$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: Ha2P3OIsVPBxMst6a37f5dKxDuJEPFAsxwmmY5tYugk= Subject key identifier: 39:BA:9E:AD:8A:78:69:17:16:BA:6F:16:9B:42:62:D1:48:83:FF:69 Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 75D7295E9F313E80D861B0EB2A0B359B7346EB7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 01E7 Signing time: Fri 05 Sep 2025 08:31:35 +0000 Manifest this update: Fri 05 Sep 2025 08:26:35 +0000 Manifest next update: Mon 08 Sep 2025 14:51:35 +0000 Files and hashes: 1: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: 7DUUSviHQMaIy//P9vJPrOElz+HHAGzo3tvLv6Id+hE=) 2: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: K39jn2y2K6bT6WSylU024emK2v2goVGb5peC7he2S4U=) 3: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: TPt0MPhRlnRnEy6pwXTYSOfvzf7c+OznSicdCAsldBc=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: PlUQuGrph6ozxAfOZbVVs0CGGRj4aYxErmFtS7Skvdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d7:29:5e:9f:31:3e:80:d8:61:b0:eb:2a:0b:35:9b:73:46:eb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Sep 5 08:26:35 2025 GMT Not After : Sep 8 14:51:35 2025 GMT Subject: CN=39BA9EAD8A78691716BA6F169B4262D14883FF69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:77:b5:13:c5:57:bc:c3:22:16:4e:18:e1: 3c:8f:9e:d8:3e:34:0f:bf:1a:e5:00:a6:2c:a3:23: ad:2f:e0:5e:c0:21:10:5e:a0:c8:21:cb:bb:7d:e6: cc:e2:81:29:8e:70:e0:db:12:ac:f6:c2:07:26:9a: b4:0f:b8:d8:e2:5c:59:4d:4f:42:87:41:12:56:45: 27:ed:69:47:f3:f3:08:6e:4e:c9:cf:60:6c:5f:0b: 0b:96:99:76:61:69:c5:9a:fe:43:e9:99:fe:ff:b7: 20:1a:40:34:56:97:9d:6e:aa:13:50:87:8e:f2:c6: 6a:3e:78:b1:a3:5e:e5:98:14:6e:d7:72:53:56:0f: 1f:9a:99:50:02:77:28:8a:0d:30:65:58:c5:c6:95: 1b:89:49:bb:d8:cb:36:19:22:3b:cc:cd:5e:14:79: c3:d2:f6:c9:04:63:04:bb:55:b9:69:65:89:c9:bf: 01:c9:1f:69:bf:42:51:da:98:a1:e4:38:b7:88:56: 10:cb:ee:b0:e7:a5:d5:ab:46:21:c8:c3:67:0e:f4: 0e:24:26:0f:ad:14:82:16:bf:05:fd:a9:32:6c:83: 1b:70:4b:c2:7f:bd:8b:a0:5b:0b:57:2f:2d:94:8d: 11:9e:4d:98:ba:d7:bd:ab:44:42:67:2a:c3:38:52: 3f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BA:9E:AD:8A:78:69:17:16:BA:6F:16:9B:42:62:D1:48:83:FF:69 X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:14:98:5d:b3:38:d4:03:59:f2:ef:f4:17:66:33:3a:7c:90: 84:1c:51:d3:49:ab:e3:09:ad:10:0c:c4:5c:08:f4:30:9a:73: 68:25:ac:eb:ef:2a:bd:0d:83:cf:78:e1:5d:32:0c:61:60:44: 4e:a1:c0:06:11:7b:be:18:60:37:22:16:bf:6a:99:51:7e:20: a4:40:96:4a:fd:4a:4b:dc:51:d2:4f:37:e9:33:f6:d5:34:3a: b6:3c:59:52:d7:44:34:a9:46:ce:ab:3b:d3:25:3b:39:ea:ee: 21:4f:74:da:32:e7:45:4e:bb:df:54:15:35:29:0c:a2:bb:e0: 8a:d8:ca:96:68:b0:bd:bc:7a:02:ec:1b:71:bd:02:fb:47:b6: b2:c5:30:f2:25:5a:e5:dc:d6:6c:f7:ba:25:f7:88:0e:a3:0c: c4:fe:7d:46:60:22:ac:ec:6c:7d:ca:8e:c3:da:11:14:fb:95: 47:f7:8b:e3:13:40:b6:95:2b:c0:19:e4:ca:09:68:50:09:34: 1a:aa:6f:53:95:ff:7b:8c:ab:68:c5:07:78:2c:8b:f8:8f:18: 07:02:d0:f7:ea:b4:bc:18:5b:1b:e6:6b:ce:e0:94:e3:97:46: 17:b3:5b:d0:73:f7:9f:db:28:f1:54:9c:e2:a5:f1:e3:14:4c: 4e:ce:b7:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddcpXp8xPoDYYbDrKgs1m3NG638wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNTA5MDUwODI2MzVaFw0yNTA5MDgxNDUxMzVaMDMxMTAvBgNV BAMTKDM5QkE5RUFEOEE3ODY5MTcxNkJBNkYxNjlCNDI2MkQxNDg4M0ZGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaone1E8VXvMMiFk4Y4TyPntg+ NA+/GuUApiyjI60v4F7AIRBeoMghy7t95szigSmOcODbEqz2wgcmmrQPuNjiXFlN T0KHQRJWRSftaUfz8whuTsnPYGxfCwuWmXZhacWa/kPpmf7/tyAaQDRWl51uqhNQ h47yxmo+eLGjXuWYFG7XclNWDx+amVACdyiKDTBlWMXGlRuJSbvYyzYZIjvMzV4U ecPS9skEYwS7VblpZYnJvwHJH2m/QlHamKHkOLeIVhDL7rDnpdWrRiHIw2cO9A4k Jg+tFIIWvwX9qTJsgxtwS8J/vYugWwtXLy2UjRGeTZi6172rREJnKsM4Uj8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUObqerYp4aRcWum8Wm0Ji0UiD/2kwHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIUmF2zONQDWfLv9BdmMzp8kIQcUdNJq+MJ rRAMxFwI9DCac2glrOvvKr0Ng8944V0yDGFgRE6hwAYRe74YYDciFr9qmVF+IKRA lkr9SkvcUdJPN+kz9tU0OrY8WVLXRDSpRs6rO9MlOznq7iFPdNoy50VOu99UFTUp DKK74IrYypZosL28egLsG3G9AvtHtrLFMPIlWuXc1mz3uiX3iA6jDMT+fUZgIqzs bH3KjsPaERT7lUf3i+MTQLaVK8AZ5MoJaFAJNBqqb1OV/3uMq2jFB3gsi/iPGAcC 0PfqtLwYWxvma87glOOXRhezW9Bz95/bKPFUnOKl8eMUTE7OtzU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:42 2025 by rpki-client