$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json) Hash identifier: xGlRoP4rdUfD1fsmbGcJ3uWRJdl3jjEFhmiGNVGps+4= Subject key identifier: F5:49:0A:84:D5:C6:F1:2A:28:DB:6C:5E:83:64:0D:20:44:21:07:DC Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Certificate serial: 078447D4A681FFDE385C7FB36A10DD8EE4CF0E7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft Manifest number: 01C2 Signing time: Sat 14 Jun 2025 16:01:41 +0000 Manifest this update: Sat 14 Jun 2025 15:56:41 +0000 Manifest next update: Tue 17 Jun 2025 22:18:41 +0000 Files and hashes: 1: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: D3FiZ2ITbLnrCK3VS4p44lmaxRCydfmkDWGrp1mlPLw=) 2: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: en7yrsRqDUaal9vRU4LRRex8mQ3pcI0rlYghVnCEE78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:84:47:d4:a6:81:ff:de:38:5c:7f:b3:6a:10:dd:8e:e4:cf:0e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Validity Not Before: Jun 14 15:56:41 2025 GMT Not After : Jun 17 22:18:41 2025 GMT Subject: CN=F5490A84D5C6F12A28DB6C5E83640D20442107DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:c3:e3:61:5c:c1:72:08:e0:8f:fa:8f:89: 10:7e:dd:b3:95:34:2c:de:91:db:78:03:89:60:60: 41:77:76:9e:9e:41:31:6c:51:42:c2:59:e5:1b:08: cd:ed:b5:7d:3d:4e:0a:95:91:c0:a0:30:04:80:96: 1a:52:03:a0:7c:66:e0:2a:f9:e1:18:23:ad:69:e4: b2:32:4d:d2:7e:82:f6:dd:11:89:38:0e:0a:35:3a: 5c:fd:d4:63:54:68:a8:71:87:df:e8:e1:fb:1c:4e: a2:8f:c2:35:1f:c8:04:14:9a:f9:45:d8:e0:7e:14: e0:a5:64:a7:2c:71:d5:5a:76:24:e6:c4:3e:de:83: a8:c9:b6:95:24:22:e3:b3:96:d0:e8:88:3d:b9:42: 8f:28:11:2f:c2:33:23:c7:d7:1f:96:cd:cd:27:af: 09:d7:31:a0:45:f9:69:c3:2b:d1:90:40:82:75:95: 93:af:77:1d:63:9a:b1:79:05:b5:bf:c4:9c:b1:55: 3d:ff:46:9a:5d:eb:6e:d7:a4:da:06:19:03:d0:0c: f8:f7:9f:cb:4f:72:e4:4e:84:a6:8b:8c:61:c1:25: fa:5f:67:1a:ec:a1:cf:8a:9a:6f:13:9d:13:db:1c: e6:b5:13:13:1c:9e:78:ff:bd:40:7b:ec:35:6a:0d: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:49:0A:84:D5:C6:F1:2A:28:DB:6C:5E:83:64:0D:20:44:21:07:DC X509v3 Authority Key Identifier: keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:03:77:24:68:5f:46:43:4b:72:93:2a:1a:c8:24:92:5f:a7: 9b:c4:80:c8:53:a6:18:6a:31:62:26:09:39:81:ed:c2:58:36: 37:91:0e:35:42:26:d6:12:9c:9d:57:05:50:36:3b:e3:02:f7: e3:a1:ae:d2:a3:89:40:32:3f:33:47:52:31:85:03:20:1b:e0: fa:15:cf:38:49:05:81:38:16:32:82:14:09:a0:ac:9c:43:a9: 0e:13:2a:df:17:f3:e8:49:09:56:3a:8c:d2:d5:44:3b:ed:29: 95:89:c1:8a:0e:9d:17:c8:5e:0c:d2:97:54:76:b6:a6:27:25: 12:75:26:52:36:af:9d:01:5f:d8:7a:38:1c:da:72:d2:bc:d6: 29:48:c5:2f:ea:86:46:3e:b7:83:58:51:e0:a0:ea:6b:44:50: 20:a7:6b:c0:9b:4f:fb:77:7f:60:3e:c7:61:9f:98:21:cd:b4: f1:b2:92:6b:09:02:4b:d6:d1:e4:b6:14:66:8c:1f:35:12:1b: 98:f7:a7:9c:85:56:4f:d0:e9:76:5a:a8:4b:71:4f:aa:38:e1: 8b:9a:ce:61:0f:b5:1e:0f:49:22:ae:cc:16:a6:c8:3d:a7:9c: 21:0c:38:b3:78:21:45:d0:48:d3:db:7a:b8:9c:80:90:58:d8: f2:8b:b6:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4RH1KaB/944XH+zahDdjuTPDn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUx MkM5Q0I5RjAeFw0yNTA2MTQxNTU2NDFaFw0yNTA2MTcyMjE4NDFaMDMxMTAvBgNV BAMTKEY1NDkwQTg0RDVDNkYxMkEyOERCNkM1RTgzNjQwRDIwNDQyMTA3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTM8PjYVzBcgjgj/qPiRB+3bOV NCzekdt4A4lgYEF3dp6eQTFsUULCWeUbCM3ttX09TgqVkcCgMASAlhpSA6B8ZuAq +eEYI61p5LIyTdJ+gvbdEYk4Dgo1Olz91GNUaKhxh9/o4fscTqKPwjUfyAQUmvlF 2OB+FOClZKcscdVadiTmxD7eg6jJtpUkIuOzltDoiD25Qo8oES/CMyPH1x+Wzc0n rwnXMaBF+WnDK9GQQIJ1lZOvdx1jmrF5BbW/xJyxVT3/Rppd627XpNoGGQPQDPj3 n8tPcuROhKaLjGHBJfpfZxrsoc+Kmm8TnRPbHOa1ExMcnnj/vUB77DVqDVfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9UkKhNXG8Soo22xeg2QNIEQhB9wwHwYDVR0j BBgwFoAUZYwNhhfC0FznIEJ+Hfcv3hLJy58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjVkODhmMS1iOWMwLTQ4NWUtOTE2ZS01OWI3ZTM2OThkYTEvMC82NThDMEQ4NjE3 QzJEMDVDRTcyMDQyN0UxREY3MkZERTEyQzlDQjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUxMkM5 Q0I5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJG REUxMkM5Q0I5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHADdyRoX0ZDS3KTKhrIJJJfp5vEgMhTphhq MWImCTmB7cJYNjeRDjVCJtYSnJ1XBVA2O+MC9+OhrtKjiUAyPzNHUjGFAyAb4PoV zzhJBYE4FjKCFAmgrJxDqQ4TKt8X8+hJCVY6jNLVRDvtKZWJwYoOnRfIXgzSl1R2 tqYnJRJ1JlI2r50BX9h6OBzactK81ilIxS/qhkY+t4NYUeCg6mtEUCCna8CbT/t3 f2A+x2GfmCHNtPGykmsJAkvW0eS2FGaMHzUSG5j3p5yFVk/Q6XZaqEtxT6o44Yua zmEPtR4PSSKuzBamyD2nnCEMOLN4IUXQSNPbericgJBY2PKLtlk= -----END CERTIFICATE-----Generated at Sun Jun 15 16:58:17 2025 by rpki-client