$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: ZFnpRM0F78vbSUj+558pr7SJ5YeHdYoHcQtONv2Lprc= Subject key identifier: 19:6D:9B:33:0D:2D:5F:42:56:B7:E2:69:FE:44:75:7B:52:09:B8:59 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 5CB377C93D4AC06BBD7E37788F81B109F5E9E9D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: D8 Signing time: Mon 16 Jun 2025 20:51:49 +0000 Manifest this update: Mon 16 Jun 2025 20:46:49 +0000 Manifest next update: Fri 20 Jun 2025 01:57:49 +0000 Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) 2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: OVrKNW5doxY6EgVgLqu6DWowrfXaS3P0H0bAEcAJ00c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b3:77:c9:3d:4a:c0:6b:bd:7e:37:78:8f:81:b1:09:f5:e9:e9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Jun 16 20:46:49 2025 GMT Not After : Jun 20 01:57:49 2025 GMT Subject: CN=196D9B330D2D5F4256B7E269FE44757B5209B859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:52:b8:a9:c7:ab:0b:60:6e:51:cd:64:90: 3f:98:7a:b7:ac:ba:a3:f6:2b:52:83:5d:44:2f:9e: fd:26:8c:60:2c:ff:20:92:2e:80:d5:51:33:1a:bd: 04:22:9e:fd:9b:00:23:6c:1c:9c:07:fc:71:b1:82: dc:a4:f3:c9:e9:6a:f2:03:25:11:ce:4a:45:8e:c5: 86:f1:ab:7e:28:a3:8e:cc:da:5c:d9:91:ca:a8:c1: 03:78:5b:83:96:11:ef:28:37:54:63:ff:37:a1:99: 37:b9:1a:93:0d:8d:10:2d:da:3f:91:ba:ca:f8:38: b7:45:d2:78:86:8a:04:55:65:b9:d8:35:ed:59:b2: 3d:28:63:5e:d8:aa:3c:a5:61:f2:9d:e1:f2:20:6d: bb:bd:d6:f2:68:4a:ca:aa:9b:ba:c2:36:3d:b0:bc: e7:f9:98:b7:1d:ee:1a:3c:af:fb:09:01:b3:d2:41: ab:62:49:78:33:d8:2d:53:d6:44:55:8d:82:30:4e: 0e:13:d3:10:f2:25:33:d5:64:bb:41:09:6f:bb:bb: d6:13:15:58:14:0e:27:17:8b:60:88:6e:66:88:bd: ea:9e:2a:6e:31:03:03:d0:b0:c4:90:de:9a:8d:c4: 5e:f7:ac:92:0d:88:3e:c9:a9:b5:bb:f8:b9:2f:fe: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6D:9B:33:0D:2D:5F:42:56:B7:E2:69:FE:44:75:7B:52:09:B8:59 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e3:28:92:4c:fb:40:bb:45:39:4b:63:64:ee:fc:6e:ee:2a: 5b:60:f2:b5:4a:d7:d6:5f:e0:43:17:15:93:45:3d:f2:80:90: b0:a8:23:0e:fd:20:e7:ef:31:a4:0d:22:a7:49:a6:21:c6:71: 56:77:48:86:27:6e:8e:c3:9f:13:9d:06:17:58:15:26:28:9f: 25:74:64:6a:2c:6a:63:fc:10:03:b8:44:40:2c:40:ce:02:b5: e4:43:a4:1b:62:41:4e:7d:89:32:37:54:41:e6:bd:2f:44:44: 2d:e7:89:5c:c1:db:50:af:7b:68:0d:65:2f:73:24:5b:d8:58: 2c:5b:3a:ee:6a:23:7a:88:db:99:d0:c6:a6:e9:14:b3:4a:82: 30:36:67:1e:05:5e:0e:56:2c:cd:9f:00:07:44:b9:58:71:75: e7:1b:6c:75:cf:87:6e:a3:a1:47:bc:63:cf:8d:86:a6:a8:e6: e8:c2:63:82:94:0b:4f:8f:53:f6:67:f7:90:b7:8e:6f:35:dc: 7c:bd:0b:f0:65:30:97:d5:95:d0:47:f3:31:98:0e:e4:0e:20: 17:91:13:ec:ba:2f:43:09:f8:a6:42:42:81:29:5b:e8:1e:04: b5:b6:e3:ec:fb:2f:79:2d:81:ec:8b:6f:51:25:08:4b:c6:50: 05:91:66:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLN3yT1KwGu9fjd4j4GxCfXp6dEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTA2MTYyMDQ2NDlaFw0yNTA2MjAwMTU3NDlaMDMxMTAvBgNV BAMTKDE5NkQ5QjMzMEQyRDVGNDI1NkI3RTI2OUZFNDQ3NTdCNTIwOUI4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbFK4qcerC2BuUc1kkD+Yeres uqP2K1KDXUQvnv0mjGAs/yCSLoDVUTMavQQinv2bACNsHJwH/HGxgtyk88npavID JRHOSkWOxYbxq34oo47M2lzZkcqowQN4W4OWEe8oN1Rj/zehmTe5GpMNjRAt2j+R usr4OLdF0niGigRVZbnYNe1Zsj0oY17YqjylYfKd4fIgbbu91vJoSsqqm7rCNj2w vOf5mLcd7ho8r/sJAbPSQatiSXgz2C1T1kRVjYIwTg4T0xDyJTPVZLtBCW+7u9YT FVgUDicXi2CIbmaIveqeKm4xAwPQsMSQ3pqNxF73rJINiD7JqbW7+Lkv/r5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGW2bMw0tX0JWt+Jp/kR1e1IJuFkwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvjKJJM+0C7RTlLY2Tu/G7uKltg8rVK19Zf 4EMXFZNFPfKAkLCoIw79IOfvMaQNIqdJpiHGcVZ3SIYnbo7DnxOdBhdYFSYonyV0 ZGosamP8EAO4REAsQM4CteRDpBtiQU59iTI3VEHmvS9ERC3niVzB21Cve2gNZS9z JFvYWCxbOu5qI3qI25nQxqbpFLNKgjA2Zx4FXg5WLM2fAAdEuVhxdecbbHXPh26j oUe8Y8+Nhqao5ujCY4KUC0+PU/Zn95C3jm813Hy9C/BlMJfVldBH8zGYDuQOIBeR E+y6L0MJ+KZCQoEpW+geBLW24+z7L3ktgeyLb1ElCEvGUAWRZio= -----END CERTIFICATE-----Generated at Tue Jun 17 16:40:59 2025 by rpki-client