$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft File: 580F61C23A4857BE23095E060FE36642F86DA6E8.mft (raw, json) Hash identifier: xUYbwjaSqGthYLPXB6KBfstllZ7GR02r0+Db7/Hixcw= Subject key identifier: 85:07:F2:E0:43:E2:07:B7:9F:E7:08:E6:EF:54:C2:07:FC:2B:06:D3 Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 Certificate issuer: /CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Certificate serial: 048D80866725FE506F7912172DA551ABCFCE3909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft Manifest number: 02B8 Signing time: Sun 20 Jul 2025 20:20:35 +0000 Manifest this update: Sun 20 Jul 2025 20:15:35 +0000 Manifest next update: Thu 24 Jul 2025 02:03:35 +0000 Files and hashes: 1: 580F61C23A4857BE23095E060FE36642F86DA6E8.crl (hash: /rTfWclj7z773qJpKpuaeopRWZENEU3ubbFjeOyDa+k=) 2: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: AtSVkFWy+RPF/Rog89oVSGAye/7C+5O/wyn2g4eUns4=) 3: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: SISmoMd9IDy7UIhYINg4jNQmxZBYxELrgbvx7I2ZzYc=) 4: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: vYSSiPVfjHBRD1DbhEq71sSwPeD8q/o4Uv0WnfeglN4=) 5: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: qgfha00pYYMcksaq2+JUhPWSf25KpZIfyFc9lsfpKQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8d:80:86:67:25:fe:50:6f:79:12:17:2d:a5:51:ab:cf:ce:39:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Validity Not Before: Jul 20 20:15:35 2025 GMT Not After : Jul 24 02:03:35 2025 GMT Subject: CN=8507F2E043E207B79FE708E6EF54C207FC2B06D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:f8:67:5e:dc:38:e2:3e:eb:57:c7:51:bb: 1a:3c:b9:ab:83:45:48:e0:0f:30:be:ba:38:12:5c: 66:67:6b:5e:52:0e:7c:07:4e:01:72:de:1a:ee:5c: d2:63:03:0c:d4:b6:9b:e8:ce:55:86:e5:96:eb:40: 10:2b:33:a9:7a:f9:89:40:68:ac:4a:8c:e5:c0:62: 74:69:67:65:0e:a8:93:58:aa:05:e4:90:97:e6:24: 71:54:fe:0d:c0:18:0b:9d:2b:72:aa:27:58:66:33: ae:b9:20:af:23:de:b1:42:c8:d5:8a:bd:93:3f:6f: fe:02:06:0c:9f:72:f5:fa:6b:1b:f2:6c:dd:02:82: 0b:96:21:92:3b:e9:95:f0:12:c3:d6:1a:fc:52:72: fb:1f:1b:38:9d:a6:24:3e:40:3a:67:a6:a2:e4:c8: 98:8e:ed:ee:d8:9a:e4:9c:70:0b:4a:29:87:37:ab: 3a:37:de:6c:a4:05:55:53:80:bc:e5:25:a1:17:dc: 20:7c:89:bf:49:94:84:e7:5a:ad:26:1a:f7:e4:ed: cd:fc:e6:b9:f4:b8:ee:66:cf:73:7e:02:a0:4e:9e: 20:df:2a:bf:8a:64:96:f5:7b:71:8a:a5:fd:7d:a7: 95:c2:a5:87:b5:71:e8:7f:5a:6d:d2:e5:2b:75:43: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:07:F2:E0:43:E2:07:B7:9F:E7:08:E6:EF:54:C2:07:FC:2B:06:D3 