3YMPeL6DnV06d6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNTA4MDYwNjM2MDZaFw0yNTA4MDkxMjExMDZaMDMxMTAvBgNV BAMTKENBRDJCNTc3QzI3Q0U5NzY2Q0Q1QjNFOURGNkNFMTQ3OEY4RTMyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWO3ujc91cBu9hybJ3M/xGHaV 9OAUQqrMsoIQ6h3UVmj4FcFQCnwlzVLiQdh2gFObV76ZZYB1P3VGkCZIONI5Fan1 3cntqktayrAUYdmstVIYhdMTK3mIFnRmIsmLxb1MbGYy7v+Fk6hnWmxTQDyCcMYX tJIJ3oeCt8rt9yO8NSKF37kpLbRsmkgmiCj7ZlLFqQUeU/ljIBvdqXNXHMHtmh+l 5El9eUPWwp5MiCJPFA8/xVn/23Tyji1wyD9ktdhyTU/6P79xUDmeIH/ameEiXtvf mBJYlPaSpIQFGNLZe9ttn78lB1cMxxgZzwj5m1Tm3pAVglaeRaGL2iAmPk8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUytK1d8J86XZs1bPp32zhR4+OMrwwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/WLUJ1Tn6aN+AWcCQhmSdkDiLOMOnVk8XW R6mGKg9kedm0D+jRd9DG06UlIUVFkg99wnsbKKolWzUb1IXZOhPSCHYwr+n2O1eQ wq8R3ZC5pb0slMRY2tlgfMGetShQFqOoFeVn+WnD/s0etDT/p7+xGhle3kPrlzqP 3ie3upBArHmi+E7AAp6bn/x2qzhhUmfgcxrnCdpEyUDgcjmflVbnjIYhmNh0+TVV gbVJFv5VbXMteZ+C7eWUmwJoHdTUBe/5tko3+vespXyuUhuiv/m1RZepOzv1oaVD Q+X5/v2h4PFEVD8OOPm+6p+F5c4bYalJ1+OFZ54mIOZJXYN6svQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:04 2025 by rpki-client