$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: JQH7+33iJ4Ef5WahiaHxtRSd+Mm+0kjVtSwMijXMW6A= Subject key identifier: 3B:DA:77:0B:46:DD:3A:98:C1:CD:2F:98:90:2E:FF:B0:B0:49:8E:84 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 0506F333E95DEC24158B4F6625C09882E6D4B467 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0314 Signing time: Wed 23 Jul 2025 01:11:32 +0000 Manifest this update: Wed 23 Jul 2025 01:06:32 +0000 Manifest next update: Sat 26 Jul 2025 12:25:32 +0000 Files and hashes: 1: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: e39wK8oeLF0wFntmjMmEK5VQsqaHxPJY7TwJSw0dhAw=) 2: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 3: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 12:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:06:f3:33:e9:5d:ec:24:15:8b:4f:66:25:c0:98:82:e6:d4:b4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Jul 23 01:06:32 2025 GMT Not After : Jul 26 12:25:32 2025 GMT Subject: CN=3BDA770B46DD3A98C1CD2F98902EFFB0B0498E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:3f:e9:cf:87:eb:01:9c:3e:a2:d3:b0:49: bf:cf:38:42:dc:74:c5:12:ff:5f:b5:9d:c5:3f:fd: 7e:4b:55:ad:d5:4b:42:5b:61:aa:a1:9a:b8:6f:b4: 22:c8:bd:29:d2:e8:75:31:95:fd:6d:b1:e9:35:4a: 06:c2:c7:19:02:1f:46:d0:73:67:2e:61:f1:c3:97: 2d:dc:11:2b:b4:95:d7:fb:16:b6:bf:c2:6d:95:82: 4e:c6:8b:8e:97:83:85:39:a5:0d:3a:08:2d:42:76: 39:4e:1e:00:be:bd:c9:f8:2f:35:63:ce:1e:b5:38: e4:ba:c6:5c:6e:48:3d:7c:1a:6b:04:70:51:b8:91: 09:47:f0:22:f4:7c:8d:7d:d4:08:84:da:a1:57:d7: da:77:81:dd:19:59:ff:60:1e:4f:ec:03:bf:a1:7c: f0:1a:d5:f1:07:71:7f:d7:e8:92:d4:3a:37:1d:e5: f4:15:7a:91:5c:1c:62:2c:1e:7c:9b:25:ff:5c:5e: 7a:eb:1c:05:75:82:fd:56:d5:93:4d:c6:bf:5d:e8: d8:99:cb:d2:f6:f5:77:14:53:1d:4b:1b:23:c3:6a: fb:18:cd:2d:e0:5a:61:c0:c8:53:a0:73:54:ed:aa: a5:d3:de:e3:35:d4:b3:99:c1:ef:90:e5:86:fd:c4: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:77:0B:46:DD:3A:98:C1:CD:2F:98:90:2E:FF:B0:B0:49:8E:84 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:c9:2a:79:64:96:40:05:4d:cc:82:06:a2:ab:bc:47:71:86: 43:4a:af:e5:1d:f7:fb:0e:1c:ec:52:5f:87:a7:dc:e7:b1:e6: ab:af:9e:28:fd:99:e5:21:98:14:39:52:79:5c:82:da:d3:87: 2d:62:63:57:ba:e5:6f:20:a4:91:75:7a:0b:73:ab:be:2a:30: 15:da:8d:5e:c7:ce:81:ae:36:ee:cf:57:a9:28:49:7f:46:dc: ed:e3:56:35:71:66:5d:27:49:52:7c:5a:46:54:4d:d1:e9:47: e8:63:55:b9:f7:18:45:f7:bd:d9:77:84:53:5c:f0:2b:7c:c3: 68:8d:56:c1:51:dc:9f:04:c9:a1:4b:0e:f8:d1:47:a1:4b:34: 3b:6c:2e:f5:98:fd:d3:93:95:b1:25:14:9e:b0:4f:db:62:96: 3a:74:f3:0e:b7:96:8d:32:2f:a2:72:02:32:aa:a8:43:ed:26: b1:62:c3:fa:55:c5:70:f8:cd:44:41:6a:82:0b:fe:86:95:e9: 04:af:1f:d9:1d:4d:b9:6a:14:48:09:22:e3:a4:98:a4:ae:0f: 8f:33:d0:d1:d8:ec:f9:b3:c9:b2:70:5f:52:70:fb:c7:57:77: d8:6e:1b:64:2e:3f:4e:05:4b:59:ec:cd:27:17:0b:50:ca:1f: be:18:1c:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQbzM+ld7CQVi09mJcCYgubUtGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTA3MjMwMTA2MzJaFw0yNTA3MjYxMjI1MzJaMDMxMTAvBgNV BAMTKDNCREE3NzBCNDZERDNBOThDMUNEMkY5ODkwMkVGRkIwQjA0OThFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruT/pz4frAZw+otOwSb/POELc dMUS/1+1ncU//X5LVa3VS0JbYaqhmrhvtCLIvSnS6HUxlf1tsek1SgbCxxkCH0bQ c2cuYfHDly3cESu0ldf7Fra/wm2Vgk7Gi46Xg4U5pQ06CC1CdjlOHgC+vcn4LzVj zh61OOS6xlxuSD18GmsEcFG4kQlH8CL0fI191AiE2qFX19p3gd0ZWf9gHk/sA7+h fPAa1fEHcX/X6JLUOjcd5fQVepFcHGIsHnybJf9cXnrrHAV1gv1W1ZNNxr9d6NiZ y9L29XcUUx1LGyPDavsYzS3gWmHAyFOgc1TtqqXT3uM11LOZwe+Q5Yb9xCJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9p3C0bdOpjBzS+YkC7/sLBJjoQwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODJKnlklkAFTcyCBqKrvEdxhkNKr+Ud9/sO HOxSX4en3Oex5quvnij9meUhmBQ5UnlcgtrThy1iY1e65W8gpJF1egtzq74qMBXa jV7HzoGuNu7PV6koSX9G3O3jVjVxZl0nSVJ8WkZUTdHpR+hjVbn3GEX3vdl3hFNc 8Ct8w2iNVsFR3J8EyaFLDvjRR6FLNDtsLvWY/dOTlbElFJ6wT9tiljp08w63lo0y L6JyAjKqqEPtJrFiw/pVxXD4zURBaoIL/oaV6QSvH9kdTblqFEgJIuOkmKSuD48z 0NHY7PmzybJwX1Jw+8dXd9huG2QuP04FS1nszScXC1DKH74YHOs= -----END CERTIFICATE-----Generated at Thu Jul 24 04:56:32 2025 by rpki-client