$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: NcFx4/eg/iJBXHZ2pqBBi1Uv/mzcRjaiIxNmeTBOBec= Subject key identifier: A0:11:7B:D7:71:EB:E7:78:1F:EA:CD:C9:84:19:54:C1:F4:70:CF:B5 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 14A43511BD3970238746F75443AB8AF606D80F13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0328 Signing time: Sat 06 Sep 2025 07:11:33 +0000 Manifest this update: Sat 06 Sep 2025 07:06:33 +0000 Manifest next update: Tue 09 Sep 2025 15:13:33 +0000 Files and hashes: 1: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 2: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) 3: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: pWyprfJHyiBSKrJk1HDk/CdXbY51HuYcwZwEehQ9PE0=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a4:35:11:bd:39:70:23:87:46:f7:54:43:ab:8a:f6:06:d8:0f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Sep 6 07:06:33 2025 GMT Not After : Sep 9 15:13:33 2025 GMT Subject: CN=A0117BD771EBE7781FEACDC9841954C1F470CFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:ea:de:05:7a:d6:a6:c1:33:94:5a:22:52: e7:6f:a6:e1:08:01:db:4a:05:a1:02:b3:0b:95:54: d0:58:5b:fe:ae:3c:38:96:90:a2:a0:0f:32:df:a1: 0b:75:9b:6e:e1:61:c3:2a:dc:0f:f0:41:12:54:fc: cb:11:dc:45:73:64:29:58:6e:a5:c3:47:08:ba:5a: a4:76:70:b6:ae:ca:80:35:67:b8:e2:2a:a4:74:6c: 9c:23:93:08:fa:01:6f:03:bd:8f:0e:9e:6b:cd:d4: 7d:e2:54:49:a9:79:0f:a4:85:87:e8:5f:2f:a3:d2: 1b:7c:c7:39:df:ed:70:cf:a7:03:28:8e:fd:d1:fd: 54:c0:9e:56:63:ca:c3:97:69:ce:9b:26:d1:bd:df: 3d:61:d5:ab:c9:d3:c7:55:1d:94:f0:37:19:cf:d4: 8d:4f:d2:22:bc:e2:3a:7c:49:62:41:ef:12:ee:45: 20:40:a9:e7:9e:bf:8d:a3:cb:83:59:f3:95:27:ae: 58:ae:4c:64:4c:0c:96:58:02:3e:69:33:36:b0:fc: 41:e4:53:33:54:1d:2e:b1:91:e9:f5:3e:8a:09:ce: 02:81:37:ac:75:cc:e5:90:24:95:d4:53:58:eb:06: 84:a3:af:bd:13:9f:6c:e1:75:19:1b:e6:0c:95:e1: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:11:7B:D7:71:EB:E7:78:1F:EA:CD:C9:84:19:54:C1:F4:70:CF:B5 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:71:70:bc:8d:b6:d5:20:0e:80:9f:85:68:32:c7:0a:5f:fc: 18:7b:74:ac:33:fb:c0:cd:a6:e1:1e:a3:af:6a:95:e9:79:24: df:ac:30:b2:48:48:81:3c:93:d6:a8:bb:61:98:a7:98:1b:aa: e9:59:9f:f5:66:c6:1b:b6:8c:09:aa:bf:d5:c0:44:b6:99:88: 0d:e7:41:9c:98:c4:e1:a3:25:e5:50:37:48:25:0a:d6:68:cc: 10:5f:37:f2:61:e9:31:1d:21:37:bd:21:0d:0b:1c:46:83:fa: 9d:6e:b7:25:a5:ba:77:5f:f1:a7:f5:57:7c:c7:22:53:fe:7e: 69:77:df:eb:30:da:fd:1e:ee:47:4b:05:9a:18:39:08:74:88: a1:69:28:03:2f:c4:9c:0c:5c:6c:1e:95:1c:e1:d7:a0:85:35: a6:8e:3e:a8:f1:97:11:53:27:fa:a0:6a:7c:09:39:e9:58:cf: 63:61:12:05:23:64:2a:57:de:df:43:44:06:fa:bf:35:b2:62: d8:06:cc:cf:d1:19:f0:f4:52:60:2a:3f:72:d9:dd:1e:53:c2: ee:be:98:9f:6a:0e:6a:cf:9d:d1:57:1c:42:cf:2e:da:6d:9c: 1a:37:c9:83:3e:4c:3e:d2:22:e8:8b:c5:da:46:22:8b:14:1a: 2c:0d:15:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKQ1Eb05cCOHRvdUQ6uK9gbYDxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTA5MDYwNzA2MzNaFw0yNTA5MDkxNTEzMzNaMDMxMTAvBgNV BAMTKEEwMTE3QkQ3NzFFQkU3NzgxRkVBQ0RDOTg0MTk1NEMxRjQ3MENGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/C+reBXrWpsEzlFoiUudvpuEI AdtKBaECswuVVNBYW/6uPDiWkKKgDzLfoQt1m27hYcMq3A/wQRJU/MsR3EVzZClY bqXDRwi6WqR2cLauyoA1Z7jiKqR0bJwjkwj6AW8DvY8OnmvN1H3iVEmpeQ+khYfo Xy+j0ht8xznf7XDPpwMojv3R/VTAnlZjysOXac6bJtG93z1h1avJ08dVHZTwNxnP 1I1P0iK84jp8SWJB7xLuRSBAqeeev42jy4NZ85UnrliuTGRMDJZYAj5pMzaw/EHk UzNUHS6xken1PooJzgKBN6x1zOWQJJXUU1jrBoSjr70Tn2zhdRkb5gyV4XzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBF713Hr53gf6s3JhBlUwfRwz7UwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9xcLyNttUgDoCfhWgyxwpf/Bh7dKwz+8DN puEeo69qlel5JN+sMLJISIE8k9aou2GYp5gbqulZn/Vmxhu2jAmqv9XARLaZiA3n QZyYxOGjJeVQN0glCtZozBBfN/Jh6TEdITe9IQ0LHEaD+p1utyWlundf8af1V3zH IlP+fml33+sw2v0e7kdLBZoYOQh0iKFpKAMvxJwMXGwelRzh16CFNaaOPqjxlxFT J/qganwJOelYz2NhEgUjZCpX3t9DRAb6vzWyYtgGzM/RGfD0UmAqP3LZ3R5Twu6+ mJ9qDmrPndFXHELPLtptnBo3yYM+TD7SIuiLxdpGIosUGiwNFRg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:27 2025 by rpki-client