$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: CeA2ahwyHyWnMtOmySnjD8uT8F4fBagZUnFNIOSPr0Q= Subject key identifier: 1E:B7:8B:A0:9A:14:DE:53:5D:47:D4:73:EE:20:FE:56:2C:04:1C:13 Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 581C54A8F48C0AD8F7692B7A8CE6C0671F77E5B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 01BE Signing time: Thu 05 Jun 2025 13:51:31 +0000 Manifest this update: Thu 05 Jun 2025 13:46:31 +0000 Manifest next update: Sun 08 Jun 2025 15:31:31 +0000 Files and hashes: 1: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: TPt0MPhRlnRnEy6pwXTYSOfvzf7c+OznSicdCAsldBc=) 2: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: K39jn2y2K6bT6WSylU024emK2v2goVGb5peC7he2S4U=) 3: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: y5Nf1cmTigqcR0m7ccfTPxbsJ4czNvZEyAWI2y2MsME=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: PlUQuGrph6ozxAfOZbVVs0CGGRj4aYxErmFtS7Skvdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1c:54:a8:f4:8c:0a:d8:f7:69:2b:7a:8c:e6:c0:67:1f:77:e5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Jun 5 13:46:31 2025 GMT Not After : Jun 8 15:31:31 2025 GMT Subject: CN=1EB78BA09A14DE535D47D473EE20FE562C041C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:6e:f6:fa:5d:be:00:f1:12:df:c9:5a:ca: 27:da:a2:e7:5b:d5:f4:ed:d8:3e:34:32:53:ad:23: 00:1d:ed:3b:e4:ec:ad:d8:8e:b6:37:55:26:f4:08: a9:b4:a6:3b:06:e5:f2:69:81:a0:94:8d:f1:eb:ec: 8e:78:d0:c5:3c:6f:85:d8:97:1f:f5:35:13:10:61: 66:42:63:22:48:7b:50:e6:e9:be:b3:8e:71:3e:50: 65:5d:b9:77:ce:af:2d:83:fe:a3:5c:48:75:cf:4e: 67:10:2b:c2:b4:48:27:13:e9:14:dd:68:06:97:b8: 76:18:be:d8:ed:4b:46:79:45:26:af:77:87:08:4a: 5d:0a:ff:4a:8a:97:d5:bd:6f:02:e9:b6:aa:95:52: 6a:2b:8c:f5:2f:48:39:22:ad:ce:69:f1:df:93:b0: 17:cc:76:db:42:6a:66:ed:60:21:d9:f8:77:f3:62: 94:0f:b9:67:6b:33:60:8d:62:37:c4:50:36:f8:4f: cd:2a:ef:99:63:5e:24:3e:5e:44:d5:e1:1d:15:ba: f0:de:0b:22:78:79:d3:5c:70:fd:14:b6:a6:6e:f9: 74:c2:21:74:3c:f5:31:cb:02:1b:9b:c4:71:e4:6c: 2b:dd:e5:19:1a:d8:49:20:13:ca:7f:95:a3:9b:2f: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B7:8B:A0:9A:14:DE:53:5D:47:D4:73:EE:20:FE:56:2C:04:1C:13 X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:cb:13:91:08:b0:d4:d4:e1:49:57:66:39:e8:2f:52:10:3d: e0:47:29:a6:d7:bc:14:dd:e4:6c:0b:bf:18:d3:b4:3e:ef:a8: 53:85:c2:64:fc:90:15:f4:cc:55:61:f8:c1:7a:43:3c:9a:38: d9:a2:c6:21:4b:5e:00:5e:37:9c:61:3b:86:29:47:b6:88:7a: 0b:46:31:67:33:7c:ec:c4:a1:e3:58:86:a4:98:eb:6b:1e:32: e8:3e:fa:ce:d4:ee:4f:b5:07:74:af:a1:21:ea:fe:94:f6:c2: 3e:f3:66:d8:34:52:55:7c:f8:15:47:d8:e4:cb:67:4a:0c:e0: 98:ee:cd:ae:4b:55:86:61:4e:50:73:68:3e:79:60:0c:84:df: 5b:20:69:ea:12:7c:3f:a0:3b:57:43:82:c9:bf:20:d1:61:67: 7f:00:cf:17:4b:24:67:1d:61:e7:ef:57:30:2d:28:a9:67:b9: 75:6c:7f:4c:1b:57:e3:67:1c:c8:9c:b6:15:a0:6f:4a:2b:92: bf:57:fd:3e:f8:14:c2:71:dd:00:a4:0f:5c:ca:95:d7:ce:09: 76:2a:49:82:70:eb:2a:0d:ab:a6:d5:43:fc:18:c8:56:13:81: 49:3e:a3:40:a9:e0:e0:8c:fb:86:f0:c8:bf:a8:eb:a9:79:52: bd:cb:fe:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBxUqPSMCtj3aSt6jObAZx935bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNTA2MDUxMzQ2MzFaFw0yNTA2MDgxNTMxMzFaMDMxMTAvBgNV BAMTKDFFQjc4QkEwOUExNERFNTM1RDQ3RDQ3M0VFMjBGRTU2MkMwNDFDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5272+l2+APES38layifaoudb 1fTt2D40MlOtIwAd7Tvk7K3YjrY3VSb0CKm0pjsG5fJpgaCUjfHr7I540MU8b4XY lx/1NRMQYWZCYyJIe1Dm6b6zjnE+UGVduXfOry2D/qNcSHXPTmcQK8K0SCcT6RTd aAaXuHYYvtjtS0Z5RSavd4cISl0K/0qKl9W9bwLptqqVUmorjPUvSDkirc5p8d+T sBfMdttCambtYCHZ+HfzYpQPuWdrM2CNYjfEUDb4T80q75ljXiQ+XkTV4R0VuvDe CyJ4edNccP0UtqZu+XTCIXQ89THLAhubxHHkbCvd5Rka2EkgE8p/laObL46rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHreLoJoU3lNdR9Rz7iD+ViwEHBMwHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDLE5EIsNTU4UlXZjnoL1IQPeBHKabXvBTd 5GwLvxjTtD7vqFOFwmT8kBX0zFVh+MF6QzyaONmixiFLXgBeN5xhO4YpR7aIegtG MWczfOzEoeNYhqSY62seMug++s7U7k+1B3SvoSHq/pT2wj7zZtg0UlV8+BVH2OTL Z0oM4Jjuza5LVYZhTlBzaD55YAyE31sgaeoSfD+gO1dDgsm/INFhZ38AzxdLJGcd YefvVzAtKKlnuXVsf0wbV+NnHMicthWgb0orkr9X/T74FMJx3QCkD1zKldfOCXYq SYJw6yoNq6bVQ/wYyFYTgUk+o0Cp4OCM+4bwyL+o66l5Ur3L/uQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:23 2025 by rpki-client