$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json) Hash identifier: 7CNoqMSjZGM4k06sAX7ekVR5iawyPTalTcgR0rJYIUM= Subject key identifier: EF:91:EF:56:A5:FE:24:B0:70:C0:5D:88:CC:39:C3:E1:38:8A:04:4B Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Certificate serial: 0BFE13956989C16B71022B28301DF9DB850447D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft Manifest number: 01D2 Signing time: Fri 18 Jul 2025 20:21:52 +0000 Manifest this update: Fri 18 Jul 2025 20:16:52 +0000 Manifest next update: Tue 22 Jul 2025 03:27:52 +0000 Files and hashes: 1: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: iufPrZZScnO80QkyCPvSlgZqxsE8YzjDEGRWUUoEP4M=) 2: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: 1AVA/chq0m2DRgckyabJWniO8om/3jqoFUbEgRzxIKY=) 3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: en7yrsRqDUaal9vRU4LRRex8mQ3pcI0rlYghVnCEE78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 03:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fe:13:95:69:89:c1:6b:71:02:2b:28:30:1d:f9:db:85:04:47:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Validity Not Before: Jul 18 20:16:52 2025 GMT Not After : Jul 22 03:27:52 2025 GMT Subject: CN=EF91EF56A5FE24B070C05D88CC39C3E1388A044B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:0c:ea:98:d8:aa:f9:c3:48:3f:4e:9b:a2: b4:91:21:4a:36:03:60:55:2d:0e:7b:0a:98:01:4c: 90:35:83:8a:41:20:15:42:8c:8e:a5:a9:d7:aa:03: 10:69:d7:22:01:32:3e:bb:eb:0a:c1:08:bf:47:75: 39:55:e8:b1:e7:40:90:4a:ce:e7:86:26:68:fb:15: d1:98:79:3d:78:90:f3:65:aa:1b:74:d1:f0:38:5a: bf:5a:25:7a:83:12:b8:84:b6:7c:d3:f3:ad:9d:e5: 09:30:fe:fa:d7:f3:5a:70:e3:93:55:c8:cd:5d:e8: e3:63:f4:d5:8e:6b:c9:b0:d4:02:67:9f:2b:9b:d7: bf:1d:60:47:69:1f:dd:15:dc:55:cd:9f:e7:ae:7b: 8b:b7:b9:cf:1e:d5:bd:ee:97:af:03:e9:e7:a4:ec: 16:de:8c:7f:78:8c:2d:b4:48:c0:6d:46:77:f3:76: e0:d1:c0:65:5b:17:fa:08:88:ee:32:13:5b:5f:3a: e5:f1:e3:51:d7:1d:df:6d:bd:20:8d:0d:45:d9:1e: 2a:b8:e2:0c:3b:c0:89:62:26:6d:e0:f1:21:e8:46: 91:2b:0e:f3:ea:fe:83:18:dc:bd:b4:a3:1a:f3:8d: bc:2e:8f:37:c0:6b:df:22:97:03:28:26:77:d0:63: 0a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:91:EF:56:A5:FE:24:B0:70:C0:5D:88:CC:39:C3:E1:38:8A:04:4B X509v3 Authority Key Identifier: keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bc:aa:a0:23:c9:27:e1:12:26:64:f3:56:66:d3:e9:c1:fd: 1e:d7:cd:2d:ee:46:24:3f:c0:2b:7f:27:99:fa:b3:ff:ce:5d: 0f:0d:a4:ed:ea:c6:e0:ce:24:4f:af:fb:92:e8:d0:31:22:bd: 2f:cf:5e:80:90:db:5a:28:c5:9a:10:dc:98:80:7e:dc:0b:4f: ba:39:11:b6:c9:da:2d:16:5c:96:58:56:d8:78:72:bf:2f:91: eb:16:0f:1d:05:7d:e2:d8:fe:e3:17:13:92:42:74:e2:ad:d1: 5d:c6:b0:34:f3:d4:10:97:c6:ab:ad:c0:cc:73:db:e2:aa:42: 7a:74:77:a3:36:1e:07:d7:c2:e1:04:5f:5a:11:cf:7b:92:bb: 8f:76:3f:53:e0:ef:84:af:af:fe:d0:dd:92:e3:1f:66:45:6d: b4:73:55:17:3e:9b:6d:48:55:4e:da:bc:42:b2:84:14:60:02: 49:89:54:48:c2:90:08:e9:1d:21:e8:66:7f:5c:8a:33:31:13: 9b:93:16:e8:35:2f:d1:f4:68:cc:8a:a8:44:54:fe:e3:1a:a3: 0b:42:99:fd:33:4b:5d:45:ac:da:0b:48:18:a9:df:98:2c:44: 0c:a1:ca:a8:fc:f4:e2:40:9d:e4:49:dd:c3:de:47:1b:1e:83: af:83:a5:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/4TlWmJwWtxAisoMB3524UER9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUx MkM5Q0I5RjAeFw0yNTA3MTgyMDE2NTJaFw0yNTA3MjIwMzI3NTJaMDMxMTAvBgNV BAMTKEVGOTFFRjU2QTVGRTI0QjA3MEMwNUQ4OENDMzlDM0UxMzg4QTA0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzegzqmNiq+cNIP06borSRIUo2 A2BVLQ57CpgBTJA1g4pBIBVCjI6lqdeqAxBp1yIBMj676wrBCL9HdTlV6LHnQJBK zueGJmj7FdGYeT14kPNlqht00fA4Wr9aJXqDEriEtnzT862d5Qkw/vrX81pw45NV yM1d6ONj9NWOa8mw1AJnnyub178dYEdpH90V3FXNn+eue4u3uc8e1b3ul68D6eek 7BbejH94jC20SMBtRnfzduDRwGVbF/oIiO4yE1tfOuXx41HXHd9tvSCNDUXZHiq4 4gw7wIliJm3g8SHoRpErDvPq/oMY3L20oxrzjbwujzfAa98ilwMoJnfQYwrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU75HvVqX+JLBwwF2IzDnD4TiKBEswHwYDVR0j BBgwFoAUZYwNhhfC0FznIEJ+Hfcv3hLJy58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjVkODhmMS1iOWMwLTQ4NWUtOTE2ZS01OWI3ZTM2OThkYTEvMC82NThDMEQ4NjE3 QzJEMDVDRTcyMDQyN0UxREY3MkZERTEyQzlDQjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUxMkM5 Q0I5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJG REUxMkM5Q0I5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa8qqAjySfhEiZk81Zm0+nB/R7XzS3uRiQ/ wCt/J5n6s//OXQ8NpO3qxuDOJE+v+5Lo0DEivS/PXoCQ21ooxZoQ3JiAftwLT7o5 EbbJ2i0WXJZYVth4cr8vkesWDx0FfeLY/uMXE5JCdOKt0V3GsDTz1BCXxqutwMxz 2+KqQnp0d6M2HgfXwuEEX1oRz3uSu492P1Pg74Svr/7Q3ZLjH2ZFbbRzVRc+m21I VU7avEKyhBRgAkmJVEjCkAjpHSHoZn9cijMxE5uTFug1L9H0aMyKqERU/uMaowtC mf0zS11FrNoLSBip35gsRAyhyqj89OJAneRJ3cPeRxseg6+DpX8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:17 2025 by rpki-client