$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: QpjdV/Vu3f1r6mfo3E7nSQt7eVfZS19+4iWnsBfnRXI= Subject key identifier: 70:4E:1F:84:12:BB:EB:EA:5B:F3:F3:58:5B:65:D8:EA:46:EF:74:CF Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 2B5CE7EFC25F355567C75DEA27D3EDBF855ACEB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 01FB Signing time: Mon 20 Oct 2025 06:01:35 +0000 Manifest this update: Mon 20 Oct 2025 05:56:35 +0000 Manifest next update: Thu 23 Oct 2025 12:50:35 +0000 Files and hashes: 1: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: K39jn2y2K6bT6WSylU024emK2v2goVGb5peC7he2S4U=) 2: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: TPt0MPhRlnRnEy6pwXTYSOfvzf7c+OznSicdCAsldBc=) 3: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: PlUQuGrph6ozxAfOZbVVs0CGGRj4aYxErmFtS7Skvdg=) 4: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: fodTdlnDocsuGYwXmuwTkIOGpXFgXaLSsZi5M8E/0jM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5c:e7:ef:c2:5f:35:55:67:c7:5d:ea:27:d3:ed:bf:85:5a:ce:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Oct 20 05:56:35 2025 GMT Not After : Oct 23 12:50:35 2025 GMT Subject: CN=704E1F8412BBEBEA5BF3F3585B65D8EA46EF74CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:75:24:a2:84:1c:66:c6:7e:82:35:0d:57: 71:f1:c2:41:15:ae:9d:d2:06:15:a5:b6:f8:43:fb: 07:a1:d5:90:94:83:02:1f:ba:0e:fc:35:40:6a:12: f5:92:8e:6d:39:b6:da:84:ba:83:8d:23:16:50:6e: f1:39:a1:4d:4c:bc:67:32:8f:10:2c:ff:07:f3:a8: 07:fd:b5:dc:fc:6f:02:88:2e:39:e1:a2:2a:b4:ae: 63:84:cf:c1:1a:3e:77:8d:e1:d6:63:b2:76:51:bd: e7:31:8c:96:77:b1:c1:fd:4e:7a:12:6c:4a:fd:a0: f7:8d:af:56:c2:fe:03:7f:13:31:0b:03:c5:8d:a5: 1a:7a:45:de:8e:b2:99:14:eb:f3:35:60:26:71:c0: 39:b2:1f:d2:ad:34:4a:0f:d2:10:42:74:46:46:a9: fb:ab:3f:39:d0:63:41:6f:33:f7:e9:ad:16:6d:47: a6:2d:d6:1c:1c:44:52:b4:9a:fa:d0:13:e7:b9:91: b7:b9:39:d1:ac:68:75:eb:82:1f:77:88:f1:15:39: 30:06:6d:35:44:63:ce:31:27:20:87:ff:d7:c9:c3: 57:8f:32:cb:2c:52:9f:01:4d:0e:1f:55:0f:4c:53: c2:39:f3:c4:bf:58:c5:58:e5:83:02:d5:d0:7f:6c: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:1F:84:12:BB:EB:EA:5B:F3:F3:58:5B:65:D8:EA:46:EF:74:CF X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b1:8e:fc:a0:c8:90:8b:0a:90:c6:75:cf:6d:4e:34:1f:c9: 9f:c8:5e:0c:d8:20:10:8c:86:86:5a:2c:4c:cf:4e:5d:86:b1: 5d:d5:ca:c3:69:b7:b3:8c:e7:26:a0:5c:a6:c2:65:f4:cc:f0: ff:62:6d:af:be:54:51:b8:15:0f:2d:50:65:03:43:d5:16:3b: b6:09:f4:ac:86:60:ff:08:c2:10:60:69:bb:6d:bb:8e:b7:28: dc:80:ce:7b:3b:26:18:e6:75:87:70:15:dd:00:8f:81:b5:70: 15:e5:f1:1e:af:f3:04:d6:13:d9:46:ab:4f:2f:c0:d7:68:db: a2:90:7f:91:5f:df:fb:d6:b5:5f:7a:c2:14:62:fa:ea:d7:78: f0:3b:7f:af:db:88:07:70:e9:43:69:26:66:0a:90:3d:58:a3: 2b:92:af:f9:73:40:6b:a9:76:0a:0f:a7:30:65:0c:2a:b5:e4: 71:96:56:f0:02:f4:46:40:8b:21:8c:28:2b:6d:e3:59:c8:6e: 46:91:e1:c7:14:ad:9c:4b:4f:e8:d5:3f:0c:8f:31:f8:66:84: 04:09:74:6d:10:ff:8c:6e:a0:ce:07:62:14:3f:2c:a5:97:b6: b8:26:91:fd:3a:95:2f:04:ef:1f:63:ef:97:e2:34:e1:ed:d8: 8a:39:98:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1zn78JfNVVnx13qJ9Ptv4VazrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNTEwMjAwNTU2MzVaFw0yNTEwMjMxMjUwMzVaMDMxMTAvBgNV BAMTKDcwNEUxRjg0MTJCQkVCRUE1QkYzRjM1ODVCNjVEOEVBNDZFRjc0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXHUkooQcZsZ+gjUNV3HxwkEV rp3SBhWltvhD+weh1ZCUgwIfug78NUBqEvWSjm05ttqEuoONIxZQbvE5oU1MvGcy jxAs/wfzqAf9tdz8bwKILjnhoiq0rmOEz8EaPneN4dZjsnZRvecxjJZ3scH9TnoS bEr9oPeNr1bC/gN/EzELA8WNpRp6Rd6OspkU6/M1YCZxwDmyH9KtNEoP0hBCdEZG qfurPznQY0FvM/fprRZtR6Yt1hwcRFK0mvrQE+e5kbe5OdGsaHXrgh93iPEVOTAG bTVEY84xJyCH/9fJw1ePMsssUp8BTQ4fVQ9MU8I588S/WMVY5YMC1dB/bER5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcE4fhBK76+pb8/NYW2XY6kbvdM8wHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2xjvygyJCLCpDGdc9tTjQfyZ/IXgzYIBCM hoZaLEzPTl2GsV3VysNpt7OM5yagXKbCZfTM8P9iba++VFG4FQ8tUGUDQ9UWO7YJ 9KyGYP8IwhBgabttu463KNyAzns7JhjmdYdwFd0Aj4G1cBXl8R6v8wTWE9lGq08v wNdo26KQf5Ff3/vWtV96whRi+urXePA7f6/biAdw6UNpJmYKkD1YoyuSr/lzQGup dgoPpzBlDCq15HGWVvAC9EZAiyGMKCtt41nIbkaR4ccUrZxLT+jVPwyPMfhmhAQJ dG0Q/4xuoM4HYhQ/LKWXtrgmkf06lS8E7x9j75fiNOHt2Io5mLY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:07 2025 by rpki-client