$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: 4pMtcbrMVYP1YIOAfi7eIAiA0l+2l1UyVoQXxtgstuA= Subject key identifier: C0:23:EF:D1:A7:FB:3A:BB:8C:E7:1F:A1:3C:69:05:6C:7B:B4:95:1C Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 5641B45FDA176FB5C5AE78847B68077205A82D42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 04F0 Signing time: Sat 19 Jul 2025 06:41:41 +0000 Manifest this update: Sat 19 Jul 2025 06:36:41 +0000 Manifest next update: Tue 22 Jul 2025 14:02:41 +0000 Files and hashes: 1: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 2: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: Xt0QxlTjB75EqwWdN6n08It04rugwvtA1BDJD2vaQgA=) 3: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=) 4: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:41:b4:5f:da:17:6f:b5:c5:ae:78:84:7b:68:07:72:05:a8:2d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Jul 19 06:36:41 2025 GMT Not After : Jul 22 14:02:41 2025 GMT Subject: CN=C023EFD1A7FB3ABB8CE71FA13C69056C7BB4951C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:92:47:16:76:0a:4d:59:f4:0f:41:6f:4a: 99:33:2d:bf:73:88:1b:ea:70:70:b5:3b:52:53:ec: 5a:64:0b:03:a4:dd:22:86:af:b8:1e:68:94:9b:d0: b0:be:bf:3a:f4:11:c2:e4:95:02:fa:53:f7:3e:61: 4b:26:f4:5c:aa:7e:b8:ef:f7:66:3a:3e:58:c6:b1: 9e:4f:14:36:d7:22:41:41:ee:a5:43:b6:40:2a:98: 68:3a:ba:6c:24:e5:43:fa:cd:61:fd:dc:7c:fc:58: d9:09:92:24:a1:52:82:8e:d3:0b:b6:90:7d:c1:2c: 91:29:f4:8f:07:c0:e6:1e:da:57:4a:20:17:3e:bc: 6e:f3:71:78:27:c0:63:be:e6:db:51:e8:b0:00:34: 60:6d:8a:ea:66:84:d4:d1:88:5a:24:ab:f5:3e:79: 2f:40:31:8c:50:34:36:30:e0:6f:8e:49:f4:40:a6: b3:b2:4f:b0:0f:b0:d8:5e:b0:72:d0:94:a2:71:7e: ee:f6:09:7c:1d:b3:fa:21:c5:7d:77:d4:67:80:10: af:95:80:48:c0:7e:49:64:55:13:8e:e2:9e:cd:9b: 6f:1a:1d:96:c5:2d:ff:ff:bc:fc:a8:ee:e7:7a:46: 67:da:c3:a4:2d:e8:44:99:fd:ec:af:0b:16:51:f3: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:EF:D1:A7:FB:3A:BB:8C:E7:1F:A1:3C:69:05:6C:7B:B4:95:1C X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a1:57:bf:c2:e6:6e:6b:e9:95:d4:81:fc:9b:d3:87:47:ff: 4c:d4:d9:34:16:bc:66:6d:1c:6c:a1:4f:ef:24:ed:6c:5d:9f: 87:40:31:e3:2a:ef:1e:f5:9b:be:46:71:5d:4f:39:f0:2f:2e: 28:2c:cb:81:36:38:a5:e0:8f:99:db:4d:3d:2a:b2:a9:0a:e0: 4e:59:48:4a:78:77:aa:7e:2f:80:66:fe:b0:81:d3:e5:da:7f: b5:f0:a6:23:92:4b:d3:2b:74:9b:7b:a0:96:7d:3f:0f:1f:b5: 96:66:c5:3f:e8:e0:24:52:c2:bb:4c:99:c5:f0:5f:aa:fb:64: 82:01:8b:2c:16:e0:94:40:f0:d4:5b:78:c9:2d:87:07:db:9d: 32:8d:cf:fe:8b:09:36:4d:21:a1:17:ba:03:7d:cf:20:b0:5e: 41:79:3c:90:85:69:ae:97:80:1f:2f:5e:56:cd:ce:6b:b3:a8: 8e:97:7e:7c:65:af:64:77:e3:47:1c:86:cd:31:fb:93:a8:ff: 8a:96:7f:33:fe:3d:e6:80:82:f1:7f:de:5f:00:86:a5:77:64: 2a:aa:39:35:92:b7:99:1b:b1:86:34:75:1b:26:73:74:0c:f3: a8:76:b8:40:31:d9:2b:86:a8:ab:ee:c6:45:41:dc:1e:22:36: c2:3b:ad:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkG0X9oXb7XFrniEe2gHcgWoLUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTA3MTkwNjM2NDFaFw0yNTA3MjIxNDAyNDFaMDMxMTAvBgNV BAMTKEMwMjNFRkQxQTdGQjNBQkI4Q0U3MUZBMTNDNjkwNTZDN0JCNDk1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tZJHFnYKTVn0D0FvSpkzLb9z iBvqcHC1O1JT7FpkCwOk3SKGr7geaJSb0LC+vzr0EcLklQL6U/c+YUsm9Fyqfrjv 92Y6PljGsZ5PFDbXIkFB7qVDtkAqmGg6umwk5UP6zWH93Hz8WNkJkiShUoKO0wu2 kH3BLJEp9I8HwOYe2ldKIBc+vG7zcXgnwGO+5ttR6LAANGBtiupmhNTRiFokq/U+ eS9AMYxQNDYw4G+OSfRAprOyT7APsNhesHLQlKJxfu72CXwds/ohxX131GeAEK+V gEjAfklkVROO4p7Nm28aHZbFLf//vPyo7ud6Rmfaw6Qt6ESZ/eyvCxZR85vhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwCPv0af7OruM5x+hPGkFbHu0lRwwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGhV7/C5m5r6ZXUgfyb04dH/0zU2TQWvGZt HGyhT+8k7Wxdn4dAMeMq7x71m75GcV1POfAvLigsy4E2OKXgj5nbTT0qsqkK4E5Z SEp4d6p+L4Bm/rCB0+Xaf7XwpiOSS9MrdJt7oJZ9Pw8ftZZmxT/o4CRSwrtMmcXw X6r7ZIIBiywW4JRA8NRbeMkthwfbnTKNz/6LCTZNIaEXugN9zyCwXkF5PJCFaa6X gB8vXlbNzmuzqI6Xfnxlr2R340cchs0x+5Oo/4qWfzP+PeaAgvF/3l8AhqV3ZCqq OTWSt5kbsYY0dRsmc3QM86h2uEAx2SuGqKvuxkVB3B4iNsI7rTc= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:02 2025 by rpki-client