$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: 2m6ft/49myqRosjB/Fu9V7vApAGdS8Df5eYmp4IPvtc= Subject key identifier: 3E:24:E9:9B:84:49:3F:F7:5F:5C:04:96:C7:9E:3B:25:45:49:87:54 Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 231B51B0A32E97D23558F3E272C9555998D51342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 01E1 Signing time: Fri 22 Aug 2025 12:41:32 +0000 Manifest this update: Fri 22 Aug 2025 12:36:32 +0000 Manifest next update: Mon 25 Aug 2025 18:42:32 +0000 Files and hashes: 1: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: K39jn2y2K6bT6WSylU024emK2v2goVGb5peC7he2S4U=) 2: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: PlUQuGrph6ozxAfOZbVVs0CGGRj4aYxErmFtS7Skvdg=) 3: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: TPt0MPhRlnRnEy6pwXTYSOfvzf7c+OznSicdCAsldBc=) 4: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: Bl8K8Tj+qP0b8wO+YsBuYkZikkpPemkhNIq/sIZrh3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1b:51:b0:a3:2e:97:d2:35:58:f3:e2:72:c9:55:59:98:d5:13:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Aug 22 12:36:32 2025 GMT Not After : Aug 25 18:42:32 2025 GMT Subject: CN=3E24E99B84493FF75F5C0496C79E3B2545498754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:68:bb:a9:3e:85:9b:33:ac:d5:e5:88:62: ef:38:27:0e:80:8f:8e:0d:79:f2:4b:ef:ef:75:66: 09:18:e0:53:d0:9b:61:43:92:e6:0d:ff:bb:76:2e: 97:40:2b:7a:9a:96:d5:9c:73:81:97:fd:a1:9e:2d: 6b:22:fe:06:e3:e9:cb:d9:a7:9a:fb:9c:9d:08:78: e3:a0:47:42:26:c7:8b:23:3f:51:7f:2d:37:c8:39: 0b:b3:33:09:e3:fc:60:79:c9:bc:84:e3:f2:d9:89: e9:45:36:51:11:97:a1:99:fc:f0:37:d2:7f:e7:33: b1:0e:78:5a:96:95:fa:0e:e3:73:7b:22:08:b5:78: a5:55:10:f7:31:0b:dd:f9:26:ef:6b:6a:fd:79:6e: 24:34:3f:e9:57:70:cb:fa:11:0b:66:a7:9f:28:82: bb:52:79:5b:25:53:eb:e4:ec:22:87:b3:6a:46:3e: 68:fb:bb:e1:03:05:0e:e7:36:70:6e:96:15:b7:ce: 4f:ce:8a:6c:c7:20:57:75:51:c9:59:cd:6f:41:f9: 13:ec:81:f3:ae:2c:4d:4e:90:03:44:66:ed:0d:66: 7a:b8:89:72:6b:ab:3f:b2:bd:9f:8c:9e:eb:16:a9: 13:ed:fb:8c:67:89:00:99:5d:75:86:9d:5a:25:94: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:24:E9:9B:84:49:3F:F7:5F:5C:04:96:C7:9E:3B:25:45:49:87:54 X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e0:2e:ec:b9:ec:7f:27:1b:38:5b:df:8a:a7:f3:9f:ec:23: 82:58:df:36:91:4a:02:98:84:3f:48:f7:e2:3e:35:50:bc:51: 98:e5:05:14:82:d8:ce:03:c5:48:fa:9a:b1:ce:23:dd:32:68: 5b:ea:ec:c2:50:94:29:4c:71:77:db:01:b6:06:1c:2e:f1:b5: fd:fc:f0:e3:26:57:8e:63:17:9e:e3:c9:8d:42:72:7a:81:52: 50:5e:c9:24:7c:f9:47:4f:30:f1:a7:7a:b0:f5:36:dd:dc:04: 38:e4:63:3f:37:58:14:bb:fc:c5:92:27:62:78:78:a8:e9:c0: 69:44:4f:c5:f1:6b:1b:60:60:c2:12:c0:1e:1d:22:26:86:ac: 5b:ca:e9:f0:1b:55:65:b8:cc:ac:0c:86:40:55:e1:b4:7e:78: cf:03:91:e7:8f:fb:81:c8:c3:f0:2a:13:00:8a:aa:7c:93:33: 3e:ff:17:73:f6:36:d7:95:12:4b:de:c8:d7:2d:9d:ec:a0:e8: 2d:ab:18:00:be:17:3b:10:da:8e:0d:b8:ea:e8:79:72:a3:df: 58:41:ea:c9:82:4b:fe:5c:06:76:f1:9a:70:d4:d8:f8:45:7d: 8a:72:c3:c7:94:59:58:c6:85:de:d3:f6:a5:23:ef:f6:ac:48: c3:00:d9:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxtRsKMul9I1WPPicslVWZjVE0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNTA4MjIxMjM2MzJaFw0yNTA4MjUxODQyMzJaMDMxMTAvBgNV BAMTKDNFMjRFOTlCODQ0OTNGRjc1RjVDMDQ5NkM3OUUzQjI1NDU0OTg3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GWi7qT6FmzOs1eWIYu84Jw6A j44NefJL7+91ZgkY4FPQm2FDkuYN/7t2LpdAK3qaltWcc4GX/aGeLWsi/gbj6cvZ p5r7nJ0IeOOgR0Imx4sjP1F/LTfIOQuzMwnj/GB5ybyE4/LZielFNlERl6GZ/PA3 0n/nM7EOeFqWlfoO43N7Igi1eKVVEPcxC935Ju9rav15biQ0P+lXcMv6EQtmp58o grtSeVslU+vk7CKHs2pGPmj7u+EDBQ7nNnBulhW3zk/OimzHIFd1UclZzW9B+RPs gfOuLE1OkANEZu0NZnq4iXJrqz+yvZ+MnusWqRPt+4xniQCZXXWGnVollHZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPiTpm4RJP/dfXASWx547JUVJh1QwHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3gLuy57H8nGzhb34qn85/sI4JY3zaRSgKY hD9I9+I+NVC8UZjlBRSC2M4DxUj6mrHOI90yaFvq7MJQlClMcXfbAbYGHC7xtf38 8OMmV45jF57jyY1CcnqBUlBeySR8+UdPMPGnerD1Nt3cBDjkYz83WBS7/MWSJ2J4 eKjpwGlET8XxaxtgYMISwB4dIiaGrFvK6fAbVWW4zKwMhkBV4bR+eM8DkeeP+4HI w/AqEwCKqnyTMz7/F3P2NteVEkveyNctneyg6C2rGAC+FzsQ2o4NuOroeXKj31hB 6smCS/5cBnbxmnDU2PhFfYpyw8eUWVjGhd7T9qUj7/asSMMA2fg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:22 2025 by rpki-client