X509v3 Authority Key Identifier: keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:67:bb:4e:35:d2:ac:da:32:e8:5c:c7:f6:6c:3a:0e:9b:1f: b7:9b:fe:5a:5f:93:a9:15:10:c5:94:58:e6:aa:03:23:1c:d1: 3d:93:0d:75:a0:08:1d:ca:d5:6b:6b:33:74:54:2d:2f:79:90: be:c2:2a:e7:d2:33:2f:b6:e6:22:a1:cd:de:7c:ee:d7:19:b9: 82:84:0e:f5:f2:d8:21:87:f8:80:58:17:74:6c:80:ce:e8:24: b8:4b:09:a5:a1:e9:ae:aa:54:cd:b6:ff:e0:3f:0a:84:e0:af: 4f:1c:e8:9d:8d:da:42:7b:9c:f4:1f:b9:53:10:0d:4e:21:5e: 6b:96:2d:db:35:82:87:63:43:a6:60:20:78:12:50:ab:0a:68: 9b:01:4c:54:13:98:85:5d:87:2a:18:d3:98:11:a2:ed:6f:8e: 8d:de:8a:b6:ef:96:51:54:12:df:3f:f2:2e:01:cd:54:fa:d5: 9d:9d:68:30:19:97:c9:f0:39:14:22:3b:3c:c1:15:f4:2d:42: 86:57:bc:e9:d8:00:de:78:af:e2:26:84:1b:0c:5f:75:89:46: c3:ce:80:37:4e:92:af:cd:24:a5:ae:d5:95:54:35:39:fe:18: 8c:b4:9d:79:6f:81:5c:8e:6d:4c:9b:70:2d:ac:79:99:3c:4e: 21:6a:d8:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBI2Ahmcl/lBveRIXLaVRq8/OOQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJG ODZEQTZFODAeFw0yNTA3MjAyMDE1MzVaFw0yNTA3MjQwMjAzMzVaMDMxMTAvBgNV BAMTKDg1MDdGMkUwNDNFMjA3Qjc5RkU3MDhFNkVGNTRDMjA3RkMyQjA2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhfhnXtw44j7rV8dRuxo8uauD RUjgDzC+ujgSXGZna15SDnwHTgFy3hruXNJjAwzUtpvozlWG5ZbrQBArM6l6+YlA aKxKjOXAYnRpZ2UOqJNYqgXkkJfmJHFU/g3AGAudK3KqJ1hmM665IK8j3rFCyNWK vZM/b/4CBgyfcvX6axvybN0CgguWIZI76ZXwEsPWGvxScvsfGzidpiQ+QDpnpqLk yJiO7e7YmuSccAtKKYc3qzo33mykBVVTgLzlJaEX3CB8ib9JlITnWq0mGvfk7c38 5rn0uO5mz3N+AqBOniDfKr+KZJb1e3GKpf19p5XCpYe1ceh/Wm3S5St1Q1SBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQfy4EPiB7ef5wjm71TCB/wrBtMwHwYDVR0j BBgwFoAUWA9hwjpIV74jCV4GD+NmQvhtpugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDBmOWNjNy00YTY5LTRjOWUtYmJhNi00ZDlhYmI1NmVmZjYvMC81ODBGNjFDMjNB NDg1N0JFMjMwOTVFMDYwRkUzNjY0MkY4NkRBNkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJGODZE QTZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2 NDJGODZEQTZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANlnu0410qzaMuhcx/ZsOg6bH7eb/lpfk6kV EMWUWOaqAyMc0T2TDXWgCB3K1WtrM3RULS95kL7CKufSMy+25iKhzd587tcZuYKE DvXy2CGH+IBYF3RsgM7oJLhLCaWh6a6qVM22/+A/CoTgr08c6J2N2kJ7nPQfuVMQ DU4hXmuWLds1godjQ6ZgIHgSUKsKaJsBTFQTmIVdhyoY05gRou1vjo3eirbvllFU Et8/8i4BzVT61Z2daDAZl8nwORQiOzzBFfQtQoZXvOnYAN54r+ImhBsMX3WJRsPO gDdOkq/NJKWu1ZVUNTn+GIy0nXlvgVyObUybcC2seZk8TiFq2J8= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:02 2025 by rpki-client