$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft (raw, json) Hash identifier: vp+OrDKafcw2odhBCKEwjFIiKcacZizHD63J7MHDS0o= Subject key identifier: 42:86:4F:2F:53:DC:0F:F4:3D:1B:B6:40:E3:55:AA:5D:36:0B:82:24 Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Certificate serial: 1E95529F70315CFE23350933B021555F0D9BE301 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft Manifest number: D2 Signing time: Mon 03 Nov 2025 18:21:45 +0000 Manifest this update: Mon 03 Nov 2025 18:16:45 +0000 Manifest next update: Fri 07 Nov 2025 00:21:45 +0000 Files and hashes: 1: 3136302e32322e31322e302f32342d3234203d3e20313532373935.roa (hash: kSF1VyQJjpek8Mf3gy+lWICO98IQh62K2L543jgKTUA=) 2: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl (hash: jR8XMxEsd9i+YznMvol4Sbg0pv+DI8NCQ2b1VCIXyrE=) 3: 3136302e32322e31332e302f32342d3234203d3e20313532373935.roa (hash: CjQ8LjHFMEFZAKqjfhXd2Dui1+KhZzwEUkNHDbRDo5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:95:52:9f:70:31:5c:fe:23:35:09:33:b0:21:55:5f:0d:9b:e3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Validity Not Before: Nov 3 18:16:45 2025 GMT Not After : Nov 7 00:21:45 2025 GMT Subject: CN=42864F2F53DC0FF43D1BB640E355AA5D360B8224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:74:39:61:de:f7:a7:92:8a:7e:47:c0:85: 44:ad:eb:4d:60:dd:74:c1:c4:53:10:eb:e0:fe:b2: e8:02:bf:41:f9:3e:72:79:a4:b0:82:38:6c:d2:28: dd:44:d5:a0:9f:f0:bb:3f:ea:0b:8c:1f:7d:5b:97: 77:6c:e8:72:f5:b3:ff:30:c0:f0:af:13:95:db:c0: 47:8a:4d:4e:e7:ae:72:a1:c6:df:e3:3e:41:33:97: 41:ce:db:cc:ac:0c:ff:f3:f4:60:5b:14:6b:0c:41: de:2f:5a:42:2b:1e:f1:92:99:c6:f8:67:13:ab:96: 24:49:3c:4a:99:29:7f:35:59:fc:ab:91:4f:83:69: c7:d9:b5:04:e8:6c:f3:d2:d1:6b:6a:ea:01:9c:1d: 1d:4c:c9:37:51:d1:be:48:c4:d9:41:1b:a0:c4:2f: 46:a1:9a:da:fa:64:3e:6c:7a:0e:68:a7:da:e0:2d: 4c:74:78:0f:30:61:ad:1f:2e:a3:0d:1c:c1:19:4d: 9e:7f:e9:85:1c:9d:bb:b4:4f:3e:00:75:28:46:09: 09:49:f3:25:fc:9a:2a:23:2d:f5:0f:9b:28:d5:84: 72:99:0a:21:1c:2b:29:bf:fe:50:d1:19:f3:d3:c5: 39:43:ba:a0:11:44:ad:5a:41:98:15:e5:00:0f:f0: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:4F:2F:53:DC:0F:F4:3D:1B:B6:40:E3:55:AA:5D:36:0B:82:24 X509v3 Authority Key Identifier: keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6f:60:9c:1b:c4:3f:f4:86:a6:94:f1:82:88:a7:ca:89:d9: 21:1e:48:fc:62:53:95:40:bf:0b:7d:9a:d9:2b:be:e3:3e:33: de:59:0e:e2:d6:ce:95:3b:3a:6d:0c:a2:73:73:65:e3:ed:65: b8:c9:35:61:eb:b0:38:da:a4:32:e3:37:73:ab:07:27:50:80: 92:c4:e4:0e:c4:44:e7:9a:a2:cc:d5:d1:0e:e5:5e:c7:66:8b: a8:1c:ec:97:c5:d0:79:03:20:59:b1:d6:d4:76:6b:17:32:c3: 6f:d9:e9:5e:2a:a8:f7:fd:a9:c2:24:39:08:c5:1f:07:a2:e1: ff:f9:01:37:3d:98:30:cd:3e:47:eb:1f:f1:7e:bd:c9:7e:96: 0a:a1:f3:a0:8e:d4:58:72:08:9a:d0:ec:b9:9a:ff:0d:a1:fc: 9d:c3:17:6f:ef:67:9a:93:6a:e5:eb:3a:dc:68:2c:69:72:9c: c6:cf:c2:a4:f2:32:58:ad:7b:12:9c:3f:19:db:bb:58:2d:16: 9e:7c:1f:15:df:cf:bd:86:d5:c6:c2:dc:25:02:dd:ed:b5:aa: 92:e4:9b:f1:2e:58:8a:23:8a:62:53:fe:68:89:66:79:9d:5b: de:e8:05:5d:f1:3b:fd:dc:d0:97:ee:3d:6a:b5:01:37:a7:28: 5a:5f:17:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpVSn3AxXP4jNQkzsCFVXw2b4wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdF MEU0RDA2OTAeFw0yNTExMDMxODE2NDVaFw0yNTExMDcwMDIxNDVaMDMxMTAvBgNV BAMTKDQyODY0RjJGNTNEQzBGRjQzRDFCQjY0MEUzNTVBQTVEMzYwQjgyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNnQ5Yd73p5KKfkfAhUSt601g 3XTBxFMQ6+D+sugCv0H5PnJ5pLCCOGzSKN1E1aCf8Ls/6guMH31bl3ds6HL1s/8w wPCvE5XbwEeKTU7nrnKhxt/jPkEzl0HO28ysDP/z9GBbFGsMQd4vWkIrHvGSmcb4 ZxOrliRJPEqZKX81WfyrkU+DacfZtQTobPPS0Wtq6gGcHR1MyTdR0b5IxNlBG6DE L0ahmtr6ZD5seg5op9rgLUx0eA8wYa0fLqMNHMEZTZ5/6YUcnbu0Tz4AdShGCQlJ 8yX8miojLfUPmyjVhHKZCiEcKym//lDRGfPTxTlDuqARRK1aQZgV5QAP8FszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQoZPL1PcD/Q9G7ZA41WqXTYLgiQwHwYDVR0j BBgwFoAUWI3Q/OS8JDzJxtaK4E6EZ+Dk0GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMC81ODhERDBGQ0U0 QkMyNDNDQzlDNkQ2OEFFMDRFODQ2N0UwRTREMDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdFMEU0 RDA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzAvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0 NjdFMEU0RDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBvYJwbxD/0hqaU8YKIp8qJ2SEeSPxiU5VA vwt9mtkrvuM+M95ZDuLWzpU7Om0MonNzZePtZbjJNWHrsDjapDLjN3OrBydQgJLE 5A7EROeaoszV0Q7lXsdmi6gc7JfF0HkDIFmx1tR2axcyw2/Z6V4qqPf9qcIkOQjF Hwei4f/5ATc9mDDNPkfrH/F+vcl+lgqh86CO1FhyCJrQ7Lma/w2h/J3DF2/vZ5qT auXrOtxoLGlynMbPwqTyMlitexKcPxnbu1gtFp58HxXfz72G1cbC3CUC3e21qpLk m/EuWIojimJT/miJZnmdW97oBV3xO/3c0JfuPWq1ATenKFpfF8s= -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:04 2025 by rpki-client