$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: L9CghzzDQHVO+EWUUVQOBZ7FUOsT12L6fySyeCRxakA= Subject key identifier: 7B:4E:FE:E3:72:D7:1D:D9:C7:D2:AE:50:E1:FF:B8:6C:EF:AC:8F:3B Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 27C7F825EC910B17C06C1F36C24B0F372B203B72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 04DF Signing time: Sun 15 Jun 2025 23:20:43 +0000 Manifest this update: Sun 15 Jun 2025 23:15:43 +0000 Manifest next update: Thu 19 Jun 2025 09:37:43 +0000 Files and hashes: 1: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 2: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 5: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: TPbPMJ2f18arK9u4LWlIBPqEtMrwDdq5D9Egbw12fvM=) 6: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 09:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c7:f8:25:ec:91:0b:17:c0:6c:1f:36:c2:4b:0f:37:2b:20:3b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Jun 15 23:15:43 2025 GMT Not After : Jun 19 09:37:43 2025 GMT Subject: CN=7B4EFEE372D71DD9C7D2AE50E1FFB86CEFAC8F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7a:d9:49:1e:de:4b:39:59:6f:8d:5a:4e:f2: 08:8f:10:d8:70:1b:95:04:0a:9a:92:59:36:41:82: 80:29:4a:de:b5:9d:9b:b3:fd:53:7f:f3:7e:4d:a7: 1a:00:c9:65:2d:cb:4c:93:74:ed:48:2a:86:57:a2: 86:0b:7a:45:b1:19:c7:0d:e0:1d:64:1d:16:f8:44: da:76:bd:f0:bb:20:9d:3c:28:af:fa:8b:6a:58:d0: 24:ae:26:3b:07:e0:12:b6:a0:ea:cf:80:a7:4a:53: e1:45:f5:c0:21:93:24:9b:73:49:29:ac:48:a8:e0: f0:ff:63:a7:21:e0:49:7e:0c:c6:a1:01:c8:41:e4: 5a:fb:d1:c7:99:63:07:b1:c9:ad:c9:c3:54:47:bf: ca:4f:b2:ab:03:08:e8:fe:ce:63:08:04:fe:8f:5e: 48:55:c9:c7:8e:ff:33:ce:d4:0a:c3:4b:28:be:a9: 34:4d:d8:cc:3a:49:8a:dd:49:89:17:e5:80:c7:5b: 58:a7:f0:4e:3b:7d:4f:5c:21:d4:0b:4e:7f:2d:ac: 48:2b:1f:37:09:00:9f:f3:21:ef:3e:1d:3f:40:e8: f2:f2:fe:d2:11:48:46:81:31:08:26:37:63:af:ee: c3:21:cb:4b:90:aa:d9:0c:97:7f:e0:ec:b8:23:8a: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:FE:E3:72:D7:1D:D9:C7:D2:AE:50:E1:FF:B8:6C:EF:AC:8F:3B X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:72:02:17:9c:8d:ef:de:ce:a1:73:1d:7c:0e:71:29:bf:52: 8b:c1:1d:69:43:53:24:9c:5d:69:3a:58:54:5d:34:d3:c2:e0: 3c:32:78:0d:b6:24:f5:cc:67:2a:43:2f:4a:9e:71:b4:cd:a6: 62:68:98:3f:c4:db:22:df:8e:ab:12:ca:6a:d9:12:99:80:bc: a1:8f:64:f9:7e:35:92:cb:cc:c4:3d:59:0c:9a:e8:67:af:5d: 6b:6a:30:4a:e4:bd:2a:02:41:ef:42:2f:9c:c8:6a:d2:aa:d9: 06:d7:9d:08:35:df:b7:73:cf:bd:75:3e:b9:8f:c3:9b:bf:15: 30:41:5a:4f:ac:d8:04:28:4f:95:d5:46:d9:1e:2b:ac:e8:65: 7d:c4:db:68:1d:46:ce:b2:2c:5f:c1:88:26:b5:40:a2:cd:35: 7e:b6:1d:a0:1d:b2:be:80:d7:87:e7:39:68:8c:6f:9a:30:5d: e4:61:68:e8:0a:dc:ec:38:6c:8e:95:cf:41:cd:36:48:98:b0: d1:76:78:b0:b4:20:0b:58:50:35:49:12:bc:a3:d6:1d:2b:70: 29:da:f3:ad:f0:23:92:01:d5:19:64:5e:3c:54:4a:2e:65:3e: 4b:93:2d:11:5b:b8:b8:ce:87:7a:fd:1a:f8:e2:e3:ef:d8:d1: 31:36:cd:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8f4JeyRCxfAbB82wksPNysgO3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTA2MTUyMzE1NDNaFw0yNTA2MTkwOTM3NDNaMDMxMTAvBgNV BAMTKDdCNEVGRUUzNzJENzFERDlDN0QyQUU1MEUxRkZCODZDRUZBQzhGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXetlJHt5LOVlvjVpO8giPENhw G5UECpqSWTZBgoApSt61nZuz/VN/835NpxoAyWUty0yTdO1IKoZXooYLekWxGccN 4B1kHRb4RNp2vfC7IJ08KK/6i2pY0CSuJjsH4BK2oOrPgKdKU+FF9cAhkySbc0kp rEio4PD/Y6ch4El+DMahAchB5Fr70ceZYwexya3Jw1RHv8pPsqsDCOj+zmMIBP6P XkhVyceO/zPO1ArDSyi+qTRN2Mw6SYrdSYkX5YDHW1in8E47fU9cIdQLTn8trEgr HzcJAJ/zIe8+HT9A6PLy/tIRSEaBMQgmN2Ov7sMhy0uQqtkMl3/g7LgjiuiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe07+43LXHdnH0q5Q4f+4bO+sjzswHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhyAhecje/ezqFzHXwOcSm/UovBHWlDUySc XWk6WFRdNNPC4DwyeA22JPXMZypDL0qecbTNpmJomD/E2yLfjqsSymrZEpmAvKGP ZPl+NZLLzMQ9WQya6GevXWtqMErkvSoCQe9CL5zIatKq2QbXnQg137dzz711PrmP w5u/FTBBWk+s2AQoT5XVRtkeK6zoZX3E22gdRs6yLF/BiCa1QKLNNX62HaAdsr6A 14fnOWiMb5owXeRhaOgK3Ow4bI6Vz0HNNkiYsNF2eLC0IAtYUDVJEryj1h0rcCna 863wI5IB1RlkXjxUSi5lPkuTLRFbuLjOh3r9Gvji4+/Y0TE2zSs= -----END CERTIFICATE-----Generated at Mon Jun 16 10:44:32 2025 by rpki-client