$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: jvv9DwLI9wPAjSGypjwq83OYnzjFpHzB2Drep5D0IvQ= Subject key identifier: E2:DA:47:14:84:4C:B5:ED:F6:9D:4D:94:D4:05:54:C4:8D:78:9F:98 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 6207D347909932B6023FB21AC653D2D02EAF1E17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 017A Signing time: Fri 25 Apr 2025 08:41:18 +0000 Manifest this update: Fri 25 Apr 2025 08:36:18 +0000 Manifest next update: Mon 28 Apr 2025 16:08:18 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: nepxzQwvJ312nV9iZgEKlOIPKHQAkqWcvRmCemfI68k=) 2: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: kwgZlAehoInBl32w+IZeJMWxeIEAZ8IfMVtQyqbqAN8=) 3: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: 8fcVvUOnHnEDxc1LP+W4ikZfxvy9KJkdRccQg7Mp1b8=) 4: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: ELedqPEjXJ3M85pLpOXTvqwpV32vtloSqknKyCg0KOg=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: cWHJAdhMo3cUB7SJI/qLeHQjD7fvumO0S0ippQ4UQLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:07:d3:47:90:99:32:b6:02:3f:b2:1a:c6:53:d2:d0:2e:af:1e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Apr 25 08:36:18 2025 GMT Not After : Apr 28 16:08:18 2025 GMT Subject: CN=E2DA4714844CB5EDF69D4D94D40554C48D789F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:59:4e:2a:d8:e7:11:22:e0:03:96:eb:35: ba:e9:f0:32:48:1d:56:98:02:47:22:63:b7:de:cc: 03:80:04:35:5b:c5:c6:34:b6:c4:24:e5:3a:11:4b: 07:58:b0:2a:c1:e0:9e:25:f3:a9:9c:a1:99:22:51: 22:90:14:b9:6b:ec:28:d9:96:4a:b0:d5:45:fa:8f: 39:ae:22:70:ab:5d:29:87:34:68:9c:c2:4a:57:35: 6a:bf:ea:28:9d:5a:40:9b:20:87:f5:99:52:25:46: 61:16:a6:c1:d1:0f:33:72:44:5a:68:02:04:6a:dc: c0:27:8b:3e:0c:aa:7b:57:a0:40:7d:44:04:33:7d: c1:74:37:d4:02:4d:c4:6f:6f:01:5c:67:3c:c0:32: 3d:e0:7f:0f:a5:f0:5a:0b:05:ac:d2:9c:0c:7e:ed: e7:62:f8:4a:9b:a7:44:68:ec:84:21:69:a0:45:d5: 2d:9f:3a:ec:60:2b:43:09:0e:db:3f:fb:c5:6b:21: 44:6a:2d:ab:d7:9e:c8:c8:94:bf:4a:76:a9:bd:a2: 04:21:11:60:47:35:35:d8:ea:59:93:6b:6e:06:8f: 1c:5e:29:1b:05:30:05:e1:bb:a4:3d:29:ea:0f:a7: 4f:8c:d5:d9:f0:01:20:0a:a6:b8:dc:0f:86:7e:02: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DA:47:14:84:4C:B5:ED:F6:9D:4D:94:D4:05:54:C4:8D:78:9F:98 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e2:b6:78:7f:67:93:5b:c4:e4:eb:37:21:8f:9e:22:53:d0: c2:07:ae:c4:bc:03:0e:56:95:08:3b:23:c7:fa:56:80:59:25: 71:b2:17:ed:c1:ca:60:06:63:97:41:7b:61:ba:74:ba:24:a5: 8f:20:36:ba:a2:70:47:bd:46:af:e6:56:8c:63:7b:a4:95:2e: cb:cc:8f:c8:10:29:00:8e:57:8c:8c:42:75:a9:68:1c:7b:75: 94:17:aa:0c:8a:53:c8:1a:eb:9e:c6:9d:bc:f3:09:52:98:32: 57:90:d6:9c:13:37:43:74:e4:7c:33:77:73:8a:0a:2b:f6:1c: 48:fc:5b:e1:38:83:aa:c6:76:90:a4:96:20:11:f0:be:84:5f: 37:27:27:37:66:8e:29:f5:55:cd:53:cc:37:1d:e2:21:28:4d: f0:0e:a4:8e:63:3a:37:83:7f:01:bd:ed:4c:b5:39:4c:54:53: a9:b1:c1:77:ad:81:ce:bb:56:ee:67:bf:2d:18:6f:48:8d:05: 56:f9:4b:8d:a8:91:74:85:08:78:a7:51:9b:ba:bd:2c:e5:07: fb:da:c0:25:80:4c:99:7a:c2:e7:f5:4b:23:23:e5:81:33:b3: e5:0a:89:ed:ea:9a:90:7a:a0:0c:34:99:1a:61:f9:64:ac:03: 3e:83:50:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgfTR5CZMrYCP7IaxlPS0C6vHhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTA0MjUwODM2MThaFw0yNTA0MjgxNjA4MThaMDMxMTAvBgNV BAMTKEUyREE0NzE0ODQ0Q0I1RURGNjlENEQ5NEQ0MDU1NEM0OEQ3ODlGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRFlOKtjnESLgA5brNbrp8DJI HVaYAkciY7fezAOABDVbxcY0tsQk5ToRSwdYsCrB4J4l86mcoZkiUSKQFLlr7CjZ lkqw1UX6jzmuInCrXSmHNGicwkpXNWq/6iidWkCbIIf1mVIlRmEWpsHRDzNyRFpo AgRq3MAniz4MqntXoEB9RAQzfcF0N9QCTcRvbwFcZzzAMj3gfw+l8FoLBazSnAx+ 7edi+Eqbp0Ro7IQhaaBF1S2fOuxgK0MJDts/+8VrIURqLavXnsjIlL9Kdqm9ogQh EWBHNTXY6lmTa24GjxxeKRsFMAXhu6Q9KeoPp0+M1dnwASAKprjcD4Z+AiQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4tpHFIRMte32nU2U1AVUxI14n5gwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbitnh/Z5NbxOTrNyGPniJT0MIHrsS8Aw5W lQg7I8f6VoBZJXGyF+3BymAGY5dBe2G6dLokpY8gNrqicEe9Rq/mVoxje6SVLsvM j8gQKQCOV4yMQnWpaBx7dZQXqgyKU8ga657GnbzzCVKYMleQ1pwTN0N05Hwzd3OK Civ2HEj8W+E4g6rGdpCkliAR8L6EXzcnJzdmjin1Vc1TzDcd4iEoTfAOpI5jOjeD fwG97Uy1OUxUU6mxwXetgc67Vu5nvy0Yb0iNBVb5S42okXSFCHinUZu6vSzlB/va wCWATJl6wuf1SyMj5YEzs+UKie3qmpB6oAw0mRph+WSsAz6DUHY= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net