$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: Fwn41PQpBVlp3OaV1YjOkpYsUcTOXcUnCCcNPPh7D/M= Subject key identifier: D7:4E:D3:E8:6D:93:94:51:A5:F8:55:52:88:35:B6:00:19:C3:27:CE Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 776BBB467BD13790662B13EDD588ADDC1767D1FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 02C5 Signing time: Mon 16 Jun 2025 13:12:06 +0000 Manifest this update: Mon 16 Jun 2025 13:07:06 +0000 Manifest next update: Thu 19 Jun 2025 19:39:06 +0000 Files and hashes: 1: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: CfGKDTwzaK9/cDjPw8NSmCs5voaTVZ8iBlLH2WBXSno=) 2: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: mzHcsRUTUCBbpQh0PF3/13tfxFdR6gl4I3cFgd8Tuk8=) 3: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: uxCHhK6pHabWlchR9wnQ9Sv5Yh2qVwVFXIrvNbqbwAQ=) 4: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: nx/juUy7/tZki2r/tMlastEiMjYSJvx7cPICFmmbvLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6b:bb:46:7b:d1:37:90:66:2b:13:ed:d5:88:ad:dc:17:67:d1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Jun 16 13:07:06 2025 GMT Not After : Jun 19 19:39:06 2025 GMT Subject: CN=D74ED3E86D939451A5F855528835B60019C327CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:bb:cf:72:4d:fc:14:6a:d0:25:2c:73:22: b3:c5:8d:05:0c:5b:64:ea:8c:3a:53:6a:66:df:d8: 4e:1a:bf:47:4a:f7:46:78:3a:05:de:bf:48:42:c2: ea:7b:c5:ee:31:5e:3c:45:ab:14:1b:df:2c:7d:a6: ed:9e:1a:1e:41:25:9c:12:ca:40:ca:e0:18:68:69: bc:3b:81:42:22:16:2f:62:1c:a8:25:ca:a2:b5:82: 15:70:90:71:12:db:de:38:8c:fd:a0:a5:2c:3e:15: 0f:26:ed:09:f1:0d:f6:e9:a8:09:6d:e8:f2:df:98: 70:45:e5:b6:d2:86:96:d4:63:0e:ad:28:e8:d0:d7: 8f:7d:94:49:f6:bd:3f:20:c3:e7:34:b8:c0:df:cb: 29:03:e9:dc:06:20:9b:d8:74:70:3e:1a:cb:13:56: c9:c1:a8:15:da:17:53:a2:5a:2a:8e:12:e2:59:39: b0:bb:24:ec:74:56:0b:8a:67:2c:07:c6:a3:b6:d1: 4b:eb:a7:5e:f1:5f:61:f4:ac:52:42:03:db:96:b3: 46:f6:d5:52:67:4e:16:1b:ad:52:c1:e6:f6:90:fc: 59:03:01:1e:89:fb:62:5d:4b:f1:7c:c0:a7:ee:0e: c2:02:b2:b5:d7:31:c3:fd:9c:83:f5:13:85:64:73: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4E:D3:E8:6D:93:94:51:A5:F8:55:52:88:35:B6:00:19:C3:27:CE X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:0f:27:4b:fe:f3:84:a1:0c:47:d3:6d:e4:d6:f0:65:5a:34: d7:5b:eb:f7:df:1c:0e:ce:f6:9b:bb:2c:32:eb:54:2c:a2:40: e7:99:1a:34:3a:8d:a0:ef:89:e0:29:7b:cb:3c:66:a7:4c:92: 2a:0a:df:4d:46:f3:39:e7:e9:a6:c7:7d:f8:ce:c0:c6:33:62: 8a:da:a7:cd:a5:62:31:ce:4c:02:d5:9c:11:7d:65:20:12:1f: 38:31:05:91:7c:b1:be:d0:e2:4c:a1:94:84:2b:cc:44:d5:1a: 61:50:84:3b:b5:ae:42:cd:4a:85:dc:ca:c6:82:73:2d:a5:fd: d1:ef:12:df:94:c5:7f:ba:e0:5a:ce:20:4a:23:44:98:9c:48: 11:6b:fb:70:19:60:e1:0a:19:c6:7f:3f:5e:35:34:1a:95:84: 8f:64:81:51:e1:e4:99:92:bd:46:c1:30:98:69:08:e6:4e:a6: fa:60:27:ba:e3:9b:e2:ef:bf:1a:5e:04:05:3e:73:86:30:fe: 58:7e:a2:82:19:59:8b:cf:94:f4:4b:39:ce:00:db:5d:52:69: f8:55:61:12:22:f4:6b:25:90:1e:04:0d:01:90:6f:95:31:44: 6f:e9:0a:35:5c:4c:02:67:c8:ef:72:0c:9a:23:0a:75:55:13: ff:77:47:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2u7RnvRN5BmKxPt1Yit3Bdn0f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTA2MTYxMzA3MDZaFw0yNTA2MTkxOTM5MDZaMDMxMTAvBgNV BAMTKEQ3NEVEM0U4NkQ5Mzk0NTFBNUY4NTU1Mjg4MzVCNjAwMTlDMzI3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHrvPck38FGrQJSxzIrPFjQUM W2TqjDpTambf2E4av0dK90Z4OgXev0hCwup7xe4xXjxFqxQb3yx9pu2eGh5BJZwS ykDK4Bhoabw7gUIiFi9iHKglyqK1ghVwkHES2944jP2gpSw+FQ8m7QnxDfbpqAlt 6PLfmHBF5bbShpbUYw6tKOjQ1499lEn2vT8gw+c0uMDfyykD6dwGIJvYdHA+GssT VsnBqBXaF1OiWiqOEuJZObC7JOx0VguKZywHxqO20Uvrp17xX2H0rFJCA9uWs0b2 1VJnThYbrVLB5vaQ/FkDAR6J+2JdS/F8wKfuDsICsrXXMcP9nIP1E4Vkc1KzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU107T6G2TlFGl+FVSiDW2ABnDJ84wHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEPJ0v+84ShDEfTbeTW8GVaNNdb6/ffHA7O 9pu7LDLrVCyiQOeZGjQ6jaDvieApe8s8ZqdMkioK301G8znn6abHffjOwMYzYora p82lYjHOTALVnBF9ZSASHzgxBZF8sb7Q4kyhlIQrzETVGmFQhDu1rkLNSoXcysaC cy2l/dHvEt+UxX+64FrOIEojRJicSBFr+3AZYOEKGcZ/P141NBqVhI9kgVHh5JmS vUbBMJhpCOZOpvpgJ7rjm+LvvxpeBAU+c4Yw/lh+ooIZWYvPlPRLOc4A211SafhV YRIi9GslkB4EDQGQb5UxRG/pCjVcTAJnyO9yDJojCnVVE/93R2o= -----END CERTIFICATE-----Generated at Mon Jun 16 20:43:10 2025 by rpki-client