$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: JXgfDbwh/JaUICCmIprJyEuznND+lVfO1qOqms2a8+A= Subject key identifier: 3B:0E:28:A0:8C:B0:C9:0C:22:65:12:76:71:67:91:BA:98:3A:16:73 Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 37F3AF121B2645C5CAAE425CE1A50299FB48ACEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 01DF Signing time: Sun 15 Jun 2025 04:10:39 +0000 Manifest this update: Sun 15 Jun 2025 04:05:39 +0000 Manifest next update: Wed 18 Jun 2025 09:03:39 +0000 Files and hashes: 1: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: 0ZAxCRyJz1AgLbGerq/mp/c9PypmuNnfdN3iTR6UnnM=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) 3: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f3:af:12:1b:26:45:c5:ca:ae:42:5c:e1:a5:02:99:fb:48:ac:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Jun 15 04:05:39 2025 GMT Not After : Jun 18 09:03:39 2025 GMT Subject: CN=3B0E28A08CB0C90C22651276716791BA983A1673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:9f:8e:f7:93:db:f0:25:86:9a:24:f5:ec: c1:ab:4e:34:59:a2:0d:c9:3b:13:53:8f:65:30:ab: be:c7:8d:25:81:8d:db:e0:05:02:1b:fa:50:c5:da: 1f:c1:f2:7c:79:b5:d1:53:0f:de:b4:1c:ad:22:14: c3:7f:0b:c2:5d:a6:03:b7:a5:c5:13:1d:7c:fa:85: 16:d2:2e:76:49:a2:c7:43:66:38:97:d2:38:ff:4f: f0:2c:43:f8:6f:58:fa:46:90:4b:41:31:ec:4b:13: 18:9f:2f:a4:dd:aa:12:bf:f2:aa:cb:55:27:75:75: ce:e9:95:a7:cc:a2:5c:23:02:cc:e8:cd:d9:ea:30: 0a:3c:2c:a6:0d:20:6d:69:3c:ab:10:24:ce:64:0c: fe:e4:d0:2a:25:eb:ef:88:08:4f:4b:64:4c:35:54: 85:73:ef:ab:cd:18:28:34:df:d3:c1:62:cf:15:69: 29:f6:8d:4d:77:73:4c:7c:73:a6:23:a6:df:b1:3e: 15:bd:62:9e:4a:84:36:40:7f:19:41:0f:35:de:b0: fe:2e:d6:b6:7b:74:e7:34:01:00:05:c0:19:32:02: 37:16:c3:c3:c7:95:fa:b7:ec:68:95:11:cb:97:6e: 47:4e:2b:dd:84:15:27:19:99:9e:ef:c4:5c:a3:89: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0E:28:A0:8C:B0:C9:0C:22:65:12:76:71:67:91:BA:98:3A:16:73 X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f3:95:ff:c1:05:2c:cf:49:82:f5:30:27:8f:39:ce:44:4a: 07:f0:d8:2c:4e:73:e2:44:b3:d0:6e:8a:fe:b5:53:d0:ef:db: 5e:27:67:77:ff:42:ea:2b:4e:8b:c9:10:d3:78:e3:23:a0:78: 08:33:1c:e8:a9:1e:e0:6d:a1:41:cb:b9:73:56:cb:6f:2d:06: 8a:72:cf:4a:ce:fd:ca:43:ea:e2:d7:f3:00:30:d8:0d:11:08: 4a:c5:ca:0d:0d:5e:88:c4:77:bb:a0:b1:e6:60:18:83:4b:d8: 5c:d2:14:92:60:54:cd:8a:95:cb:4c:ab:16:85:5c:49:f3:ab: d8:4c:5c:d9:00:99:06:e1:e3:da:ac:ea:91:77:47:5d:11:1a: cb:9a:dd:be:7c:3b:27:a6:a3:bc:d8:11:d4:45:21:e5:55:24: 85:e9:ef:a8:fe:58:6d:ed:9f:ec:ee:eb:d9:a0:02:1a:47:dd: 4f:ef:be:02:f2:7f:0b:af:48:08:af:0d:29:56:1b:41:f1:c4: 74:29:c5:b9:dc:39:81:be:8a:19:33:3d:4d:3f:b9:5c:1e:6f: 93:13:21:da:f0:37:8b:d8:79:9a:90:33:38:27:72:c3:bf:2e: 0d:27:d1:bd:4d:a6:60:3f:f3:81:5b:c6:a0:21:a4:08:4c:a7: 2e:d4:27:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/OvEhsmRcXKrkJc4aUCmftIrOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTA2MTUwNDA1MzlaFw0yNTA2MTgwOTAzMzlaMDMxMTAvBgNV BAMTKDNCMEUyOEEwOENCMEM5MEMyMjY1MTI3NjcxNjc5MUJBOTgzQTE2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQJ+O95Pb8CWGmiT17MGrTjRZ og3JOxNTj2Uwq77HjSWBjdvgBQIb+lDF2h/B8nx5tdFTD960HK0iFMN/C8JdpgO3 pcUTHXz6hRbSLnZJosdDZjiX0jj/T/AsQ/hvWPpGkEtBMexLExifL6TdqhK/8qrL VSd1dc7plafMolwjAszozdnqMAo8LKYNIG1pPKsQJM5kDP7k0Col6++ICE9LZEw1 VIVz76vNGCg039PBYs8VaSn2jU13c0x8c6Yjpt+xPhW9Yp5KhDZAfxlBDzXesP4u 1rZ7dOc0AQAFwBkyAjcWw8PHlfq37GiVEcuXbkdOK92EFScZmZ7vxFyjiV6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOw4ooIywyQwiZRJ2cWeRupg6FnMwHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPzlf/BBSzPSYL1MCePOc5ESgfw2CxOc+JE s9Buiv61U9Dv214nZ3f/QuorTovJENN44yOgeAgzHOipHuBtoUHLuXNWy28tBopy z0rO/cpD6uLX8wAw2A0RCErFyg0NXojEd7ugseZgGINL2FzSFJJgVM2KlctMqxaF XEnzq9hMXNkAmQbh49qs6pF3R10RGsua3b58Oyemo7zYEdRFIeVVJIXp76j+WG3t n+zu69mgAhpH3U/vvgLyfwuvSAivDSlWG0HxxHQpxbncOYG+ihkzPU0/uVweb5MT IdrwN4vYeZqQMzgncsO/Lg0n0b1NpmA/84FbxqAhpAhMpy7UJy0= -----END CERTIFICATE-----Generated at Mon Jun 16 06:23:06 2025 by rpki-client