$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: bBw1Izod3zV5cR4EgbD2Q/GPwuIo+HAMgZGioeSL0GM= Subject key identifier: E8:3C:41:C4:C4:20:B5:06:0B:C6:A4:BB:E7:7D:96:D8:B8:4B:7B:FE Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 5F1D19FA9215B46F82B640600A6BD3F1232D99EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 030A Signing time: Tue 01 Jul 2025 00:21:31 +0000 Manifest this update: Tue 01 Jul 2025 00:16:31 +0000 Manifest next update: Fri 04 Jul 2025 05:05:31 +0000 Files and hashes: 1: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 2: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) 3: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) 4: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: XUoq7qdXX8m2otoz0sjn26F2eNYUQ4Wxnnkt5uGOfls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1d:19:fa:92:15:b4:6f:82:b6:40:60:0a:6b:d3:f1:23:2d:99:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Jul 1 00:16:31 2025 GMT Not After : Jul 4 05:05:31 2025 GMT Subject: CN=E83C41C4C420B5060BC6A4BBE77D96D8B84B7BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:7f:2d:0b:15:a2:a9:c7:c9:da:c8:54:58: 6a:0f:0d:9b:8b:f2:d6:c5:22:c5:e7:ff:4b:a7:35: 3c:d3:b2:ac:73:73:0e:37:aa:3a:5a:50:85:03:55: e2:7d:74:a0:56:b5:85:3b:13:89:c8:44:3a:35:29: f8:99:cd:78:2b:37:54:b2:00:e2:a1:9e:8a:4d:f4: c5:62:bf:a8:ce:35:2f:87:ac:f4:52:e8:56:f6:57: f6:6b:77:61:70:5e:9e:89:cb:f4:87:32:4f:f6:ad: 4d:83:fd:d9:e7:a6:ff:d3:3c:74:25:ef:40:38:38: c1:25:96:7f:b4:69:58:07:37:0d:cb:c7:67:0d:12: fb:90:e2:b6:2a:77:b4:b0:73:d3:ba:1d:3a:8c:29: a3:c2:74:7e:7f:24:da:19:2b:fe:a8:63:f6:7d:9a: 75:0a:7f:97:d8:7f:b5:ca:c4:fd:ec:fe:7b:dd:99: fa:f5:1c:96:ea:f4:04:2d:86:f8:aa:e7:25:50:eb: 9c:a1:31:ad:5a:6e:a0:a9:c7:0a:34:46:f2:96:16: 4d:a5:e4:93:67:e2:7d:aa:f3:60:c1:e6:8b:54:62: af:80:3d:56:76:eb:61:3c:d5:b4:e6:ed:45:87:07: 94:9c:48:a3:3a:2e:38:00:28:0f:86:de:71:55:59: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3C:41:C4:C4:20:B5:06:0B:C6:A4:BB:E7:7D:96:D8:B8:4B:7B:FE X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:48:07:89:d7:b2:e2:c7:0f:be:c2:c6:74:32:5f:c2:60:4f: a5:96:78:e1:91:28:3d:c8:34:1e:ef:c0:9e:24:ae:40:e3:c6: 5c:2e:d6:b5:55:60:9e:7e:75:e9:bb:2c:00:2f:40:12:15:13: f1:5f:44:93:a9:02:4b:3f:00:90:f3:f0:a4:c3:4e:45:43:cc: e6:96:19:6e:0d:91:e6:12:f7:38:72:91:59:bc:23:8e:c0:39: e1:9b:a9:59:13:a9:c4:9a:a7:7b:b0:02:15:c0:a2:e8:4e:6c: 10:2a:df:f0:ca:23:17:75:f1:35:6b:af:6a:d2:37:01:b9:f6: 33:07:06:e2:de:6b:7b:56:b6:af:9a:06:fe:c0:c7:5d:91:26: b6:28:62:e4:58:f6:87:9b:12:2d:24:13:19:1d:00:95:f6:89: 11:a8:20:39:8e:9c:6b:9f:a0:66:1a:08:94:ef:db:d0:a0:4d: e6:60:61:88:3b:77:e8:ee:a6:66:fd:f6:35:d6:bd:93:73:00: 51:02:f0:31:99:22:d2:68:16:c9:39:dd:3e:7b:6e:dc:fe:7e: 65:55:a8:32:2e:6e:59:d1:3e:9e:5b:8d:4a:a0:68:b8:70:b1: 1b:d3:ea:5f:43:2c:e8:e3:ac:d3:0f:03:ee:be:8f:53:97:ba: e9:12:38:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXx0Z+pIVtG+CtkBgCmvT8SMtmewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTA3MDEwMDE2MzFaFw0yNTA3MDQwNTA1MzFaMDMxMTAvBgNV BAMTKEU4M0M0MUM0QzQyMEI1MDYwQkM2QTRCQkU3N0Q5NkQ4Qjg0QjdCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRw38tCxWiqcfJ2shUWGoPDZuL 8tbFIsXn/0unNTzTsqxzcw43qjpaUIUDVeJ9dKBWtYU7E4nIRDo1KfiZzXgrN1Sy AOKhnopN9MViv6jONS+HrPRS6Fb2V/Zrd2FwXp6Jy/SHMk/2rU2D/dnnpv/TPHQl 70A4OMElln+0aVgHNw3Lx2cNEvuQ4rYqd7Swc9O6HTqMKaPCdH5/JNoZK/6oY/Z9 mnUKf5fYf7XKxP3s/nvdmfr1HJbq9AQthviq5yVQ65yhMa1abqCpxwo0RvKWFk2l 5JNn4n2q82DB5otUYq+APVZ262E81bTm7UWHB5ScSKM6LjgAKA+G3nFVWQI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6DxBxMQgtQYLxqS7532W2LhLe/4wHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9IB4nXsuLHD77CxnQyX8JgT6WWeOGRKD3I NB7vwJ4krkDjxlwu1rVVYJ5+dem7LAAvQBIVE/FfRJOpAks/AJDz8KTDTkVDzOaW GW4NkeYS9zhykVm8I47AOeGbqVkTqcSap3uwAhXAouhObBAq3/DKIxd18TVrr2rS NwG59jMHBuLea3tWtq+aBv7Ax12RJrYoYuRY9oebEi0kExkdAJX2iRGoIDmOnGuf oGYaCJTv29CgTeZgYYg7d+jupmb99jXWvZNzAFEC8DGZItJoFsk53T57btz+fmVV qDIublnRPp5bjUqgaLhwsRvT6l9DLOjjrNMPA+6+j1OXuukSOKI= -----END CERTIFICATE-----Generated at Tue Jul 1 07:41:42 2025 by rpki-client