$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: QseGIaOP6j0yBq36X9D5MSHzQqAToPEMTBXA095lhSs= Subject key identifier: CF:F7:9E:0B:CA:1C:65:EE:DD:50:6A:6A:8F:B2:81:F9:F7:A6:D4:3E Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 4F070D5BACA8929B613F76ED17FFBCFE1DEA3636 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 033C Signing time: Mon 20 Oct 2025 07:11:36 +0000 Manifest this update: Mon 20 Oct 2025 07:06:36 +0000 Manifest next update: Thu 23 Oct 2025 11:56:36 +0000 Files and hashes: 1: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: AVUnfzqrbeXvBd5BraZJwmqr2wTn8R4ubDG+bOW20aI=) 2: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: 0njclP+xvdGsj4dplyXHzLSEGj1QTmr7FMCD6h/NKoQ=) 3: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xR28xhgfPaocTNljEccnigENCimK3oapTJgJUkyM5nM=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:07:0d:5b:ac:a8:92:9b:61:3f:76:ed:17:ff:bc:fe:1d:ea:36:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Oct 20 07:06:36 2025 GMT Not After : Oct 23 11:56:36 2025 GMT Subject: CN=CFF79E0BCA1C65EEDD506A6A8FB281F9F7A6D43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:4e:6f:46:9b:8c:f4:14:5a:a9:43:fa:58: 38:d5:80:bd:27:0e:2d:4a:8c:79:4f:43:1e:6e:71: d3:9e:7c:2a:9c:b6:c7:a5:86:8a:d4:09:bb:be:4a: 80:a2:be:c1:37:fb:1b:65:cd:c2:6f:9f:ec:25:3c: a9:bd:5a:75:ef:00:89:62:d9:58:a3:a3:6f:21:6d: a4:a2:de:83:5e:71:52:39:d9:7f:9c:31:b1:ca:5f: 48:b5:14:53:75:fb:d2:3b:a8:3a:38:e5:38:ea:5f: ee:47:05:d7:e8:d6:f1:39:30:c7:7b:ca:0e:8f:54: c7:18:ca:e5:d7:78:f5:32:6d:ec:4b:38:52:c8:9f: 7a:ff:cb:e3:81:09:0d:32:84:b9:c6:4e:9c:77:d9: a5:3b:9f:35:13:fb:f3:12:86:40:64:70:eb:d5:1e: d3:b1:10:6b:91:88:3c:cd:69:f7:e3:58:d2:45:da: d3:3c:c0:75:d9:79:35:a4:b0:1c:63:6c:12:4d:a2: 91:db:bf:15:de:19:73:eb:da:1b:43:2e:ef:26:a5: 3c:09:83:ad:6e:37:ea:1a:99:f2:06:82:f0:5a:55: 22:fd:0c:d9:5a:85:9d:ac:8d:b6:34:37:d1:ee:77: ff:53:73:54:1f:ea:35:ea:d2:ad:d8:a3:34:8d:9d: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F7:9E:0B:CA:1C:65:EE:DD:50:6A:6A:8F:B2:81:F9:F7:A6:D4:3E X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:05:19:6e:68:e7:ff:0a:00:84:de:20:aa:30:98:ab:70:9b: 6f:a5:46:85:33:70:23:1a:d4:a1:1b:68:6d:69:e1:9c:95:74: ff:5e:30:06:ff:b0:84:49:48:09:92:b9:58:62:76:90:fc:9f: b5:d1:01:97:d4:8e:5c:91:6a:20:97:19:a0:91:cb:68:76:4d: e1:4e:28:b2:17:e0:de:58:bd:b5:c6:7b:4f:4c:c1:a1:7c:18: be:0c:3b:5a:01:d5:f1:1f:6c:5d:a6:1c:99:9b:a3:38:32:09: 95:08:a2:3b:8b:87:39:04:a5:2f:11:d5:13:59:e1:f1:8e:10: fb:f0:d3:44:f5:5f:f1:69:6e:74:de:e4:14:4e:ff:e5:fb:a9: 40:9e:be:c3:9c:75:89:cb:25:2c:b7:74:39:cc:49:fc:bd:1b: 39:0d:87:42:d5:5f:72:7b:df:3c:54:4d:d9:dc:83:6c:a9:ad: 4e:5c:d9:20:5c:39:59:f3:95:88:e7:10:23:a1:b5:f1:6c:a9: a0:ba:bf:bd:ee:49:02:94:ad:e2:59:38:16:55:eb:a8:21:0e: 6f:81:15:54:cc:c0:ee:01:2d:54:02:0f:e9:9f:46:f4:05:26: ea:df:58:f7:b7:69:91:dc:85:04:8c:80:15:b6:7d:91:a8:05: 51:67:c0:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwcNW6yokpthP3btF/+8/h3qNjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTEwMjAwNzA2MzZaFw0yNTEwMjMxMTU2MzZaMDMxMTAvBgNV BAMTKENGRjc5RTBCQ0ExQzY1RUVERDUwNkE2QThGQjI4MUY5RjdBNkQ0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF05vRpuM9BRaqUP6WDjVgL0n Di1KjHlPQx5ucdOefCqctselhorUCbu+SoCivsE3+xtlzcJvn+wlPKm9WnXvAIli 2Vijo28hbaSi3oNecVI52X+cMbHKX0i1FFN1+9I7qDo45TjqX+5HBdfo1vE5MMd7 yg6PVMcYyuXXePUybexLOFLIn3r/y+OBCQ0yhLnGTpx32aU7nzUT+/MShkBkcOvV HtOxEGuRiDzNaffjWNJF2tM8wHXZeTWksBxjbBJNopHbvxXeGXPr2htDLu8mpTwJ g61uN+oamfIGgvBaVSL9DNlahZ2sjbY0N9Hud/9Tc1Qf6jXq0q3YozSNnUFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/eeC8ocZe7dUGpqj7KB+fem1D4wHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8FGW5o5/8KAITeIKowmKtwm2+lRoUzcCMa 1KEbaG1p4ZyVdP9eMAb/sIRJSAmSuVhidpD8n7XRAZfUjlyRaiCXGaCRy2h2TeFO KLIX4N5YvbXGe09MwaF8GL4MO1oB1fEfbF2mHJmbozgyCZUIojuLhzkEpS8R1RNZ 4fGOEPvw00T1X/FpbnTe5BRO/+X7qUCevsOcdYnLJSy3dDnMSfy9GzkNh0LVX3J7 3zxUTdncg2yprU5c2SBcOVnzlYjnECOhtfFsqaC6v73uSQKUreJZOBZV66ghDm+B FVTMwO4BLVQCD+mfRvQFJurfWPe3aZHchQSMgBW2fZGoBVFnwJY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:46 2025 by rpki-client