$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: VvSaWjddoqXcE3JsEIjq57m8jkO/epXuiaLGhexDTEE= Subject key identifier: BB:F4:31:DC:DB:E8:29:C5:A7:E8:D5:79:9B:34:22:85:50:BC:76:59 Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 0C843601D4C690BB95F6B0A401B885EB80BC3BCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 04C7 Signing time: Wed 23 Apr 2025 02:21:29 +0000 Manifest this update: Wed 23 Apr 2025 02:16:29 +0000 Manifest next update: Sat 26 Apr 2025 06:53:29 +0000 Files and hashes: 1: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: ikCBqyTFwh6uj+sGxPztwL+n3kc9cKQDHNdVREbe7FA=) 2: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: DYYA49b3R131Fm1uTtUlMqhohygDEx//U2rHIZbZUiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 06:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:84:36:01:d4:c6:90:bb:95:f6:b0:a4:01:b8:85:eb:80:bc:3b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Apr 23 02:16:29 2025 GMT Not After : Apr 26 06:53:29 2025 GMT Subject: CN=BBF431DCDBE829C5A7E8D5799B34228550BC7659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:cb:8a:8f:6c:cf:f2:aa:d3:65:e2:a8:51: 2f:cb:c7:4f:d5:fb:42:29:bc:79:8c:34:2a:e4:97: 19:d7:2a:71:07:05:e0:bb:66:00:f6:fe:be:15:70: 4c:d4:78:02:b3:5b:7d:bc:1c:f0:60:16:aa:42:d8: c8:a1:f8:e4:8d:e0:f6:06:fb:6f:8a:eb:fb:7a:ac: 20:0a:72:b0:6c:c0:78:56:79:15:22:ac:8e:bd:14: 17:37:c6:b7:b2:d7:3b:af:43:4d:91:fe:13:ac:52: d4:73:cc:72:17:93:1b:58:8d:6f:81:4d:da:7e:7a: 2a:5b:07:df:84:1e:5d:c5:b7:c8:51:3d:63:dc:dd: c8:80:a1:a5:fa:56:84:1d:d7:4c:1d:b3:31:fb:7a: e5:c3:0e:43:7f:02:2f:0e:40:74:e3:17:85:07:7d: f3:90:b7:6f:22:e3:cf:c7:63:22:54:2e:bd:15:9f: d1:86:04:a8:a7:cc:99:cb:19:3a:a0:c9:bd:f1:40: bd:17:a9:0b:aa:3b:e4:c5:fa:09:c9:46:49:ad:07: 50:32:c4:bb:92:5c:5d:5a:27:00:0b:05:76:86:6b: 21:f0:e5:64:de:d9:2f:64:7f:c2:1b:22:fa:c8:7b: 42:df:37:5c:fa:1c:b8:b6:bf:ab:31:2a:86:a2:17: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:31:DC:DB:E8:29:C5:A7:E8:D5:79:9B:34:22:85:50:BC:76:59 X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2e:5f:b0:78:cf:95:3d:23:0f:ca:61:f1:74:49:a6:f1:fd: 76:80:2c:fd:fd:42:9f:3a:88:65:8c:e0:a5:48:47:a3:ea:e9: a1:d5:75:fa:ff:00:eb:77:d3:72:75:9a:a4:6c:e7:e1:fb:57: ba:ab:2b:b4:64:f3:04:fa:c1:f7:93:c4:67:da:0f:9f:08:6b: a0:dc:13:b9:e4:37:60:43:bf:77:6a:c9:93:c7:3b:4d:db:a3: 6a:cc:6f:fe:ab:ca:49:98:d7:8b:c1:db:3c:b0:ec:15:99:30: 43:c6:c0:d0:fc:39:df:3e:7b:67:f9:b6:1b:19:e5:6c:e5:3a: 0d:2f:39:2f:c0:d7:0d:00:ac:51:f8:e0:23:e4:4f:23:19:ad: 7f:6c:f3:ed:7f:fa:94:bd:aa:58:0a:b5:d8:52:6a:c4:32:ea: 43:cd:d9:91:2d:b2:e1:0b:63:e4:fa:a5:89:44:8a:c8:76:48: de:22:c9:96:d5:46:1e:e2:87:23:5e:d7:3a:cf:2f:04:4a:08: dd:74:d7:bc:d5:53:be:bc:07:0f:42:6b:93:44:e1:3c:30:2c: 42:70:74:f3:42:fa:5a:a6:ef:66:a2:6c:de:41:b7:8b:98:e3: 01:c0:94:70:fa:ee:be:28:7e:89:d5:78:94:5a:60:b5:3f:5a: e1:98:47:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDIQ2AdTGkLuV9rCkAbiF64C8O8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNTA0MjMwMjE2MjlaFw0yNTA0MjYwNjUzMjlaMDMxMTAvBgNV BAMTKEJCRjQzMURDREJFODI5QzVBN0U4RDU3OTlCMzQyMjg1NTBCQzc2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe18uKj2zP8qrTZeKoUS/Lx0/V +0IpvHmMNCrklxnXKnEHBeC7ZgD2/r4VcEzUeAKzW328HPBgFqpC2Mih+OSN4PYG +2+K6/t6rCAKcrBswHhWeRUirI69FBc3xrey1zuvQ02R/hOsUtRzzHIXkxtYjW+B Tdp+eipbB9+EHl3Ft8hRPWPc3ciAoaX6VoQd10wdszH7euXDDkN/Ai8OQHTjF4UH ffOQt28i48/HYyJULr0Vn9GGBKinzJnLGTqgyb3xQL0XqQuqO+TF+gnJRkmtB1Ay xLuSXF1aJwALBXaGayHw5WTe2S9kf8IbIvrIe0LfN1z6HLi2v6sxKoaiF2jxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu/Qx3NvoKcWn6NV5mzQihVC8dlkwHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4uX7B4z5U9Iw/KYfF0Sabx/XaALP39Qp86 iGWM4KVIR6Pq6aHVdfr/AOt303J1mqRs5+H7V7qrK7Rk8wT6wfeTxGfaD58Ia6Dc E7nkN2BDv3dqyZPHO03bo2rMb/6rykmY14vB2zyw7BWZMEPGwND8Od8+e2f5thsZ 5WzlOg0vOS/A1w0ArFH44CPkTyMZrX9s8+1/+pS9qlgKtdhSasQy6kPN2ZEtsuEL Y+T6pYlEish2SN4iyZbVRh7ihyNe1zrPLwRKCN1017zVU768Bw9Ca5NE4TwwLEJw dPNC+lqm72aibN5Bt4uY4wHAlHD67r4ofonVeJRaYLU/WuGYR7Y= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net