$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: NiJJ4v4HXTuGRYwje8jPiVwKp4tMLfjx85lrHPRzG9s= Subject key identifier: 72:A4:0A:46:8A:A6:50:9D:40:A7:53:90:40:1E:12:27:92:06:D3:3F Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 52CC7C4D0D83F6750F90CAFE2DC28B833951C4D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 031A Signing time: Tue 05 Aug 2025 15:01:37 +0000 Manifest this update: Tue 05 Aug 2025 14:56:37 +0000 Manifest next update: Sat 09 Aug 2025 01:17:37 +0000 Files and hashes: 1: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) 2: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 3: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: BUdiK8nWK8LcY9HQo/OAuLQSMMCNq999U7mZIF05nvA=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cc:7c:4d:0d:83:f6:75:0f:90:ca:fe:2d:c2:8b:83:39:51:c4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Aug 5 14:56:37 2025 GMT Not After : Aug 9 01:17:37 2025 GMT Subject: CN=72A40A468AA6509D40A75390401E12279206D33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:6c:5d:b0:ef:19:f4:6d:f5:96:cf:26:51: 50:5f:2c:90:22:1f:47:38:37:9f:ae:8e:96:dc:a0: 11:41:99:48:1a:14:f5:ad:76:92:19:63:78:56:cd: f9:a0:98:73:00:f0:93:3e:9c:a1:78:e7:68:c4:10: 6b:3a:bb:9b:79:7e:20:fb:c6:2f:fc:30:be:1a:35: 51:65:be:84:6f:ce:45:0f:27:00:b7:ea:11:b5:c3: 98:80:23:69:44:d5:01:1e:eb:2d:02:ad:cb:e0:12: 90:f0:9a:63:d7:3e:9e:15:5a:ba:93:c2:2b:b1:5c: 48:3a:8f:15:da:35:e1:8c:74:ae:1a:b2:1f:80:22: bc:00:f6:0f:58:d2:3e:3c:5d:0d:91:0e:9b:d4:ce: 93:c8:d3:35:b8:fe:37:60:0c:cf:50:26:38:df:67: b5:ab:11:be:c5:50:ce:ec:cd:c6:ac:57:c7:48:d7: be:9d:38:74:23:5d:e9:97:e9:55:28:8b:49:ee:12: 1c:00:69:8e:f0:05:a2:58:65:43:6e:df:17:c4:ab: 4b:7f:fe:a2:d1:ed:62:3a:01:19:9b:f5:e2:46:4f: 9a:3f:6a:ea:82:79:05:9e:0b:e9:11:7e:c7:72:ad: ea:11:56:2c:c8:c2:a8:40:b9:9f:8e:65:e6:26:2b: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A4:0A:46:8A:A6:50:9D:40:A7:53:90:40:1E:12:27:92:06:D3:3F X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:21:eb:32:a7:e2:26:a7:31:04:01:6b:fb:2a:6e:1c:d3:92: b0:6e:0b:20:50:14:c2:f0:fd:3e:f9:aa:14:89:b7:2a:37:42: d4:f8:ba:c9:77:ab:75:db:86:95:7c:22:88:79:22:83:02:1d: 01:2b:e9:91:07:ad:85:94:ce:34:d0:cc:64:d6:b2:74:66:51: d2:44:93:e2:ed:57:d3:d8:3e:68:fd:3e:38:84:40:99:04:71: 8c:97:ec:34:0d:a6:c0:62:ca:87:32:de:9f:2b:fa:88:7d:e1: 7f:64:ac:0b:9d:8e:35:53:23:16:25:0b:28:5f:6b:f5:a6:ed: 8b:88:af:28:bd:6a:d4:f2:2a:89:38:8a:64:fe:5d:c6:3c:52: b8:ba:f9:b3:10:4d:a8:7c:b5:5d:b9:c8:42:ba:20:5e:45:b9: cd:4b:34:a5:ae:f6:0c:6c:72:34:a0:bd:9a:25:c3:d5:b0:04: 7d:bd:23:e1:46:56:08:0d:46:7d:7f:91:ce:ed:85:8b:31:26: 2f:ab:96:44:8f:46:1a:82:99:f7:13:33:da:fe:61:d7:62:43: 1f:76:e0:be:95:f7:b7:5d:aa:dc:d5:87:18:b7:ae:b2:cb:5a: 48:97:fc:1a:82:e5:24:29:e0:a9:94:2b:d0:33:8f:c2:1d:0f: 7c:6b:31:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsx8TQ2D9nUPkMr+LcKLgzlRxNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTA4MDUxNDU2MzdaFw0yNTA4MDkwMTE3MzdaMDMxMTAvBgNV BAMTKDcyQTQwQTQ2OEFBNjUwOUQ0MEE3NTM5MDQwMUUxMjI3OTIwNkQzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzWxdsO8Z9G31ls8mUVBfLJAi H0c4N5+ujpbcoBFBmUgaFPWtdpIZY3hWzfmgmHMA8JM+nKF452jEEGs6u5t5fiD7 xi/8ML4aNVFlvoRvzkUPJwC36hG1w5iAI2lE1QEe6y0CrcvgEpDwmmPXPp4VWrqT wiuxXEg6jxXaNeGMdK4ash+AIrwA9g9Y0j48XQ2RDpvUzpPI0zW4/jdgDM9QJjjf Z7WrEb7FUM7szcasV8dI176dOHQjXemX6VUoi0nuEhwAaY7wBaJYZUNu3xfEq0t/ /qLR7WI6ARmb9eJGT5o/auqCeQWeC+kRfsdyreoRVizIwqhAuZ+OZeYmK2FPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqQKRoqmUJ1Ap1OQQB4SJ5IG0z8wHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEh6zKn4ianMQQBa/sqbhzTkrBuCyBQFMLw /T75qhSJtyo3QtT4usl3q3XbhpV8Ioh5IoMCHQEr6ZEHrYWUzjTQzGTWsnRmUdJE k+LtV9PYPmj9PjiEQJkEcYyX7DQNpsBiyocy3p8r+oh94X9krAudjjVTIxYlCyhf a/Wm7YuIryi9atTyKok4imT+XcY8Uri6+bMQTah8tV25yEK6IF5Fuc1LNKWu9gxs cjSgvZolw9WwBH29I+FGVggNRn1/kc7thYsxJi+rlkSPRhqCmfcTM9r+YddiQx92 4L6V97ddqtzVhxi3rrLLWkiX/BqC5SQp4KmUK9Azj8IdD3xrMUQ= -----END CERTIFICATE-----Generated at Thu Aug 7 03:59:36 2025 by rpki-client