$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: J8uuF/nVZMsEAPH//ZY1SSqE7NCQituJRKrxWOMA7lE= Subject key identifier: AA:61:C1:57:81:E0:FB:47:2A:D8:04:F4:17:E7:36:11:19:67:64:C6 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 141E46A48ABBB4BB0CEA16AA9D260E3F733E12C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0303 Signing time: Sun 15 Jun 2025 18:51:33 +0000 Manifest this update: Sun 15 Jun 2025 18:46:33 +0000 Manifest next update: Wed 18 Jun 2025 20:07:33 +0000 Files and hashes: 1: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: ybxO88halRFZnMdT3y7f4k6y2l235/VMrr+Zu6x6eGU=) 2: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 3: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 20:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1e:46:a4:8a:bb:b4:bb:0c:ea:16:aa:9d:26:0e:3f:73:3e:12:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Jun 15 18:46:33 2025 GMT Not After : Jun 18 20:07:33 2025 GMT Subject: CN=AA61C15781E0FB472AD804F417E73611196764C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:8e:19:8b:96:12:1a:16:73:57:9c:77:29: b4:28:ec:3d:c8:b7:e6:97:80:c8:19:22:ea:e2:51: 44:ec:09:9b:06:60:ee:45:9e:2c:3a:77:f3:30:08: a1:eb:84:e4:ab:73:a8:b4:88:7a:99:89:3b:0c:c9: 51:83:07:36:8a:b9:8f:8b:e3:3f:af:ad:c6:b0:b0: b1:a8:58:d6:78:93:46:50:7e:53:40:29:2e:b2:ae: 83:bc:5d:96:da:26:16:0d:c2:ec:ae:65:91:75:4d: 67:1e:38:fd:78:80:d7:1c:83:d5:b6:ea:5b:df:fa: 92:9f:9c:f4:d6:6e:33:e5:75:0e:3f:45:66:dc:70: 6d:d7:00:42:f5:a6:ce:26:8a:de:f4:39:d2:33:22: e4:a4:e3:89:8c:8b:d2:49:c3:69:2b:5d:85:21:45: 7a:39:8f:03:43:78:9b:78:7e:b0:b8:4c:86:f4:76: 90:6b:2e:df:f8:bd:56:d5:55:0f:43:e8:58:a2:c3: 5a:6b:ef:26:10:46:f3:18:30:6f:df:05:8c:73:0a: eb:bb:ef:b1:a4:77:02:a8:04:cf:24:5f:90:83:74: b9:5d:00:49:aa:3d:d6:62:95:0f:25:0e:98:ac:c7: 2b:65:b9:ea:55:b0:33:bc:38:49:ea:34:e9:bd:dc: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:C1:57:81:E0:FB:47:2A:D8:04:F4:17:E7:36:11:19:67:64:C6 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a4:c2:57:39:f2:fa:8a:b1:8a:92:04:a3:cc:f9:9f:7a:53: 5c:a3:ae:83:b0:09:27:04:c8:fd:d7:9b:17:19:83:00:87:1a: 4a:df:10:ac:4f:2e:25:96:b6:b0:88:13:05:63:c1:c1:df:dd: 39:ea:fe:b7:fe:d3:e0:e0:60:d7:48:0f:a2:86:f2:f9:d4:78: 3f:8e:7c:72:a1:b6:bf:ba:82:ec:35:30:5c:1b:e9:e1:94:09: 2c:67:ee:c0:f5:30:d3:84:cb:c5:09:cf:c6:dc:87:a5:7b:d5: ee:ca:27:49:db:50:9f:1b:2f:2b:86:3b:7f:b7:3d:05:cf:a6: ca:94:9a:0f:64:9e:b7:c3:d6:54:6f:97:68:ff:48:1c:1e:ee: 12:fe:ee:2c:a8:cc:bb:ff:1f:f6:27:1c:7f:93:f9:67:99:e1: ae:66:91:1c:21:15:a3:ee:1b:48:fb:3b:62:3b:08:d1:22:a5: 41:c3:1b:ac:a2:a1:55:11:07:41:f4:0a:97:07:ea:63:d4:6d: 5c:07:9d:03:22:04:43:68:a6:68:68:3a:86:8e:6c:19:17:10: e2:1d:fb:fd:ee:4a:56:29:ea:81:82:f7:db:12:c9:e9:c9:aa: 9d:f7:ca:f0:99:c0:41:cd:0b:d5:bb:0b:02:7e:e5:7c:60:90: fd:5c:d4:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFB5GpIq7tLsM6haqnSYOP3M+EskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTA2MTUxODQ2MzNaFw0yNTA2MTgyMDA3MzNaMDMxMTAvBgNV BAMTKEFBNjFDMTU3ODFFMEZCNDcyQUQ4MDRGNDE3RTczNjExMTk2NzY0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqI4Zi5YSGhZzV5x3KbQo7D3I t+aXgMgZIuriUUTsCZsGYO5Fniw6d/MwCKHrhOSrc6i0iHqZiTsMyVGDBzaKuY+L 4z+vrcawsLGoWNZ4k0ZQflNAKS6yroO8XZbaJhYNwuyuZZF1TWceOP14gNccg9W2 6lvf+pKfnPTWbjPldQ4/RWbccG3XAEL1ps4mit70OdIzIuSk44mMi9JJw2krXYUh RXo5jwNDeJt4frC4TIb0dpBrLt/4vVbVVQ9D6Fiiw1pr7yYQRvMYMG/fBYxzCuu7 77GkdwKoBM8kX5CDdLldAEmqPdZilQ8lDpisxytluepVsDO8OEnqNOm93FirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqmHBV4Hg+0cq2AT0F+c2ERlnZMYwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADykwlc58vqKsYqSBKPM+Z96U1yjroOwCScE yP3XmxcZgwCHGkrfEKxPLiWWtrCIEwVjwcHf3Tnq/rf+0+DgYNdID6KG8vnUeD+O fHKhtr+6guw1MFwb6eGUCSxn7sD1MNOEy8UJz8bch6V71e7KJ0nbUJ8bLyuGO3+3 PQXPpsqUmg9knrfD1lRvl2j/SBwe7hL+7iyozLv/H/YnHH+T+WeZ4a5mkRwhFaPu G0j7O2I7CNEipUHDG6yioVURB0H0CpcH6mPUbVwHnQMiBENopmhoOoaObBkXEOId +/3uSlYp6oGC99sSyenJqp33yvCZwEHNC9W7CwJ+5XxgkP1c1Is= -----END CERTIFICATE-----Generated at Tue Jun 17 07:27:08 2025 by rpki-client