$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: 9ILuDQNV27nOs+a+pwDrN0kO6etbTWyOnLgCfiv8LWY= Subject key identifier: 6F:8C:84:A7:14:89:84:67:95:35:F5:B7:E1:CA:9C:7B:0F:7D:BF:7D Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 46AFFA6E6842F705386B94FAF0B47B20C4BBE728 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 02FD Signing time: Mon 02 Jun 2025 04:41:33 +0000 Manifest this update: Mon 02 Jun 2025 04:36:33 +0000 Manifest next update: Thu 05 Jun 2025 13:28:33 +0000 Files and hashes: 1: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: hHTBIXnex/a0ZZ37duaE+SNG6XMKJ8fUSwKWendkT/c=) 2: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 3: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:af:fa:6e:68:42:f7:05:38:6b:94:fa:f0:b4:7b:20:c4:bb:e7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Jun 2 04:36:33 2025 GMT Not After : Jun 5 13:28:33 2025 GMT Subject: CN=6F8C84A7148984679535F5B7E1CA9C7B0F7DBF7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:76:10:69:3a:be:a3:77:c4:f9:c2:84:6e: 83:0e:fe:6f:67:3a:ca:0c:29:b4:de:e7:1b:89:0d: ac:01:27:66:a7:54:c6:51:59:36:7e:e6:e7:9d:46: 01:60:85:f6:07:50:7a:28:77:c3:7a:41:97:1a:9d: 50:52:14:b4:9a:44:09:da:24:ea:27:d9:dd:ff:6d: 43:a3:5a:f7:39:51:f7:20:ee:66:ee:05:f2:4b:ce: 65:dd:7a:ae:8b:22:b7:59:26:f7:c4:7a:3f:24:40: 66:2c:b8:0c:cd:3b:d9:14:c2:d0:ac:c0:f3:8e:4b: 3e:da:ef:b6:ea:22:bd:59:39:a5:54:98:5a:f0:2f: d5:b1:b1:83:20:42:0b:4f:08:55:ba:dc:04:3c:1a: a2:f3:51:93:6b:1c:20:77:ee:3d:2e:be:24:c5:2e: fd:cb:99:8c:cf:e4:70:4d:88:8e:54:78:24:96:93: d3:eb:44:1a:48:41:b9:11:86:69:59:00:53:d3:6a: 0e:ac:e4:fe:06:f4:ce:65:a7:37:c0:38:cb:42:0a: cb:b8:5a:88:c8:00:7c:fe:fb:83:86:1c:fb:92:6b: 11:20:8c:54:a1:c2:7d:e9:7f:5c:89:f5:66:35:36: 8d:b5:bd:94:f3:06:7c:23:7f:94:e2:4d:c2:7f:09: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:84:A7:14:89:84:67:95:35:F5:B7:E1:CA:9C:7B:0F:7D:BF:7D X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:99:e9:9f:32:19:a0:e5:ac:71:83:76:0e:d4:78:75:83:71: c2:78:bb:9c:e7:5c:02:5e:33:ca:d6:1e:54:cf:33:cc:51:b4: 20:e1:73:d2:22:d7:4e:49:39:2b:44:23:10:97:91:ec:c4:30: cb:f6:c4:ce:0e:82:2f:9f:81:3d:9b:54:e2:e8:38:c6:d7:9f: cd:05:28:0e:80:0b:0a:73:3a:9b:1c:a2:59:1c:70:5f:94:f6: 0a:24:e4:e2:20:a2:95:0f:a4:d6:e0:c9:23:97:12:dd:40:ff: 3e:6a:e5:eb:bb:86:d8:2f:e3:58:d0:1d:58:da:7d:02:0b:93: 5d:1b:36:5b:76:e9:81:1a:34:0f:a9:12:a7:b4:f5:47:52:24: e9:0e:d8:22:fb:3e:88:20:8e:90:01:54:ff:38:d0:93:dd:29: 51:06:73:42:a0:d1:41:4d:31:c8:57:06:44:91:8b:7d:8a:45: e6:32:03:36:f0:e8:1e:cf:2a:98:4e:51:a6:e9:b6:90:b0:45: 48:d2:51:a9:81:7f:24:20:fd:c5:f8:d9:e9:62:07:25:d3:a7: f5:ca:be:01:95:9a:32:6e:0a:d7:ca:34:1a:55:8a:82:46:f6: c3:a4:71:97:e5:33:18:4c:b0:5c:ea:ef:c8:2d:ff:43:50:14: e1:ef:12:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURq/6bmhC9wU4a5T68LR7IMS75ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTA2MDIwNDM2MzNaFw0yNTA2MDUxMzI4MzNaMDMxMTAvBgNV BAMTKDZGOEM4NEE3MTQ4OTg0Njc5NTM1RjVCN0UxQ0E5QzdCMEY3REJGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5A3YQaTq+o3fE+cKEboMO/m9n OsoMKbTe5xuJDawBJ2anVMZRWTZ+5uedRgFghfYHUHood8N6QZcanVBSFLSaRAna JOon2d3/bUOjWvc5Ufcg7mbuBfJLzmXdeq6LIrdZJvfEej8kQGYsuAzNO9kUwtCs wPOOSz7a77bqIr1ZOaVUmFrwL9WxsYMgQgtPCFW63AQ8GqLzUZNrHCB37j0uviTF Lv3LmYzP5HBNiI5UeCSWk9PrRBpIQbkRhmlZAFPTag6s5P4G9M5lpzfAOMtCCsu4 WojIAHz++4OGHPuSaxEgjFShwn3pf1yJ9WY1No21vZTzBnwjf5TiTcJ/CbfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4yEpxSJhGeVNfW34cqcew99v30wHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqZ6Z8yGaDlrHGDdg7UeHWDccJ4u5znXAJe M8rWHlTPM8xRtCDhc9Ii105JOStEIxCXkezEMMv2xM4Ogi+fgT2bVOLoOMbXn80F KA6ACwpzOpscolkccF+U9gok5OIgopUPpNbgySOXEt1A/z5q5eu7htgv41jQHVja fQILk10bNlt26YEaNA+pEqe09UdSJOkO2CL7PoggjpABVP840JPdKVEGc0Kg0UFN MchXBkSRi32KReYyAzbw6B7PKphOUabptpCwRUjSUamBfyQg/cX42eliByXTp/XK vgGVmjJuCtfKNBpVioJG9sOkcZflMxhMsFzq78gt/0NQFOHvEmU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:27 2025 by rpki-client