$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: U413CdN1uWgOLkzLwb2iZS/4YqHn+lUqOLUME6A1jRQ= Subject key identifier: B7:71:95:98:A9:37:94:97:4F:13:42:8B:00:0E:7D:B4:95:02:FE:C5 Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 5CD7C8EADB5460925CE1F1623B607F06F6DF8AA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 01D2 Signing time: Sat 19 Jul 2025 16:51:31 +0000 Manifest this update: Sat 19 Jul 2025 16:46:31 +0000 Manifest next update: Tue 22 Jul 2025 20:06:31 +0000 Files and hashes: 1: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: K39jn2y2K6bT6WSylU024emK2v2goVGb5peC7he2S4U=) 2: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: TPt0MPhRlnRnEy6pwXTYSOfvzf7c+OznSicdCAsldBc=) 3: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: AVZgLeooycVYTquxqPTgZl5L8mSRCUr3wirwpKTncWI=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: PlUQuGrph6ozxAfOZbVVs0CGGRj4aYxErmFtS7Skvdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d7:c8:ea:db:54:60:92:5c:e1:f1:62:3b:60:7f:06:f6:df:8a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Jul 19 16:46:31 2025 GMT Not After : Jul 22 20:06:31 2025 GMT Subject: CN=B7719598A93794974F13428B000E7DB49502FEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:2f:b1:d4:55:04:95:8e:63:31:f0:99:e0: b2:63:d6:a5:10:bd:b3:e4:f8:5b:f9:4a:0d:7f:7c: ae:60:75:11:b1:0e:c6:23:ae:ca:4d:78:b5:e7:00: bd:e7:c4:1c:0d:c7:74:58:0b:33:0b:40:9e:7c:af: a5:3c:50:63:8b:f2:8a:df:b0:9c:c8:59:7c:3a:77: 6b:14:d2:5c:df:8e:40:3f:fa:f7:3d:38:5d:74:d3: c7:ce:84:ba:c2:72:4a:31:af:32:42:07:f8:ba:d4: ca:94:06:c9:c2:94:3e:d2:fd:d3:bc:1e:51:24:1d: e2:e7:99:2b:36:86:c4:53:c0:f5:83:f4:f1:f2:70: 3c:26:75:dc:07:44:d3:2b:cd:ca:77:ce:58:cd:31: ff:f0:58:b2:a7:75:c3:f0:da:ea:d3:23:6c:77:01: d8:a1:12:97:66:2a:cb:43:ee:0c:34:6b:c3:43:26: 45:62:50:48:8c:d6:c6:8b:66:07:10:31:32:14:b0: 08:aa:85:53:28:9c:24:a5:0a:2d:5d:02:51:89:2f: 45:93:a9:09:55:04:57:3e:22:1c:2a:5e:2b:25:9a: 50:66:c8:f8:d2:4b:2f:1e:be:42:0a:74:ec:31:b2: bf:64:b2:1c:a9:79:0b:aa:da:59:ea:45:ee:dd:51: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:71:95:98:A9:37:94:97:4F:13:42:8B:00:0E:7D:B4:95:02:FE:C5 X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:43:5a:2d:5c:c6:fc:73:b0:97:04:45:30:41:b1:ce:c9:16: 62:cd:e7:ac:d9:10:19:02:12:06:d9:7e:f9:ef:d4:79:4e:2f: 90:34:82:d5:86:5d:83:2e:2d:e9:cc:ce:14:48:c7:33:69:b5: db:c2:1b:69:3f:38:26:cd:1d:5a:e0:cd:7a:2c:fe:b6:bb:1c: 61:e2:46:aa:24:7b:30:b3:a1:4b:cd:70:1e:1c:fe:5b:40:85: 25:8d:79:bd:a0:58:fb:a3:81:d3:fd:08:74:44:d6:d0:a1:2c: 19:f5:99:ee:47:06:14:61:b5:08:b4:a4:74:ef:12:98:ea:0d: a9:c6:88:a1:8c:af:8a:95:52:19:d3:01:ee:85:1c:02:e2:63: f2:ff:07:e6:c1:6a:47:ed:80:e5:bb:c0:de:35:38:18:1a:0b: 0d:d9:93:1a:1c:19:f0:a1:b7:90:b8:cd:d9:a3:aa:55:d6:20: f5:ad:58:53:95:8e:a4:38:2f:07:2e:b1:1f:75:a1:e2:47:4a: 42:86:52:8c:da:de:bc:55:29:82:a0:a0:85:f4:d0:c3:39:fb: 53:a4:1a:ce:86:79:46:f1:58:a1:1a:2c:3f:7d:63:38:c6:62: 1d:01:0c:ff:3b:79:e6:77:a2:f3:05:63:dd:ea:da:6e:5e:39: 42:c9:1e:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNfI6ttUYJJc4fFiO2B/BvbfiqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNTA3MTkxNjQ2MzFaFw0yNTA3MjIyMDA2MzFaMDMxMTAvBgNV BAMTKEI3NzE5NTk4QTkzNzk0OTc0RjEzNDI4QjAwMEU3REI0OTUwMkZFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsC+x1FUElY5jMfCZ4LJj1qUQ vbPk+Fv5Sg1/fK5gdRGxDsYjrspNeLXnAL3nxBwNx3RYCzMLQJ58r6U8UGOL8orf sJzIWXw6d2sU0lzfjkA/+vc9OF1008fOhLrCckoxrzJCB/i61MqUBsnClD7S/dO8 HlEkHeLnmSs2hsRTwPWD9PHycDwmddwHRNMrzcp3zljNMf/wWLKndcPw2urTI2x3 AdihEpdmKstD7gw0a8NDJkViUEiM1saLZgcQMTIUsAiqhVMonCSlCi1dAlGJL0WT qQlVBFc+IhwqXislmlBmyPjSSy8evkIKdOwxsr9kshypeQuq2lnqRe7dUZbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3GVmKk3lJdPE0KLAA59tJUC/sUwHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxDWi1cxvxzsJcERTBBsc7JFmLN56zZEBkC EgbZfvnv1HlOL5A0gtWGXYMuLenMzhRIxzNptdvCG2k/OCbNHVrgzXos/ra7HGHi RqokezCzoUvNcB4c/ltAhSWNeb2gWPujgdP9CHRE1tChLBn1me5HBhRhtQi0pHTv EpjqDanGiKGMr4qVUhnTAe6FHALiY/L/B+bBakftgOW7wN41OBgaCw3ZkxocGfCh t5C4zdmjqlXWIPWtWFOVjqQ4LwcusR91oeJHSkKGUoza3rxVKYKgoIX00MM5+1Ok Gs6GeUbxWKEaLD99YzjGYh0BDP87eeZ3ovMFY93q2m5eOULJHh0= -----END CERTIFICATE-----Generated at Mon Jul 21 09:03:05 2025 by rpki-client