$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: +vUIvnVvd3GSUuSq6R1aTJaePrJ7p01Y7dTBkq6z3tM= Subject key identifier: AD:82:D6:29:55:DA:7D:75:AF:7D:7A:8B:E6:67:6F:6E:E4:C9:B4:F0 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 1AF3406AC32325F643B14020C7ACF5434EA982A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 0302 Signing time: Sat 01 Nov 2025 15:42:12 +0000 Manifest this update: Sat 01 Nov 2025 15:37:12 +0000 Manifest next update: Wed 05 Nov 2025 03:31:12 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 2: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 3: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: 6lSxd7/2iOquvPIDi8j1RIb3S0HRoZItVoZCXX4GOPM=) 4: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f3:40:6a:c3:23:25:f6:43:b1:40:20:c7:ac:f5:43:4e:a9:82:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Nov 1 15:37:12 2025 GMT Not After : Nov 5 03:31:12 2025 GMT Subject: CN=AD82D62955DA7D75AF7D7A8BE6676F6EE4C9B4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:64:83:36:bf:b5:8e:37:e8:4e:fa:98:c8: 62:a9:c1:1d:5d:fe:7c:8c:76:54:ea:bd:4d:9c:cd: 88:7e:4f:29:c3:d9:e3:db:03:53:09:6a:c4:88:db: d6:4e:77:63:9b:17:76:0c:9a:58:1e:42:53:c8:ba: 31:af:92:13:20:05:ff:56:25:ae:b8:56:46:c2:ff: ad:ba:c1:fc:23:71:4e:cd:60:3a:b0:59:a1:df:5d: f0:8f:f0:a2:dd:ea:3e:1e:0d:6e:4b:eb:bb:ed:ce: bc:b1:56:a3:17:7d:0d:a0:a6:04:3d:5d:31:81:af: 1a:a9:c4:1d:d9:73:6f:2a:a9:d2:3c:58:7c:2f:89: 39:ee:c6:0d:7c:f1:72:81:36:5b:ee:31:cf:08:57: 4c:be:57:91:24:27:dd:0d:c2:01:9e:6e:21:2a:41: b0:c3:55:42:b8:1d:19:2f:21:36:de:0b:f9:a7:a7: d3:27:ca:aa:a9:3a:12:e3:42:e3:3d:d4:28:56:ca: b2:e5:18:1d:2d:74:15:46:d0:f7:67:50:a6:c1:f1: e0:f4:22:83:b3:06:dc:d2:2c:57:1b:58:44:6b:67: e1:c4:75:01:eb:66:13:d4:4d:49:a8:0b:e7:69:30: 45:83:c4:1d:d5:12:83:2a:8b:ca:f1:76:ad:58:f9: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:82:D6:29:55:DA:7D:75:AF:7D:7A:8B:E6:67:6F:6E:E4:C9:B4:F0 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:cc:32:2d:d7:c5:cd:87:4d:66:2b:9d:37:d2:56:73:7c:9c: a7:31:59:b8:fc:0b:c6:50:80:70:9b:f7:2a:90:5a:64:2c:a7: ef:20:f9:1b:82:cd:cd:86:fc:fe:be:1b:6e:0d:ba:4a:f7:8f: 58:74:22:38:70:6d:1a:58:d2:b1:ec:53:56:4e:32:5c:62:8a: f8:d0:ce:e5:8d:ee:83:aa:d0:d6:4c:92:a2:bb:a3:46:ac:8b: 52:18:31:6a:d8:ff:3b:47:05:ec:71:47:ea:48:65:63:f0:5d: c0:37:72:31:f5:d1:5a:da:df:86:57:bf:7d:aa:82:b3:f9:d4: 2e:6f:36:f0:83:13:07:34:75:f4:c3:e1:12:f0:e2:04:63:94: 6e:36:22:ee:cd:7f:a7:26:eb:2f:50:52:0b:40:4c:c2:9b:67: 45:44:a5:df:48:96:95:fa:91:07:d9:71:a2:1e:a5:04:ce:e4: 91:5d:bb:30:82:63:8c:07:19:0a:ee:6b:cf:7c:e6:c6:ce:d0: 05:b7:46:de:b7:a0:93:cf:2f:ce:2c:c6:02:87:b9:5d:8e:50: b1:b4:95:69:a2:5e:27:22:ac:42:9d:35:e6:41:92:be:df:52: a3:61:ac:1b:a4:bd:aa:3e:67:56:81:1c:24:0f:df:e0:44:7d: 7c:68:e3:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvNAasMjJfZDsUAgx6z1Q06pgqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTExMDExNTM3MTJaFw0yNTExMDUwMzMxMTJaMDMxMTAvBgNV BAMTKEFEODJENjI5NTVEQTdENzVBRjdEN0E4QkU2Njc2RjZFRTRDOUI0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhGSDNr+1jjfoTvqYyGKpwR1d /nyMdlTqvU2czYh+TynD2ePbA1MJasSI29ZOd2ObF3YMmlgeQlPIujGvkhMgBf9W Ja64VkbC/626wfwjcU7NYDqwWaHfXfCP8KLd6j4eDW5L67vtzryxVqMXfQ2gpgQ9 XTGBrxqpxB3Zc28qqdI8WHwviTnuxg188XKBNlvuMc8IV0y+V5EkJ90NwgGebiEq QbDDVUK4HRkvITbeC/mnp9MnyqqpOhLjQuM91ChWyrLlGB0tdBVG0PdnUKbB8eD0 IoOzBtzSLFcbWERrZ+HEdQHrZhPUTUmoC+dpMEWDxB3VEoMqi8rxdq1Y+RP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYLWKVXafXWvfXqL5mdvbuTJtPAwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjMMi3Xxc2HTWYrnTfSVnN8nKcxWbj8C8ZQ gHCb9yqQWmQsp+8g+RuCzc2G/P6+G24Nukr3j1h0IjhwbRpY0rHsU1ZOMlxiivjQ zuWN7oOq0NZMkqK7o0asi1IYMWrY/ztHBexxR+pIZWPwXcA3cjH10Vra34ZXv32q grP51C5vNvCDEwc0dfTD4RLw4gRjlG42Iu7Nf6cm6y9QUgtATMKbZ0VEpd9IlpX6 kQfZcaIepQTO5JFduzCCY4wHGQrua8985sbO0AW3Rt63oJPPL84sxgKHuV2OULG0 lWmiXicirEKdNeZBkr7fUqNhrBukvao+Z1aBHCQP3+BEfXxo46c= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:35 2025 by rpki-client