$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: iPVlDGCcYQVxLNWTQIvVDRiy7WbDTitI/H+vlgxSQYs= Subject key identifier: 17:EB:21:03:2D:2E:F8:69:D2:8E:17:27:24:FB:C0:37:75:8A:A2:2F Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 7262C414BE010966A5E421280E8ED44B1B8C85ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0321 Signing time: Thu 21 Aug 2025 13:01:34 +0000 Manifest this update: Thu 21 Aug 2025 12:56:33 +0000 Manifest next update: Sun 24 Aug 2025 16:27:33 +0000 Files and hashes: 1: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) 2: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: kQXhUv8+f+hGezcsxmv4agjVMcEqHoRJDyr+TJncr88=) 3: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:62:c4:14:be:01:09:66:a5:e4:21:28:0e:8e:d4:4b:1b:8c:85:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Aug 21 12:56:33 2025 GMT Not After : Aug 24 16:27:33 2025 GMT Subject: CN=17EB21032D2EF869D28E172724FBC037758AA22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:50:6d:5b:35:6d:25:30:f2:0b:cc:c4:40: c2:ea:7e:af:ed:f3:d2:15:dd:65:fe:a2:0a:d9:aa: 8b:a9:45:ff:d5:7c:f3:f0:13:f4:44:e2:c2:c2:2c: 0b:a3:f9:a3:af:ae:82:3b:24:a2:04:2d:33:93:ff: 91:14:3f:e9:47:56:44:60:fa:69:0a:e7:5b:b2:1c: 90:93:20:2e:f9:27:a1:75:ed:8c:d4:1b:93:a5:f8: 3b:b9:c6:d6:a5:a8:e6:68:a5:ed:e4:26:27:22:64: d8:09:9f:d0:7c:ba:06:1d:1e:25:7c:95:03:cd:20: 3f:52:dd:11:2d:49:b2:78:5c:3e:d2:69:47:07:96: ba:f5:f8:ea:d2:11:02:c3:b2:82:5f:73:b2:eb:ec: df:ff:d9:2d:f1:73:3d:5b:bb:09:47:9a:3b:55:76: 5e:9b:c6:9b:6f:c5:e0:71:f0:35:25:73:fb:3c:b7: 2e:5d:af:cb:34:65:d1:8a:e0:41:94:92:c4:f4:33: 43:6f:4f:a3:ab:79:ad:35:cd:fd:8f:00:a9:c4:7c: 04:fd:91:39:a0:be:59:eb:48:85:40:89:ac:b8:5e: 2a:12:4d:ab:3f:72:4b:1c:19:8a:f7:76:31:0d:cd: 5e:6c:5f:85:e6:6b:8d:8b:6c:c6:93:63:3f:71:b0: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EB:21:03:2D:2E:F8:69:D2:8E:17:27:24:FB:C0:37:75:8A:A2:2F X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:59:e2:4b:49:8c:0b:98:14:d8:b6:39:9f:18:41:1c:8d:d4: 1c:62:a9:6a:83:0a:5a:8d:83:ed:51:52:6c:a6:4e:f0:d1:d8: 20:ea:af:a6:53:b6:03:b9:c3:21:b3:df:5e:7b:55:f2:ea:e8: 26:5f:7a:03:f5:3e:55:0b:aa:bc:8e:ee:b2:1f:43:13:2a:57: aa:9e:52:8b:ba:6b:2c:76:37:29:94:36:9a:75:fc:00:0d:d5: f4:74:6a:5e:84:be:7b:15:5d:18:44:14:aa:46:38:b4:b2:6d: 50:4d:5f:1c:81:f6:34:5f:54:e3:54:27:77:a6:ff:88:17:d2: f3:ca:dc:02:ba:ed:bf:8d:30:30:71:a2:6b:2b:0f:c3:cf:d0: 6d:c4:55:19:68:92:e8:e3:53:d4:5b:54:d5:d1:1f:a7:28:66: 6f:24:69:30:32:13:86:35:d4:2d:4e:bd:85:96:cb:4c:a1:2a: f4:10:97:f4:ae:5a:b5:55:07:87:4e:6e:88:8f:dd:30:c0:84: 61:dc:df:48:a8:c8:3a:fc:76:21:27:cf:67:c3:e9:30:5d:d6: 0a:37:74:ce:5a:85:2d:8d:82:07:fc:3e:c7:50:7a:ba:52:f7: b9:d1:53:c8:52:49:a8:9d:45:8c:6a:c0:e8:e1:65:6f:21:a4: 1f:aa:56:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmLEFL4BCWal5CEoDo7USxuMhe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTA4MjExMjU2MzNaFw0yNTA4MjQxNjI3MzNaMDMxMTAvBgNV BAMTKDE3RUIyMTAzMkQyRUY4NjlEMjhFMTcyNzI0RkJDMDM3NzU4QUEyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/1BtWzVtJTDyC8zEQMLqfq/t 89IV3WX+ogrZqoupRf/VfPPwE/RE4sLCLAuj+aOvroI7JKIELTOT/5EUP+lHVkRg +mkK51uyHJCTIC75J6F17YzUG5Ol+Du5xtalqOZope3kJiciZNgJn9B8ugYdHiV8 lQPNID9S3REtSbJ4XD7SaUcHlrr1+OrSEQLDsoJfc7Lr7N//2S3xcz1buwlHmjtV dl6bxptvxeBx8DUlc/s8ty5dr8s0ZdGK4EGUksT0M0NvT6Orea01zf2PAKnEfAT9 kTmgvlnrSIVAiay4XioSTas/ckscGYr3djENzV5sX4Xma42LbMaTYz9xsFDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF+shAy0u+GnSjhcnJPvAN3WKoi8wHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFZ4ktJjAuYFNi2OZ8YQRyN1BxiqWqDClqN g+1RUmymTvDR2CDqr6ZTtgO5wyGz3157VfLq6CZfegP1PlULqryO7rIfQxMqV6qe Uou6ayx2NymUNpp1/AAN1fR0al6EvnsVXRhEFKpGOLSybVBNXxyB9jRfVONUJ3em /4gX0vPK3AK67b+NMDBxomsrD8PP0G3EVRlokujjU9RbVNXRH6coZm8kaTAyE4Y1 1C1OvYWWy0yhKvQQl/SuWrVVB4dOboiP3TDAhGHc30ioyDr8diEnz2fD6TBd1go3 dM5ahS2Nggf8PsdQerpS97nRU8hSSaidRYxqwOjhZW8hpB+qVtI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:28 2025 by rpki-client